ci: update workflow dependencies - #10
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: defa408f50
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: actions/checkout@v7 |
There was a problem hiding this comment.
On every push or pull request, all three jobs now begin with actions/checkout@v7, but that major ref is not published, so GitHub Actions cannot resolve the action and each job stops before checking out the repository. The other newly selected CI majors (setup-python@v7, setup-node@v7, setup-buildx-action@v4, and build-push-action@v7) likewise need to be replaced with actual published stable tags.
Useful? React with 👍 / 👎.
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: actions/checkout@v7 |
There was a problem hiding this comment.
When this workflow is dispatched or triggered by a docs change, actions/checkout@v7 cannot be resolved because that major ref is not published, so deployment fails at its first step. The subsequent newly selected Pages action majors (configure-pages@v6, upload-pages-artifact@v5, and deploy-pages@v5) also need to be changed to published stable tags.
Useful? React with 👍 / 👎.
1 participant
What changed
Updated every pinned GitHub Actions workflow dependency to its current stable major release:
Why
The post-merge pipeline warned that checkout 4 and setup-node 4 target deprecated Node 20. Updating the complete workflow dependency set removes that runtime warning and keeps CI/CD on supported action releases.
Validation
The PR exercises backend tests, frontend build/tests, Docker image builds, and CodeQL using the updated actions. The Pages workflow is path-triggered and will be manually dispatched after merge to validate deployment.