diff --git a/.github/actions/build-upstream/action.yml b/.github/actions/build-upstream/action.yml index 958298471f..e9089b66e9 100644 --- a/.github/actions/build-upstream/action.yml +++ b/.github/actions/build-upstream/action.yml @@ -36,7 +36,7 @@ runs: # Cache NAPI bindings and Rust CLI binary (the slow parts, especially on Windows) - name: Restore NAPI binding cache id: cache-restore - uses: actions/cache/restore@94b89442628ad1d101e352b7ee38f30e1bef108e # v5 + uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: | packages/cli/binding/*.node @@ -151,7 +151,7 @@ runs: - name: Save NAPI binding cache if: steps.cache-restore.outputs.cache-hit != 'true' - uses: actions/cache/save@94b89442628ad1d101e352b7ee38f30e1bef108e # v5 + uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: | packages/cli/binding/*.node diff --git a/.github/actions/download-rolldown-binaries/action.yml b/.github/actions/download-rolldown-binaries/action.yml index edc3afb847..faea59be4f 100644 --- a/.github/actions/download-rolldown-binaries/action.yml +++ b/.github/actions/download-rolldown-binaries/action.yml @@ -50,7 +50,7 @@ runs: fi env: GITHUB_TOKEN: ${{ inputs.github-token }} - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: ${{ inputs.upload == 'true' }} with: name: rolldown-binaries diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 186959b3a6..55599ff134 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -230,7 +230,7 @@ jobs: - name: Install docs dependencies run: pnpm -C docs install --frozen-lockfile - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: rolldown-binaries path: ./rolldown/packages/rolldown/src @@ -678,7 +678,7 @@ jobs: - name: Install docs dependencies run: pnpm -C docs install --frozen-lockfile - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: rolldown-binaries path: ./rolldown/packages/rolldown/src @@ -722,7 +722,7 @@ jobs: - uses: oxc-project/setup-node@4c26e7cb3605b6bdef5450dacd02c434b10fd8ba # v1.2.0 - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: rolldown-binaries path: ./rolldown/packages/rolldown/src @@ -801,7 +801,7 @@ jobs: - uses: oxc-project/setup-node@4c26e7cb3605b6bdef5450dacd02c434b10fd8ba # v1.2.0 - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: rolldown-binaries path: ./rolldown/packages/rolldown/src diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml index 6c0fd944e3..c235918d79 100644 --- a/.github/workflows/e2e-test.yml +++ b/.github/workflows/e2e-test.yml @@ -94,7 +94,7 @@ jobs: - uses: oxc-project/setup-node@4c26e7cb3605b6bdef5450dacd02c434b10fd8ba # v1.2.0 - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: rolldown-binaries path: ./rolldown/packages/rolldown/src @@ -117,7 +117,7 @@ jobs: ls -la tmp/tgz - name: Upload tgz artifacts - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vite-plus-packages-${{ matrix.os }} path: tmp/tgz/ @@ -362,13 +362,13 @@ jobs: shell: powershell run: Set-MpPreference -DisableRealtimeMonitoring $true - - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ matrix.project.node-version }} package-manager-cache: false - name: Download vite-plus packages - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: vite-plus-packages-${{ matrix.os }} path: tmp/tgz diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 40b044c331..8b8f87e79f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -114,14 +114,14 @@ jobs: target: ${{ matrix.settings.target }} - name: Upload Vite+ native artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vite-plus-native-${{ matrix.settings.target }} path: ./packages/cli/binding/*.node if-no-files-found: error - name: Upload Rust CLI binary artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vite-global-cli-${{ matrix.settings.target }} path: | @@ -132,7 +132,7 @@ jobs: - name: Upload installer binary artifact (Windows only) if: contains(matrix.settings.target, 'windows') - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vp-setup-${{ matrix.settings.target }} path: ./target/${{ matrix.settings.target }}/release/vp-setup.exe @@ -144,7 +144,7 @@ jobs: rm ./packages/core/dist/**/*.node - name: Upload core dist - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: ${{ matrix.settings.target == 'x86_64-unknown-linux-gnu' }} with: name: core @@ -152,7 +152,7 @@ jobs: if-no-files-found: error - name: Upload cli dist - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: ${{ matrix.settings.target == 'x86_64-unknown-linux-gnu' }} with: name: cli @@ -160,7 +160,7 @@ jobs: if-no-files-found: error - name: Upload cli docs - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: ${{ matrix.settings.target == 'x86_64-unknown-linux-gnu' }} with: name: cli-docs @@ -168,7 +168,7 @@ jobs: if-no-files-found: error - name: Upload LICENSE files - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: ${{ matrix.settings.target == 'x86_64-unknown-linux-gnu' }} with: name: licenses @@ -192,7 +192,7 @@ jobs: - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 - - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version-file: .node-version package-manager-cache: false @@ -203,34 +203,34 @@ jobs: run: pnpm install - name: Download cli dist - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: path: packages/cli/dist pattern: cli merge-multiple: true - name: Download cli docs - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: path: packages/cli/docs pattern: cli-docs merge-multiple: true - name: Download cli binding - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: path: packages/cli/artifacts pattern: vite-plus-native-* - name: Download core dist - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: path: packages/core/dist pattern: core merge-multiple: true - name: Download LICENSE files - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: path: packages pattern: licenses @@ -243,13 +243,13 @@ jobs: upload: 'false' - name: Download Rust CLI binaries - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: path: rust-cli-artifacts pattern: vite-global-cli-* - name: Download installer binaries (Windows) - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: path: installer-artifacts pattern: vp-setup-* diff --git a/.github/workflows/test-vp-create.yml b/.github/workflows/test-vp-create.yml index 53e3e53a5f..4eaffef64d 100644 --- a/.github/workflows/test-vp-create.yml +++ b/.github/workflows/test-vp-create.yml @@ -79,7 +79,7 @@ jobs: - uses: oxc-project/setup-node@4c26e7cb3605b6bdef5450dacd02c434b10fd8ba # v1.2.0 - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: rolldown-binaries path: ./rolldown/packages/rolldown/src @@ -101,7 +101,7 @@ jobs: ls -la tmp/tgz - name: Upload tgz artifacts - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vite-plus-packages path: tmp/tgz/ @@ -160,12 +160,12 @@ jobs: steps: - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2 - - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: 24 - name: Download vite-plus packages - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: vite-plus-packages path: tmp/tgz