Repository navigation
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Size Change: 0 B Total Size: 1.46 MB ℹ️ View Unchanged
|
|
The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message. To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook. |
867906f to
afad1cc
Compare
afad1cc to
ada6989
Compare
ada6989 to
dd42df3
Compare
|
Size Change: 0 B Total Size: 1.46 MB ℹ️ View Unchanged
|
wp/6.3 branch Actions: Update third-party Actions to latestwp/6.3 branch Actions: Update GitHub Actions to their latest versions
ntsekouras
left a comment
There was a problem hiding this comment.
LGTM, thanks! This fixes the jobs that were auto-failing because of the retired actions/cache v3 and upload-artifact/download-artifact v3, so Create Block (ubuntu/windows), Mobile and the flaky tests report pass now, with no Node.js 20 warnings left. The remaining failures aren't related to the actions (Node 14 on arm64 macOS, Composer advisories, Playwright install) and are fixed further up the stack (all pass in #85135).
Moving to upload-artifact v7 brings the artifact name conflicts for the e2e shards, which I think should be a follow-up row on top of the stack: #84853 (comment)
Part of #82930.
What?
Bumps every third-party GitHub Action used on
wp/6.3to its current release, pinned to a full-length commit SHA:actions/checkoutv3.5.0v7.0.1actions/setup-nodev3.6.0v7.0.0actions/upload-artifactv3.1.1/v3.1.2v7.0.1actions/download-artifact@v3(unpinned tag)v8.0.1actions/cachev3.3.1v6.1.0ramsey/composer-installv2.2.04.0.0shivammathur/setup-phpv2.24.02.37.2preactjs/compressed-size-actionv2.5.02.10.0Every occurrence in the
.githubtree was updated, including the composite./.github/setup-nodeaction's own separate pins foractions/setup-nodeandactions/cache. Noactions/upload-artifact/mergesub-action reference exists on this branch.Why?
These actions were pinned to versions that are multiple major releases behind current, several years old. Staying on such old versions leaves workflows exposed to bugs and security issues already fixed upstream, and risks an action being removed from the Actions marketplace entirely, which would break CI outright with no warning.
Use of AI Tools
This PR was created by Claude Code under my supervision. All code should be treated as AI-produced and not yet reviewed by a human until this PR is marked Ready for Review.