Skip to content

chore(ci): update GitHub Actions and pin to full commit SHAs - #908

Open
noritaka1166 wants to merge 1 commit into
forwardemail:masterfrom
noritaka1166:update-and-pin-ci-actions
Open

noritaka1166 wants to merge 1 commit into
forwardemail:masterfrom
noritaka1166:update-and-pin-ci-actions

Conversation

@noritaka1166

@noritaka1166 noritaka1166 commented Oct 3, 2026 •

Copy link
Copy Markdown
Contributor

Description

Update the GitHub Actions used in CI to their latest releases and pin each action to a full commit SHA:

  • actions/checkout: v4 → v7.0.1
  • actions/setup-node: v4 → v7.0.0
  • codecov/codecov-action: v3 → v7.1.1

SHA pinning prevents changes to upstream tags from unexpectedly changing the code executed in CI. Version comments are included alongside each SHA for readability.

The existing Node.js test matrix and CI commands remain unchanged.

Validation

  • YAML syntax validation passed.
  • All three action references use full 40-character commit SHAs.

Codecov compatibility

The Codecov update changes the upload implementation and authentication behavior. Tokenless uploads are supported for fork pull requests, but uploads on regular pushes depend on the repository's Codecov settings.

Before merging, please verify that coverage uploads succeed on regular pushes. A successful CI run alone does not confirm this, since fail_ci_if_error defaults to false.

Checklist

  • I have ensured my pull request is not behind the main or master branch of the original repository.
  • I have rebased all commits where necessary so that reviewing this pull request can be done without having to merge it first.
  • I have written a commit message that passes commitlint linting.
  • I have ensured that my code changes pass linting tests.
  • I have ensured that my code changes pass unit tests.
  • I have described my pull request and the reasons for code changes along with context if necessary.

@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.44%. Comparing base (d40ca7e) to head (bd81419).
⚠️ Report is 21 commits behind head on master.
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files
@@            Coverage Diff             @@
##           master     #908      +/-   ##
==========================================
- Coverage   94.89%   94.44%   -0.45%     
==========================================
  Files           5        5              
  Lines         372      432      +60     
==========================================
+ Hits          353      408      +55     
- Misses         19       24       +5     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants