From 3b86f72a34e002b85d9d75c281c7e53adaeea7e7 Mon Sep 17 00:00:00 2001 From: Julien Danjou Date: Mon, 28 Sep 2026 19:08:24 +0200 Subject: [PATCH] ci: run GitHub-hosted jobs on ubuntu-26.04 Pin all three hosted jobs to `ubuntu-26.04`, so the OS each job runs on is a choice made in this repository rather than one GitHub makes when `ubuntu-latest` moves to 26.04 (between 2026-10-19 and 2026-11-19): - ci.yaml `test` (the Python 3.10-3.14 matrix): ubuntu-latest -> 26.04 - ci.yaml `semgrep`: ubuntu-24.04 -> 26.04 - release.yml `pypi-publish`: ubuntu-latest -> 26.04 Nothing is left behind. Every job gets Python from setup-python, and actions/python-versions ships 26.04 builds for all five matrix versions (3.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7), so the image's system python3 moving to 3.14 does not reach them. `semgrep` runs in its own container, so the host only supplies Docker. No Node, CMake or system python3 is used, and there is no actionlint here. The required check names do not include the OS, so .mergify.yml is unchanged. `pypi-publish` only runs on a published release and is not exercised by this PR; it runs the same checkout, setup-python and `poetry build` steps as the `test` matrix, which is the proof here. MRGFY-9720 Co-Authored-By: Claude Opus 5.5 Change-Id: Ie1144f885aed2126057556dc37831b9c479045e2 --- .github/workflows/ci.yaml | 4 ++-- .github/workflows/release.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index fc84cb7..990b7e2 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -11,7 +11,7 @@ jobs: test: name: "Test with Python ${{ matrix.python-version }}" timeout-minutes: 5 - runs-on: ubuntu-latest + runs-on: ubuntu-26.04 strategy: matrix: python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"] @@ -31,7 +31,7 @@ jobs: poetry build semgrep: timeout-minutes: 20 - runs-on: ubuntu-24.04 + runs-on: ubuntu-26.04 container: image: semgrep/semgrep:1.138.0 steps: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 90b381a..693ff5e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -7,7 +7,7 @@ on: jobs: pypi-publish: name: Upload release to PyPI - runs-on: ubuntu-latest + runs-on: ubuntu-26.04 environment: release permissions: id-token: write