-
Notifications
You must be signed in to change notification settings - Fork 13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update CI actions due to node.js v12 deprecation #568
Conversation
Signed-off-by: Sophie Frasnedo <sophie.frasnedo@rte-france.com>
.github/workflows/maven.yml
Outdated
@@ -18,12 +18,12 @@ jobs: | |||
|
|||
steps: | |||
- name: Checkout sources | |||
uses: actions/checkout@v2.3.4 | |||
uses: actions/checkout@v4 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you need to put the hash corresponding to the release, as the tag might be changed by an attacker
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You can look at powsybl/powsybl-core#2821 for an example
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok, thanks for pointing it out. I took more recent version too, following the example in core:
- 4.1.1 for actions/checkout instead of 4
- 4.0.0 for actions/setup-java instead of 3
Signed-off-by: Sophie Frasnedo <sophie.frasnedo@rte-france.com>
Signed-off-by: Sophie Frasnedo <sophie.frasnedo@rte-france.com>
Kudos, SonarCloud Quality Gate passed! |
Please check if the PR fulfills these requirements
Does this PR already have an issue describing the problem?
No but similar to this PR on powsybl-core : powsybl/powsybl-core#2766
What kind of change does this PR introduce?
What is the current behavior?
CI was using setup-java v2 and checkout v2.3.4
What is the new behavior (if this is a feature change)?
CI is now using setup-java v3 and checkout v4