IBX-11778: Updated GitHub Actions workflows to latest versions - #263
Merged
Merged
Conversation
actions/checkout moved from v2/v3 to v7, and actions/github-script from v6 to v9. The old majors run on Node runtimes GitHub has deprecated, so they warn today and will eventually stop working. Every call site only passes fetch-depth and ref, and checkout still defaults persist-credentials to true, so the git push steps in ci.yaml, flex-cleanup.yaml and the two callable workflows keep working. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Replaced ubuntu-latest, and the inconsistently cased Ubuntu-latest in the callable workflows, with the explicit image version the bundle-generator skeleton uses. Pinning the image keeps runs reproducible and avoids surprise migrations whenever GitHub repoints the -latest alias. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
|
Thanks for contribution! 🎉 To test the changes please execute: before executing the recipes. |
alongosz
requested review from
Steveb-p,
ViniTou,
barw4,
bnowak,
ciastektk,
konradoboza,
mikadamczyk,
tbialcz and
wiewiurdp
September 9, 2026 12:37
konradoboza
approved these changes
Sep 9, 2026
ViniTou
approved these changes
Sep 9, 2026
ciastektk
approved these changes
Sep 9, 2026
mikadamczyk
approved these changes
Sep 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.



Description:
Workflows here still used
actions/checkout@v2/@v3andactions/github-script@v6. All of them run on Node runtimes GitHub hasdeprecated, so every run warns about it.
actions/checkoutto@v7(ci.yaml,flex-cleanup.yaml,callable-flex-update.yaml,callable-flex-update-archived.yaml)actions/github-scriptto@v9(bot.yaml)runs-ononubuntu-26.04, the image thebundle-generator skeleton uses. While at it, fixed the
Ubuntu-latestcasing in the two callable workflows.
Left
ibexa/gh-workflows/.github/workflows/expand-team-reviewers.yml@maininreviewers.yamlalone, that one tracks trunk on purpose.Checked that
checkout@v7still defaultspersist-credentialstotrue, sothe
git push origin -f flex/...steps inci.yaml,flex-cleanup.yamlandboth callables keep their credentials. No renamed inputs affect these call
sites either, all we pass is
fetch-depthandref.Note
callable-flex-update.yamlandcallable-flex-update-archived.yamlarecopies of the
symfony/recipesoriginals (there's a comment at the top ofeach). The bumps make them diverge from upstream, which is the point, we
don't sync them automatically.
For QA:
No QA required.
ci.yamlruns on this PR, so the updatedcheckoutgetsexercised right here.
flex-update.ymlonly fires on push tomaster, so thetwo callable workflows are worth an eye after merge.
Documentation:
No documentation required.
🤖 Generated with Claude Code