You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by er...@apache.org on 2026/06/30 07:58:17 UTC
(cordova-ios) 01/02: chore(workflow): update actions & cleanup
This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch chore/update-ci
in repository https://gitbox.apache.org/repos/asf/cordova-ios.git
commit 3b713e9d62cf03ed52426bfd116c4264d6f67e11
Author: Erisu <er...@apache.org>
AuthorDate: Tue Jun 30 16:55:54 2026 +0900
chore(workflow): update actions & cleanup
* Use latest actions
* Move version number comment's inline
* Add node-26 to test matrix
* Set checkout persist-credentials to false
---
.github/workflows/ci.yml | 26 +++++++++++++++-----------
.github/workflows/docs.yml | 13 ++++++++-----
.github/workflows/draft-release.yml | 3 ++-
.github/workflows/release-audit.yml | 10 +++++-----
4 files changed, 30 insertions(+), 22 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a8e7839e..fcbdd5d8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -45,7 +45,10 @@ jobs:
CDV_IOS_SIM: ${{ matrix.os == 'macos-26' && 'iPhone 17' || 'iPhone 16e' }}
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
@@ -58,7 +61,7 @@ jobs:
npm --version
xcodebuild -version
- - uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+ - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
with:
languages: javascript
queries: security-and-quality
@@ -80,10 +83,9 @@ jobs:
env:
CI: true
- - uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+ - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
- # v4.6.0
- - uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
+ - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
if: success()
with:
name: ${{ runner.os }} node.js ${{ matrix.node-version }} (darwin)
@@ -95,11 +97,14 @@ jobs:
runs-on: ${{ matrix.os }}
strategy:
matrix:
- node-version: [20.x, 22.x, 24.x]
+ node-version: [20.x, 22.x, 24.x, 26.x]
os: [ubuntu-latest, windows-latest]
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
@@ -111,7 +116,7 @@ jobs:
node --version
npm --version
- - uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+ - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
with:
languages: javascript
queries: security-and-quality
@@ -130,10 +135,9 @@ jobs:
env:
CI: true
- - uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+ - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
- # v4.6.0
- - uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238
+ - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
if: success()
with:
name: ${{ runner.os }} node.js ${{ matrix.node-version }} (non-darwin)
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 73f92631..dea195a1 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -34,16 +34,19 @@ concurrency:
jobs:
deploy:
- runs-on: macos-15
+ runs-on: macos-26
environment:
name: github-pages
url: ${{ steps.deployment.outputs.page_url }}
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- id: pages
- uses: actions/configure-pages@v5
+ uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
- name: Build DocC
working-directory: ./CordovaLib
@@ -56,9 +59,9 @@ jobs:
echo "<script>window.location.href += \"/documentation/cordova\"</script>" > docs/index.html;
- - uses: actions/upload-pages-artifact@v4
+ - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
with:
path: 'CordovaLib/docs'
- id: deployment
- uses: actions/deploy-pages@v4
+ uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
diff --git a/.github/workflows/draft-release.yml b/.github/workflows/draft-release.yml
index a04a9bda..9f11b553 100644
--- a/.github/workflows/draft-release.yml
+++ b/.github/workflows/draft-release.yml
@@ -31,10 +31,11 @@ jobs:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
fetch-depth: 1
+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:
node-version: 24
diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml
index d3d7067c..3156baa9 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,13 +34,13 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
fetch-depth: 1
- # Check license headers (v2.0.0)
- - uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
+ # Check license headers
+ - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd # v3.0.0
# Setup environment with node
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
@@ -51,8 +51,8 @@ jobs:
- name: npm install packages
run: npm ci
- # Check node package licenses (v2.0.1)
- - uses: erisu/license-checker-action@99cffa11264fe545fd0baa6c13bca5a00ae608f2
+ # Check node package licenses
+ - uses: erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
with:
license-config: 'licence_checker.yml'
include-asf-category-a: true
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org