diff --git a/.github/workflows/create_branch.yml b/.github/workflows/create_branch.yml index f714fa1033..9b1716ee0d 100644 --- a/.github/workflows/create_branch.yml +++ b/.github/workflows/create_branch.yml @@ -21,7 +21,7 @@ jobs: steps: # Checkout the tag corresponding to patch 0 for the given version - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 with: ssh-key: ${{ secrets.DEPLOY_KEY }} fetch-tags: true diff --git a/.github/workflows/metrics_analysis.yml b/.github/workflows/metrics_analysis.yml index 9c80763ec7..976d333c00 100644 --- a/.github/workflows/metrics_analysis.yml +++ b/.github/workflows/metrics_analysis.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6.0.2 with: fetch-depth: 0 # Need full history for git diff @@ -51,7 +51,7 @@ jobs: fi - name: Comment on PR - uses: actions/github-script@v7 + uses: actions/github-script@v9.0.0 continue-on-error: true with: github-token: ${{ secrets.GITHUB_TOKEN }} @@ -88,7 +88,7 @@ jobs: }); - name: Add inline comments for outliers - uses: actions/github-script@v7 + uses: actions/github-script@v9.0.0 if: steps.check-changes.outputs.SIGNIFICANT_CHANGES == 'true' continue-on-error: true with: diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index c5df87cb25..6e64c2375f 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -24,7 +24,7 @@ jobs: contents: read steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment id: setup-base uses: ./actions/setup-base-env @@ -56,7 +56,7 @@ jobs: contents: read steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Calculate versions @@ -79,7 +79,7 @@ jobs: timeout-minutes: 40 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB @@ -98,7 +98,7 @@ jobs: gradle_args: -PreleaseBuild=false -PpublishBuild=false -Ptests.mixedModeVersion=${{ matrix.version }} report_name: mixed-mode-${{ matrix.version }}-test-reports - name: Publish Coverage Data - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: mixed-mode-${{ matrix.version }}-coverage-data path: | @@ -125,11 +125,11 @@ jobs: contents: read steps: - name: Checkout HEAD sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: 'Download results' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: pattern: 'mixed-mode-*-test-reports' - name: Generate mixed mode results @@ -141,7 +141,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB diff --git a/.github/workflows/pr_labels.yml b/.github/workflows/pr_labels.yml index 96c1dd61fe..ffb40506a7 100644 --- a/.github/workflows/pr_labels.yml +++ b/.github/workflows/pr_labels.yml @@ -15,11 +15,11 @@ jobs: pull-requests: read steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 with: sparse-checkout: build/release-notes-config.json - name: Check Labels - uses: actions/github-script@v7 + uses: actions/github-script@v9.0.0 with: script: | // Gather required labels from release notes configuration diff --git a/.github/workflows/pr_mixed_mode.yml b/.github/workflows/pr_mixed_mode.yml index be0694a9b3..3e100d6476 100644 --- a/.github/workflows/pr_mixed_mode.yml +++ b/.github/workflows/pr_mixed_mode.yml @@ -15,7 +15,7 @@ jobs: contents: read steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Calculate versions @@ -36,7 +36,7 @@ jobs: timeout-minutes: 40 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB @@ -48,7 +48,7 @@ jobs: gradle_args: -PreleaseBuild=false -PpublishBuild=false -Ptests.mixedModeVersion=${{ matrix.version }} report_name: mixed-mode-${{ matrix.version }}-test-reports - name: Publish Coverage Data - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: mixed-mode-${{ matrix.version }}-coverage-data path: | @@ -64,11 +64,11 @@ jobs: contents: read steps: - name: Checkout HEAD sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: 'Download results' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: pattern: 'mixed-mode-*-test-reports' - name: Generate mixed mode results diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml index 604196de23..33a9273440 100644 --- a/.github/workflows/pull_request.yml +++ b/.github/workflows/pull_request.yml @@ -25,7 +25,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Run Gradle Build @@ -45,7 +45,7 @@ jobs: timeout-minutes: 40 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB @@ -57,7 +57,7 @@ jobs: gradle_args: -PreleaseBuild=false -PpublishBuild=false report_name: ${{ matrix.subproject }}-test-reports - name: Publish Coverage Data - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: ${{ matrix.subproject }}-coverage-data path: | @@ -75,7 +75,7 @@ jobs: timeout-minutes: 60 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB @@ -98,7 +98,7 @@ jobs: gradle_args: -PreleaseBuild=false -PpublishBuild=false report_name: other-test-reports - name: Publish Coverage Data - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: other-coverage-data path: | @@ -116,29 +116,29 @@ jobs: timeout-minutes: 10 steps: - name: Checkout HEAD sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env # It looks like, if you try to download them all as a pattern, the nested directories get stripped # so the coverage data (for e.g. lucene) does not end up in the appropirate subproject directory - name: 'Download lucene' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: name: fdb-record-layer-lucene-coverage-data - name: 'Download extensions' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: name: fdb-extensions-coverage-data - name: 'Download core' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: name: fdb-record-layer-core-coverage-data - name: 'Download yaml' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: name: yaml-tests-coverage-data - name: 'Download other' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: name: other-coverage-data - name: Run JaCoCo Report @@ -146,13 +146,14 @@ jobs: with: gradle_command: codeCoverageReport - name: Publish Coverage Report - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: coverage-report path: | ${{ github.workspace }}/.out/reports/jacoco/codeCoverageReport/ - name: Add Coverage Summary - uses: madrapps/jacoco-report@e4bbaf00a0b8920cb86a448ae3ec0fc6f6bfeacc + # v1.7.2 + uses: madrapps/jacoco-report@50d3aff4548aa991e6753342d9ba291084e63848 with: paths: | ${{ github.workspace }}/.out/reports/jacoco/codeCoverageReport/codeCoverageReport.xml diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2bd8cf2e66..8ce3a4e63a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,7 +19,7 @@ jobs: update-type: ${{ steps.update-type.outputs.result }} steps: - name: Calculate update type - uses: actions/github-script@v7 + uses: actions/github-script@v9.0.0 id: update-type with: script: | @@ -48,7 +48,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env # Increment the version here so that the version used in the checks matches the eventually published version. @@ -71,7 +71,7 @@ jobs: timeout-minutes: 40 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB @@ -89,7 +89,7 @@ jobs: gradle_args: -PreleaseBuild=true -PpublishBuild=false report_name: ${{ matrix.subproject }}-test-reports - name: Publish Coverage Data - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: ${{ matrix.subproject }}-coverage-data path: | @@ -106,7 +106,7 @@ jobs: timeout-minutes: 60 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB @@ -133,7 +133,7 @@ jobs: gradle_args: -PreleaseBuild=true -PpublishBuild=false report_name: other-test-reports - name: Publish Coverage Data - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: other-coverage-data path: | @@ -152,7 +152,7 @@ jobs: contents: read steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Calculate versions @@ -171,7 +171,7 @@ jobs: timeout-minutes: 40 steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: Setup FDB @@ -189,7 +189,7 @@ jobs: gradle_args: -PreleaseBuild=true -PpublishBuild=false -Ptests.mixedModeVersion=${{ matrix.version }} report_name: mixed-mode-${{ matrix.version }}-test-reports - name: Publish Coverage Data - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: mixed-mode-${{ matrix.version }}-coverage-data path: | @@ -205,11 +205,11 @@ jobs: contents: read steps: - name: Checkout HEAD sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: Setup Base Environment uses: ./actions/setup-base-env - name: 'Download results' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: pattern: 'mixed-mode-*-test-reports' - name: Generate mixed mode results @@ -218,7 +218,7 @@ jobs: # so that "mixed-mode-results" gets passed around correctly - name: Upload mixed mode results id: mixed_mode_results - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: mixed-mode-results path: mixed-mode-results.md @@ -234,7 +234,7 @@ jobs: pull-requests: write # We create a pull request if committing the release notes updates fails steps: - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 with: ssh-key: ${{ secrets.DEPLOY_KEY }} fetch-tags: true @@ -270,7 +270,7 @@ jobs: # We want to do this before anything else, because if the later steps fail, we want to make sure that the full # change log includes all changes, even if they reference a release that was never actually published. - name: Download mixed mode results - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8.0.0 with: name: mixed-mode-results - name: echo results @@ -369,7 +369,7 @@ jobs: run: echo "${{ needs.get-update-type.outputs.update-type }}" - name: Cache Python Environment if: needs.get-update-type.outputs.update-type == 'BUILD' - uses: actions/cache@v4 + uses: actions/cache@v5.0.4 with: path: docs/sphinx/.venv key: ${{ runner.os }}-sphinx-python-${{ steps.setup-base.outputs.python-version }}-${{ hashFiles('docs/sphinx/requirements.txt') }} diff --git a/.github/workflows/teamscale_upload.yml b/.github/workflows/teamscale_upload.yml index 8559364528..83c5017ad8 100644 --- a/.github/workflows/teamscale_upload.yml +++ b/.github/workflows/teamscale_upload.yml @@ -19,9 +19,9 @@ jobs: # This checks out the latest commit on main, not teh PRs head # This is needed to get the teamscale-upload action - name: Checkout sources - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6.0.2 - name: 'Download artifact' - uses: actions/github-script@v7 + uses: actions/github-script@v9.0.0 with: script: | let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({ diff --git a/actions/gradle-test/action.yml b/actions/gradle-test/action.yml index b4c2b2fefb..5b1164ff9b 100644 --- a/actions/gradle-test/action.yml +++ b/actions/gradle-test/action.yml @@ -54,7 +54,7 @@ runs: echo "SUCCESS" >> test-reports/overall.txt - name: Publish Test Reports if: ${{ !cancelled() }} - uses: actions/upload-artifact@v4.6.0 + uses: actions/upload-artifact@v7.0.1 with: name: ${{ inputs.report_name }} if-no-files-found: ignore diff --git a/actions/setup-base-env/action.yml b/actions/setup-base-env/action.yml index b9f9e41c25..5b116ef220 100644 --- a/actions/setup-base-env/action.yml +++ b/actions/setup-base-env/action.yml @@ -8,14 +8,18 @@ runs: using: "composite" steps: - name: Set up JDK 17 - uses: actions/setup-java@v4.7.0 + uses: actions/setup-java@v5.2.0 with: java-version: '17' distribution: 'temurin' - name: Setup Gradle - uses: gradle/actions/setup-gradle@0bdd871935719febd78681f197cd39af5b6e16a6 + # Use setup-gradle v6.1.0 + uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e + with: + # Use the MIT-licensed cache provider + cache-provider: basic - name: Setup Python id: setup-python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6.2.0 with: python-version: '3.13' diff --git a/actions/setup-fdb/action.yml b/actions/setup-fdb/action.yml index a2a438ce88..3ad7fb284f 100644 --- a/actions/setup-fdb/action.yml +++ b/actions/setup-fdb/action.yml @@ -17,7 +17,7 @@ runs: echo "server_deb=foundationdb-server_${{ inputs.fdb_version }}-1_amd64.deb" >> "${GITHUB_OUTPUT}" - name: Check FDB Binaries Cache id: cache_fdb - uses: actions/cache@v3 + uses: actions/cache@v5.0.4 with: path: ~/.fdb-cache key: ${{ runner.os }}-fdb-debs-${{ inputs.fdb_version }}