-
Notifications
You must be signed in to change notification settings - Fork 22
Upgrade GitHub Actions to latest versions #744
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Upgrade GitHub Actions to latest versions #744
Conversation
197caa2 to
7946504
Compare
|
/ok to test 7946504 |
lanluo-nvidia
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Thanks! |
Pin to release/v1.13 for security best practices. The v1 tag doesn't exist - only release/v1 branch exists. Signed-off-by: Salman Muin Kayser Chishti <[email protected]>
|
Updated this PR to fix the pypa/gh-action-pypi-publish version. The Changed to SHA pinning: |
lanluo-nvidia
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Summary
Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.
Changes
actions/upload-pages-artifactv3v4docker/build-push-action05652402634353docker/login-action343f7c45e57cd1docker/metadata-action96383f4c299e40docker/setup-buildx-actionf95db51e468171pypa/gh-action-pypi-publishrelease/v1ed0c539Why upgrade?
Keeping GitHub Actions up to date ensures:
Note on pypa/gh-action-pypi-publish
This action uses branch-based versioning (
release/v1.x) rather than tags. Thev1tag does not exist in this repository.This PR pins to the SHA of
release/v1.13for security best practices:Testing
These changes only affect CI/CD workflow configurations and should not impact application functionality.