Skip to content

chore: modernize GitHub Actions and Dependabot - #14

Merged
ronaldtse merged 1 commit into
mainfrom
chore/gha-modernize
Jul 29, 2026
Merged

chore: modernize GitHub Actions and Dependabot#14
ronaldtse merged 1 commit into
mainfrom
chore/gha-modernize

Conversation

@ronaldtse

Copy link
Copy Markdown
Contributor

Summary

  • All workflows: actions/checkout@v7 (was @v2 / @master)
  • mukunku/tag-exists-action@v1.0.0@v1.7.0
  • Replace deprecated actions/create-release@v1 + actions/upload-release-asset@v1.0.1 with softprops/action-gh-release@v3 (single step, attaches pairs.zip, generates release notes)
  • Add explicit permissions: contents: write to release job (modern security hygiene; was implicit)
  • Add Dependabot for weekly action updates
  • keep-alive.yml untouched (already uses reusable workflow from metanorma/ci)

Test plan

  • YAML parses
  • Build workflow green on next PR
  • Release workflow creates GitHub release with pairs.zip on next tag push

- All checkouts @v7 (was @v2 / @master)
- mukunku/tag-exists-action v1.0.0 -> v1.7.0
- Replace deprecated create-release/upload-release-asset with softprops/action-gh-release@v3
- Add explicit contents: write permission to release job
- Add Dependabot for actions
@ronaldtse
ronaldtse merged commit 2e0ca94 into main Jul 29, 2026
2 of 4 checks passed
@ronaldtse
ronaldtse deleted the chore/gha-modernize branch July 29, 2026 05:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant