From d9cf2ea0080ff383959b5ae6631db4b6f66404ac Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 17:01:33 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 6 updates Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2` | `3` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2` | `3` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v7) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `dependabot/fetch-metadata` from 2 to 3 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/v2...v3) Updates `softprops/action-gh-release` from 2 to 3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: dependabot/fetch-metadata dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/battery.yml | 14 ++++++------- .github/workflows/ci.yml | 38 +++++++++++++++++------------------ .github/workflows/deps.yml | 18 ++++++++--------- .github/workflows/release.yml | 6 +++--- 4 files changed, 38 insertions(+), 38 deletions(-) diff --git a/.github/workflows/battery.yml b/.github/workflows/battery.yml index 36309e93b..0ef4517c0 100644 --- a/.github/workflows/battery.yml +++ b/.github/workflows/battery.yml @@ -49,25 +49,25 @@ jobs: E2E_NO_PERF_OFFER: '1' MODE: quick steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: path: core - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: repository: ${{ fromJSON(inputs.refs).scenes.repo }} ref: ${{ fromJSON(inputs.refs).scenes.ref }} path: scenes - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: repository: ${{ fromJSON(inputs.refs).modules.repo }} ref: ${{ fromJSON(inputs.refs).modules.ref }} path: modules - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: repository: ${{ fromJSON(inputs.refs).packs.repo }} ref: ${{ fromJSON(inputs.refs).packs.ref }} path: packs - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version-file: core/.nvmrc cache: npm @@ -81,7 +81,7 @@ jobs: # the module zips the game suites install (MODULES_REPO) (cd modules && npm ci --no-audit --no-fund && node scripts/pack.cjs --all --force) # confirm: what the required shards left red (or unrun), from their artifacts - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 if: inputs.set == 'confirm' with: pattern: battery-required-* @@ -99,7 +99,7 @@ jobs: POOL_TPSCENE=$S/examples/pool-party/scene.tpscene node scripts/ci/battery.cjs run --set ${{ inputs.set }} ${{ inputs.set == 'confirm' && '--from "$W/prev"' || '' }} --shard ${{ matrix.shard }} --of ${{ matrix.of }} --serve --port 5173 \ --deadline ${{ inputs.deadline }} --out "$W/battery-out" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 if: always() with: name: battery-${{ inputs.set }}-${{ matrix.shard }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7f1c18e6e..bf373fba9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -33,8 +33,8 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -57,8 +57,8 @@ jobs: check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -92,8 +92,8 @@ jobs: scene-lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -103,12 +103,12 @@ jobs: run: | echo "scenes=$(node -p "require('./perf/budgets.json').scenes.ref")" >> "$GITHUB_OUTPUT" echo "scenes_repo=$(node -p "require('./perf/budgets.json').scenes.repo")" >> "$GITHUB_OUTPUT" - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: repository: ${{ steps.refs.outputs.scenes_repo }} ref: ${{ steps.refs.outputs.scenes }} path: .perf-deps/scenes - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: repository: theprototype-app/packs path: .perf-deps/packs @@ -123,7 +123,7 @@ jobs: supply-chain: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: SBOM (syft, SPDX JSON) uses: anchore/sbom-action@v0.24.3 with: @@ -145,8 +145,8 @@ jobs: unit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -160,8 +160,8 @@ jobs: # PRs in a row; until then a red here is a signal to read, not a block. continue-on-error: true steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -204,8 +204,8 @@ jobs: if: ${{ !inputs.battery }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -229,7 +229,7 @@ jobs: npm run e2e -- a11y-axe a11y-reader || rc=$? [ -f /tmp/axe/axe-after.md ] && cat /tmp/axe/axe-after.md >> "$GITHUB_STEP_SUMMARY" exit $rc - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 if: always() with: name: axe-report @@ -248,10 +248,10 @@ jobs: if: github.event_name == 'pull_request' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -284,7 +284,7 @@ jobs: node tests/e2e/tools/kit-diff.cjs diff /tmp/kit/base /tmp/kit/head /tmp/kit/diff; rc=$? cat /tmp/kit/diff/report.md >> "$GITHUB_STEP_SUMMARY" exit $rc - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 if: always() && steps.base.outputs.has_kit == '1' with: name: kit-diff diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml index 6cf76543f..eda2763f2 100644 --- a/.github/workflows/deps.yml +++ b/.github/workflows/deps.yml @@ -53,13 +53,13 @@ jobs: battery: ${{ steps.policy.outputs.battery }} gate_ci: ${{ github.event_name != 'pull_request' || github.base_ref == 'deps' }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 - name: dependabot metadata id: meta if: github.event.pull_request.user.login == 'dependabot[bot]' - uses: dependabot/fetch-metadata@v2 + uses: dependabot/fetch-metadata@v3 - name: policy id: policy env: @@ -115,7 +115,7 @@ jobs: playwright: ${{ steps.pw.outputs.version }} refs: ${{ steps.refs.outputs.refs }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - id: plan run: node scripts/ci/battery.cjs plan - id: pw @@ -166,8 +166,8 @@ jobs: if: ${{ !cancelled() && needs.e2e-optional.result != 'skipped' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v7 + - uses: actions/download-artifact@v8 with: pattern: battery-optional-* path: battery @@ -186,13 +186,13 @@ jobs: issues: write statuses: write steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v7 + - uses: actions/download-artifact@v8 if: needs.scope.outputs.battery == 'true' with: pattern: battery-required-* path: battery - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 if: needs.scope.outputs.battery == 'true' && needs.confirm.result != 'skipped' with: pattern: battery-confirm-* @@ -217,7 +217,7 @@ jobs: fi if [ "$BATTERY" = true ] && [ "$E2E" = skipped ]; then exit 1; fi if [ "$GATE_CI" = true ] && { [ "$CI" != success ] || { [ "$BATTERY" = true ] && [ "$PERF" != success ]; }; }; then exit 1; fi - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: battery-durations path: battery/durations.json diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2d2d9f86c..fda1f295e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,8 +17,8 @@ jobs: needs: budget runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version-file: .nvmrc cache: npm @@ -64,7 +64,7 @@ jobs: - name: zip the build run: cd build && zip -r "../theprototype-${GITHUB_REF_NAME}.zip" . - - uses: softprops/action-gh-release@v2 + - uses: softprops/action-gh-release@v3 with: generate_release_notes: true files: |