diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml index 9ca614a88..e3a77f7ce 100644 --- a/.github/workflows/codeql-analysis.yaml +++ b/.github/workflows/codeql-analysis.yaml @@ -4,7 +4,6 @@ on: push: branches: [ develop-v1, develop-v*, release-v* ] pull_request: - # The branches below must be a subset of the branches above branches: [ develop-v1 ] schedule: - cron: '30 3 * * 1' @@ -12,7 +11,9 @@ on: jobs: analyze: name: Analyze + runs-on: ubuntu-latest + permissions: actions: read contents: read @@ -25,7 +26,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v7 - name: Setup .NET uses: actions/setup-dotnet@v4 @@ -34,26 +35,16 @@ jobs: 3.1.x 6.0.x 8.0.x + 10.0.x # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@v3 - - # â„šī¸ Command-line programs to run using the OS shell. - # 📚 https://git.io/JvXDl - - # âœī¸ If the Autobuild fails above, remove it and uncomment the following three lines - # and modify them (or add more) to build your code if your project - # uses a compiled language - - #- run: | - # make bootstrap - # make release + uses: github/codeql-action/autobuild@v4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index beba077db..4b055520b 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -8,11 +8,16 @@ on: jobs: deploy: runs-on: ubuntu-latest + permissions: contents: write + steps: - - uses: actions/checkout@v3 - - uses: actions/setup-python@v5 + - uses: actions/checkout@v7 + with: + lfs: true + + - uses: actions/setup-python@v7 with: python-version: 3.x diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml index d16218482..7bea2eb0c 100644 --- a/.github/workflows/pipeline.yaml +++ b/.github/workflows/pipeline.yaml @@ -15,7 +15,7 @@ on: bake-version: required: false type: string - default: '0.37.51' + default: '0.41.56' environment: required: false type: string @@ -27,7 +27,11 @@ on: jobs: build: runs-on: - - ubuntu-22.04 + - ubuntu-24.04 + + concurrency: + group: ${{ github.workflow }}-${{ github.head_ref || github.ref }} + cancel-in-progress: ${{ !contains(github.ref, 'release') }} environment: name: ${{ inputs.environment }} @@ -84,15 +88,18 @@ jobs: with: stack-version: 6.8.3 - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 + with: + lfs: true - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v6 with: dotnet-version: | 3.1.x 6.0.x 8.0.x + 10.0.x # Yes, EventFlow has a custom built build tool. If you are reading this # you might have a better idea of how to do it alternatively, if so, @@ -113,7 +120,7 @@ jobs: --destination="nuget>github,nuget,release>github" - name: Upload NuGet packages - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: success() with: name: packages @@ -121,7 +128,7 @@ jobs: if-no-files-found: error - name: Upload test results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: success() || failure() with: name: test-results diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml index 2875eb722..61c169d5b 100644 --- a/.github/workflows/stale.yaml +++ b/.github/workflows/stale.yaml @@ -14,6 +14,7 @@ permissions: jobs: stale: runs-on: ubuntu-latest + steps: - uses: actions/stale@v8 with: diff --git a/.github/workflows/test-reports.yaml b/.github/workflows/test-reports.yaml deleted file mode 100644 index 2e9570cfc..000000000 --- a/.github/workflows/test-reports.yaml +++ /dev/null @@ -1,24 +0,0 @@ -name: test reports - -on: - workflow_run: - workflows: - - 'pull-requests' - - 'release' - types: - - completed - -jobs: - report: - runs-on: ubuntu-latest - permissions: - id-token: write - contents: read - checks: write - steps: - - uses: dorny/test-reporter@v1 - with: - artifact: test-results - name: Test results - path: '**/*.trx' - reporter: dotnet-trx