Repository navigation
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message. To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook. |
desrosj
changed the title
wp/5.7 branch Actions: update actions to latestwp/5.7 branch Actions: Update GitHub Actions to their latest versions
ntsekouras
left a comment
ntsekouras
left a comment
There was a problem hiding this comment.
LGTM, thanks! This fixes the jobs that were auto-failing because of the retired actions/cache v2 and upload-artifact v2, so every job runs again, and pins the actions that were using mutable tags.
They now fail at npm ci because of the react-native-screens git dependency, which is fixed in AG, and Compressed Size is fixed in BO.
Moving to upload-artifact v7 brings the artifact name conflicts for the e2e shards, which I think should be a follow-up row on top of the stack: #84853 (comment)
Part of #82936.
What?
Bumps every third-party GitHub Action pin used on
wp/5.7to its current latest release, and pins each one to a full-length commit SHA with a# vX.Y.Zcomment instead of a mutable tag.actions/checkoutv2v7.0.1actions/cachev2v6.1.0actions/setup-nodev1v7.0.0actions/upload-artifactv2v7.0.1preactjs/compressed-size-actionv22.10.0Why?
Every one of these actions was pinned to a mutable major-version tag, meaning the action's actual behavior can change out from under this frozen, security-maintenance-only branch at any time, without a corresponding commit here to review or revert. Pinning to a full-length commit SHA makes every action call fully reproducible and auditable.
Use of AI Tools
This PR was created by Claude Code under my supervision. All code should be treated as AI-produced and not yet reviewed by a human until this PR is marked Ready for Review.