Skip to content

Commit 97c8387

Browse files
ldezldez
authored
chore: improve workflows (#1394)
1 parent 28d0a19 commit 97c8387

3 files changed

Lines changed: 37 additions & 52 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,13 @@ updates:
33
- package-ecosystem: github-actions
44
directory: "/"
55
schedule:
6-
interval: weekly
6+
interval: monthly
77
cooldown:
88
default-days: 7
9+
groups:
10+
github-actions:
11+
patterns:
12+
- "*" # Group all updates into a single larger pull request.
913
- package-ecosystem: npm
1014
directory: "/"
1115
groups:
@@ -14,6 +18,6 @@ updates:
1418
dependencies:
1519
dependency-type: production
1620
schedule:
17-
interval: weekly
21+
interval: monthly
1822
cooldown:
1923
default-days: 7

‎.github/workflows/codeql.yaml‎

Lines changed: 7 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -5,25 +5,21 @@ on:
55
branches:
66
- main
77
pull_request:
8-
# The branches below must be a subset of the branches above
98
branches:
109
- main
1110
schedule:
1211
- cron: '0 17 * * 5'
1312

14-
permissions:
15-
actions: read
16-
contents: read
17-
security-events: write
18-
1913
jobs:
2014
codeQL:
21-
# CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
2215
runs-on: ubuntu-latest
23-
16+
permissions:
17+
actions: read
18+
contents: read
19+
security-events: write
2420
steps:
2521
- name: Checkout repository
26-
uses: actions/checkout@v6
22+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2723
with:
2824
# Must fetch at least the immediate parents so that if this is
2925
# a pull request then we can checkout the head of the pull request.
@@ -39,7 +35,7 @@ jobs:
3935

4036
# Initializes the CodeQL tools for scanning.
4137
- name: Initialize CodeQL
42-
uses: github/codeql-action/init@v4.35.4
38+
uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
4339
# Override language selection by uncommenting this and choosing your languages
4440
with:
4541
languages: 'javascript-typescript'
@@ -49,4 +45,4 @@ jobs:
4945
npm run all
5046
5147
- name: Perform CodeQL Analysis
52-
uses: github/codeql-action/analyze@v4.35.4
48+
uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4

‎.github/workflows/test.yml‎

Lines changed: 24 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -8,18 +8,17 @@ on:
88
branches:
99
- main
1010

11-
permissions:
12-
contents: read
11+
permissions: {}
1312

1413
jobs:
1514
# make sure build/ci work properly
1615
build:
1716
runs-on: ubuntu-latest
1817
steps:
19-
- uses: actions/setup-node@v6
18+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
2019
with:
2120
node-version: 24.x
22-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2322
with:
2423
persist-credentials: false
2524
- run: |
@@ -42,20 +41,17 @@ jobs:
4241
version:
4342
- ""
4443
- "latest"
45-
- "v2.10"
46-
- "v2.10.1"
44+
- "v2.12"
45+
- "v2.12.2"
4746
runs-on: ${{ matrix.os }}
48-
permissions:
49-
contents: read
50-
pull-requests: read
5147
steps:
52-
- uses: actions/checkout@v6
48+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5349
with:
5450
persist-credentials: false
55-
- uses: actions/setup-node@v6
51+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
5652
with:
5753
node-version: 24.x
58-
- uses: actions/setup-go@v6
54+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
5955
with:
6056
go-version: oldstable
6157
- uses: ./
@@ -77,20 +73,17 @@ jobs:
7773
version:
7874
- ""
7975
- "latest"
80-
- "v2.10.1"
81-
- "f8861ca84d805a673945d037bae1559c3567aadc"
76+
- "v2.12.1"
77+
- "c0d3ddc9cf3faa61a4e378e879ece580256d76e5"
8278
runs-on: ${{ matrix.os }}
83-
permissions:
84-
contents: read
85-
pull-requests: read
8679
steps:
87-
- uses: actions/checkout@v6
80+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
8881
with:
8982
persist-credentials: false
90-
- uses: actions/setup-node@v6
83+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
9184
with:
9285
node-version: 24.x
93-
- uses: actions/setup-go@v6
86+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
9487
with:
9588
go-version: oldstable
9689
- uses: ./
@@ -113,16 +106,14 @@ jobs:
113106
- fixtures/go-mod
114107
- fixtures/go-tool
115108
runs-on: ${{ matrix.os }}
116-
permissions:
117-
contents: read
118109
steps:
119-
- uses: actions/checkout@v6
110+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
120111
with:
121112
persist-credentials: false
122-
- uses: actions/setup-node@v6
113+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
123114
with:
124115
node-version: 24.x
125-
- uses: actions/setup-go@v6
116+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
126117
with:
127118
go-version: oldstable
128119
- uses: ./
@@ -143,20 +134,17 @@ jobs:
143134
version:
144135
- ""
145136
- "latest"
146-
- "v2.10"
147-
- "v2.10.1"
137+
- "v2.12"
138+
- "v2.12.1"
148139
runs-on: ${{ matrix.os }}
149-
permissions:
150-
contents: read
151-
pull-requests: read
152140
steps:
153-
- uses: actions/checkout@v6
141+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
154142
with:
155143
persist-credentials: false
156-
- uses: actions/setup-node@v6
144+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
157145
with:
158146
node-version: 24.x
159-
- uses: actions/setup-go@v6
147+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
160148
with:
161149
go-version: oldstable
162150
- uses: ./
@@ -175,17 +163,14 @@ jobs:
175163
- macos-latest
176164
- windows-latest
177165
runs-on: ${{ matrix.os }}
178-
permissions:
179-
contents: read
180-
pull-requests: read
181166
steps:
182-
- uses: actions/checkout@v6
167+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
183168
with:
184169
persist-credentials: false
185-
- uses: actions/setup-node@v6
170+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
186171
with:
187172
node-version: 24.x
188-
- uses: actions/setup-go@v6
173+
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
189174
with:
190175
go-version: oldstable
191176
- uses: ./

0 commit comments

Comments
 (0)