Skip to content

chore: bump action versions (to node 24 compatible ones)#2137

Merged
cdietrich merged 2 commits into
mainfrom
cd-bump-action-versions
Apr 15, 2026
Merged

chore: bump action versions (to node 24 compatible ones)#2137
cdietrich merged 2 commits into
mainfrom
cd-bump-action-versions

Conversation

@cdietrich

Copy link
Copy Markdown
Contributor

No description provided.

@cdietrich cdietrich marked this pull request as ready for review April 15, 2026 05:34
@cdietrich cdietrich requested a review from msujew April 15, 2026 05:34
Comment thread .github/workflows/generate-sbom.yml Outdated

- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we use pinned versions everywhere?

@cdietrich cdietrich changed the title chore: bump action versions chore: bump action versions (to node 24 compatible ones) Apr 15, 2026
@cdietrich

Copy link
Copy Markdown
Contributor Author

see also eclipse-csi/workflows#1

@msujew msujew left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think pinning the official actions makes a difference. It's mostly about third-party actions, where pinning can prevent malicious attacks.

@cdietrich cdietrich merged commit 5f64e59 into main Apr 15, 2026
8 checks passed
@cdietrich cdietrich deleted the cd-bump-action-versions branch April 16, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants