From 099014069c14a9d1f8d97e0b7c0eaf73454794a5 Mon Sep 17 00:00:00 2001 From: katsugtgz Date: Mon, 26 Oct 2026 07:31:22 +0700 Subject: [PATCH] chore: update CI workflow actions to current majors --- .github/workflows/change-log-check.yml | 2 +- .../ci-nightly-performance-testing.yaml | 6 +++--- .github/workflows/ci.yml | 20 +++++++++---------- .github/workflows/e2e.yml | 16 +++++++-------- .github/workflows/generate-files.yml | 2 +- .github/workflows/reusable-e2e.yml | 8 ++++---- .github/workflows/sast-linters.yml | 14 ++++++------- .github/workflows/semgrep.yml | 6 +++--- .github/workflows/zetachain-sec-checks.yml | 6 +++--- 9 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.github/workflows/change-log-check.yml b/.github/workflows/change-log-check.yml index 85b68b70e6..f03c394e67 100644 --- a/.github/workflows/change-log-check.yml +++ b/.github/workflows/change-log-check.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/ci-nightly-performance-testing.yaml b/.github/workflows/ci-nightly-performance-testing.yaml index 500ba8f443..2fcf7cd7cf 100644 --- a/.github/workflows/ci-nightly-performance-testing.yaml +++ b/.github/workflows/ci-nightly-performance-testing.yaml @@ -19,10 +19,10 @@ jobs: env: endpoint_to_test: "http://localhost:9545" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: "INSTALL:NODEJS" - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: node-version: 20 @@ -102,7 +102,7 @@ jobs: artillery report report.json --output artillery_report.html - name: "UPLOAD:REPORT" - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: artillery-report diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 513c345ffa..13e48ba5cd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -24,15 +24,15 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 15 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: go-version: '1.23' - name: Test - uses: nick-fields/retry@v3 + uses: nick-fields/retry@v4 with: timeout_minutes: 20 max_attempts: 2 @@ -43,9 +43,9 @@ jobs: make test-coverage - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@v4.0.1 + uses: codecov/codecov-action@v7.1.1 with: - file: coverage.out + files: coverage.out token: ${{ secrets.CODECOV_TOKEN }} slug: zeta-chain/node @@ -61,21 +61,21 @@ jobs: ./zetacored version - name: Upload zetacored - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: zetacored path: ~/go/bin/zetacored retention-days: 30 - name: Upload zetaclientd - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: zetaclientd path: ~/go/bin/zetaclientd retention-days: 30 - name: Upload zetae2e - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: zetae2e path: ~/go/bin/zetae2e @@ -92,9 +92,9 @@ jobs: # it will still be check in the merge queue in this case if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'zeta-chain/node' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: go-version: '1.23' - name: go get node diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index f529a68b22..3c4499b8ed 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -39,27 +39,27 @@ jobs: outputs: image: ${{ steps.build.outputs.metadata && fromJson(steps.build.outputs.metadata)['image.name'] || '' }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 # configure docker to use the containerd snapshotter # so that we can use the buildkit cache - uses: depot/use-containerd-snapshotter-action@v1 - name: Login to Docker Hub registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_HUB_USERNAME }} password: ${{ secrets.DOCKER_HUB_READ_ONLY }} - name: Login to github docker registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.repository_owner }} password: ${{ secrets.GITHUB_TOKEN }} - name: Restore go cache - uses: actions/cache@v4 + uses: actions/cache@v6 id: restore-go-cache with: path: | @@ -86,7 +86,7 @@ jobs: # build zetanode with cache options - name: Build zetanode for cache id: build - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 env: CACHE_FROM_CONFIG: "type=registry,ref=ghcr.io/${{ github.repository }}:buildcache" CACHE_TO_CONFIG: "type=registry,ref=ghcr.io/${{ github.repository }}:buildcache,mode=max" @@ -135,7 +135,7 @@ jobs: steps: # use api rather than event context to avoid race conditions (label added after push) - id: matrix-conditionals - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: script: | const getPrLabels = async (pull_number) => { @@ -354,7 +354,7 @@ jobs: if: ${{ !cancelled() }} steps: - name: Send slack message with results - uses: actions/github-script@v7 + uses: actions/github-script@v9 if: ${{ github.event_name == 'schedule' || (github.event_name == 'push' && needs.e2e.result == 'failure') }} env: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_CI_ALERTS }} @@ -396,7 +396,7 @@ jobs: }); - name: Add MERGE_FAILED label if merge queue failed - uses: actions/github-script@v7 + uses: actions/github-script@v9 if: ${{ github.event_name == 'merge_group' && needs.e2e.result == 'failure' }} with: script: | diff --git a/.github/workflows/generate-files.yml b/.github/workflows/generate-files.yml index 9b75d00a67..5d9f37be20 100644 --- a/.github/workflows/generate-files.yml +++ b/.github/workflows/generate-files.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - uses: bufbuild/buf-setup-action@v1 with: diff --git a/.github/workflows/reusable-e2e.yml b/.github/workflows/reusable-e2e.yml index 49c077385e..83c256f024 100644 --- a/.github/workflows/reusable-e2e.yml +++ b/.github/workflows/reusable-e2e.yml @@ -38,17 +38,17 @@ jobs: env: ZETANODE_IMAGE: ${{ inputs.zetanode-image }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Login to Docker Hub registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'zeta-chain/node' with: username: ${{ secrets.DOCKER_HUB_USERNAME }} password: ${{ secrets.DOCKER_HUB_READ_ONLY }} - name: Login to github docker registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.repository_owner }} @@ -81,7 +81,7 @@ jobs: - name: Upload Logs On Failure if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: ${{ inputs.make-target }}-docker-logs path: /tmp/logs.txt diff --git a/.github/workflows/sast-linters.yml b/.github/workflows/sast-linters.yml index 574465cb64..1d734d6e25 100644 --- a/.github/workflows/sast-linters.yml +++ b/.github/workflows/sast-linters.yml @@ -21,7 +21,7 @@ jobs: GOTOOLCHAIN: auto steps: - name: Checkout Source - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -37,17 +37,17 @@ jobs: GO111MODULE: on steps: - name: Checkout Source - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: go-version: '1.23' - name: Run golangci-lint - uses: golangci/golangci-lint-action@v8 + uses: golangci/golangci-lint-action@v9 with: version: v2.1.6 skip-cache: true @@ -59,7 +59,7 @@ jobs: GO111MODULE: on steps: - name: Checkout Source - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -105,7 +105,7 @@ jobs: - name: Report nosec uses - uses: mshick/add-pr-comment@v2 + uses: mshick/add-pr-comment@v3 if: env.nosec_detected == 1 with: message: | @@ -120,7 +120,7 @@ jobs: Pay extra attention to the way `#nosec` is being used in the files listed above. - name: Add Label - uses: actions/github-script@v6 + uses: actions/github-script@v9 if: env.nosec_detected == 1 with: script: | diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 4d053915cf..a7d90c3f6f 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -21,9 +21,9 @@ jobs: github.actor != 'dependabot[bot]' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'zeta-chain/node') steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Checkout semgrep-utilities repo - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: repository: zeta-chain/semgrep-utilities path: semgrep-utilities @@ -37,6 +37,6 @@ jobs: - run: python semgrep-utilities/utilities/github-sarif-helper/src/semgrep-json-to-sarif.py --json semgrep-findings.json --sarif semgrep-github.sarif - name: Upload SARIF file for GitHub Advanced Security Dashboard - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: semgrep-github.sarif diff --git a/.github/workflows/zetachain-sec-checks.yml b/.github/workflows/zetachain-sec-checks.yml index 528a1cda7f..333c5538fa 100644 --- a/.github/workflows/zetachain-sec-checks.yml +++ b/.github/workflows/zetachain-sec-checks.yml @@ -20,12 +20,12 @@ jobs: language: [ 'go' ] steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} packs: zeta-chain/protocol-security-codeql - name: Analyze - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4