Commit Graph

6 Commits

Author SHA1 Message Date
Jake Barnby 708aea2532 chore: pin github actions to sha and bump to latest
Pin every third-party action in .github/workflows/ to a full commit SHA
with a trailing version comment, and bump to the latest stable release.
Defends against tag-rewrite supply-chain attacks while keeping versions
legible.
2026-05-08 01:07:12 +12:00
Chirag Aggarwal 360d08f087 Preserve CI image for job retries 2026-04-29 16:01:15 +05:30
loks0n 4326600751 Refactor CI workflows: add COMPOSE_FILE env, add build targets, bump action versions, pin composer
- Add COMPOSE_FILE=docker-compose.yml to tests, benchmark, and sdk-preview to prevent loading overrides in CI
- Add target: development to tests/benchmark builds, target: production to pr-scan/nightly builds
- Bump actions/checkout v4→v6, docker/build-push-action v4/v5→v6, actions/upload-artifact v4→v6, actions/github-script v7→v8
- Pin composer images to 2.8 in linter and static-analysis workflows

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-13 00:56:03 +00:00
Matej Bačo 733e0498a7 AI-recommended changes 2025-04-16 11:50:42 +02:00
Steven Nguyen a6e9fbfa8d Update the trigger for the cleanup actions cache workflow
Workflow should trigger on pull_request.closed, not all pull_request.
2023-08-31 09:26:42 -07:00
Steven Nguyen 8a0bf3ad46 Create a GH workflow to cleanup the GH cache
The GitHub actions cache is helpful to speed up CI jobs. Once a branch
is closed, we don't need the cacche anymore so we should delete it so
the disk space can be reclaimed.

This workflow was copied from https://docs.github.com/en/actions/using-workflows/caching-dependencies-to-speed-up-workflows#force-deleting-cache-entries.
2023-08-30 16:56:27 -07:00