Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update GitHub Actions to use @v4 to prevent deprecation issues #428

Merged
merged 5 commits into from
Dec 30, 2024

Conversation

Yerzhaisang
Copy link
Contributor

Description

  • Updated all workflow files to replace @V3 with @v4
  • Ensured artifact actions comply with GitHub's deprecation policy
  • Added Dependabot configuration for automatic GitHub Actions updates

Issues Resolved

#426

Check List

  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Yerzhaisang Taskali <[email protected]>
Signed-off-by: Yerzhaisang Taskali <[email protected]>
Signed-off-by: Yerzhaisang Taskali <[email protected]>
@Yerzhaisang
Copy link
Contributor Author

All workflows have been successfully upgraded to use @v4 for their GitHub Actions. This ensures compatibility with GitHub’s deprecation of @V3 versions, improving security and future-proofing the workflows.

Exception:

  • dangoslen/changelog-enforcer remains at @V3 because the latest available version is v3, and no v4 release currently exists.

- directory: /
open-pull-requests-limit: 3
package-ecosystem: pip
- package-ecosystem: "pip"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why do we need to change this? pip to "pip" ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There isn’t a significant difference. Wrapping pip in quotes ensures the value is explicitly interpreted as a string, which helps prevent potential parsing errors across different YAML parsers. Let me know if you’d like me to revert this change.

Signed-off-by: Yerzhaisang Taskali <[email protected]>
Copy link
Collaborator

@ylwu-amzn ylwu-amzn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks for the contribution!

@dhrubo-os dhrubo-os merged commit 013f274 into opensearch-project:main Dec 30, 2024
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants