5252
5353 steps :
5454 - name : Harden the runner (Audit all outbound calls)
55- uses : step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
55+ uses : step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
5656 with :
5757 egress-policy : audit
5858
6262 fetch-depth : 0
6363 submodules : true
6464
65- - uses : actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3 .0
65+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4 .0
6666 env :
6767 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
6868 with :
8080 exit 1
8181 fi
8282 BASE_TAG=$(printf '%s\n' "${DESCRIBE}" | grep -Eo '^v[0-9]+\.[0-9]+\.[0-9]+')
83+ # For non-release builds, increment the patch version by 1 (e.g. 1.64.1 -> 1.64.2)
84+ NEXT_VERSION="$(printf '%s\n' "${BASE_TAG}" | awk -F. '{ printf "%d.%d.%d", $1, $2, $3 + 1 }')"
8385 PR_QUALIFIER=$(printf '%s\n' "${DESCRIBE}" | grep -Eo '\-g[0-9a-f]+$' || true)
8486 BRANCH_QUALIFIER=$(printf '%s\n' "${DESCRIBE}" | grep -Eo '[0-9]+\-g[0-9a-f]+$' || true)
8587 SAFE_REF_NAME="${{ github.ref_name }}"
@@ -91,13 +93,13 @@ jobs:
9193 npm version --allow-same-version --no-git-tag-version --new-version "${TAG#v}"
9294 ;;
9395 pull_request)
94- npm version -s --allow-same-version --no-git-tag-version --new-version "${BASE_TAG#v }"
95- PR_VERSION="${BASE_TAG#v}-pr${{ github.event.number }}${PR_QUALIFIER }"
96+ npm version -s --allow-same-version --no-git-tag-version --new-version "${NEXT_VERSION }"
97+ PR_VERSION="${NEXT_VERSION}-${BRANCH_QUALIFIER }"
9698 npm version --no-git-tag-version --new-version "${PR_VERSION}" && echo "Prerelease version set succeeded" || echo "Prerelease version set FAILED with exit code $?"
9799 ;;
98100 *)
99- npm version -s --allow-same-version --no-git-tag-version --new-version "${BASE_TAG#v }"
100- PR_VERSION="${BASE_TAG#v }-${SAFE_REF_NAME}${BRANCH_QUALIFIER}"
101+ npm version -s --allow-same-version --no-git-tag-version --new-version "${NEXT_VERSION }"
102+ PR_VERSION="${NEXT_VERSION }-${SAFE_REF_NAME}${BRANCH_QUALIFIER}"
101103 npm version --no-git-tag-version --new-version "${PR_VERSION}" && echo "Prerelease version set succeeded" || echo "Prerelease version set FAILED with exit code $?"
102104 ;;
103105 esac
@@ -133,7 +135,7 @@ jobs:
133135
134136 - name : Upload dist
135137 if : runner.os == 'Linux'
136- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
138+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
137139 with :
138140 name : dist
139141 path : |
@@ -154,13 +156,13 @@ jobs:
154156 git commit -m "Update CHANGELOG.md after release [skip ci]"
155157 git push
156158
157- - uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
159+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
158160 if : runner.os == 'Linux'
159161 with :
160162 name : test-coverage
161163 path : ./coverage
162164
163- - uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
165+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
164166 with :
165167 name : test-report-${{ matrix.target }}
166168 path : ./test-report.html
@@ -189,7 +191,7 @@ jobs:
189191 packages : read
190192 steps :
191193 - name : Harden the runner (Audit all outbound calls)
192- uses : step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
194+ uses : step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
193195 with :
194196 egress-policy : audit
195197
@@ -198,7 +200,7 @@ jobs:
198200
199201 - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
200202
201- - uses : actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3 .0
203+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4 .0
202204 env :
203205 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
204206 with :
@@ -222,10 +224,10 @@ jobs:
222224 npm run package -- --target ${{ matrix.target }}
223225
224226 - name : Upload package
225- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
227+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
226228 with :
227- name : vscode-cmsis-debugger- ${{ matrix.target }}
228- path : ./*.vsix
229+ path : ./* ${{ matrix.target }}*.vsix
230+ archive : false
229231 retention-days : 1
230232
231233 validate :
@@ -250,7 +252,7 @@ jobs:
250252 packages : read
251253 steps :
252254 - name : Harden the runner (Audit all outbound calls)
253- uses : step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
255+ uses : step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
254256 with :
255257 egress-policy : audit
256258
@@ -259,7 +261,7 @@ jobs:
259261
260262 - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
261263
262- - uses : actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3 .0
264+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4 .0
263265 env :
264266 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
265267 with :
@@ -273,7 +275,7 @@ jobs:
273275 - name : Download vsix package
274276 uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
275277 with :
276- pattern : vscode-cmsis-debugger-${{ matrix.target }}
278+ pattern : vscode-cmsis-debugger-${{ matrix.target }}-*.vsix
277279
278280 - name : Validate VSIX contents
279281 shell : bash
@@ -291,14 +293,14 @@ jobs:
291293 contents : write # for softprops/action-gh-release to create a GitHub release
292294 steps :
293295 - name : Harden the runner (Audit all outbound calls)
294- uses : step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
296+ uses : step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
295297 with :
296298 egress-policy : audit
297299
298300 - name : Download packages
299301 uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
300302 with :
301- pattern : vscode-cmsis-debugger-*
303+ pattern : vscode-cmsis-debugger-*.vsix
302304
303305 - name : Download coverage report
304306 uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
@@ -321,7 +323,7 @@ jobs:
321323 working-directory : test-coverage
322324
323325 - name : Attach packages
324- uses : softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
326+ uses : softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
325327 with :
326328 files : |
327329 **/*.vsix
0 commit comments