-
Notifications
You must be signed in to change notification settings - Fork 64
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update GitHub Actions to use @v4 to prevent deprecation issues #428
Conversation
Signed-off-by: Yerzhaisang Taskali <[email protected]>
Signed-off-by: Yerzhaisang Taskali <[email protected]>
Signed-off-by: Yerzhaisang Taskali <[email protected]>
Signed-off-by: Yerzhaisang Taskali <[email protected]>
All workflows have been successfully upgraded to use @v4 for their GitHub Actions. This ensures compatibility with GitHub’s deprecation of @V3 versions, improving security and future-proofing the workflows. Exception:
|
.github/dependabot.yml
Outdated
- directory: / | ||
open-pull-requests-limit: 3 | ||
package-ecosystem: pip | ||
- package-ecosystem: "pip" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why do we need to change this? pip
to "pip"
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There isn’t a significant difference. Wrapping pip in quotes ensures the value is explicitly interpreted as a string, which helps prevent potential parsing errors across different YAML parsers. Let me know if you’d like me to revert this change.
Signed-off-by: Yerzhaisang Taskali <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. Thanks for the contribution!
Description
Issues Resolved
#426
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.