Skip to content

MAINT: Bump GitHub action dependencies and remove issues-helper - #315

Merged
VeckoTheGecko merged 8 commits into
mainfrom
update-gha-deps
Oct 27, 2026
Merged

VeckoTheGecko merged 8 commits into
mainfrom
update-gha-deps

Conversation

@VeckoTheGecko

@VeckoTheGecko VeckoTheGecko commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

This PR updates GitHub actions dependencies, and removes the reliance on the actions-cool/issues-helper which got compromised and has since been deleted by GitHub.

I haven't tested the updated linkcheck.yml action, so it would need to be something to keep an eye on I think. @erikvansebille do you feel that this link checking action is helpful? Should I spin up a Pixi task to quickly do this linkchecking with Lychee (hence also providing a local option).

This PR is mainly LLM driving with Claude Opus 5.5 .

The actions-cool/issues-helper repository is no longer accessible on
GitHub (access blocked), so the action can no longer be resolved.
Update the link tracking issue directly via the gh CLI instead, keeping
the same behaviour (replace body and set open/closed state).
v2 breaking changes addressed:
- the step now fails on broken links by default; set fail: false so the
  subsequent tracking-issue steps still run
- the exit code moved from the lychee_exit_code env var to the
  exit_code step output; read steps.lychee.outputs.exit_code instead
 Node 24 runtime; v5/v6 changed automatic package-manager caching, but this workflow already sets cache: 'npm' explicitly, so no input changes are needed.
 Node 24 runtime (v5) and ESM migration (v6); no input changes.
 Node 24 runtime (v5/v6), ESM + optional archive input (v7); no input changes.
 v4 excludes dotfiles from the artifact by default; the static export only contains .gitkeep placeholders, so nothing needed is dropped.
 Node 24 runtime; no input changes.
Node 24 runtime (requires runner >= 2.327.1); no input changes affect this repo.
@VeckoTheGecko
VeckoTheGecko merged commit 2a36a9c into main Oct 27, 2026
3 checks passed
@VeckoTheGecko
VeckoTheGecko deleted the update-gha-deps branch October 27, 2026 10:00
@VeckoTheGecko

Copy link
Copy Markdown
Contributor Author

Merging so that I can continue working on security hardening (adding Zizmor, like what we have for Parcels). Please let me know what you think about all this @erikvansebille

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant