Skip to content

Upgrade GitHub Actions to latest versions, migrate golangci-lint conf… - #274

Merged
theghost5800 merged 3 commits into
masterfrom
updateGHActions
Oct 28, 2026
Merged

theghost5800 merged 3 commits into
masterfrom
updateGHActions

Conversation

@theghost5800

Copy link
Copy Markdown
Contributor

…ig to v2

Bump all GitHub Actions steps to their latest stable versions, pinned to exact commit SHAs with version comments for supply-chain security. Migrate .golangci.yml to v2 format required by golangci-lint-action v9.

Changes per workflow:

  • codeql.yml: checkout v4→v7.0.1, codeql-action/* v4→v4.39.1
  • pull-request-build.yml: checkout v3→v7.0.1, setup-go v3→v7.0.0
  • sonar-scan.yml: checkout v4.2.2→v7.0.1, setup-go v3→v7.0.0,
    golangci-lint-action v6.1.1→v9.3.0,
    sonarqube-scan-action v5.1.0→v8.3.0
  • check-commit-message.yml: github-script v6→v9.0.0

Config change:

  • .golangci.yml: added version: 2 (required for golangci-lint CLI v2)

All SHAs verified against the upstream GitHub repositories.

JIRA:LMCROSSITXSADEPLOY-3714

@theghost5800
theghost5800 force-pushed the updateGHActions branch 2 times, most recently from 58aa1a4 to 0609148 Compare October 23, 2026 10:45
…ig to v2

Bump all GitHub Actions steps to their latest stable versions, pinned
to exact commit SHAs with version comments for supply-chain security.
Migrate .golangci.yml to v2 format required by golangci-lint-action v9.

Changes per workflow:
- codeql.yml:             checkout v4→v7.0.1, codeql-action/* v4→v4.39.1
- pull-request-build.yml: checkout v3→v7.0.1, setup-go v3→v7.0.0
- sonar-scan.yml:         checkout v4.2.2→v7.0.1, setup-go v3→v7.0.0,
                          golangci-lint-action v6.1.1→v9.3.0,
                          sonarqube-scan-action v5.1.0→v8.3.0
- check-commit-message.yml: github-script v6→v9.0.0

Config change:
- .golangci.yml: added `version: 2` (required for golangci-lint CLI v2)
- pull-request-build.yml: download go 1.27.2 as this is minimum required version now
- sonar-scan.yml: download go 1.27.2 as this is minimum required version now

All SHAs verified against the upstream GitHub repositories.

JIRA:LMCROSSITXSADEPLOY-3714
Yavor16
Yavor16 previously approved these changes Oct 26, 2026
Yavor16
Yavor16 previously approved these changes Oct 26, 2026
ikasarov
ikasarov previously approved these changes Oct 27, 2026
@ikasarov

Copy link
Copy Markdown
Contributor

We don't really release the plugin with the same frequency as the other projects, so the cron job here might be made once a month or a similar less frequent interval

@theghost5800
theghost5800 dismissed stale reviews from ikasarov and Yavor16 via a2ca250 October 28, 2026 11:33
@theghost5800
theghost5800 merged commit 1e22bab into master Oct 28, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants