From d07e6f1c35814587a7fd861b7b5a6653c70afc78 Mon Sep 17 00:00:00 2001 From: ckoegel Date: Tue, 19 May 2026 15:47:23 -0400 Subject: [PATCH 1/2] SWI-10998 Update Workflow Versions --- .github/workflows/docs-tests.yaml | 6 +++--- .github/workflows/e2e-tests.yml | 2 +- .github/workflows/publish.yml | 30 +++++++++++++++--------------- .github/workflows/unit-tests.yml | 2 +- .github/workflows/vale.yaml | 2 +- 5 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/docs-tests.yaml b/.github/workflows/docs-tests.yaml index 667294559c..737b445f8d 100644 --- a/.github/workflows/docs-tests.yaml +++ b/.github/workflows/docs-tests.yaml @@ -8,7 +8,7 @@ jobs: name: markdownlint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - uses: DavidAnson/markdownlint-cli2-action@v15 with: config: .markdownlint.yaml @@ -20,7 +20,7 @@ jobs: name: vale action runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - uses: errata-ai/vale-action@reviewdog with: files: '["README.md", "docs"]' @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Markup Link Checker (mlc) uses: becheran/mlc@v0.16.1 with: diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml index 0bab1ca640..518d2d5b15 100644 --- a/.github/workflows/e2e-tests.yml +++ b/.github/workflows/e2e-tests.yml @@ -10,7 +10,7 @@ jobs: build-and-e2e: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - run: npm ci - run: npm run bundle - run: npm run e2e diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index a906281aa6..f5bbb6c163 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -11,13 +11,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 - name: Cache node modules - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: ~/.npm # npm cache files are stored in `~/.npm` on Linux/macOS key: npm-${{ hashFiles('package-lock.json') }} @@ -32,7 +32,7 @@ jobs: run: npm run bundle - name: Store bundle artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: bundles path: bundles @@ -43,7 +43,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Clean Install run: npm ci @@ -57,13 +57,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Clean Install run: npm ci - name: Download bundled artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: bundles path: bundles @@ -81,21 +81,21 @@ jobs: run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: registry-url: 'https://registry.npmjs.org' - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Download bundled artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: bundles path: bundles - name: Cache node modules - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: ~/.npm # npm cache files are stored in `~/.npm` on Linux/macOS key: npm-${{ hashFiles('package-lock.json') }} @@ -143,22 +143,22 @@ jobs: fi - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '18.x' registry-url: 'https://registry.npmjs.org' - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Download bundled artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: bundles path: bundles - name: Cache node modules - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: ~/.npm # npm cache files are stored in `~/.npm` on Linux/macOS key: npm-${{ hashFiles('package-lock.json') }} diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml index 6172d70ece..eada497d25 100644 --- a/.github/workflows/unit-tests.yml +++ b/.github/workflows/unit-tests.yml @@ -10,7 +10,7 @@ jobs: build-and-unit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - run: npm ci - run: npm run bundle - run: npm test diff --git a/.github/workflows/vale.yaml b/.github/workflows/vale.yaml index c5220c419e..458c5540e6 100644 --- a/.github/workflows/vale.yaml +++ b/.github/workflows/vale.yaml @@ -8,7 +8,7 @@ jobs: name: vale action runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v6 - uses: errata-ai/vale-action@reviewdog with: files: '["README.md", "docs"]' From dc4690bface96b4a3ac0472a097a08df7289ed3b Mon Sep 17 00:00:00 2001 From: ckoegel Date: Tue, 19 May 2026 15:59:44 -0400 Subject: [PATCH 2/2] update publish wf --- .github/workflows/publish.yml | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f5bbb6c163..deb8c75a67 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -5,6 +5,10 @@ on: types: - published +permissions: + id-token: write + contents: read + jobs: bundle: name: Bundle @@ -83,8 +87,12 @@ jobs: - name: Setup Node uses: actions/setup-node@v6 with: + node-version: 20 registry-url: 'https://registry.npmjs.org' + - name: Update NPM + run: npm install -g npm@latest + - name: Checkout uses: actions/checkout@v6 @@ -110,8 +118,6 @@ jobs: run: | npm version $RELEASE_VERSION --no-git-tag-version npm publish --access public - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }} publish-beta: name: Publish Beta to NPM @@ -145,9 +151,12 @@ jobs: - name: Setup Node uses: actions/setup-node@v6 with: - node-version: '18.x' + node-version: 20 registry-url: 'https://registry.npmjs.org' + - name: Update NPM + run: npm install -g npm@latest + - name: Checkout uses: actions/checkout@v6 @@ -173,5 +182,3 @@ jobs: run: | npm version $RELEASE_VERSION --no-git-tag-version npm publish --access public --tag beta - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }}