Repository navigation
ci: bump GitHub Actions to latest majors - #16
Merged
Merged
Conversation
Update all pinned actions across ci.yml, release.yml, and prepare-release.yml: - actions/checkout v4 -> v7 - actions/upload-artifact v4 -> v7 - actions/download-artifact v4 -> v8 - actions/github-script v7 -> v9 - softprops/action-gh-release v2 -> v3 - peter-evans/create-pull-request v6 -> v8 These majors are primarily Node 24 runtime migrations, already supported on GitHub-hosted runners. Behavior changes reviewed: download-artifact v8 errors on digest mismatch (previously warned), and checkout v7 blocks fork-PR checkouts for pull_request_target / workflow_run triggers, which these workflows do not use.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
GitHub Actions — updated every pinned action in
ci.yml,release.yml, andprepare-release.ymlto its latest major version:Rust version — declared
rust-version = "1.85"(MSRV) in Cargo.toml. Edition 2024 requires 1.85, and the full locked dependency tree compiles and passes all 60 tests on 1.85. CI continues to track latest stable viadtolnay/rust-toolchain@stable.Why
The pinned action versions were several majors behind. The new majors are primarily Node 24 runtime migrations, which GitHub-hosted runners (all this repo uses) already support. The MSRV declaration lets cargo warn crates.io consumers on older toolchains instead of failing with confusing compile errors.
Notes for review
Release notes for each major jump were reviewed. The only real behavior changes do not affect these workflows:
pull_request_target/workflow_runtriggers, which these workflows don't use.git-tokentobranch-token; the tap-update job only usestoken, so it's unaffected.Verified locally on Rust 1.98.0 (current stable):
cargo fmt --check,cargo clippy -- -D warnings, and all 60 tests pass. Also verifiedcargo test --lockedpasses on 1.85.