From d6a367defb128a0031147cc9f1e518085a1fda6b Mon Sep 17 00:00:00 2001 From: davidliu <242400+davidliu@users.noreply.github.com> Date: Mon, 19 Oct 2026 00:11:45 +0000 Subject: [PATCH 1/3] chore(pinact): pin/update GitHub Actions --- .github/workflows/changeset.yaml | 6 +++--- .github/workflows/native_build.yaml | 10 +++++----- .github/workflows/pinact_update.yaml | 2 +- .github/workflows/test.yaml | 4 ++-- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/changeset.yaml b/.github/workflows/changeset.yaml index 1c6d0ac6..c58f8936 100644 --- a/.github/workflows/changeset.yaml +++ b/.github/workflows/changeset.yaml @@ -22,12 +22,12 @@ jobs: NPM_CONFIG_PROVENANCE: true steps: - name: Checkout Repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Use Node.js 24 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 # NPM 11.5.1+ required for OIDC trusted publishing cache: yarn @@ -41,7 +41,7 @@ jobs: - name: Create Release Pull Request or Publish to npm id: changesets - uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 + uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2 with: version: yarn ci:version publish: yarn ci:publish diff --git a/.github/workflows/native_build.yaml b/.github/workflows/native_build.yaml index 3b337147..3ac5ef3d 100644 --- a/.github/workflows/native_build.yaml +++ b/.github/workflows/native_build.yaml @@ -13,15 +13,15 @@ jobs: android-compile: runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: set up JDK 17 - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0 + uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: java-version: '17' distribution: 'adopt' - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'yarn' @@ -54,9 +54,9 @@ jobs: ios-compile: runs-on: macos-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'yarn' diff --git a/.github/workflows/pinact_update.yaml b/.github/workflows/pinact_update.yaml index ddb08f20..529e85c5 100644 --- a/.github/workflows/pinact_update.yaml +++ b/.github/workflows/pinact_update.yaml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install aqua (installs pinact) uses: aquaproj/aqua-installer@96a9bc20066c5bf5e275b41019cfc165b25f4e2e # v4.0.5 diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 4226875f..cfc185d3 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -13,9 +13,9 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 From e8bea32146f729aa686288de7714b7415acc7d27 Mon Sep 17 00:00:00 2001 From: davidliu Date: Mon, 19 Oct 2026 16:42:04 +0900 Subject: [PATCH 2/3] ci: keep changesets/action on v1 and switch setup-java to temurin changesets/action v2 requires @changesets/cli v3 and renames the version/publish inputs, so the Release workflow would fail. Hold it at v1.9.0 and add a pinact ignore entry so the weekly update doesn't re-bump it. setup-java v6 removed the legacy `adopt` distribution; use `temurin`. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/changeset.yaml | 2 +- .github/workflows/native_build.yaml | 2 +- .pinact.yaml | 8 ++++++++ 3 files changed, 10 insertions(+), 2 deletions(-) create mode 100644 .pinact.yaml diff --git a/.github/workflows/changeset.yaml b/.github/workflows/changeset.yaml index c58f8936..ba134106 100644 --- a/.github/workflows/changeset.yaml +++ b/.github/workflows/changeset.yaml @@ -41,7 +41,7 @@ jobs: - name: Create Release Pull Request or Publish to npm id: changesets - uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2 + uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 with: version: yarn ci:version publish: yarn ci:publish diff --git a/.github/workflows/native_build.yaml b/.github/workflows/native_build.yaml index 3ac5ef3d..06134298 100644 --- a/.github/workflows/native_build.yaml +++ b/.github/workflows/native_build.yaml @@ -19,7 +19,7 @@ jobs: uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: java-version: '17' - distribution: 'adopt' + distribution: 'temurin' - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: diff --git a/.pinact.yaml b/.pinact.yaml new file mode 100644 index 00000000..a6d989b5 --- /dev/null +++ b/.pinact.yaml @@ -0,0 +1,8 @@ +version: 3 + +ignore_actions: + # changesets/action v2 requires @changesets/cli v3 and renames the + # `version`/`publish` inputs. Hold v1.9.0 until the repo migrates to + # Changesets v3; remove this entry as part of that migration. + - name: changesets/action + ref: a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d From 4fa07482ec57f2462669f9066476cb70a97da608 Mon Sep 17 00:00:00 2001 From: davidliu Date: Mon, 19 Oct 2026 16:54:10 +0900 Subject: [PATCH 3/3] fix docs warning blocking ci --- typedoc.json | 1 + 1 file changed, 1 insertion(+) diff --git a/typedoc.json b/typedoc.json index d3412a31..20258508 100644 --- a/typedoc.json +++ b/typedoc.json @@ -16,6 +16,7 @@ "java", "kotlin", "objc", + "python", "ruby", "swift", "xml"