From 9ca30991a8ab53062408c9e86d433a87148367e4 Mon Sep 17 00:00:00 2001 From: Keith Lee Date: Mon, 13 Apr 2026 08:15:52 +0100 Subject: [PATCH 1/2] [ci] upgrade checkout@v4 to v6 and setup-python@v5 to v6 Migrate away from deprecated Node.js 20 GitHub Actions before the June 2026 forced migration deadline. Closes #490 --- .github/workflows/audit.yml | 37 +++++++++++++++++++ .github/workflows/build_and_test_cpp.yml | 2 +- .github/workflows/build_and_test_python.yml | 4 +- .github/workflows/build_and_test_rust.yml | 4 +- .../check_license_and_formatting.yml | 2 +- .github/workflows/release_python.yml | 6 +-- .github/workflows/release_rust.yml | 2 +- 7 files changed, 47 insertions(+), 10 deletions(-) create mode 100644 .github/workflows/audit.yml diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml new file mode 100644 index 00000000..6908aa71 --- /dev/null +++ b/.github/workflows/audit.yml @@ -0,0 +1,37 @@ +# Licensed to the Apache Software Foundation (ASF) under one +# or more contributor license agreements. See the NOTICE file +# distributed with this work for additional information +# regarding copyright ownership. The ASF licenses this file +# to you under the Apache License, Version 2.0 (the +# "License"); you may not use this file except in compliance +# with the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, +# software distributed under the License is distributed on an +# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +# KIND, either express or implied. See the License for the +# specific language governing permissions and limitations +# under the License. + +name: Security Audit + +on: + schedule: + - cron: '0 8 * * 1' # Every Monday at 08:00 UTC + workflow_dispatch: + +jobs: + audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v6 + + - name: Install cargo-deny + uses: taiki-e/install-action@v2 + with: + tool: cargo-deny@0.14.22 + + - name: Check advisories + run: cargo deny check advisories \ No newline at end of file diff --git a/.github/workflows/build_and_test_cpp.yml b/.github/workflows/build_and_test_cpp.yml index a091d08d..7d30b8f7 100644 --- a/.github/workflows/build_and_test_cpp.yml +++ b/.github/workflows/build_and_test_cpp.yml @@ -44,7 +44,7 @@ jobs: env: FLUSS_TEST_CLUSTER_BIN: ${{ github.workspace }}/target/debug/fluss-test-cluster steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Install protoc run: sudo apt-get update && sudo apt-get install -y protobuf-compiler diff --git a/.github/workflows/build_and_test_python.yml b/.github/workflows/build_and_test_python.yml index c843fec6..69202c03 100644 --- a/.github/workflows/build_and_test_python.yml +++ b/.github/workflows/build_and_test_python.yml @@ -47,10 +47,10 @@ jobs: env: FLUSS_TEST_CLUSTER_BIN: ${{ github.workspace }}/target/debug/fluss-test-cluster steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: ${{ matrix.python }} diff --git a/.github/workflows/build_and_test_rust.yml b/.github/workflows/build_and_test_rust.yml index a4fe12b6..9b763b3e 100644 --- a/.github/workflows/build_and_test_rust.yml +++ b/.github/workflows/build_and_test_rust.yml @@ -48,7 +48,7 @@ jobs: - ubuntu-latest - macos-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Install protoc run: | @@ -75,7 +75,7 @@ jobs: timeout-minutes: 60 runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Install protoc run: sudo apt-get update && sudo apt-get install -y protobuf-compiler diff --git a/.github/workflows/check_license_and_formatting.yml b/.github/workflows/check_license_and_formatting.yml index 1b83b749..1108c20a 100644 --- a/.github/workflows/check_license_and_formatting.yml +++ b/.github/workflows/check_license_and_formatting.yml @@ -37,7 +37,7 @@ jobs: check-license-and-formatting: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Check License Header uses: apache/skywalking-eyes/header@v0.6.0 diff --git a/.github/workflows/release_python.yml b/.github/workflows/release_python.yml index d61213e5..9aaaf6f3 100644 --- a/.github/workflows/release_python.yml +++ b/.github/workflows/release_python.yml @@ -39,14 +39,14 @@ jobs: version-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - uses: ./.github/actions/verify-tag-version sdist: runs-on: ubuntu-latest needs: [version-check] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Install protoc run: sudo apt-get update && sudo apt-get install -y protobuf-compiler @@ -75,7 +75,7 @@ jobs: - { os: ubuntu-latest, target: "x86_64" } - { os: ubuntu-latest, target: "aarch64", manylinux: "manylinux_2_28" } steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Install protoc (Linux) if: runner.os == 'Linux' diff --git a/.github/workflows/release_rust.yml b/.github/workflows/release_rust.yml index 7ff7c0b7..946b2b26 100644 --- a/.github/workflows/release_rust.yml +++ b/.github/workflows/release_rust.yml @@ -34,7 +34,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - uses: ./.github/actions/verify-tag-version From 1ab2cf6832ac1a7286fc0c5bcd7c892dc812401b Mon Sep 17 00:00:00 2001 From: Keith Lee Date: Mon, 13 Apr 2026 08:18:00 +0100 Subject: [PATCH 2/2] [ci] remove unrelated audit.yml from this PR --- .github/workflows/audit.yml | 37 ------------------------------------- 1 file changed, 37 deletions(-) delete mode 100644 .github/workflows/audit.yml diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml deleted file mode 100644 index 6908aa71..00000000 --- a/.github/workflows/audit.yml +++ /dev/null @@ -1,37 +0,0 @@ -# Licensed to the Apache Software Foundation (ASF) under one -# or more contributor license agreements. See the NOTICE file -# distributed with this work for additional information -# regarding copyright ownership. The ASF licenses this file -# to you under the Apache License, Version 2.0 (the -# "License"); you may not use this file except in compliance -# with the License. You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, -# software distributed under the License is distributed on an -# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY -# KIND, either express or implied. See the License for the -# specific language governing permissions and limitations -# under the License. - -name: Security Audit - -on: - schedule: - - cron: '0 8 * * 1' # Every Monday at 08:00 UTC - workflow_dispatch: - -jobs: - audit: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v6 - - - name: Install cargo-deny - uses: taiki-e/install-action@v2 - with: - tool: cargo-deny@0.14.22 - - - name: Check advisories - run: cargo deny check advisories \ No newline at end of file