Skip to content

ci: upgrade deprecated GitHub Actions to supported versions#2

Merged
sarsanaee merged 3 commits into
mainfrom
worktree-fix-ci-workflows
Jul 19, 2026
Merged

ci: upgrade deprecated GitHub Actions to supported versions#2
sarsanaee merged 3 commits into
mainfrom
worktree-fix-ci-workflows

Conversation

@sarsanaee

Copy link
Copy Markdown
Collaborator

The CI workflows referenced action versions that GitHub has retired, causing runs to fail:

Action Was Now
`github/codeql-action` (init & analyze) v2 v3
`actions/checkout` v2 / v3 v4
`docker/setup-buildx-action` v2 v3
`docker/login-action` v1 v3
`docker/build-push-action` v2 v6

Why: CodeQL Action v2 reached end-of-life after v3 shipped, and actions/checkout@v2 runs on Node.js 12 which GitHub retired — both now hard-fail. Dockerfile build stages (machnet_build_base, machnet) and codeql-config.yml were verified to still match the workflow references, so no other changes were needed. YAML validates cleanly.

🤖 Generated with Claude Code

https://claude.ai/code/session_017cM5KS1a3nGipfsAXLvoZ6

sarsanaee and others added 2 commits July 19, 2026 08:14
The CI workflows referenced action versions that GitHub has retired,
causing runs to fail:

- github/codeql-action v2 -> v3 (v2 reached end-of-life)
- actions/checkout v2/v3 -> v4 (v2 ran on Node.js 12, now retired)
- docker/setup-buildx-action v2 -> v3
- docker/login-action v1 -> v3
- docker/build-push-action v2 -> v6

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cM5KS1a3nGipfsAXLvoZ6
Docker/GHCR references must be lowercase, but ${{ github.repository }}
resolves to "machnett/Machnet" (capital M), so every image build/pull
failed with "repository name must be lowercase". This is why the base
image was never pushed and the CodeQL job could not start its container.

Hardcode the lowercase path ghcr.io/machnett/machnet/... instead. The
container.image field in codeql.yml is evaluated at job setup and cannot
use a computed step output, so a literal is the simplest robust fix.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cM5KS1a3nGipfsAXLvoZ6
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

CodeQL Action v3 is scheduled for deprecation in December 2026; v4 is
the drop-in successor. Moving now keeps the workflow off deprecated
actions, which is the goal of this change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017cM5KS1a3nGipfsAXLvoZ6
@sarsanaee
sarsanaee marked this pull request as ready for review July 19, 2026 07:49
Copilot AI review requested due to automatic review settings July 19, 2026 07:49

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@sarsanaee
sarsanaee merged commit 19249f9 into main Jul 19, 2026
2 checks passed
@sarsanaee
sarsanaee deleted the worktree-fix-ci-workflows branch July 19, 2026 07:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants