Upgrade GitHub Actions to latest versions #25

Closed
salmanmkc wants to merge 1 commits from upgrade-github-actions-node24-general into main
salmanmkc commented 2026-02-15 17:10:59 +08:00 (Migrated from github.com)

Summary

Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.

Changes

Action Old Version(s) New Version Release Files
anchore/scan-action v3 v7 Release security-scan.yml
azure/setup-kubectl v3 v4 Release cd.yml
codecov/codecov-action v3 v5 Release ci.yml
docker/build-push-action v5 v6 Release ci.yml, security-scan.yml
github/codeql-action/upload-sarif v2 v4 Release ci.yml, security-scan.yml
peaceiris/actions-gh-pages v3 v4 Release ci.yml

Why upgrade?

Keeping GitHub Actions up to date ensures:

  • Security: Latest security patches and fixes
  • Features: Access to new functionality and improvements
  • Compatibility: Better support for current GitHub features
  • Performance: Optimizations and efficiency improvements

Security Note

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references.

Testing

These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.

## Summary Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates. ## Changes | Action | Old Version(s) | New Version | Release | Files | |--------|---------------|-------------|---------|-------| | `anchore/scan-action` | [`v3`](https://github.com/anchore/scan-action/releases/tag/v3) | [`v7`](https://github.com/anchore/scan-action/releases/tag/v7) | [Release](https://github.com/anchore/scan-action/releases/tag/v7) | security-scan.yml | | `azure/setup-kubectl` | [`v3`](https://github.com/azure/setup-kubectl/releases/tag/v3) | [`v4`](https://github.com/azure/setup-kubectl/releases/tag/v4) | [Release](https://github.com/azure/setup-kubectl/releases/tag/v4) | cd.yml | | `codecov/codecov-action` | [`v3`](https://github.com/codecov/codecov-action/releases/tag/v3) | [`v5`](https://github.com/codecov/codecov-action/releases/tag/v5) | [Release](https://github.com/codecov/codecov-action/releases/tag/v5) | ci.yml | | `docker/build-push-action` | [`v5`](https://github.com/docker/build-push-action/releases/tag/v5) | [`v6`](https://github.com/docker/build-push-action/releases/tag/v6) | [Release](https://github.com/docker/build-push-action/releases/tag/v6) | ci.yml, security-scan.yml | | `github/codeql-action/upload-sarif` | [`v2`](https://github.com/github/codeql-action/upload-sarif/releases/tag/v2) | [`v4`](https://github.com/github/codeql-action/upload-sarif/releases/tag/v4) | [Release](https://github.com/github/codeql-action/upload-sarif/releases/tag/v4) | ci.yml, security-scan.yml | | `peaceiris/actions-gh-pages` | [`v3`](https://github.com/peaceiris/actions-gh-pages/releases/tag/v3) | [`v4`](https://github.com/peaceiris/actions-gh-pages/releases/tag/v4) | [Release](https://github.com/peaceiris/actions-gh-pages/releases/tag/v4) | ci.yml | ## Why upgrade? Keeping GitHub Actions up to date ensures: - **Security**: Latest security patches and fixes - **Features**: Access to new functionality and improvements - **Compatibility**: Better support for current GitHub features - **Performance**: Optimizations and efficiency improvements ### Security Note Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references. ### Testing These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.
TacoDark (Migrated from github.com) requested changes 2026-02-15 21:02:45 +08:00
TacoDark (Migrated from github.com) left a comment

This pull request is heavily AI generated. Please use real proper skills.

This pull request is heavily AI generated. Please use real proper skills.

Pull request closed

Sign in to join this conversation.