ci: upgrade GitHub Actions to supported node24 runtimes - #1306
Merged
Conversation
Upgraded actions/checkout to v5 in auto-create-repo.yml and ymllint.yml, actions/setup-node to v5, and actions/github-script to v8 to run on the current runner's node24 runtime Removed the fork pull request head ref from the pull_request_target checkout in auto-create-repo.yml to fix the fork checkout refusal and avoid executing untrusted fork code with repository secrets Log: Upgrade deprecated GitHub Actions and fix pull_request_target fork checkout refusal Influence: 1. Verify auto-create-repo workflow runs successfully on merged PRs 2. Verify the merge flow still creates GitHub repos and OBS packages 3. Verify no fork PR code is checked out in pull_request_target context 4. Verify ymllint workflow validates YAML on PRs ci: 升级 GitHub Actions 至受支持的 node24 运行时 将 auto-create-repo.yml 和 ymllint.yml 中的 actions/checkout 升级到 v5, actions/setup-node 升级到 v5,actions/github-script 升级到 v8, 以适配当前 runner 默认的 node24 运行时 移除 auto-create-repo.yml 中 pull_request_target 检出的 fork PR head ref, 修复 fork 检出被拒绝的错误,避免在携带 secrets 的受信环境中执行不可信代码 Log: 升级废弃的 GitHub Actions 并修复 pull_request_target fork 检出报错 Influence: 1. 验证 PR 合并后 auto-create-repo 工作流正常运行 2. 验证 PR 合并流程仍能正常创建 GitHub 仓库和 OBS 包 3. 验证 pull_request_target 上下文不再检出 fork PR 代码 4. 验证 ymllint 工作流在 PR 上正常运行并校验 YAML
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Upgraded actions/checkout to v5 in auto-create-repo.yml and ymllint.yml, actions/setup-node to v5, and actions/github-script to v8 to run on the current runner's node24 runtime Removed the fork pull request head ref from the pull_request_target checkout in auto-create-repo.yml to fix the fork checkout refusal and avoid executing untrusted fork code with repository secrets
Log: Upgrade deprecated GitHub Actions and fix pull_request_target fork checkout refusal
Influence:
ci: 升级 GitHub Actions 至受支持的 node24 运行时
将 auto-create-repo.yml 和 ymllint.yml 中的 actions/checkout 升级到 v5, actions/setup-node 升级到 v5,actions/github-script 升级到 v8, 以适配当前 runner 默认的 node24 运行时
移除 auto-create-repo.yml 中 pull_request_target 检出的 fork PR head ref, 修复 fork 检出被拒绝的错误,避免在携带 secrets 的受信环境中执行不可信代码
Log: 升级废弃的 GitHub Actions 并修复 pull_request_target fork 检出报错
Influence: