From 6bd987ead8ea6bc4433c8fe38d8af92f0a6452a2 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 1 Jul 2026 20:56:34 +0100 Subject: [PATCH 1/4] fix(workflows): disable credential persistence for checkout actions --- .github/workflows/autofix.yml | 2 ++ .github/workflows/ci.yml | 2 ++ .github/workflows/release.yml | 2 ++ .github/workflows/size-data.yml | 2 ++ .github/workflows/size-report.yml | 2 ++ .github/workflows/test.yml | 8 ++++++++ 6 files changed, 18 insertions(+) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index 15def5f60d5..1f338283ff8 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -12,6 +12,8 @@ jobs: PUPPETEER_SKIP_DOWNLOAD: 'true' steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9ed749b726d..14bffac95e9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -24,6 +24,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 45e879f49a3..3a1bc44ad07 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,6 +22,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 diff --git a/.github/workflows/size-data.yml b/.github/workflows/size-data.yml index dbdccdff44b..5009104170e 100644 --- a/.github/workflows/size-data.yml +++ b/.github/workflows/size-data.yml @@ -23,6 +23,8 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 diff --git a/.github/workflows/size-report.yml b/.github/workflows/size-report.yml index eebe450580d..195a9586b06 100644 --- a/.github/workflows/size-report.yml +++ b/.github/workflows/size-report.yml @@ -23,6 +23,8 @@ jobs: github.event.workflow_run.conclusion == 'success' steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3827abcafac..0c3214d68e7 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -12,6 +12,8 @@ jobs: PUPPETEER_SKIP_DOWNLOAD: 'true' steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 @@ -33,6 +35,8 @@ jobs: PUPPETEER_SKIP_DOWNLOAD: 'true' steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 @@ -55,6 +59,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Setup cache for Chromium binary uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 @@ -93,6 +99,8 @@ jobs: PUPPETEER_SKIP_DOWNLOAD: 'true' steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false - name: Install pnpm uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 From 1f39c27e5b14221e8649422750fc69799bdf4980 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 1 Jul 2026 20:59:24 +0100 Subject: [PATCH 2/4] fix(workflows): use `ubuntu-slim` runner where possible --- .../workflows/close-cant-reproduce-issues.yml | 2 +- .github/workflows/ecosystem-ci-trigger.yml | 2 +- .github/workflows/lock-closed-issues.yml | 2 +- .github/workflows/size-report.yml | 23 ++++++++++--------- 4 files changed, 15 insertions(+), 14 deletions(-) diff --git a/.github/workflows/close-cant-reproduce-issues.yml b/.github/workflows/close-cant-reproduce-issues.yml index 594e3d5dfba..18653e6a1eb 100644 --- a/.github/workflows/close-cant-reproduce-issues.yml +++ b/.github/workflows/close-cant-reproduce-issues.yml @@ -10,7 +10,7 @@ permissions: jobs: close-issues: if: github.repository == 'vuejs/core' - runs-on: ubuntu-latest + runs-on: ubuntu-slim steps: - name: can't reproduce uses: actions-cool/issues-helper@200c78641dbf33838311e5a1e0c31bbdb92d7cf0 # v3.0.0 diff --git a/.github/workflows/ecosystem-ci-trigger.yml b/.github/workflows/ecosystem-ci-trigger.yml index df2161bd1f8..70feed1463a 100644 --- a/.github/workflows/ecosystem-ci-trigger.yml +++ b/.github/workflows/ecosystem-ci-trigger.yml @@ -11,7 +11,7 @@ permissions: jobs: trigger: - runs-on: ubuntu-latest + runs-on: ubuntu-slim if: github.repository == 'vuejs/core' && github.event.issue.pull_request && startsWith(github.event.comment.body, '/ecosystem-ci run') steps: - name: Check user permission diff --git a/.github/workflows/lock-closed-issues.yml b/.github/workflows/lock-closed-issues.yml index 204b1e842aa..3334cfe67d4 100644 --- a/.github/workflows/lock-closed-issues.yml +++ b/.github/workflows/lock-closed-issues.yml @@ -10,7 +10,7 @@ permissions: jobs: action: if: github.repository == 'vuejs/core' - runs-on: ubuntu-latest + runs-on: ubuntu-slim steps: - uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6.0.2 with: diff --git a/.github/workflows/size-report.yml b/.github/workflows/size-report.yml index 195a9586b06..21bf6c8dc0a 100644 --- a/.github/workflows/size-report.yml +++ b/.github/workflows/size-report.yml @@ -16,7 +16,7 @@ env: jobs: size-report: - runs-on: ubuntu-latest + runs-on: ubuntu-slim if: > github.repository == 'vuejs/core' && github.event.workflow_run.event == 'pull_request' && @@ -45,17 +45,18 @@ jobs: run_id: ${{ github.event.workflow_run.id }} path: temp/size - - name: Read PR Number - id: pr-number - uses: juliangruber/read-file-action@271ff311a4947af354c6abcd696a306553b9ec18 # v1.1.8 - with: - path: temp/size/number.txt + - parallel: + - name: Read PR Number + id: pr-number + uses: juliangruber/read-file-action@271ff311a4947af354c6abcd696a306553b9ec18 # v1.1.8 + with: + path: temp/size/number.txt - - name: Read base branch - id: pr-base - uses: juliangruber/read-file-action@271ff311a4947af354c6abcd696a306553b9ec18 # v1.1.8 - with: - path: temp/size/base.txt + - name: Read base branch + id: pr-base + uses: juliangruber/read-file-action@271ff311a4947af354c6abcd696a306553b9ec18 # v1.1.8 + with: + path: temp/size/base.txt - name: Download Previous Size Data uses: dawidd6/action-download-artifact@b6e2e70617bc3265edd6dab6c906732b2f1ae151 # v21 From bfc725c72443f1d73d0650e4b2b5d07f2996f5b9 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 1 Jul 2026 20:59:54 +0100 Subject: [PATCH 3/4] fix(workflows): run tasks in parallel where possible --- .github/workflows/test.yml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 0c3214d68e7..ab8067f78cb 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -49,11 +49,12 @@ jobs: - run: pnpm install - - name: Run compiler unit tests - run: pnpm run test-unit compiler + - parallel: + - name: Run compiler unit tests + run: pnpm run test-unit compiler - - name: Run ssr unit tests - run: pnpm run test-unit server-renderer + - name: Run ssr unit tests + run: pnpm run test-unit server-renderer e2e-test: runs-on: ubuntu-latest @@ -113,11 +114,12 @@ jobs: - run: pnpm install - - name: Run eslint - run: pnpm run lint + - parallel: + - name: Run eslint + run: pnpm run lint - - name: Run prettier - run: pnpm run format-check + - name: Run prettier + run: pnpm run format-check - name: Run tsc run: pnpm run check From 5d159839115f51aea15960f15f3ff9369ce63bd6 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 1 Jul 2026 21:15:14 +0100 Subject: [PATCH 4/4] fix(workflows): add concurrency settings to autofix, ci, and size-data workflows --- .github/workflows/autofix.yml | 5 +++++ .github/workflows/ci.yml | 4 ++++ .github/workflows/size-data.yml | 4 ++++ 3 files changed, 13 insertions(+) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index 1f338283ff8..beb55490859 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -2,6 +2,11 @@ name: autofix.ci on: pull_request: + +concurrency: + group: ${{ github.workflow }}-${{ github.event.pull_request.number }} + cancel-in-progress: ${{ github.event_name == 'pull_request' }} + permissions: contents: read diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 14bffac95e9..37cbcea3ce7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -10,6 +10,10 @@ on: - main - minor +concurrency: + group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} + cancel-in-progress: ${{ github.event_name == 'pull_request' }} + permissions: contents: read diff --git a/.github/workflows/size-data.yml b/.github/workflows/size-data.yml index 5009104170e..09c58aa8b7e 100644 --- a/.github/workflows/size-data.yml +++ b/.github/workflows/size-data.yml @@ -10,6 +10,10 @@ on: - main - minor +concurrency: + group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} + cancel-in-progress: ${{ github.event_name == 'pull_request' }} + permissions: contents: read