From d5106822259f2084de33d72a8c475397df758547 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Oct 2026 21:11:07 +0000 Subject: [PATCH 1/2] chore(deps): bump the github-actions group with 3 updates Bumps the github-actions group with 3 updates: [actions/setup-node](https://github.com/actions/setup-node), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/public-manual.yml | 2 +- .github/workflows/release.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/public-manual.yml b/.github/workflows/public-manual.yml index ab8cf0e4..f9487a9b 100644 --- a/.github/workflows/public-manual.yml +++ b/.github/workflows/public-manual.yml @@ -33,7 +33,7 @@ jobs: ASTRO_TELEMETRY_DISABLED: '1' steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' cache: npm diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7f19d02f..aa726461 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -114,7 +114,7 @@ jobs: Remove-Item -LiteralPath $SmokeRoot -Recurse -Force -ErrorAction SilentlyContinue } - name: Upload Windows CLI - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: windows-cli path: release-cli/incodex-windows-x64.exe @@ -262,7 +262,7 @@ jobs: verify_runtime_pointer "$ARM_SMOKE_HOME" verify_runtime_pointer "$X64_SMOKE_HOME" - name: Download Windows CLI - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: windows-cli path: release-cli From d27d93f0fc2cf98c111185b441cd5f106541d841 Mon Sep 17 00:00:00 2001 From: singkia Date: Wed, 21 Oct 2026 00:11:32 +0800 Subject: [PATCH 2/2] test(ci): align pinned artifact actions after dependency upgrade --- tests/release-cli.test.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/release-cli.test.ts b/tests/release-cli.test.ts index 104c61dd..ebea7891 100644 --- a/tests/release-cli.test.ts +++ b/tests/release-cli.test.ts @@ -135,10 +135,10 @@ describe("release CLI artifacts", () => { expect(builder).toContain("--version"); expect(builder).toContain("--help"); expect(releaseYml).toContain( - "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1", + "actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2", ); expect(releaseYml).toContain( - "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1", + "actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2", ); });