Skip to content

ci: Update GitHub Actions and add Dependabot configuration #405

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kraenhansen merged 5 commits into from
Aug 12, 2026
+89 −53
Merged

ci: Update GitHub Actions and add Dependabot configuration #405

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
d518066
ci: update GitHub Actions off the deprecated Node.js 20 runtime
claude Aug 12, 2026
ce819d7
ci: let Dependabot keep the GitHub Actions up to date
claude Aug 12, 2026
6542e15
ci: label Dependabot pull requests
claude Aug 12, 2026
3c44a0d
ci: re-run checks for newly applied labels
claude Aug 12, 2026
9a929ff
ci: hold pnpm/action-setup at v5 for the self-hosted runner
claude Aug 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 20 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
version: 2

updates:
# Keeps the actions used by .github/workflows in step with their upstream
# releases. Without this, majors drift until a runner deprecation (such as the
# Node.js 20 removal) turns the drift into a warning on every run.
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
# One pull request for the whole set: these are updated together anyway, and
# a separate pull request per action would drown the queue.
groups:
github-actions:
patterns:
- "*"
commit-message:
prefix: "ci"
labels:
- Dependencies
95 changes: 54 additions & 41 deletions .github/workflows/check.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,14 +25,27 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

# Two actions below are deliberately held back from their newest release, both
# because of the Node.js 20 deprecation:
#
# - pnpm/action-setup is pinned to v5, not v6. v6 rewrote the self-installer to
# shell out to `npm ci`, and our self-hosted Linux runner has no npm on PATH
# beyond the runner's own Node.js 24 externals — where it is broken. v5 is a
# Node.js 24 action too, and still bootstraps from a bundled pnpm, so it
# clears the deprecation without the new npm dependency. Move to v6 once that
# runner has a working npm.
# - hendrikmuhs/ccache-action is pinned to an exact patch because its floating
# v1 / v1.2 tags still point at a Node.js 20 build. Float again once upstream
# moves them to >= v1.2.22.

jobs:
lint:
name: Lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -41,18 +54,18 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
# Set up JDK and Android SDK only because we need weak-node-api, to build ferric-example and to run the linting
# TODO: Remove this once we have a way to run linting without building the native code
- name: Set up JDK 17
uses: actions/setup-java@v3
uses: actions/setup-java@v5
with:
java-version: "17"
distribution: "temurin"
- name: Setup Android SDK
uses: android-actions/setup-android@v3
uses: android-actions/setup-android@v4
with:
packages: tools platform-tools ndk;${{ env.NDK_VERSION }}
- run: rustup target add x86_64-linux-android
Expand All @@ -79,9 +92,9 @@ jobs:
runs-on: ${{ matrix.runner }}
name: Unit tests (${{ matrix.runner }})
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -90,16 +103,16 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
- name: Set up JDK 17
uses: actions/setup-java@v4
uses: actions/setup-java@v5
with:
java-version: "17"
distribution: "temurin"
- name: Setup Android SDK
uses: android-actions/setup-android@v3
uses: android-actions/setup-android@v4
with:
packages: tools platform-tools ndk;${{ env.NDK_VERSION }}
- run: rustup target add x86_64-linux-android aarch64-linux-android armv7-linux-androideabi i686-linux-android aarch64-apple-ios-sim
Expand All @@ -118,9 +131,9 @@ jobs:
runs-on: ${{ matrix.runner }}
name: Weak Node-API tests (${{ matrix.runner }})
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -129,7 +142,7 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
- run: pnpm install
Expand All @@ -147,9 +160,9 @@ jobs:
name: Test app (iOS)
runs-on: macos-latest
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -158,16 +171,16 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
- name: Set up JDK 17
uses: actions/setup-java@v3
uses: actions/setup-java@v5
with:
java-version: "17"
distribution: "temurin"
- name: Setup Android SDK
uses: android-actions/setup-android@v3
uses: android-actions/setup-android@v4
with:
packages: tools platform-tools ndk;${{ env.NDK_VERSION }}
- run: rustup target add x86_64-linux-android aarch64-linux-android armv7-linux-androideabi i686-linux-android aarch64-apple-ios-sim
Expand All @@ -191,9 +204,9 @@ jobs:
name: Test app (macOS)
runs-on: macos-latest
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -202,11 +215,11 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
- name: Set up JDK 17
uses: actions/setup-java@v3
uses: actions/setup-java@v5
with:
java-version: "17"
distribution: "temurin"
Expand Down Expand Up @@ -239,9 +252,9 @@ jobs:
name: Test app (Android)
runs-on: ubuntu-self-hosted
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -250,16 +263,16 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
- name: Set up JDK 17
uses: actions/setup-java@v4
uses: actions/setup-java@v5
with:
java-version: "17"
distribution: "temurin"
- name: Setup Android SDK
uses: android-actions/setup-android@v3
uses: android-actions/setup-android@v4
with:
packages: tools platform-tools ndk;${{ env.NDK_VERSION }} cmake;${{ env.CMAKE_VERSION }}
- run: rustup target add x86_64-linux-android aarch64-linux-android armv7-linux-androideabi i686-linux-android aarch64-apple-ios-sim
Expand All @@ -275,7 +288,7 @@ jobs:
echo "REACT_NATIVE_OVERRIDE_HERMES_DIR=$REACT_NATIVE_OVERRIDE_HERMES_DIR" >> $GITHUB_ENV
working-directory: apps/test-app
# - name: Setup Android Emulator cache
# uses: actions/cache@v4
# uses: actions/cache@v6
# id: avd-cache
# with:
# path: |
Expand Down Expand Up @@ -320,7 +333,7 @@ jobs:
kill $LOGCAT_PID || true
- name: Upload device logs
if: always()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: emulator-logcat
path: apps/test-app/emulator-logcat.txt
Expand All @@ -329,9 +342,9 @@ jobs:
name: Test ferric Apple triplets
runs-on: macos-latest
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -340,11 +353,11 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
- name: Set up JDK 17
uses: actions/setup-java@v3
uses: actions/setup-java@v5
with:
java-version: "17"
distribution: "temurin"
Expand All @@ -363,7 +376,7 @@ jobs:
run: lipo -info ferric_example.apple.node/*/libferric_example.framework/libferric_example > lipo-info.txt
working-directory: packages/ferric-example
- name: Upload lipo info
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: lipo-info
path: packages/ferric-example/lipo-info.txt
Expand Down
27 changes: 15 additions & 12 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,9 @@ on:
# refreshing the "Version Packages" pull request until someone approves. The
# two jobs that must not overlap carry their own groups instead.

# pnpm/action-setup is pinned to v5 and hendrikmuhs/ccache-action to an exact
# patch, both for Node.js 20 deprecation reasons. See the note in check.yml.

jobs:
# changesets/action's sub-actions split the "what should happen?" decision out
# of the doing, which is what lets only the publish half sit behind the "main"
Expand All @@ -35,9 +38,9 @@ jobs:
outputs:
mode: ${{ steps.select.outputs.mode }}
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand Down Expand Up @@ -67,9 +70,9 @@ jobs:
contents: write # the version branch
pull-requests: write # the "Version Packages" pull request
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -94,9 +97,9 @@ jobs:
contents: write # git tags and GitHub releases
id-token: write # NPM trusted publishing
steps:
- uses: actions/checkout@v4
- uses: pnpm/action-setup@v4
- uses: actions/setup-node@v6
- uses: actions/checkout@v7
- uses: pnpm/action-setup@v5
- uses: actions/setup-node@v7
with:
node-version: lts/krypton
cache: pnpm
Expand All @@ -105,16 +108,16 @@ jobs:
with:
clang-format: true
- name: ccache
uses: hendrikmuhs/ccache-action@v1.2
uses: hendrikmuhs/ccache-action@v1.2.23
with:
key: ${{ github.job }}-${{ runner.os }}
- name: Set up JDK 17
uses: actions/setup-java@v3
uses: actions/setup-java@v5
with:
java-version: "17"
distribution: "temurin"
- name: Setup Android SDK
uses: android-actions/setup-android@v3
uses: android-actions/setup-android@v4
with:
packages: tools platform-tools ndk;${{ env.NDK_VERSION }}
- run: rustup target add x86_64-linux-android aarch64-linux-android armv7-linux-androideabi i686-linux-android aarch64-apple-ios-sim
Expand Down
Loading