Skip to content

Commit 7178169

Browse files
vladfranguvladfrangu
authored
chore: update GitHub Actions versions across all workflows (#266)
1 parent dced9e5 commit 7178169

24 files changed

Lines changed: 1052 additions & 1652 deletions

‎.github/workflows/build_docker_image_and_push_to_ecr.yaml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -109,13 +109,13 @@ jobs:
109109
steps:
110110
- name: Send notification to slack
111111
if: inputs.slackChannelId != ''
112-
uses: slackapi/slack-github-action@v1.26.0
113-
env:
114-
SLACK_BOT_TOKEN: ${{ secrets.slackToken }}
112+
uses: slackapi/slack-github-action@v3.0.1
115113
with:
116-
channel-id: ${{ inputs.slackChannelId }}
114+
method: chat.postMessage
115+
token: ${{ secrets.slackToken }}
117116
payload: |
118117
{
118+
"channel": "${{ inputs.slackChannelId }}",
119119
"text": ":large_blue_circle: *${{ github.repository }} build started*",
120120
"attachments": [
121121
{
@@ -171,12 +171,12 @@ jobs:
171171
# uses: docker/setup-qemu-action@v2
172172

173173
- name: setup Docker Buildx
174-
uses: docker/setup-buildx-action@v3
174+
uses: docker/setup-buildx-action@v4
175175

176176
# First assume GithubOIDCRole role, the trust relationship between GitHub and AWS is defined in IAM GithubOIDCRole in the organization account. This role has permissions to assume Deployer roles only.
177177
- name: assume GithubOIDCRole
178178
if: inputs.useOIDC == true
179-
uses: aws-actions/configure-aws-credentials@v4
179+
uses: aws-actions/configure-aws-credentials@v6
180180
with:
181181
aws-region: ${{ inputs.awsRegion }}
182182
role-to-assume: ${{ inputs.githubOIDCRoleArn }}
@@ -189,7 +189,7 @@ jobs:
189189
# Then assume Deployer role, which can be assumed by GithubOIDCRole and has all the permissions needed to deploy cloudformation stacks.
190190
- name: assume Deployer role
191191
if: inputs.useOIDC == true
192-
uses: aws-actions/configure-aws-credentials@v4
192+
uses: aws-actions/configure-aws-credentials@v6
193193
with:
194194
aws-region: ${{ inputs.awsRegion }}
195195
role-to-assume: ${{ inputs.awsRoleArn }}
@@ -204,15 +204,15 @@ jobs:
204204

205205
- name: login to AWS ECR
206206
if: inputs.useOIDC == false
207-
uses: docker/login-action@v3
207+
uses: docker/login-action@v4
208208
with:
209209
registry: ${{ inputs.registry }}
210210
username: ${{ secrets.AWS_ACCESS_KEY_ID }}
211211
password: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
212212

213213
- name: build and push
214214
id: build_and_push
215-
uses: docker/build-push-action@v5
215+
uses: docker/build-push-action@v7
216216
with:
217217
context: ${{ inputs.dockerContext }}
218218
file: ${{ inputs.dockerFilePath }}
@@ -238,13 +238,13 @@ jobs:
238238
239239
- name: send result to slack
240240
if: always() && inputs.slackChannelId != ''
241-
uses: slackapi/slack-github-action@v1.26.0
242-
env:
243-
SLACK_BOT_TOKEN: ${{ secrets.slackToken }}
241+
uses: slackapi/slack-github-action@v3.0.1
244242
with:
245-
channel-id: ${{ inputs.slackChannelId }}
243+
method: chat.postMessage
244+
token: ${{ secrets.slackToken }}
246245
payload: |
247246
{
247+
"channel": "${{ inputs.slackChannelId }}",
248248
"text": ":${{ steps.helper.outputs.emoji }}: *${{ github.repository }} build result: ${{ job.status }}*",
249249
"attachments": [
250250
{

‎.github/workflows/check-execute-workflow-dist.yaml‎

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@ on:
66
- main
77
paths:
88
- 'execute-workflow/**'
9+
- '.github/workflows/check-execute-workflow-dist.yaml'
910

1011
permissions:
1112
contents: write
@@ -23,17 +24,13 @@ jobs:
2324
- name: Setup Node.js
2425
uses: actions/setup-node@v6
2526
with:
26-
node-version: '24'
27-
cache: 'npm'
28-
cache-dependency-path: execute-workflow/package-lock.json
27+
node-version-file: '.nvmrc'
2928

3029
- name: Install dependencies
31-
working-directory: execute-workflow
32-
run: npm ci
30+
uses: ./pnpm-install
3331

3432
- name: Rebuild dist
35-
working-directory: execute-workflow
36-
run: npm run build
33+
run: pnpm --filter execute-workflow build
3734

3835
- name: Commit and push if changed
3936
uses: EndBug/add-and-commit@v10

‎.github/workflows/claude-md-maintenance.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,9 +23,9 @@ jobs:
2323
fetch-depth: 0
2424

2525
- name: Set up Node.js
26-
uses: actions/setup-node@v4
26+
uses: actions/setup-node@v6
2727
with:
28-
node-version: "20"
28+
node-version: "24"
2929

3030
- name: Install Claude Code CLI
3131
run: npm install -g @anthropic-ai/claude-code

‎.github/workflows/create_changelog.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ jobs:
6262
steps:
6363
- name: get changelog
6464
id: changelog
65-
uses: apify/release-pr-action@v3.5.1
65+
uses: apify/release-pr-action@v3.5.3
6666
with:
6767
slack-token: ${{ secrets.slackToken }}
6868
github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -77,13 +77,13 @@ jobs:
7777

7878
- name: report failure to slack
7979
if: failure() && inputs.slackChannelIdForFailureMsg != ''
80-
uses: slackapi/slack-github-action@v1.26.0
81-
env:
82-
SLACK_BOT_TOKEN: ${{ secrets.slackToken }}
80+
uses: slackapi/slack-github-action@v3.0.1
8381
with:
84-
channel-id: ${{ inputs.slackChannelIdForFailureMsg }}
82+
method: chat.postMessage
83+
token: ${{ secrets.slackToken }}
8584
payload: |
8685
{
86+
"channel": "${{ inputs.slackChannelIdForFailureMsg }}",
8787
"text": ":red_circle: *${{ github.repository }} automated release action: ${{ job.status }}*",
8888
"attachments": [
8989
{

‎.github/workflows/deploy_cloudformation.yaml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -100,13 +100,13 @@ jobs:
100100
steps:
101101
- name: send notification to slack
102102
if: inputs.slackChannelId != ''
103-
uses: slackapi/slack-github-action@v1.26.0
104-
env:
105-
SLACK_BOT_TOKEN: ${{ secrets.slackToken }}
103+
uses: slackapi/slack-github-action@v3.0.1
106104
with:
107-
channel-id: ${{ inputs.slackChannelId }}
105+
method: chat.postMessage
106+
token: ${{ secrets.slackToken }}
108107
payload: |
109108
{
109+
"channel": "${{ inputs.slackChannelId }}",
110110
"text": ":large_blue_circle: *${{ github.repository }} deploy of cloudformation stack ${{ inputs.stackName }} started*",
111111
"attachments": [
112112
{
@@ -143,7 +143,7 @@ jobs:
143143

144144
- name: assume IAM role
145145
if: inputs.useOIDC == false
146-
uses: aws-actions/configure-aws-credentials@v4
146+
uses: aws-actions/configure-aws-credentials@v6
147147
with:
148148
aws-access-key-id: ${{ secrets.awsAccessKeyId }}
149149
aws-secret-access-key: ${{ secrets.awsSecretAccessKey }}
@@ -158,7 +158,7 @@ jobs:
158158
# First assume GithubOIDCRole role, the trust relationship between GitHub and AWS is defined in IAM GithubOIDCRole in the organization account. This role has permissions to assume Deployer roles only.
159159
- name: assume GithubOIDCRole
160160
if: inputs.useOIDC == true
161-
uses: aws-actions/configure-aws-credentials@v4
161+
uses: aws-actions/configure-aws-credentials@v6
162162
with:
163163
aws-region: ${{ inputs.awsRegion }}
164164
role-to-assume: ${{ inputs.githubOIDCRoleArn }}
@@ -171,7 +171,7 @@ jobs:
171171
# Then assume Deployer role, which can be assumed by GithubOIDCRole and has all the permissions needed to deploy cloudformation stacks.
172172
- name: assume Deployer role
173173
if: inputs.useOIDC == true
174-
uses: aws-actions/configure-aws-credentials@v4
174+
uses: aws-actions/configure-aws-credentials@v6
175175
with:
176176
aws-region: ${{ inputs.awsRegion }}
177177
role-to-assume: ${{ inputs.awsRoleArn }}
@@ -257,13 +257,13 @@ jobs:
257257
258258
- name: send result to slack
259259
if: always() && inputs.slackChannelId != ''
260-
uses: slackapi/slack-github-action@v1.26.0
261-
env:
262-
SLACK_BOT_TOKEN: ${{ secrets.slackToken }}
260+
uses: slackapi/slack-github-action@v3.0.1
263261
with:
264-
channel-id: ${{ inputs.slackChannelId }}
262+
method: chat.postMessage
263+
token: ${{ secrets.slackToken }}
265264
payload: |
266265
{
266+
"channel": "${{ inputs.slackChannelId }}",
267267
"text": ":${{ steps.helper.outputs.emoji }}: *${{ github.repository }} deploy of cloudformation stack ${{ inputs.stackName }} result: ${{ job.status }}*",
268268
"attachments": [
269269
{

‎.github/workflows/deploy_helmfile.yaml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -122,13 +122,13 @@ jobs:
122122

123123
- name: Send notification to slack
124124
if: inputs.slackChannelId != ''
125-
uses: slackapi/slack-github-action@v1.26.0
126-
env:
127-
SLACK_BOT_TOKEN: ${{ secrets.slackToken }}
125+
uses: slackapi/slack-github-action@v3.0.1
128126
with:
129-
channel-id: ${{ inputs.slackChannelId }}
127+
method: chat.postMessage
128+
token: ${{ secrets.slackToken }}
130129
payload: |
131130
{
131+
"channel": "${{ inputs.slackChannelId }}",
132132
"text": ":large_blue_circle: *${{ github.repository }} deploy of helmfile started*",
133133
"attachments": [
134134
{
@@ -197,7 +197,7 @@ jobs:
197197
198198
- name: assume IAM role
199199
if: inputs.useOIDC == false
200-
uses: aws-actions/configure-aws-credentials@v4
200+
uses: aws-actions/configure-aws-credentials@v6
201201
with:
202202
aws-access-key-id: ${{ secrets.awsAccessKeyId }}
203203
aws-secret-access-key: ${{ secrets.awsSecretAccessKey }}
@@ -212,7 +212,7 @@ jobs:
212212
# First assume GithubOIDCRole role, the trust relationship between GitHub and AWS is defined in IAM GithubOIDCRole in the organization account. This role has permissions to assume Deployer roles only.
213213
- name: assume GithubOIDCRole
214214
if: inputs.useOIDC == true
215-
uses: aws-actions/configure-aws-credentials@v4
215+
uses: aws-actions/configure-aws-credentials@v6
216216
with:
217217
aws-region: ${{ inputs.awsRegion }}
218218
role-to-assume: ${{ inputs.githubOIDCRoleArn }}
@@ -225,7 +225,7 @@ jobs:
225225
# Then assume Deployer role, which can be assumed by GithubOIDCRole and has all the permissions needed to deploy cloudformation stacks.
226226
- name: assume Deployer role
227227
if: inputs.useOIDC == true
228-
uses: aws-actions/configure-aws-credentials@v4
228+
uses: aws-actions/configure-aws-credentials@v6
229229
with:
230230
aws-region: ${{ inputs.awsRegion }}
231231
role-to-assume: ${{ inputs.awsRoleArn }}
@@ -237,7 +237,7 @@ jobs:
237237
run: aws eks update-kubeconfig --name ${{ inputs.eksClusterName }} $OPTIONAL_PARAMS
238238

239239
- name: Tailscale VPN
240-
uses: tailscale/github-action@v2
240+
uses: tailscale/github-action@v4
241241
if: inputs.enableVpn == 'true'
242242
with:
243243
oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
@@ -289,13 +289,13 @@ jobs:
289289
290290
- name: send result to slack
291291
if: always() && inputs.slackChannelId != ''
292-
uses: slackapi/slack-github-action@v1.26.0
293-
env:
294-
SLACK_BOT_TOKEN: ${{ secrets.slackToken }}
292+
uses: slackapi/slack-github-action@v3.0.1
295293
with:
296-
channel-id: ${{ inputs.slackChannelId }}
294+
method: chat.postMessage
295+
token: ${{ secrets.slackToken }}
297296
payload: |
298297
{
298+
"channel": "${{ inputs.slackChannelId }}",
299299
"text": ":${{ steps.helper.outputs.emoji }}: *${{ github.repository }} deploy of helmfile result: ${{ job.status }}*",
300300
"attachments": [
301301
{

‎.github/workflows/get_values.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ jobs:
6262
echo "clean_branch_name_with_suffix=${CLEAN_BRANCH_NAME_WITH_SUFFIX}" >> $GITHUB_OUTPUT
6363
6464
- name: get last commit author
65-
uses: actions/github-script@v7
65+
uses: actions/github-script@v9
6666
id: get_commit_author
6767
with:
6868
result-encoding: string

‎.github/workflows/invalidate_cloudfront.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ jobs:
6666
steps:
6767
- name: assume IAM role
6868
if: inputs.useOIDC == false
69-
uses: aws-actions/configure-aws-credentials@v4
69+
uses: aws-actions/configure-aws-credentials@v6
7070
with:
7171
aws-access-key-id: ${{ secrets.awsAccessKeyId }}
7272
aws-secret-access-key: ${{ secrets.awsSecretAccessKey }}
@@ -81,7 +81,7 @@ jobs:
8181
# First assume GithubOIDCRole role, the trust relationship between GitHub and AWS is defined in IAM GithubOIDCRole in the organization account. This role has permissions to assume Deployer roles only.
8282
- name: assume GithubOIDCRole
8383
if: inputs.useOIDC == true
84-
uses: aws-actions/configure-aws-credentials@v4
84+
uses: aws-actions/configure-aws-credentials@v6
8585
with:
8686
aws-region: ${{ inputs.awsRegion }}
8787
role-to-assume: ${{ inputs.githubOIDCRoleArn }}
@@ -94,7 +94,7 @@ jobs:
9494
# Then assume Deployer role, which can be assumed by GithubOIDCRole and has all the permissions needed.
9595
- name: assume Deployer role
9696
if: inputs.useOIDC == true
97-
uses: aws-actions/configure-aws-credentials@v4
97+
uses: aws-actions/configure-aws-credentials@v6
9898
with:
9999
aws-region: ${{ inputs.awsRegion }}
100100
role-to-assume: ${{ inputs.awsRoleArn }}

‎.github/workflows/open_pull_request.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
runs-on: ubuntu-22.04-arm64
3030
steps:
3131
- name: open release pull-request
32-
uses: apify/release-pr-action@v3.5.1
32+
uses: apify/release-pr-action@v3.5.3
3333
with:
3434
github-token: ${{ secrets.githubToken }}
3535
changelog-scopes: ${{ inputs.changelogScopes }}

‎.github/workflows/python_bump_and_update_changelog.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
python-version: ${{ inputs.python_version }}
4242

4343
- name: Set up uv package manager
44-
uses: astral-sh/setup-uv@v7
44+
uses: astral-sh/setup-uv@v8.0.0
4545
with:
4646
python-version: ${{ inputs.python_version }}
4747

@@ -53,7 +53,7 @@ jobs:
5353
uv version "${new_version}"
5454
5555
- name: Update CHANGELOG.md
56-
uses: DamianReeves/write-file-action@master
56+
uses: DamianReeves/write-file-action@v1.3
5757
with:
5858
path: CHANGELOG.md
5959
write-mode: overwrite

0 commit comments

Comments
 (0)