From e7631ab321b606be3a60bb7d0fa0e54530b9d828 Mon Sep 17 00:00:00 2001 From: Alex Jones Date: Wed, 22 Apr 2026 14:48:10 +0100 Subject: [PATCH 1/4] ci: bump all checkout actions from v4 to v6 Pick up the change to the node24 runtime, as Node.js 20 actions are currently deprecated and will mean checkout@v4 is end-of-life on September 16th 2026. There are no breaking changes for our use case across the major version bumps, so we use the latest major release. Signed-off-by: Alex Jones --- .github/workflows/ci.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f6b29243..5a6d28b2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,7 +18,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 # Required so we can lint commit messages. @@ -91,7 +91,7 @@ jobs: - "3.13" - "3.14" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Install uv uses: astral-sh/setup-uv@v6 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index be4c6633..bee2929a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: uses: lowrisc/ci-actions/ca-token@v1 - name: Setup | Checkout Repository at PR branch - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: token: ${{ steps.get-token.outputs.token }} ref: ${{ github.ref_name }} @@ -97,7 +97,7 @@ jobs: steps: - name: Setup | Checkout Repository at newly tagged release - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: # Can't checkout at the new tag, we need to match one of the configured # semantic_release.branches for the publish-action to proceed. From f6501e8b287595dae42104d8dcdb60d828d9d71a Mon Sep 17 00:00:00 2001 From: Alex Jones Date: Wed, 22 Apr 2026 14:48:41 +0100 Subject: [PATCH 2/4] ci: bump all upload-artifact actions from v4 to v7 Pick up the change to the node24 runtime, as Node.js 20 actions are currently deprecated and will mean upload-artifact@v4 is end-of-life on September 16th 2026. There are no major breaking changes across these major version bumps for our use case, so we move to use the latest major release. Signed-off-by: Alex Jones --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index bee2929a..71d6544b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -126,7 +126,7 @@ jobs: tag: ${{ needs.release.outputs.tag }} - name: Upload | Distribution artifacts to blob store for follow-up jobs - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: distribution-artifacts path: dist From 2d7b2c33137ce0f972ba0cf2caa5ec5a4375ffcb Mon Sep 17 00:00:00 2001 From: Alex Jones Date: Wed, 22 Apr 2026 14:50:11 +0100 Subject: [PATCH 3/4] ci: bump all download-artifact actions from v4 to v8 Pick up the change to the node24 runtime, as Node.js 20 actions are currently deprecated and will mean upload-artifact@v4 is end-of-life on September 16th 2026. The main breaking change is for users whose specified an artifact by ID (`artifact-ids`) for single artifact downloads. We only download artifacts by pattern, so this does not impact us. The latest version makes hash mismatches error by default (which seems sensible, so we'll leave that enabled) and only tries to unzip zipped files (which is our existing use case, so there should be no noticeable change). There are no other major breaking changes across these major version bumps for our use case, so we move to use the latest major release. Signed-off-by: Alex Jones --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 71d6544b..4cd8eb2f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -152,7 +152,7 @@ jobs: steps: - name: Setup | Download dist artifacts from previous job - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 id: artifact-download with: name: distribution-artifacts @@ -180,7 +180,7 @@ jobs: steps: - name: Setup | Download dist artifacts from previous job - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 id: artifact-download with: name: distribution-artifacts From b5b60cf6419b993e6ea33407e60675cacbbb630e Mon Sep 17 00:00:00 2001 From: Alex Jones Date: Wed, 22 Apr 2026 14:51:23 +0100 Subject: [PATCH 4/4] ci: bump set-uv action from v6 to v8 Pick up the change to the node24 runtime, as Node.js 20 actions are currently deprecated and will mean upload-artifact@v4 is end-of-life on September 16th 2026. There are no major breaking changes across this major version bump for our use case, so we move to use the latest major release. Signed-off-by: Alex Jones --- .github/workflows/ci.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5a6d28b2..84badcf3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: - uses: DeterminateSystems/flake-checker-action@main - name: Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Nix Format Check run: nix fmt -- . --check @@ -94,7 +94,7 @@ jobs: - uses: actions/checkout@v6 - name: Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Install the project run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4cd8eb2f..5cab1f6f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -40,7 +40,7 @@ jobs: fetch-depth: 0 - name: Setup | Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Setup | Install Python + the python project with release dependencies run: | @@ -107,7 +107,7 @@ jobs: fetch-tags: true - name: Setup | Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Setup | Install Python + the python project with build dependencies run: |