From ff371b5b35872055b1fd93b6001b855f5fceba60 Mon Sep 17 00:00:00 2001 From: Drewry Pope Date: Tue, 20 Oct 2026 01:40:43 -0500 Subject: [PATCH] ci: retire actions/checkout v3.6.0 in deploy/publish workflows Move the 16 remaining v3.6.0 (Node 16 runtime) checkout pins in the deploy and publish workflow family onto the repo-standard v4.3.1 pin (34e114876b0b11c390a56381ad16ebd13914f8d5), already used by 22 other checkout sites. Part of the alignment tracked in #160; the v4.3.1 vs v6.0.2 standard decision and the github-script alignment remain. --- .github/workflows/deploy-changelog.yml | 2 +- .github/workflows/deploy-files.yml | 2 +- .github/workflows/deploy-posts.yml | 2 +- .github/workflows/deploy-update.yml | 2 +- .github/workflows/deploy-www.yml | 2 +- .github/workflows/deploy.yml | 2 +- .github/workflows/publish-github-action.yml | 2 +- .github/workflows/publish-vscode.yml | 2 +- .github/workflows/publish.yml | 16 ++++++++-------- 9 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/deploy-changelog.yml b/.github/workflows/deploy-changelog.yml index 9a5d934d9578..93b61f1a12d7 100644 --- a/.github/workflows/deploy-changelog.yml +++ b/.github/workflows/deploy-changelog.yml @@ -22,7 +22,7 @@ jobs: if: github.repository == 'anomalyco/opencode' && github.ref_name == 'dev' runs-on: ubuntu-latest steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun diff --git a/.github/workflows/deploy-files.yml b/.github/workflows/deploy-files.yml index 5a277cbc57df..8134bfed7de5 100644 --- a/.github/workflows/deploy-files.yml +++ b/.github/workflows/deploy-files.yml @@ -20,7 +20,7 @@ jobs: if: github.repository == 'anomalyco/opencode' && (github.ref_name == 'dev' || github.ref_name == 'production') runs-on: ubuntu-latest steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun diff --git a/.github/workflows/deploy-posts.yml b/.github/workflows/deploy-posts.yml index 21fd0ad975b2..9f713bd22bab 100644 --- a/.github/workflows/deploy-posts.yml +++ b/.github/workflows/deploy-posts.yml @@ -23,7 +23,7 @@ jobs: if: github.repository == 'anomalyco/opencode' && github.ref_name == 'production' runs-on: ubuntu-latest steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun diff --git a/.github/workflows/deploy-update.yml b/.github/workflows/deploy-update.yml index 5960864b62e8..c43ec06da3de 100644 --- a/.github/workflows/deploy-update.yml +++ b/.github/workflows/deploy-update.yml @@ -19,7 +19,7 @@ jobs: if: github.repository == 'anomalyco/opencode' && github.ref_name == 'production' runs-on: ubuntu-latest steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun diff --git a/.github/workflows/deploy-www.yml b/.github/workflows/deploy-www.yml index 1a359df43750..4bb318dec476 100644 --- a/.github/workflows/deploy-www.yml +++ b/.github/workflows/deploy-www.yml @@ -20,7 +20,7 @@ jobs: if: github.repository == 'anomalyco/opencode' && (github.ref_name == 'dev' || github.ref_name == 'production') runs-on: ubuntu-latest steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index defae9687444..d0ebb964a8aa 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -27,7 +27,7 @@ jobs: runs-on: ${{ github.ref_name == 'dev' && 'ubuntu-24.04' || 'ubuntu-latest' }} environment: ${{ github.ref_name }} steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun diff --git a/.github/workflows/publish-github-action.yml b/.github/workflows/publish-github-action.yml index e43fdaedfb41..ab9f53e5d7ae 100644 --- a/.github/workflows/publish-github-action.yml +++ b/.github/workflows/publish-github-action.yml @@ -23,7 +23,7 @@ jobs: # RUNNER-SWITCH: Blacksmith (commented out 2026-10-18): runs-on: blacksmith-4vcpu-ubuntu-2404 runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 0 diff --git a/.github/workflows/publish-vscode.yml b/.github/workflows/publish-vscode.yml index 36f5044735c8..e59ae23aa116 100644 --- a/.github/workflows/publish-vscode.yml +++ b/.github/workflows/publish-vscode.yml @@ -22,7 +22,7 @@ jobs: # RUNNER-SWITCH: Blacksmith (commented out 2026-10-18): runs-on: blacksmith-4vcpu-ubuntu-2404 runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 0 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 08c6616d9248..01b8e943c0fb 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-24.04 if: github.repository == 'anomalyco/opencode' steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 0 @@ -89,7 +89,7 @@ jobs: timeout-minutes: 30 if: github.repository == 'anomalyco/opencode' steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-tags: true @@ -153,7 +153,7 @@ jobs: # Beta publishes only the desktop app, which signs the CLI it bundles. if: github.repository == 'anomalyco/opencode' && github.ref_name != 'beta' steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0 with: @@ -209,7 +209,7 @@ jobs: timeout-minutes: 30 if: github.repository == 'anomalyco/opencode' && github.ref_name != 'beta' && !(github.ref_name == 'dev' && (inputs.bump || inputs.version)) steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun @@ -255,7 +255,7 @@ jobs: run: shell: bash steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun with: @@ -303,7 +303,7 @@ jobs: AZURE_TRUSTED_SIGNING_CERTIFICATE_PROFILE: ${{ secrets.AZURE_TRUSTED_SIGNING_CERTIFICATE_PROFILE }} AZURE_TRUSTED_SIGNING_ENDPOINT: ${{ secrets.AZURE_TRUSTED_SIGNING_ENDPOINT }} steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: @@ -405,7 +405,7 @@ jobs: platform_flag: --linux --arm64 runs-on: ${{ matrix.settings.host }} steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: @@ -574,7 +574,7 @@ jobs: # RUNNER-SWITCH: Blacksmith (commented out 2026-10-18): runs-on: blacksmith-4vcpu-ubuntu-2404 runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: ./.github/actions/setup-bun