From a265bf2967a17646be07984ece3184e97ed9310f Mon Sep 17 00:00:00 2001 From: Arvin Rolos Date: Mon, 13 Jul 2026 15:07:30 -0700 Subject: [PATCH 1/3] Update GitHub Actions dependencies to latest versions --- .github/workflows/cdn-upload.yaml | 4 ++-- .github/workflows/oci-build.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/cdn-upload.yaml b/.github/workflows/cdn-upload.yaml index 9bc6834..dab1463 100644 --- a/.github/workflows/cdn-upload.yaml +++ b/.github/workflows/cdn-upload.yaml @@ -47,13 +47,13 @@ jobs: steps: - name: Download build artifact if: inputs.artifact_name != '' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: ${{ inputs.artifact_name }} path: ${{ inputs.dist_dir }} - name: Upload assets to Azure Blob Storage - uses: azure/CLI@v2 + uses: azure/cli@v3 env: SAS_TOKEN: ${{ secrets.CDN_SAS_TOKEN }} CDN_ACCOUNT_NAME: ${{ inputs.cdn_account_name }} diff --git a/.github/workflows/oci-build.yaml b/.github/workflows/oci-build.yaml index aa4ceb9..5971485 100644 --- a/.github/workflows/oci-build.yaml +++ b/.github/workflows/oci-build.yaml @@ -104,7 +104,7 @@ jobs: actions: read # Required by codeql-action/upload-sarif on private repos steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 @@ -245,7 +245,7 @@ jobs: ${{ env.REGISTRY }}/${{ github.repository }}/${{ inputs.image_name }}:${{ steps.version.outputs.next }}-rc.${{ steps.version.outputs.ts }}.${{ steps.version.outputs.short }} # ── Sign with Cosign (keyless / Sigstore) ──────────────── - - uses: sigstore/cosign-installer@v3 + - uses: sigstore/cosign-installer@v4.1.2 if: steps.changes.outputs.changed == 'true' && github.event_name != 'pull_request' - name: Sign image From ced5ffcfcdb5d1e62787aac3a93f49801db6e40a Mon Sep 17 00:00:00 2001 From: Arvin Rolos Date: Tue, 14 Jul 2026 10:07:20 -0700 Subject: [PATCH 2/3] remove force node24 --- .github/workflows/oci-build.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/oci-build.yaml b/.github/workflows/oci-build.yaml index 5971485..a6eedf8 100644 --- a/.github/workflows/oci-build.yaml +++ b/.github/workflows/oci-build.yaml @@ -85,7 +85,6 @@ on: env: REGISTRY: ghcr.io - FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true jobs: build: From d18168b4f139725944782e5d5aeb477af0785569 Mon Sep 17 00:00:00 2001 From: Arvin Rolos Date: Tue, 21 Jul 2026 09:58:28 -0700 Subject: [PATCH 3/3] cosign version 4 --- .github/workflows/oci-build.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/oci-build.yaml b/.github/workflows/oci-build.yaml index a6eedf8..ae61fb6 100644 --- a/.github/workflows/oci-build.yaml +++ b/.github/workflows/oci-build.yaml @@ -244,7 +244,7 @@ jobs: ${{ env.REGISTRY }}/${{ github.repository }}/${{ inputs.image_name }}:${{ steps.version.outputs.next }}-rc.${{ steps.version.outputs.ts }}.${{ steps.version.outputs.short }} # ── Sign with Cosign (keyless / Sigstore) ──────────────── - - uses: sigstore/cosign-installer@v4.1.2 + - uses: sigstore/cosign-installer@v4 if: steps.changes.outputs.changed == 'true' && github.event_name != 'pull_request' - name: Sign image