Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): use same versions for artifact upload and download Actions #433

Merged

Conversation

behnazh-w
Copy link
Contributor

@sdelamo Looks like the provenance action generator_generic_slsa3.yml is not compatible with actions/download-artifact@v4 yet. We need to make sure these two Actions and actions/upload-artifact are all compatible.

This PR reverts actions/download-artifact to v3 for now until the next version of generator_generic_slsa3.yml that will be compatible with actions/download-artifact@v4 is released. See this relevant issue.

…ctions

Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
@@ -66,13 +66,13 @@ jobs:
# Store the hash in a file, which is uploaded as a workflow artifact.
sha256sum $ARTIFACTS | base64 -w0 > artifacts-sha256
- name: Upload build artifacts
uses: actions/upload-artifact@v4.0.0
uses: actions/upload-artifact@v3
Copy link
Contributor

@sdelamo sdelamo Jan 9, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we use an exact version?

Suggested change
uses: actions/upload-artifact@v3
uses: actions/upload-artifact@v3.0.0

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, See commit 71069d1.

Copy link
Contributor

@sdelamo sdelamo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please,change the upload-artifact version also in gradle.yml. I would like to have the same version for every workflow.

with:
name: gradle-build-outputs
path: build/repo/${{ steps.publish.outputs.group }}/*/${{ steps.publish.outputs.version }}/*
retention-days: 5
- name: Upload artifacts-sha256
uses: actions/upload-artifact@v4.0.0
uses: actions/upload-artifact@v3
Copy link
Contributor

@sdelamo sdelamo Jan 9, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we use an exact version?

Suggested change
uses: actions/upload-artifact@v3
uses: actions/upload-artifact@v3.0.0

Copy link
Contributor Author

@behnazh-w behnazh-w Jan 9, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done. I have changed to v3.1.3, which is the latest v3* version and also pinned the Action with the hash. Renovate picks up the hash and updates the string versions in the comment.

I have also changed download-artifact Action to v3.0.2 to be consistent.

See commit 71069d1.

sdelamo added a commit to micronaut-projects/micronaut-mqtt that referenced this pull request Jan 9, 2024
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
@sdelamo sdelamo merged commit acecb7e into micronaut-projects:master Jan 10, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants