Skip to content

Commit fbc8028

Browse files
mceachenmceachen
committed
fix(workflows): update Node.js setup action to v6.3.0 and upload-artifact action to v7.0.0 across multiple workflows
1 parent b33289b commit fbc8028

5 files changed

Lines changed: 39 additions & 39 deletions

File tree

‎.github/workflows/build.yml‎

Lines changed: 24 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2929
- run: sudo apt-get update
3030
- run: sudo apt-get install -y clang-tidy bear build-essential
31-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
31+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
3232
with:
3333
node-version: 20
3434
cache: "npm"
@@ -41,13 +41,13 @@ jobs:
4141
runs-on: macos-15-intel # Intel x64 runner
4242
steps:
4343
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
44-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
44+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
4545
with:
4646
node-version: 20
4747
cache: "npm"
4848
- run: npm ci --ignore-scripts
4949
- run: npm run build:native
50-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
50+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
5151
with:
5252
name: prebuilds-mac-x64
5353
path: prebuilds/
@@ -56,13 +56,13 @@ jobs:
5656
runs-on: macos-14 # Apple Silicon ARM64 (macos-14+ are ARM64)
5757
steps:
5858
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
59-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
59+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
6060
with:
6161
node-version: 20
6262
cache: "npm"
6363
- run: npm ci --ignore-scripts
6464
- run: npm run build:native
65-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
65+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
6666
with:
6767
name: prebuilds-mac-arm64
6868
path: prebuilds/
@@ -71,13 +71,13 @@ jobs:
7171
runs-on: windows-latest
7272
steps:
7373
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
74-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
74+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
7575
with:
7676
node-version: 20
7777
cache: "npm"
7878
- run: npm ci --ignore-scripts
7979
- run: npm run build:native
80-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
80+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
8181
with:
8282
name: prebuilds-win-x64
8383
path: prebuilds/
@@ -86,13 +86,13 @@ jobs:
8686
runs-on: windows-11-arm # Native ARM64 runner (public repos only)
8787
steps:
8888
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
89-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
89+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
9090
with:
9191
node-version: 20
9292
cache: "npm"
9393
- run: npm ci --ignore-scripts
9494
- run: npm run build:native
95-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
95+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
9696
with:
9797
name: prebuilds-win-arm64
9898
path: prebuilds/
@@ -111,7 +111,7 @@ jobs:
111111
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
112112
- run: npm ci --ignore-scripts
113113
- run: TARGET_ARCH=${{ matrix.arch }} npm run build:native:linux
114-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
114+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
115115
with:
116116
name: prebuilds-linux-${{ matrix.arch }}-glibc
117117
path: prebuilds/
@@ -139,11 +139,11 @@ jobs:
139139
docker cp "$CONTAINER_NAME:/tmp/project/build" . 2>/dev/null || true
140140
docker cp "$CONTAINER_NAME:/tmp/project/test/fixtures/test-extension/test_extension.so" test/fixtures/test-extension/ 2>/dev/null || true
141141
docker rm -f "$CONTAINER_NAME" >/dev/null
142-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
142+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
143143
with:
144144
name: prebuilds-linux-${{ matrix.arch }}-musl
145145
path: prebuilds/
146-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
146+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
147147
with:
148148
name: test-extension-linux-${{ matrix.arch }}-musl
149149
path: test/fixtures/test-extension/test_extension.so
@@ -163,11 +163,11 @@ jobs:
163163
runs-on: ${{ matrix.os }}
164164
steps:
165165
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
166-
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
166+
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
167167
with:
168168
path: ./prebuilds
169169
merge-multiple: true
170-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
170+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
171171
with:
172172
node-version: ${{ matrix.node-version }}
173173
cache: "npm"
@@ -187,10 +187,10 @@ jobs:
187187
runs-on: ${{ matrix.arch == 'arm64' && format('{0}-arm', matrix.os) || matrix.os }}
188188
steps:
189189
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
190-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
190+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
191191
with:
192192
node-version: ${{ matrix.node-version }}
193-
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
193+
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
194194
with:
195195
path: ./prebuilds
196196
merge-multiple: true
@@ -216,20 +216,20 @@ jobs:
216216
runs-on: ${{ matrix.runner }}
217217
steps:
218218
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
219-
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
219+
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
220220
with:
221221
path: ./prebuilds
222222
merge-multiple: true
223223
- name: Download test extension for this architecture
224-
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
224+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
225225
with:
226226
name: test-extension-linux-${{ matrix.arch }}-musl
227227
path: ./test/fixtures/test-extension
228228
continue-on-error: true
229229
- run: DOCKER_PLATFORM=${{ matrix.platform }} NODE_VERSION=${{ matrix.node-version }} bash scripts/test-docker-alpine.sh
230230

231-
# Node.js compatibility tests require --experimental-sqlite flag and Node 22+
232-
# We test only on Node 24 as the experimental SQLite API may change between versions
231+
# Node.js compatibility tests require Node.js 22.5.0+ (node:sqlite is RC since v25.7.0)
232+
# We test only on Node 24 to keep CI scope manageable
233233
test-api-compatibility:
234234
needs:
235235
- prebuild-mac-x64
@@ -246,11 +246,11 @@ jobs:
246246
runs-on: ${{ matrix.os }}
247247
steps:
248248
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
249-
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
249+
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
250250
with:
251251
path: ./prebuilds
252252
merge-multiple: true
253-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
253+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
254254
with:
255255
node-version: ${{ matrix.node-version }}
256256
cache: "npm"
@@ -282,12 +282,12 @@ jobs:
282282
# Fetch full history for proper git operations
283283
fetch-depth: 0
284284

285-
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
285+
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
286286
with:
287287
path: ./prebuilds
288288
merge-multiple: true
289289

290-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
290+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
291291
with:
292292
node-version: lts/*
293293
cache: "npm"

‎.github/workflows/docs.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2727

2828
- name: Set up Node.js
29-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
29+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
3030
with:
3131
node-version: "20"
3232
cache: "npm"

‎.github/workflows/memory-tests.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
sudo apt-get update
2626
sudo apt-get install -y valgrind build-essential clang
2727
28-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
28+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2929
with:
3030
node-version: ${{ matrix.node-version }}
3131
cache: "npm"
@@ -41,7 +41,7 @@ jobs:
4141

4242
- name: Upload memory test artifacts
4343
if: always()
44-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
44+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
4545
with:
4646
name: memory-test-logs-${{ matrix.os }}-${{ matrix.node-version }}
4747
path: |

‎.github/workflows/security.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2323

2424
- name: Setup Node.js
25-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
25+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2626
with:
2727
node-version: 20
2828
cache: "npm"
@@ -50,7 +50,7 @@ jobs:
5050
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5151

5252
- name: Initialize CodeQL
53-
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
53+
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
5454
with:
5555
languages: javascript-typescript
5656
queries: security-and-quality
@@ -68,10 +68,10 @@ jobs:
6868
- '**/test-directory/**'
6969
7070
- name: Autobuild
71-
uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
71+
uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
7272

7373
- name: Perform CodeQL Analysis
74-
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
74+
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
7575

7676
codeql-cpp:
7777
name: CodeQL C++ Analysis
@@ -87,7 +87,7 @@ jobs:
8787
sudo apt-get install -y python3 make g++ gcc
8888
8989
- name: Setup Node.js
90-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
90+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
9191
with:
9292
node-version: 20
9393
cache: "npm"
@@ -96,7 +96,7 @@ jobs:
9696
run: npm ci
9797

9898
- name: Initialize CodeQL
99-
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
99+
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
100100
with:
101101
languages: cpp
102102
queries: security-and-quality
@@ -105,7 +105,7 @@ jobs:
105105
run: npm run build:native:rebuild
106106

107107
- name: Perform CodeQL Analysis
108-
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
108+
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
109109
with:
110110
upload: false
111111
output: sarif-results
@@ -127,7 +127,7 @@ jobs:
127127
output: sarif-results/cpp.sarif
128128

129129
- name: Upload filtered SARIF
130-
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
130+
uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
131131
with:
132132
sarif_file: sarif-results/cpp.sarif
133133

@@ -139,7 +139,7 @@ jobs:
139139
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
140140

141141
- name: Dependency Review
142-
uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
142+
uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
143143
with:
144144
fail-on-severity: moderate
145145
deny-licenses: AGPL-3.0, GPL-3.0
@@ -153,7 +153,7 @@ jobs:
153153
fetch-depth: 0
154154

155155
- name: TruffleHog OSS
156-
uses: trufflesecurity/trufflehog@7c0734f987ad0bb30ee8da210773b800ee2016d3 # v3.93.4
156+
uses: trufflesecurity/trufflehog@c3e599b7163e8198a55467f3133db0e7b2a492cb # v3.93.7
157157
with:
158158
path: ./
159159
base: ${{ github.event.repository.default_branch }}

‎.github/workflows/stress-tests.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
steps:
3939
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4040

41-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
41+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
4242
with:
4343
node-version: ${{ matrix.node-version }}
4444
cache: "npm"
@@ -67,7 +67,7 @@ jobs:
6767

6868
- name: Upload stress test results
6969
if: always()
70-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
70+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
7171
with:
7272
name: stress-test-results-node-${{ matrix.node-version }}
7373
path: |

0 commit comments

Comments
 (0)