Replace Slack notification action and harden action refs (#102)

kvz · web-flow · commit e0f32192906b · 2026-06-08T15:32:20.000Z
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -26,18 +26,18 @@ jobs:
 
       steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up JDK
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@v5
         with:
           java-version: ${{ matrix.java }}
           distribution: 'adopt'
 
       # This allows us to test Smart CDN Signatures against the Node SDK reference
       # implementation for parity.
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
 
@@ -52,7 +52,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: matrix.java == '11'
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6.0.2
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
@@ -62,8 +62,12 @@ jobs:
       runs-on: ubuntu-latest
 
       steps:
-        - uses: 8398a7/action-slack@v3
-          with:
-            status: failure
+        - name: Send Slack notification
           env:
             SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+            SLACK_TEXT: >-
+              ${{ github.workflow }} failed for ${{ github.repository }} on ${{ github.ref_name }}:
+              ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          run: |
+            node -e "process.stdout.write(JSON.stringify({ text: process.env.SLACK_TEXT }))" |
+              curl --fail-with-body -X POST -H 'Content-type: application/json' --data-binary @- "$SLACK_WEBHOOK_URL"
