Skip to content

IBX-11778: Updated GitHub Actions workflows to latest versions - #263

Merged
alongosz merged 2 commits into
masterfrom
ibx-11778-update-gha-workflows
Sep 9, 2026
Merged

alongosz merged 2 commits into
masterfrom
ibx-11778-update-gha-workflows

Conversation

@alongosz

@alongosz alongosz commented Sep 9, 2026

Copy link
Copy Markdown
Member
🎫 Issue IBX-11778

Description:

Workflows here still used actions/checkout@v2/@v3 and
actions/github-script@v6. All of them run on Node runtimes GitHub has
deprecated, so every run warns about it.

  • [GHA] Bumped actions/checkout to @v7 (ci.yaml, flex-cleanup.yaml,
    callable-flex-update.yaml, callable-flex-update-archived.yaml)
  • [GHA] Bumped actions/github-script to @v9 (bot.yaml)
  • [GHA] Standardized runs-on on ubuntu-26.04, the image the
    bundle-generator skeleton uses. While at it, fixed the Ubuntu-latest
    casing in the two callable workflows.

Left ibexa/gh-workflows/.github/workflows/expand-team-reviewers.yml@main in
reviewers.yaml alone, that one tracks trunk on purpose.

Checked that checkout@v7 still defaults persist-credentials to true, so
the git push origin -f flex/... steps in ci.yaml, flex-cleanup.yaml and
both callables keep their credentials. No renamed inputs affect these call
sites either, all we pass is fetch-depth and ref.

Note

callable-flex-update.yaml and callable-flex-update-archived.yaml are
copies of the symfony/recipes originals (there's a comment at the top of
each). The bumps make them diverge from upstream, which is the point, we
don't sync them automatically.

For QA:

No QA required. ci.yaml runs on this PR, so the updated checkout gets
exercised right here. flex-update.yml only fires on push to master, so the
two callable workflows are worth an eye after merge.

Documentation:

No documentation required.

🤖 Generated with Claude Code

alongosz and others added 2 commits September 9, 2026 13:03
actions/checkout moved from v2/v3 to v7, and actions/github-script from
v6 to v9. The old majors run on Node runtimes GitHub has deprecated, so
they warn today and will eventually stop working.

Every call site only passes fetch-depth and ref, and checkout still
defaults persist-credentials to true, so the git push steps in ci.yaml,
flex-cleanup.yaml and the two callable workflows keep working.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Replaced ubuntu-latest, and the inconsistently cased Ubuntu-latest in
the callable workflows, with the explicit image version the
bundle-generator skeleton uses. Pinning the image keeps runs
reproducible and avoids surprise migrations whenever GitHub repoints
the -latest alias.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@sonarqubecloud

sonarqubecloud Bot commented Sep 9, 2026

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown

Thanks for contribution! 🎉

To test the changes please execute:

composer config extra.symfony.endpoint https://api.github.com/repos/ibexa/recipes-dev/contents/index.json?ref=flex/pull-263

before executing the recipes.

@alongosz
alongosz merged commit b142152 into master Sep 9, 2026
12 checks passed
@alongosz
alongosz deleted the ibx-11778-update-gha-workflows branch September 9, 2026 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants