From ab85fe88555c094ee226dfd3e8d6f42702203507 Mon Sep 17 00:00:00 2001 From: Vitor Mattos Date: Tue, 22 Sep 2026 19:25:39 -0300 Subject: [PATCH 1/4] chore: run release actions on Node 24 --- actions/release-prepare/action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actions/release-prepare/action.yml b/actions/release-prepare/action.yml index 793028b..7e1b335 100644 --- a/actions/release-prepare/action.yml +++ b/actions/release-prepare/action.yml @@ -132,7 +132,7 @@ runs: - id: app-token name: Create scoped GitHub App token - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ inputs.app-id }} private-key: ${{ inputs.app-private-key }} @@ -183,7 +183,7 @@ runs: } >> "${GITHUB_STEP_SUMMARY}" - name: Persist release preparation contracts - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: ${{ steps.prepare.outputs.artifact-name }} path: ${{ steps.prepare.outputs.state-dir }} From 040eeb2331342072c8c06cc2c288d0e999b71b93 Mon Sep 17 00:00:00 2001 From: Vitor Mattos Date: Tue, 22 Sep 2026 19:32:39 -0300 Subject: [PATCH 2/4] chore: use release-tool 0.10.13 --- actions/release-tool-setup/release-tool-version | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/actions/release-tool-setup/release-tool-version b/actions/release-tool-setup/release-tool-version index 70016a7..f25c43c 100644 --- a/actions/release-tool-setup/release-tool-version +++ b/actions/release-tool-setup/release-tool-version @@ -1 +1 @@ -0.10.12 +0.10.13 From a933b5b2432f7a606af1e891ab3d384f6b5fab71 Mon Sep 17 00:00:00 2001 From: Vitor Mattos Date: Tue, 22 Sep 2026 19:32:43 -0300 Subject: [PATCH 3/4] chore: bump version to 0.6.21 --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index db94455..33ac520 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.6.20 +0.6.21 From 538e756ea82549e1517b3b1f1c89da722ace74eb Mon Sep 17 00:00:00 2001 From: Vitor Mattos Date: Tue, 22 Sep 2026 19:33:21 -0300 Subject: [PATCH 4/4] test: expect Node 24 release actions --- tests/test_release_prepare_action.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/test_release_prepare_action.py b/tests/test_release_prepare_action.py index ace172d..b297180 100644 --- a/tests/test_release_prepare_action.py +++ b/tests/test_release_prepare_action.py @@ -22,7 +22,7 @@ def test_prepare_composes_policy_contracts_and_scoped_mutation(self) -> None: self.assertIn("config:validate", content) self.assertIn("prepare_min_permission", content) self.assertIn("$/actions/release-authorization", content) - self.assertIn("actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42", content) + self.assertIn("actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1", content) self.assertIn("permission-contents: write", content) self.assertIn("permission-pull-requests: write", content) self.assertNotIn("permission-workflows: write", content) @@ -42,7 +42,7 @@ def test_prepare_persists_plan_and_preparation_by_pr_number(self) -> None: self.assertIn("release-plan.json", content) self.assertIn("release-preparation.json", content) self.assertIn('artifact_name="release-preparation-pr-${pr_number}"', content) - self.assertIn("actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02", content) + self.assertIn("actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", content) if __name__ == "__main__":