Repository navigation
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
b524ec0 to
1e385b4
Compare
|
The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message. To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook. |
desrosj
changed the title
wp/5.8 branch Actions: update disabled third-party GitHub Actionswp/5.8 branch Actions: Update GitHub Actions to their latest versions
ntsekouras
left a comment
ntsekouras
left a comment
There was a problem hiding this comment.
LGTM, thanks! This fixes the jobs that were auto-failing because of the retired actions/cache v2 and upload-artifact v2, so every job runs again. They now fail at npm ci because of the react-native-screens git dependency, which is fixed in AG.
Moving to upload-artifact v7 brings the artifact name conflicts for the e2e shards, which I think should be a follow-up row on top of the stack: #84853 (comment)
Part of #82935.
What?
Bumps every third-party GitHub Action pin used by
wp/5.8's remaining workflows to its current latest release, pinned by full-length commit SHA with a# vX.Y.Zversion comment.actions/checkoutv2.3.4v7.0.1actions/setup-nodev2.1.5v7.0.0actions/cachev2.1.6v6.1.0actions/upload-artifactv2.2.2v7.0.1preactjs/compressed-size-actionv2.1.02.10.0This branch's
.github/tree has no composite actions (no.github/setup-node/action.ymlor similar) and doesn't useshivammathur/setup-phporramsey/composer-installat all — this era of the workflow files predates both, so there was nothing to check there beyond the five actions above.Why?
Pinning to old, several-major-versions-behind commits leaves this frozen branch's CI running unpatched, long-unmaintained action code, and pinning by full SHA (rather than a floating major-version tag) keeps the pin auditable and immune to a retagged release.
Use of AI Tools
This PR was created by Claude Code under my supervision. All code should be treated as AI-produced and not yet reviewed by a human until this PR is marked Ready for Review.