From df57c12a6c2834d01626d9b0e9ea9db136fb7433 Mon Sep 17 00:00:00 2001 From: Lari Hotari Date: Thu, 17 Sep 2026 10:36:17 +0300 Subject: [PATCH] [improve][ci] Upgrade approved actions and check the ASF allowlist Assisted-by: Codex --- .github/workflows/ci-build-release-napi.yml | 28 ++++++------ .github/workflows/ci-pr-validation.yml | 48 +++++++++++---------- 2 files changed, 40 insertions(+), 36 deletions(-) diff --git a/.github/workflows/ci-build-release-napi.yml b/.github/workflows/ci-build-release-napi.yml index 3765a76..ccdf6ac 100644 --- a/.github/workflows/ci-build-release-napi.yml +++ b/.github/workflows/ci-build-release-napi.yml @@ -50,15 +50,15 @@ jobs: # macos-14 is used for arm64 os: macos-14 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Use Node.js ${{ matrix.nodejs }} - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: ${{ matrix.nodejs }} cache: 'npm' - name: Use Python ${{ matrix.python }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} @@ -83,7 +83,7 @@ jobs: npx node-pre-gyp package --target_arch=${{ matrix.arch }} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: macos-${{matrix.nodejs}}-${{matrix.arch}} path: build/stage/*/*.tar.gz @@ -107,16 +107,16 @@ jobs: steps: - name: checkout - uses: actions/checkout@v3 + uses: actions/checkout@v7 - name: Set up QEMU - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 + uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0 - name: Setup Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build Linux Docker image - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: file: ./pkg/linux/Dockerfile_${{matrix.image}} load: true @@ -135,7 +135,7 @@ jobs: /pulsar-client-node/pkg/linux/build-napi-inside-docker.sh - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: ${{matrix.image}}-${{matrix.nodejs}}-${{matrix.cpu.platform}} path: build/stage/*/*.tar.gz @@ -156,22 +156,22 @@ jobs: python: - "3.10" steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Use Node.js ${{ matrix.nodejs }} - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: ${{ matrix.nodejs }} architecture: ${{ matrix.arch }} cache: 'npm' - name: Use Python ${{ matrix.python }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} - name: Cache CPP Client id: cache-dependencies - uses: actions/cache@v3 + uses: actions/cache@v6 with: path: pkg/windows/ key: ${{ runner.os }}-${{ matrix.arch }}-${{ hashFiles('pulsar-client-cpp.txt') }} @@ -205,7 +205,7 @@ jobs: npx node-pre-gyp package --target_arch=${{ env.TARGET }} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: windows-${{matrix.nodejs}}-${{matrix.arch}} path: build/stage/*/*.tar.gz diff --git a/.github/workflows/ci-pr-validation.yml b/.github/workflows/ci-pr-validation.yml index 375064d..78cd27c 100644 --- a/.github/workflows/ci-pr-validation.yml +++ b/.github/workflows/ci-pr-validation.yml @@ -36,14 +36,14 @@ jobs: - "3.10" steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Use Node.js 18 - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: 18 - name: Use Python ${{ matrix.python }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} @@ -60,9 +60,13 @@ jobs: timeout-minutes: 120 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 + - name: Check ASF action allowlist + uses: apache/infrastructure-actions/allowlist-check@main + with: + scan-glob: '.github/**/*.y*ml' - name: Use Node.js 18 - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: 18 @@ -92,15 +96,15 @@ jobs: # macos-14 is used for arm64 os: macos-14 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Use Node.js ${{ matrix.nodejs }} - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: ${{ matrix.nodejs }} cache: 'npm' - name: Use Python ${{ matrix.python }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} @@ -143,16 +147,16 @@ jobs: steps: - name: checkout - uses: actions/checkout@v3 + uses: actions/checkout@v7 - name: Set up QEMU - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 + uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0 - name: Setup Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build Linux Docker image - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: file: ./pkg/linux/Dockerfile_${{matrix.image}} load: true @@ -199,22 +203,22 @@ jobs: python: - "3.10" steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Use Node.js ${{ matrix.nodejs }} - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: ${{ matrix.nodejs }} architecture: ${{ matrix.arch }} cache: 'npm' - name: Use Python ${{ matrix.python }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} - name: Cache CPP Client id: cache-dependencies - uses: actions/cache@v3 + uses: actions/cache@v6 with: path: pkg/windows/ key: ${{ runner.os }}-${{ matrix.arch }}-${{ hashFiles('pulsar-client-cpp.txt') }} @@ -258,14 +262,14 @@ jobs: - "3.10" steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Use Node.js 18 - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: 18 cache: 'npm' - name: Use Python ${{ matrix.python }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} - name: Install CPP lib @@ -296,15 +300,15 @@ jobs: - "3.10" steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Use Node.js 18 - uses: actions/setup-node@v3 + uses: actions/setup-node@v7 with: node-version: 18 cache: 'npm' - name: Use Python ${{ matrix.python }} - uses: actions/setup-python@v3 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }}