Skip to content

ci: upgrade GitHub Actions to supported node24 runtimes - #1306

Merged
Zeno-sole merged 1 commit into
deepin-community:masterfrom
Zeno-sole:master
Aug 11, 2026
Merged

ci: upgrade GitHub Actions to supported node24 runtimes#1306
Zeno-sole merged 1 commit into
deepin-community:masterfrom
Zeno-sole:master

Conversation

@Zeno-sole

Copy link
Copy Markdown
Contributor

Upgraded actions/checkout to v5 in auto-create-repo.yml and ymllint.yml, actions/setup-node to v5, and actions/github-script to v8 to run on the current runner's node24 runtime Removed the fork pull request head ref from the pull_request_target checkout in auto-create-repo.yml to fix the fork checkout refusal and avoid executing untrusted fork code with repository secrets

Log: Upgrade deprecated GitHub Actions and fix pull_request_target fork checkout refusal

Influence:

  1. Verify auto-create-repo workflow runs successfully on merged PRs
  2. Verify the merge flow still creates GitHub repos and OBS packages
  3. Verify no fork PR code is checked out in pull_request_target context
  4. Verify ymllint workflow validates YAML on PRs

ci: 升级 GitHub Actions 至受支持的 node24 运行时

将 auto-create-repo.yml 和 ymllint.yml 中的 actions/checkout 升级到 v5, actions/setup-node 升级到 v5,actions/github-script 升级到 v8, 以适配当前 runner 默认的 node24 运行时
移除 auto-create-repo.yml 中 pull_request_target 检出的 fork PR head ref, 修复 fork 检出被拒绝的错误,避免在携带 secrets 的受信环境中执行不可信代码

Log: 升级废弃的 GitHub Actions 并修复 pull_request_target fork 检出报错

Influence:

  1. 验证 PR 合并后 auto-create-repo 工作流正常运行
  2. 验证 PR 合并流程仍能正常创建 GitHub 仓库和 OBS 包
  3. 验证 pull_request_target 上下文不再检出 fork PR 代码
  4. 验证 ymllint 工作流在 PR 上正常运行并校验 YAML

Upgraded actions/checkout to v5 in auto-create-repo.yml and
ymllint.yml, actions/setup-node to v5, and actions/github-script
to v8 to run on the current runner's node24 runtime
Removed the fork pull request head ref from the pull_request_target
checkout in auto-create-repo.yml to fix the fork checkout refusal
and avoid executing untrusted fork code with repository secrets

Log: Upgrade deprecated GitHub Actions and fix pull_request_target fork checkout refusal

Influence:
1. Verify auto-create-repo workflow runs successfully on merged PRs
2. Verify the merge flow still creates GitHub repos and OBS packages
3. Verify no fork PR code is checked out in pull_request_target context
4. Verify ymllint workflow validates YAML on PRs

ci: 升级 GitHub Actions 至受支持的 node24 运行时

将 auto-create-repo.yml 和 ymllint.yml 中的 actions/checkout 升级到 v5,
actions/setup-node 升级到 v5,actions/github-script 升级到 v8,
以适配当前 runner 默认的 node24 运行时
移除 auto-create-repo.yml 中 pull_request_target 检出的 fork PR head ref,
修复 fork 检出被拒绝的错误,避免在携带 secrets 的受信环境中执行不可信代码

Log: 升级废弃的 GitHub Actions 并修复 pull_request_target fork 检出报错

Influence:
1. 验证 PR 合并后 auto-create-repo 工作流正常运行
2. 验证 PR 合并流程仍能正常创建 GitHub 仓库和 OBS 包
3. 验证 pull_request_target 上下文不再检出 fork PR 代码
4. 验证 ymllint 工作流在 PR 上正常运行并校验 YAML
@deepin-ci-robot

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from zeno-sole. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@Zeno-sole
Zeno-sole merged commit 41f6e0a into deepin-community:master Aug 11, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants