tei/MapLibreParticleLab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Manual update of GitHub actions (#4394)

Browse Source
This commit is contained in:
Bart Louwers
2026-07-10 02:23:02 +02:00
committed by GitHub
parent e3c81d607a
commit 7f8297efe8
36 changed files with 233 additions and 195 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/actions/android-build-and-upload-render-test/action.yml vendored
View File

@@ -16,7 +16,7 @@ runs:
working-directory: ./render-test/android working-directory: ./render-test/android
- name: Upload APK files for ${{ inputs.flavor }} - name: Upload APK files for ${{ inputs.flavor }}
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: android-render-tests-${{ inputs.flavor }} name: android-render-tests-${{ inputs.flavor }}
if-no-files-found: error if-no-files-found: error

2
.github/actions/configure-sccache-s3/action.yml vendored
View File

@@ -22,7 +22,7 @@ runs:
- name: Configure AWS Credentials - name: Configure AWS Credentials
if: fromJSON(inputs.vars).OIDC_AWS_ROLE_TO_ASSUME if: fromJSON(inputs.vars).OIDC_AWS_ROLE_TO_ASSUME
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ fromJSON(inputs.vars).OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ fromJSON(inputs.vars).OIDC_AWS_ROLE_TO_ASSUME }}

6
.github/actions/download-workflow-run-artifact/action.yml vendored
View File

@@ -12,7 +12,7 @@ runs:
steps: steps:
# https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#workflow_run # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#workflow_run
- name: Download ${{ inputs.artifact-name }} artifact - name: Download ${{ inputs.artifact-name }} artifact
uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1 uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with: with:
script: | script: |
let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({ let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
@@ -38,7 +38,7 @@ runs:
- name: "Check .zip file existence" - name: "Check .zip file existence"
id: zip_exists id: zip_exists
uses: andstor/file-existence-action@20b4d2e596410855db8f9ca21e96fbe18e12930b # v2.0.0 uses: andstor/file-existence-action@558493d6c74bf472d87c84eab196434afc2fa029 # v3.1.0
with: with:
files: ${{ inputs.artifact-name }}.zip files: ${{ inputs.artifact-name }}.zip
@@ -48,7 +48,7 @@ runs:
run: unzip ${{ inputs.artifact-name }}.zip run: unzip ${{ inputs.artifact-name }}.zip
- name: "Check file existence" - name: "Check file existence"
uses: andstor/file-existence-action@20b4d2e596410855db8f9ca21e96fbe18e12930b # v2.0.0 uses: andstor/file-existence-action@558493d6c74bf472d87c84eab196434afc2fa029 # v3.1.0
if: ${{ inputs.expect-files }} if: ${{ inputs.expect-files }}
with: with:
fail: true fail: true

2
.github/actions/save-pr-number/action.yml vendored
View File

@@ -10,7 +10,7 @@ runs:
echo "${{ github.event.number }}" > ./pr_number echo "${{ github.event.number }}" > ./pr_number
- name: Upload pr_number - name: Upload pr_number
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: pr-number name: pr-number
path: ./pr_number path: ./pr_number

6
.github/actions/setup-android-ci/action.yml vendored
View File

@@ -5,7 +5,7 @@ runs:
steps: steps:
- name: Free Disk Space (Ubuntu) - name: Free Disk Space (Ubuntu)
if: startsWith(runner.name, 'GitHub Actions') if: startsWith(runner.name, 'GitHub Actions')
uses: jlumbroso/free-disk-space@main uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
with: with:
tool-cache: true tool-cache: true
android: false android: false
@@ -23,13 +23,13 @@ runs:
- run: echo "cmake.dir=$(dirname "$(dirname "$(command -v cmake)")")" >> local.properties - run: echo "cmake.dir=$(dirname "$(dirname "$(command -v cmake)")")" >> local.properties
shell: bash shell: bash
- uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
with: with:
distribution: "temurin" distribution: "temurin"
java-version: "17" java-version: "17"
- name: restore-gradle-cache - name: restore-gradle-cache
uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
env: env:
cache-name: gradle-v1 cache-name: gradle-v1
with: with:

38
.github/actions/tree-is-clean/action.yml vendored Normal file
View File

@@ -0,0 +1,38 @@
name: tree-is-clean
description: "Check whether previous steps left the Git working tree clean"
inputs:
check_untracked:
description: "Fail on newly added files, or only on changes to tracked files"
required: false
default: "true"
runs:
using: "composite"
steps:
- name: Check Git working tree
shell: bash
env:
CHECK_UNTRACKED: ${{ inputs.check_untracked }}
run: |
set -euo pipefail
status_args=(status --porcelain)
if [ "${CHECK_UNTRACKED}" = "false" ]; then
status_args+=(-uno)
fi
status="$(git "${status_args[@]}")"
if [ -n "${status}" ]; then
printf '%s\n' "${status}"
message="These files have changed since checkout. Check for out-of-sync autogenerated files"
if [ "${CHECK_UNTRACKED}" != "false" ]; then
message="${message}, or for untracked files written inside the working tree"
fi
echo "::error::${message}"
echo "::group::Full diff:"
git diff
echo "::endgroup::"
exit 1
fi

30
.github/workflows/android-ci.yml vendored
View File

@@ -26,7 +26,7 @@ jobs:
outputs: outputs:
should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.android_any_modified != 'true' }} should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.android_any_modified != 'true' }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -34,7 +34,7 @@ jobs:
- name: Get all Android files that have changed - name: Get all Android files that have changed
if: github.event_name != 'workflow_dispatch' if: github.event_name != 'workflow_dispatch'
id: changed-files id: changed-files
uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5 uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
with: with:
files_yaml_from_source_file: .github/changed-files.yml files_yaml_from_source_file: .github/changed-files.yml
@@ -57,14 +57,14 @@ jobs:
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
SENTRY_DSN: ${{ secrets.SENTRY_DSN_ANDROID }} SENTRY_DSN: ${{ secrets.SENTRY_DSN_ANDROID }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
- uses: ./.github/actions/setup-android-ci - uses: ./.github/actions/setup-android-ci
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: ".nvmrc" node-version-file: ".nvmrc"
@@ -101,7 +101,7 @@ jobs:
echo "SENTRY_ORG=maplibre" >> "$GITHUB_ENV" echo "SENTRY_ORG=maplibre" >> "$GITHUB_ENV"
echo "SENTRY_PROJECT=maplibre-android" >> "$GITHUB_ENV" echo "SENTRY_PROJECT=maplibre-android" >> "$GITHUB_ENV"
- uses: infotroph/tree-is-clean@69d598a958e8cb8f3d0e3d52b5ebcd8684f2adc2 # v1.0.6 - uses: ./.github/actions/tree-is-clean
with: with:
check_untracked: true check_untracked: true
@@ -152,7 +152,7 @@ jobs:
- name: Create artifact for benchmark APKs - name: Create artifact for benchmark APKs
if: matrix.renderer == 'opengl' if: matrix.renderer == 'opengl'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
if-no-files-found: error if-no-files-found: error
name: benchmarkAPKs name: benchmarkAPKs
@@ -187,7 +187,7 @@ jobs:
run: sentry-cli debug-files upload MapLibreAndroidTestApp run: sentry-cli debug-files upload MapLibreAndroidTestApp
- name: Upload android-ui-test-${{ matrix.renderer }} - name: Upload android-ui-test-${{ matrix.renderer }}
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
if-no-files-found: error if-no-files-found: error
name: android-ui-test-${{ matrix.renderer }} name: android-ui-test-${{ matrix.renderer }}
@@ -210,7 +210,7 @@ jobs:
working-directory: test/android working-directory: test/android
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -233,7 +233,7 @@ jobs:
cp app/build/outputs/apk/androidTest/release/app-release-androidTest.apk . cp app/build/outputs/apk/androidTest/release/app-release-androidTest.apk .
- name: Store C++ Unit Tests .apk files - name: Store C++ Unit Tests .apk files
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: android-cpp-tests name: android-cpp-tests
if-no-files-found: error if-no-files-found: error
@@ -255,7 +255,7 @@ jobs:
if: needs.pre_job.outputs.should_skip != 'true' if: needs.pre_job.outputs.should_skip != 'true'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -283,7 +283,7 @@ jobs:
env: env:
IS_LOCAL_DEVELOPMENT: false IS_LOCAL_DEVELOPMENT: false
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -316,7 +316,7 @@ jobs:
C_COMPILER: aarch64-linux-android26-clang C_COMPILER: aarch64-linux-android26-clang
BINDGEN_TARGET: aarch64-linux-android26 BINDGEN_TARGET: aarch64-linux-android26
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -324,7 +324,7 @@ jobs:
- uses: ./.github/actions/setup-android-ci - uses: ./.github/actions/setup-android-ci
- name: Install Rust toolchain - name: Install Rust toolchain
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # stable uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with: with:
toolchain: stable toolchain: stable
@@ -390,13 +390,13 @@ jobs:
# automatically trigger android-release when code is pushed to main # automatically trigger android-release when code is pushed to main
# and the platform/android/VERSION file has changed # and the platform/android/VERSION file has changed
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
if: github.ref == 'refs/heads/main' && github.event_name == 'push' if: github.ref == 'refs/heads/main' && github.event_name == 'push'
- name: VERSION file changed - name: VERSION file changed
if: github.ref == 'refs/heads/main' && github.event_name == 'push' if: github.ref == 'refs/heads/main' && github.event_name == 'push'
id: version-file-android-changed id: version-file-android-changed
uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5 uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
with: with:
files: platform/android/VERSION files: platform/android/VERSION

16
.github/workflows/android-device-test.yml vendored
View File

@@ -78,11 +78,11 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success' if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: '.nvmrc' node-version-file: '.nvmrc'
@@ -102,7 +102,7 @@ jobs:
id: get-pr-number id: get-pr-number
- name: Generate token - name: Generate token
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0 uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
id: generate_token id: generate_token
with: with:
skip-token-revoke: true # revoking will fail for long running workflows, because the token will already have expired skip-token-revoke: true # revoking will fail for long running workflows, because the token will already have expired
@@ -128,7 +128,7 @@ jobs:
run: run:
echo "run_device_test=true" >> "$GITHUB_ENV" echo "run_device_test=true" >> "$GITHUB_ENV"
- uses: LouisBrunner/checks-action@dfcbcf801bff1ea7f1414824fc28f2cd697b35da # v3.0.0 - uses: LouisBrunner/checks-action@937cbbcde3259005b50746dc91cde29098aac2ff # v3.1.0
id: create_check id: create_check
with: with:
token: ${{ steps.generate_token.outputs.token }} token: ${{ steps.generate_token.outputs.token }}
@@ -145,7 +145,7 @@ jobs:
- name: Configure AWS Credentials - name: Configure AWS Credentials
if: env.run_device_test == 'true' if: env.run_device_test == 'true'
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -198,20 +198,20 @@ jobs:
- name: Upload Test Artifacts - name: Upload Test Artifacts
if: (matrix.test.name == 'Android Benchmark' || failure()) && env.run_device_test == 'true' if: (matrix.test.name == 'Android Benchmark' || failure()) && env.run_device_test == 'true'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: "Test Artifacts ${{ matrix.test.name }}" name: "Test Artifacts ${{ matrix.test.name }}"
path: test_artifacts.zip path: test_artifacts.zip
- name: Generate another token (previous one could have expired) - name: Generate another token (previous one could have expired)
if: always() if: always()
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0 uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
id: generate_token_2 id: generate_token_2
with: with:
app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }}
private-key: ${{ secrets.MAPLIBRE_NATIVE_BOT_PRIVATE_KEY }} private-key: ${{ secrets.MAPLIBRE_NATIVE_BOT_PRIVATE_KEY }}
- uses: LouisBrunner/checks-action@dfcbcf801bff1ea7f1414824fc28f2cd697b35da # v3.0.0 - uses: LouisBrunner/checks-action@937cbbcde3259005b50746dc91cde29098aac2ff # v3.1.0
if: always() if: always()
with: with:
token: ${{ steps.generate_token_2.outputs.token }} token: ${{ steps.generate_token_2.outputs.token }}

20
.github/workflows/android-release.yml vendored
View File

@@ -15,7 +15,7 @@ jobs:
run: run:
working-directory: platform/android working-directory: platform/android
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Validate and set version - name: Validate and set version
working-directory: . working-directory: .
@@ -52,7 +52,7 @@ jobs:
- name: Create release (draft) - name: Create release (draft)
id: create_release id: create_release
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
with: with:
tag_name: ${{ steps.prepare_release.outputs.version_tag }} tag_name: ${{ steps.prepare_release.outputs.version_tag }}
name: ${{ steps.prepare_release.outputs.version_tag }} name: ${{ steps.prepare_release.outputs.version_tag }}
@@ -78,15 +78,15 @@ jobs:
- Release - Release
- Debug - Debug
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: ".nvmrc" node-version-file: ".nvmrc"
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v4 - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
with: with:
distribution: "temurin" distribution: "temurin"
java-version: "17" java-version: "17"
@@ -118,7 +118,7 @@ jobs:
"build/debug-symbols-maplibre-android-${{ matrix.RENDERER }}-${{ env.buildtype }}-$version_tag.tar.gz" "build/debug-symbols-maplibre-android-${{ matrix.RENDERER }}-${{ env.buildtype }}-$version_tag.tar.gz"
- name: Upload release assets (${{ matrix.RENDERER }}, ${{ matrix.BUILDTYPE }}) - name: Upload release assets (${{ matrix.RENDERER }}, ${{ matrix.BUILDTYPE }})
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
with: with:
tag_name: ${{ needs.android-create-release.outputs.version_tag }} tag_name: ${{ needs.android-create-release.outputs.version_tag }}
fail_on_unmatched_files: true fail_on_unmatched_files: true
@@ -149,20 +149,20 @@ jobs:
- android-build-and-upload-release - android-build-and-upload-release
steps: steps:
- name: Publish release (remove draft) - name: Publish release (remove draft)
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
with: with:
tag_name: ${{ needs.android-create-release.outputs.version_tag }} tag_name: ${{ needs.android-create-release.outputs.version_tag }}
name: ${{ needs.android-create-release.outputs.version_tag }} name: ${{ needs.android-create-release.outputs.version_tag }}
draft: false draft: false
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v4 - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
with: with:
distribution: "temurin" distribution: "temurin"
java-version: "17" java-version: "17"
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: ".nvmrc" node-version-file: ".nvmrc"

8
.github/workflows/android-testapp-release.yml vendored
View File

@@ -10,7 +10,7 @@ jobs:
create-android-testapp-release: create-android-testapp-release:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
@@ -43,7 +43,7 @@ jobs:
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
SENTRY_DSN: ${{ secrets.SENTRY_DSN_ANDROID }} SENTRY_DSN: ${{ secrets.SENTRY_DSN_ANDROID }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -68,11 +68,11 @@ jobs:
needs: [android-build-testapp] needs: [android-build-testapp]
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Finalize release (set draft=false) - name: Finalize release (set draft=false)
run: | run: |

2
.github/workflows/cache-cleanup.yml vendored
View File

@@ -15,7 +15,7 @@ jobs:
contents: read contents: read
steps: steps:
- name: Check out code - name: Check out code
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false

18
.github/workflows/core-release.yml vendored
View File

@@ -14,7 +14,7 @@ jobs:
create-release: create-release:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
@@ -45,13 +45,13 @@ jobs:
needs: [create-release] needs: [create-release]
runs-on: macos-latest runs-on: macos-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
- run: brew install webp libuv - run: brew install webp libuv
- uses: taiki-e/install-action@d6912b47771be2c443ec90dbb3d28e023987e782 # v2.62.1 - uses: taiki-e/install-action@c7eb1735f09259a5035e8e5d44b1406b1cddc0fb # v2.83.0
with: with:
tool: armerge@2 tool: armerge@2
@@ -67,7 +67,7 @@ jobs:
- name: Upload macOS artifacts - name: Upload macOS artifacts
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: macos-metal-build name: macos-metal-build
path: | path: |
@@ -102,14 +102,14 @@ jobs:
- renderer: vulkan - renderer: vulkan
runner: { os: ubuntu-24.04-arm, arch: arm64 } runner: { os: ubuntu-24.04-arm, arch: arm64 }
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
- name: Install dependencies - name: Install dependencies
run: .github/scripts/install-linux-deps run: .github/scripts/install-linux-deps
- uses: taiki-e/install-action@d6912b47771be2c443ec90dbb3d28e023987e782 # v2.62.1 - uses: taiki-e/install-action@c7eb1735f09259a5035e8e5d44b1406b1cddc0fb # v2.83.0
with: with:
tool: armerge@2 tool: armerge@2
@@ -130,7 +130,7 @@ jobs:
- name: Upload Linux artifacts - name: Upload Linux artifacts
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: linux-${{ matrix.runner.arch }}-${{ matrix.renderer }}-build name: linux-${{ matrix.runner.arch }}-${{ matrix.renderer }}-build
path: | path: |
@@ -155,7 +155,7 @@ jobs:
- run: | - run: |
git config --system core.longpaths true git config --system core.longpaths true
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
@@ -171,7 +171,7 @@ jobs:
- name: Upload Windows artifact - name: Upload Windows artifact
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: windows-${{ matrix.renderer }}-build name: windows-${{ matrix.renderer }}-build
path: | path: |

4
.github/workflows/gh-pages-android-api.yml vendored
View File

@@ -15,11 +15,11 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout 🛎️ - name: Checkout 🛎️
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v4 - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
with: with:
distribution: "temurin" distribution: "temurin"
java-version: "17" java-version: "17"

2
.github/workflows/gh-pages-android-examples.yml vendored
View File

@@ -17,7 +17,7 @@ jobs:
shell: bash shell: bash
steps: steps:
- name: Checkout 🛎️ - name: Checkout 🛎️
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Generate documentation - name: Generate documentation
run: make mkdocs-build run: make mkdocs-build

2
.github/workflows/gh-pages-cpp-api.yml vendored
View File

@@ -8,7 +8,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout 🛎️ - name: Checkout 🛎️
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: true submodules: true

10
.github/workflows/gh-pages-docc.yml vendored
View File

@@ -20,10 +20,10 @@ jobs:
runs-on: macos-latest runs-on: macos-latest
steps: steps:
- name: Checkout 🛎️ - name: Checkout 🛎️
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Configure AWS Credentials - name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -41,7 +41,7 @@ jobs:
cd build cd build
zip -r docs.zip docs/ zip -r docs.zip docs/
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: docc-docs name: docc-docs
path: build/docs.zip path: build/docs.zip
@@ -52,10 +52,10 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout 🛎️ - name: Checkout 🛎️
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Download DocC docs artifacts - name: Download DocC docs artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with: with:
name: docc-docs name: docc-docs
path: build path: build

10
.github/workflows/gh-pages-mdbook.yml vendored
View File

@@ -16,8 +16,8 @@ jobs:
name: Build name: Build
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b # v3.1.0 - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4
- name: Setup mdBook - name: Setup mdBook
uses: peaceiris/actions-mdbook@ee69d230fe19748b7abf22df32acaa93833fad08 # v2.0.0 uses: peaceiris/actions-mdbook@ee69d230fe19748b7abf22df32acaa93833fad08 # v2.0.0
- name: Install Dependencies - name: Install Dependencies
@@ -29,7 +29,7 @@ jobs:
working-directory: docs/mdbook working-directory: docs/mdbook
shell: bash shell: bash
run: mdbook build run: mdbook build
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: book name: book
path: docs/mdbook/book/ path: docs/mdbook/book/
@@ -40,9 +40,9 @@ jobs:
name: Deploy name: Deploy
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Download book - name: Download book
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with: with:
name: book name: book
path: artifacts/book path: artifacts/book

26
.github/workflows/ios-ci.yml vendored
View File

@@ -22,7 +22,7 @@ jobs:
outputs: outputs:
should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files-yaml.outputs.ios_any_modified != 'true' }} should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files-yaml.outputs.ios_any_modified != 'true' }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -30,7 +30,7 @@ jobs:
- name: Get all iOS files that have changed - name: Get all iOS files that have changed
if: github.event_name != 'workflow_dispatch' if: github.event_name != 'workflow_dispatch'
id: changed-files-yaml id: changed-files-yaml
uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5 uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
with: with:
files_yaml_from_source_file: .github/changed-files.yml files_yaml_from_source_file: .github/changed-files.yml
@@ -58,7 +58,7 @@ jobs:
working-directory: platform/ios working-directory: platform/ios
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: false submodules: false
persist-credentials: false persist-credentials: false
@@ -110,7 +110,7 @@ jobs:
zip -r "$render_test_app_dir"/RenderTest.xctest.zip RenderTest.xctest zip -r "$render_test_app_dir"/RenderTest.xctest.zip RenderTest.xctest
echo render_test_artifacts_dir="$render_test_app_dir" >> "$GITHUB_ENV" echo render_test_artifacts_dir="$render_test_app_dir" >> "$GITHUB_ENV"
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: ios-render-test name: ios-render-test
retention-days: 3 retention-days: 3
@@ -179,7 +179,7 @@ jobs:
zip -r "$ios_cpp_test_app_dir"/CppUnitTests.xctest.zip CppUnitTests.xctest zip -r "$ios_cpp_test_app_dir"/CppUnitTests.xctest.zip CppUnitTests.xctest
echo ios_cpp_test_artifacts_dir="$ios_cpp_test_app_dir" >> "$GITHUB_ENV" echo ios_cpp_test_artifacts_dir="$ios_cpp_test_app_dir" >> "$GITHUB_ENV"
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: ios-cpp-unit-tests name: ios-cpp-unit-tests
retention-days: 3 retention-days: 3
@@ -200,7 +200,7 @@ jobs:
- name: Upload size test as artifact (Bloaty) - name: Upload size test as artifact (Bloaty)
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: ios-size-test-files name: ios-size-test-files
retention-days: 3 retention-days: 3
@@ -211,7 +211,7 @@ jobs:
- name: Configure AWS Credentials - name: Configure AWS Credentials
if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -236,7 +236,7 @@ jobs:
runs-on: macos-14 runs-on: macos-14
if: needs.pre_job.outputs.should_skip != 'true' if: needs.pre_job.outputs.should_skip != 'true'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
@@ -269,7 +269,7 @@ jobs:
if: needs.pre_job.outputs.should_skip != 'true' if: needs.pre_job.outputs.should_skip != 'true'
runs-on: macos-26 runs-on: macos-26
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -304,13 +304,13 @@ jobs:
if: needs.pre_job.outputs.should_skip != 'true' if: needs.pre_job.outputs.should_skip != 'true'
runs-on: macos-26 runs-on: macos-26
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
- name: Install Rust toolchain - name: Install Rust toolchain
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # stable uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with: with:
toolchain: stable toolchain: stable
@@ -363,7 +363,7 @@ jobs:
# Trigger release on main if VERSION file changed # Trigger release on main if VERSION file changed
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
if: github.ref == 'refs/heads/main' if: github.ref == 'refs/heads/main'
with: with:
persist-credentials: false persist-credentials: false
@@ -371,7 +371,7 @@ jobs:
- name: VERSION file changed - name: VERSION file changed
if: github.ref == 'refs/heads/main' if: github.ref == 'refs/heads/main'
id: version-file-ios-changed id: version-file-ios-changed
uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5 uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
with: with:
files: platform/ios/VERSION files: platform/ios/VERSION

14
.github/workflows/ios-device-test.yml vendored
View File

@@ -21,18 +21,18 @@ jobs:
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success' if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success'
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- name: Generate token - name: Generate token
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0 uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
id: generate_token id: generate_token
with: with:
app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }}
private-key: ${{ secrets.MAPLIBRE_NATIVE_BOT_PRIVATE_KEY }} private-key: ${{ secrets.MAPLIBRE_NATIVE_BOT_PRIVATE_KEY }}
- uses: LouisBrunner/checks-action@dfcbcf801bff1ea7f1414824fc28f2cd697b35da # v3.0.0 - uses: LouisBrunner/checks-action@937cbbcde3259005b50746dc91cde29098aac2ff # v3.1.0
id: create_check id: create_check
with: with:
token: ${{ steps.generate_token.outputs.token }} token: ${{ steps.generate_token.outputs.token }}
@@ -47,12 +47,12 @@ jobs:
- name: Check if test files exist (otherwise the parent workflow was skipped) - name: Check if test files exist (otherwise the parent workflow was skipped)
id: check_files id: check_files
uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3.0.0 uses: andstor/file-existence-action@558493d6c74bf472d87c84eab196434afc2fa029 # v3.1.0
with: with:
files: "${{ matrix.test.xcTestFile }}, ${{ matrix.test.ipaFile }}" files: "${{ matrix.test.xcTestFile }}, ${{ matrix.test.ipaFile }}"
- name: Configure AWS Credentials - name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -76,13 +76,13 @@ jobs:
- name: Generate another token (previous one could have expired) - name: Generate another token (previous one could have expired)
if: always() if: always()
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0 uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
id: generate_token_2 id: generate_token_2
with: with:
app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }}
private-key: ${{ secrets.MAPLIBRE_NATIVE_BOT_PRIVATE_KEY }} private-key: ${{ secrets.MAPLIBRE_NATIVE_BOT_PRIVATE_KEY }}
- uses: LouisBrunner/checks-action@dfcbcf801bff1ea7f1414824fc28f2cd697b35da # v3.0.0 - uses: LouisBrunner/checks-action@937cbbcde3259005b50746dc91cde29098aac2ff # v3.1.0
if: always() if: always()
with: with:
token: ${{ steps.generate_token_2.outputs.token }} token: ${{ steps.generate_token_2.outputs.token }}

2
.github/workflows/ios-release-cocoapods.yml vendored
View File

@@ -14,7 +14,7 @@ jobs:
working-directory: platform/ios working-directory: platform/ios
runs-on: macos-14 runs-on: macos-14
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false

22
.github/workflows/ios-release.yml vendored
View File

@@ -23,7 +23,7 @@ jobs:
working-directory: platform/ios working-directory: platform/ios
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
@@ -51,7 +51,7 @@ jobs:
working-directory: . working-directory: .
- name: Upload artifact - name: Upload artifact
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: xcframework name: xcframework
path: | path: |
@@ -65,7 +65,7 @@ jobs:
working-directory: platform/ios working-directory: platform/ios
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
@@ -83,7 +83,7 @@ jobs:
working-directory: . working-directory: .
- name: Upload artifact - name: Upload artifact
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: xcframework-static name: xcframework-static
path: | path: |
@@ -104,13 +104,13 @@ jobs:
working-directory: platform/ios working-directory: platform/ios
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
- uses: actions/download-artifact@v8 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: ".nvmrc" node-version-file: ".nvmrc"
@@ -144,7 +144,7 @@ jobs:
cat changelog_for_version.md cat changelog_for_version.md
- name: Configure AWS Credentials - name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -155,7 +155,7 @@ jobs:
- name: Release (GitHub) - Create Draft - name: Release (GitHub) - Create Draft
id: github_release id: github_release
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
with: with:
name: ios-v${{ env.version }} name: ios-v${{ env.version }}
files: | files: |
@@ -170,7 +170,7 @@ jobs:
# needed to trigger workflow for Swift Package Index release # needed to trigger workflow for Swift Package Index release
- name: Generate token - name: Generate token
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0 uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
id: generate_token id: generate_token
with: with:
app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }}
@@ -202,7 +202,7 @@ jobs:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Publish release (remove draft) - name: Publish release (remove draft)
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
with: with:
tag_name: ios-v${{ env.version }} tag_name: ios-v${{ env.version }}
name: ios-v${{ env.version }} name: ios-v${{ env.version }}

4
.github/workflows/ios-testapp-release.yml vendored
View File

@@ -5,7 +5,7 @@ jobs:
ios-testapp-release: ios-testapp-release:
runs-on: macos-latest runs-on: macos-latest
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
@@ -21,7 +21,7 @@ jobs:
run: bazel build //platform/ios/app-swift:MapLibreApp -c opt --ios_multi_cpus=arm64 --//:renderer=metal --action_env=SENTRY_DSN=${{ vars.SENTRY_DSN_IOS }} --embed_label=maplibre_app_1.0_build_"$(date +%s)" run: bazel build //platform/ios/app-swift:MapLibreApp -c opt --ios_multi_cpus=arm64 --//:renderer=metal --action_env=SENTRY_DSN=${{ vars.SENTRY_DSN_IOS }} --embed_label=maplibre_app_1.0_build_"$(date +%s)"
- name: 'Upload app to TestFlight' - name: 'Upload app to TestFlight'
uses: apple-actions/upload-testflight-build@v4 uses: apple-actions/upload-testflight-build@1ad58030672057aa084b4e96beb6f7a8c627f9e6 # v5.2.1
with: with:
app-path: 'bazel-bin/platform/ios/app-swift/MapLibreApp.ipa' app-path: 'bazel-bin/platform/ios/app-swift/MapLibreApp.ipa'
issuer-id: ${{ vars.APPSTORE_ISSUER_ID }} issuer-id: ${{ vars.APPSTORE_ISSUER_ID }}

2
.github/workflows/labeler.yml vendored
View File

@@ -9,4 +9,4 @@ jobs:
pull-requests: write pull-requests: write
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/labeler@v6 - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0

28
.github/workflows/linux-ci.yml vendored
View File

@@ -33,7 +33,7 @@ jobs:
outputs: outputs:
should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.linux_any_modified != 'true' }} should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.linux_any_modified != 'true' }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -42,7 +42,7 @@ jobs:
if: github.event_name != 'workflow_dispatch' if: github.event_name != 'workflow_dispatch'
id: changed-files id: changed-files
uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5 uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
with: with:
files_yaml_from_source_file: .github/changed-files.yml files_yaml_from_source_file: .github/changed-files.yml
@@ -66,20 +66,20 @@ jobs:
rust: true rust: true
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4 uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with: with:
languages: cpp languages: cpp
- name: Install dependencies - name: Install dependencies
run: .github/scripts/install-linux-deps run: .github/scripts/install-linux-deps
- uses: taiki-e/install-action@020705266844b275b711684191e11281be48860c # v2 - uses: taiki-e/install-action@c7eb1735f09259a5035e8e5d44b1406b1cddc0fb # v2.83.0
with: with:
tool: armerge@2 tool: armerge@2
@@ -133,7 +133,7 @@ jobs:
- name: Upload mbgl-render as artifact - name: Upload mbgl-render as artifact
if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request' if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: mbgl-render name: mbgl-render
path: | path: |
@@ -141,7 +141,7 @@ jobs:
- name: Upload mbgl-benchmark-runner as artifact - name: Upload mbgl-benchmark-runner as artifact
if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request' if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: mbgl-benchmark-runner name: mbgl-benchmark-runner
path: | path: |
@@ -156,7 +156,7 @@ jobs:
# CodeQL # CodeQL
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4 uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with: with:
category: "/language:cpp" category: "/language:cpp"
@@ -183,7 +183,7 @@ jobs:
- name: Upload render test result - name: Upload render test result
if: always() && steps.render_test.outcome == 'failure' if: always() && steps.render_test.outcome == 'failure'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: render-test-result-${{ matrix.variant.renderer }} name: render-test-result-${{ matrix.variant.renderer }}
path: | path: |
@@ -199,7 +199,7 @@ jobs:
linux-coverage: linux-coverage:
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -208,14 +208,14 @@ jobs:
run: .github/scripts/install-linux-deps run: .github/scripts/install-linux-deps
- name: Cache Bazel - name: Cache Bazel
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }}
restore-keys: | restore-keys: |
${{ runner.os }}-bazel- ${{ runner.os }}-bazel-
path: ~/.cache/bazel path: ~/.cache/bazel
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: '.nvmrc' node-version-file: '.nvmrc'
@@ -235,7 +235,7 @@ jobs:
echo coverage_report="$(bazel info output_path)"/_coverage/_coverage_report.dat >> "$GITHUB_ENV" echo coverage_report="$(bazel info output_path)"/_coverage/_coverage_report.dat >> "$GITHUB_ENV"
- name: Upload coverage report - name: Upload coverage report
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: coverage-report name: coverage-report
path: ${{ env.coverage_report }} path: ${{ env.coverage_report }}
@@ -249,7 +249,7 @@ jobs:
- linux-build-and-test - linux-build-and-test
- linux-coverage - linux-coverage
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- if: github.event_name == 'pull_request' - if: github.event_name == 'pull_request'
uses: ./.github/actions/save-pr-number uses: ./.github/actions/save-pr-number

8
.github/workflows/macos-ci.yml vendored
View File

@@ -69,13 +69,13 @@ jobs:
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
fetch-depth: 0 fetch-depth: 0
- name: Cache Bazel - name: Cache Bazel
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }}
restore-keys: | restore-keys: |
@@ -106,7 +106,7 @@ jobs:
name: wgpu name: wgpu
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -155,7 +155,7 @@ jobs:
- name: Upload render report - name: Upload render report
if: always() && steps.render_test.outcome == 'failure' if: always() && steps.render_test.outcome == 'failure'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: macos-webgpu-${{ matrix.variant.impl }}-render-report name: macos-webgpu-${{ matrix.variant.impl }}-render-report
path: metrics/macos-webgpu-${{ matrix.variant.impl }}.html path: metrics/macos-webgpu-${{ matrix.variant.impl }}.html

18
.github/workflows/node-ci.yml vendored
View File

@@ -100,7 +100,7 @@ jobs:
run: git config --global core.longpaths true run: git config --global core.longpaths true
- name: Checkout - name: Checkout
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -141,7 +141,7 @@ jobs:
/usr/sbin/update-ccache-symlinks /usr/sbin/update-ccache-symlinks
- name: Use Node.js from nvmrc - name: Use Node.js from nvmrc
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: 'platform/node/.nvmrc' node-version-file: 'platform/node/.nvmrc'
@@ -151,11 +151,11 @@ jobs:
- name: Set up msvc dev cmd (Windows x64) - name: Set up msvc dev cmd (Windows x64)
if: runner.os == 'Windows' && matrix.arch == 'x86_64' if: runner.os == 'Windows' && matrix.arch == 'x86_64'
uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1 uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
- name: Set up msvc dev cmd (Windows ARM64) - name: Set up msvc dev cmd (Windows ARM64)
if: runner.os == 'Windows' && matrix.arch == 'arm64' if: runner.os == 'Windows' && matrix.arch == 'arm64'
uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1 uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
with: with:
arch: amd64_arm64 arch: amd64_arm64
@@ -171,7 +171,7 @@ jobs:
- name: Set up ccache (MacOS/Linux) - name: Set up ccache (MacOS/Linux)
if: runner.os == 'MacOS' || runner.os == 'Linux' if: runner.os == 'MacOS' || runner.os == 'Linux'
uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22 uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
with: with:
key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }} key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }}
restore-keys: | restore-keys: |
@@ -182,7 +182,7 @@ jobs:
- name: Set up ccache (Windows) - name: Set up ccache (Windows)
if: runner.os == 'Windows' if: runner.os == 'Windows'
uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22 uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
with: with:
variant: "sccache" variant: "sccache"
key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }} key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }}
@@ -193,7 +193,7 @@ jobs:
${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }} ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}
- name: Cache cmake-node-module deps - name: Cache cmake-node-module deps
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
# downloaded with platform/node/cmake/module.cmake # downloaded with platform/node/cmake/module.cmake
path: build/headers path: build/headers
@@ -218,7 +218,7 @@ jobs:
- name: Restore vcpkg binary cache - name: Restore vcpkg binary cache
if: runner.os == 'Windows' if: runner.os == 'Windows'
uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives
key: vcpkg-${{ env.VCPKG_COMMIT_ID }} key: vcpkg-${{ env.VCPKG_COMMIT_ID }}
@@ -259,7 +259,7 @@ jobs:
- name: Upload render test artifacts (MacOS) - name: Upload render test artifacts (MacOS)
if: runner.os == 'MacOS' && steps.render_tests.outcome == 'failure' if: runner.os == 'MacOS' && steps.render_tests.outcome == 'failure'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: render-query-test-results_${{ runner.os }}_${{ matrix.arch }} name: render-query-test-results_${{ runner.os }}_${{ matrix.arch }}
path: metrics/macos-xcode11-release-style.html path: metrics/macos-xcode11-release-style.html

2
.github/workflows/node-create-bump-version-pr.yml vendored
View File

@@ -17,7 +17,7 @@ on:
jobs: jobs:
bump-version-pr: bump-version-pr:
uses: maplibre/reusable-workflows/.github/workflows/create-bump-version-pr.yml@main uses: maplibre/reusable-workflows/.github/workflows/create-bump-version-pr.yml@6bf4ce1cb65937d499d51faac52d3130b4a73f40 # main
with: with:
version: ${{ github.event.inputs.release_type }} version: ${{ github.event.inputs.release_type }}
preid: 'pre' preid: 'pre'

26
.github/workflows/node-release.yml vendored
View File

@@ -17,12 +17,12 @@ jobs:
run: run:
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- name: Use Node.js from nvmrc - name: Use Node.js from nvmrc
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: 'platform/node/.nvmrc' node-version-file: 'platform/node/.nvmrc'
@@ -50,7 +50,7 @@ jobs:
run: run:
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
@@ -118,7 +118,7 @@ jobs:
run: git config --global core.longpaths true run: git config --global core.longpaths true
- name: Checkout - name: Checkout
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -159,7 +159,7 @@ jobs:
/usr/sbin/update-ccache-symlinks /usr/sbin/update-ccache-symlinks
- name: Use Node.js from nvmrc - name: Use Node.js from nvmrc
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: 'platform/node/.nvmrc' node-version-file: 'platform/node/.nvmrc'
@@ -169,11 +169,11 @@ jobs:
- name: Set up msvc dev cmd (Windows x64) - name: Set up msvc dev cmd (Windows x64)
if: runner.os == 'Windows' && matrix.arch == 'x86_64' if: runner.os == 'Windows' && matrix.arch == 'x86_64'
uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1 uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
- name: Set up msvc dev cmd (Windows ARM64) - name: Set up msvc dev cmd (Windows ARM64)
if: runner.os == 'Windows' && matrix.arch == 'arm64' if: runner.os == 'Windows' && matrix.arch == 'arm64'
uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1 uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
with: with:
arch: amd64_arm64 arch: amd64_arm64
@@ -189,7 +189,7 @@ jobs:
- name: Set up ccache (MacOS/Linux) - name: Set up ccache (MacOS/Linux)
if: runner.os == 'MacOS' || runner.os == 'Linux' if: runner.os == 'MacOS' || runner.os == 'Linux'
uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22 uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
with: with:
key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }} key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }}
restore-keys: | restore-keys: |
@@ -200,7 +200,7 @@ jobs:
- name: Set up ccache (Windows) - name: Set up ccache (Windows)
if: runner.os == 'Windows' if: runner.os == 'Windows'
uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22 uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
with: with:
variant: "sccache" variant: "sccache"
key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }} key: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}-${{ github.job }}-${{ github.sha }}
@@ -211,7 +211,7 @@ jobs:
${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }} ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }}
- name: Cache cmake-node-module deps - name: Cache cmake-node-module deps
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
# downloaded with platform/node/cmake/module.cmake # downloaded with platform/node/cmake/module.cmake
path: build/headers path: build/headers
@@ -236,7 +236,7 @@ jobs:
- name: Restore vcpkg binary cache - name: Restore vcpkg binary cache
if: runner.os == 'Windows' if: runner.os == 'Windows'
uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives
key: vcpkg-${{ env.VCPKG_COMMIT_ID }} key: vcpkg-${{ env.VCPKG_COMMIT_ID }}
@@ -297,12 +297,12 @@ jobs:
shell: bash shell: bash
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- name: Use Node.js from nvmrc - name: Use Node.js from nvmrc
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: 'platform/node/.nvmrc' node-version-file: 'platform/node/.nvmrc'
registry-url: 'https://registry.npmjs.org' registry-url: 'https://registry.npmjs.org'

12
.github/workflows/pr-bloaty-ios.yml vendored
View File

@@ -19,14 +19,14 @@ jobs:
outputs: outputs:
should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }} should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
sparse-checkout: | sparse-checkout: |
.github .github
.nvmrc .nvmrc
persist-credentials: false persist-credentials: false
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: '.nvmrc' node-version-file: '.nvmrc'
@@ -45,13 +45,13 @@ jobs:
if: needs.pre_job.outputs.should_skip == 'false' if: needs.pre_job.outputs.should_skip == 'false'
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- name: Cache Bloaty - name: Cache Bloaty
id: cache-bloaty id: cache-bloaty
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
path: bloaty/build/bloaty path: bloaty/build/bloaty
key: bloaty-${{ env.bloaty_sha }} key: bloaty-${{ env.bloaty_sha }}
@@ -85,7 +85,7 @@ jobs:
- name: Configure AWS Credentials - name: Configure AWS Credentials
if: vars.OIDC_AWS_ROLE_TO_ASSUME if: vars.OIDC_AWS_ROLE_TO_ASSUME
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -106,7 +106,7 @@ jobs:
} >> message.md } >> message.md
- name: Leave a comment with Bloaty results - name: Leave a comment with Bloaty results
uses: marocchino/sticky-pull-request-comment@70d2764d1a7d5d9560b100cbea0077fc8f633987 # v3.0.2 uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
with: with:
number: ${{ steps.get-pr-number.outputs.pr-number }} number: ${{ steps.get-pr-number.outputs.pr-number }}
header: bloaty-ios header: bloaty-ios

18
.github/workflows/pr-linux-tests.yml vendored
View File

@@ -22,14 +22,14 @@ jobs:
outputs: outputs:
should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }} should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
sparse-checkout: | sparse-checkout: |
.github .github
.nvmrc .nvmrc
persist-credentials: false persist-credentials: false
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: '.nvmrc' node-version-file: '.nvmrc'
@@ -48,7 +48,7 @@ jobs:
if: needs.pre_job.outputs.should_skip == 'false' if: needs.pre_job.outputs.should_skip == 'false'
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
@@ -70,7 +70,7 @@ jobs:
- name: Cache Bloaty - name: Cache Bloaty
id: cache-bloaty id: cache-bloaty
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
path: bloaty/build/bloaty path: bloaty/build/bloaty
key: bloaty-${{ env.bloaty_sha }} key: bloaty-${{ env.bloaty_sha }}
@@ -95,7 +95,7 @@ jobs:
- name: Configure AWS Credentials - name: Configure AWS Credentials
if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -128,7 +128,7 @@ jobs:
} >> message.md } >> message.md
- name: Leave a comment with Bloaty results - name: Leave a comment with Bloaty results
uses: marocchino/sticky-pull-request-comment@70d2764d1a7d5d9560b100cbea0077fc8f633987 # v3.0.2 uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
with: with:
number: ${{ steps.get-pr-number.outputs.pr-number }} number: ${{ steps.get-pr-number.outputs.pr-number }}
header: bloaty header: bloaty
@@ -139,7 +139,7 @@ jobs:
if: needs.pre_job.outputs.should_skip == 'false' if: needs.pre_job.outputs.should_skip == 'false'
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: true submodules: true
persist-credentials: false persist-credentials: false
@@ -170,7 +170,7 @@ jobs:
- name: Configure AWS Credentials - name: Configure AWS Credentials
if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4 uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2
with: with:
aws-region: us-west-2 aws-region: us-west-2
role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }}
@@ -190,7 +190,7 @@ jobs:
} >> message.md } >> message.md
- name: Leave a comment with Benchmark results - name: Leave a comment with Benchmark results
uses: marocchino/sticky-pull-request-comment@70d2764d1a7d5d9560b100cbea0077fc8f633987 # v3.0.2 uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
with: with:
number: ${{ steps.get-pr-number.outputs.pr-number }} number: ${{ steps.get-pr-number.outputs.pr-number }}
header: benchmark header: benchmark

8
.github/workflows/qt-ci.yml vendored
View File

@@ -104,7 +104,7 @@ jobs:
run: git config --global core.longpaths true run: git config --global core.longpaths true
- name: Checkout - name: Checkout
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
path: source path: source
submodules: recursive submodules: recursive
@@ -130,7 +130,7 @@ jobs:
- name: Install compiler (Linux) - name: Install compiler (Linux)
id: install_compiler id: install_compiler
if: runner.os == 'Linux' if: runner.os == 'Linux'
uses: rlalik/setup-cpp-compiler@dcaf5189c08c028eecc61c082b9993033d731224 # master uses: rlalik/setup-cpp-compiler@3dbf473b4e7d87af3e7f329ca64bca40b2bae127 # v2
with: with:
compiler: ${{ matrix.compiler }} compiler: ${{ matrix.compiler }}
@@ -177,7 +177,7 @@ jobs:
uses: seanmiddleditch/gha-setup-ninja@3b1f8f94a2f8254bd26914c4ab9474d4f0015f67 # v6 uses: seanmiddleditch/gha-setup-ninja@3b1f8f94a2f8254bd26914c4ab9474d4f0015f67 # v6
- name: Download Qt - name: Download Qt
uses: jurplel/install-qt-action@d325aaf2a8baeeda41ad0b5d39f84a6af9bcf005 # v4.3.0 uses: jurplel/install-qt-action@48d3ad6db93f3627c8ee7a0454bc6f3744f7e730 # v4.3.1
with: with:
aqtversion: ==3.1.* aqtversion: ==3.1.*
version: ${{ env.QT_VERSION }} version: ${{ env.QT_VERSION }}
@@ -188,7 +188,7 @@ jobs:
extra: --base https://mirrors.ocf.berkeley.edu/qt/ extra: --base https://mirrors.ocf.berkeley.edu/qt/
- name: Set up ccache - name: Set up ccache
uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22 uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
with: with:
key: Qt_${{ matrix.name }}_${{ matrix.qt_version }} key: Qt_${{ matrix.name }}_${{ matrix.qt_version }}
max-size: 200M max-size: 200M

10
.github/workflows/rust-ci.yaml vendored
View File

@@ -23,9 +23,9 @@ jobs:
- os: windows-latest - os: windows-latest
- os: ubuntu-latest - os: ubuntu-latest
steps: steps:
- uses: taiki-e/install-action@d6912b47771be2c443ec90dbb3d28e023987e782 # v2.62.1 - uses: taiki-e/install-action@c7eb1735f09259a5035e8e5d44b1406b1cddc0fb # v2.83.0
with: { tool: just } with: { tool: just }
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- run: just -v ci-test - run: just -v ci-test
@@ -34,16 +34,16 @@ jobs:
name: Rust tests MSRV (Minimal Supported Rust Version) name: Rust tests MSRV (Minimal Supported Rust Version)
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: taiki-e/install-action@d6912b47771be2c443ec90dbb3d28e023987e782 # v2.62.1 - uses: taiki-e/install-action@c7eb1735f09259a5035e8e5d44b1406b1cddc0fb # v2.83.0
with: { tool: just } with: { tool: just }
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- name: Read crate metadata - name: Read crate metadata
id: metadata id: metadata
run: echo "rust-version=$(sed -ne 's/rust-version *= *\"\(.*\)\"/\1/p' Cargo.toml)" >> "$GITHUB_OUTPUT" run: echo "rust-version=$(sed -ne 's/rust-version *= *\"\(.*\)\"/\1/p' Cargo.toml)" >> "$GITHUB_OUTPUT"
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # stable uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
with: with:
toolchain: ${{ steps.metadata.outputs.rust-version }} toolchain: ${{ steps.metadata.outputs.rust-version }}
- run: just ci-test-msrv - run: just ci-test-msrv

8
.github/workflows/upload-coverage.yml vendored
View File

@@ -12,14 +12,14 @@ jobs:
outputs: outputs:
should_run: ${{ !steps.parent_workflow.outputs.was_skipped_or_cancelled }} should_run: ${{ !steps.parent_workflow.outputs.was_skipped_or_cancelled }}
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
sparse-checkout: | sparse-checkout: |
.github .github
.nvmrc .nvmrc
persist-credentials: false persist-credentials: false
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: '.nvmrc' node-version-file: '.nvmrc'
@@ -38,7 +38,7 @@ jobs:
if: needs.pre_job.outputs.should_run == 'true' if: needs.pre_job.outputs.should_run == 'true'
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
@@ -49,7 +49,7 @@ jobs:
- name: Upload coverage report - name: Upload coverage report
if: '!cancelled()' if: '!cancelled()'
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0 uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
with: with:
override_commit: ${{ github.event.workflow_run.head_sha }} override_commit: ${{ github.event.workflow_run.head_sha }}
override_pr: ${{ github.event.workflow_run.pull_requests[0].number }} override_pr: ${{ github.event.workflow_run.pull_requests[0].number }}

4
.github/workflows/validate-pr-title.yml vendored
View File

@@ -9,9 +9,9 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v6 uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: ".nvmrc" node-version-file: ".nvmrc"

4
.github/workflows/validate-scripts.yml vendored
View File

@@ -9,11 +9,11 @@ jobs:
validate-scripts: validate-scripts:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
persist-credentials: false persist-credentials: false
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with: with:
node-version-file: ".nvmrc" node-version-file: ".nvmrc"

34
.github/workflows/windows-ci.yml vendored
View File

@@ -37,7 +37,7 @@ jobs:
- run: | - run: |
git config --system core.longpaths true git config --system core.longpaths true
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
@@ -45,7 +45,7 @@ jobs:
- name: Get all Windows files that have changed - name: Get all Windows files that have changed
if: github.event_name != 'workflow_dispatch' if: github.event_name != 'workflow_dispatch'
id: changed-files id: changed-files
uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5 uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
with: with:
files_yaml_from_source_file: .github/changed-files.yml files_yaml_from_source_file: .github/changed-files.yml
@@ -62,7 +62,7 @@ jobs:
- run: | - run: |
git config --system core.longpaths true git config --system core.longpaths true
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
sparse-checkout: | sparse-checkout: |
platform/windows/vendor platform/windows/vendor
@@ -76,7 +76,7 @@ jobs:
- name: Restore vcpkg binary cache - name: Restore vcpkg binary cache
id: vcpkg-cache id: vcpkg-cache
uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives
key: vcpkg-${{ env.VCPKG_COMMIT_ID }} key: vcpkg-${{ env.VCPKG_COMMIT_ID }}
@@ -102,7 +102,7 @@ jobs:
- name: Save vcpkg binary cache - name: Save vcpkg binary cache
if: steps.vcpkg-cache.outputs.cache-hit != 'true' if: steps.vcpkg-cache.outputs.cache-hit != 'true'
uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives
key: vcpkg-${{ env.VCPKG_COMMIT_ID }} key: vcpkg-${{ env.VCPKG_COMMIT_ID }}
@@ -118,19 +118,19 @@ jobs:
- run: | - run: |
git config --system core.longpaths true git config --system core.longpaths true
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4 uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with: with:
languages: cpp languages: cpp
- uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0
- uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9 - uses: mozilla-actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 # v0.0.10
- name: Initialize sccache - name: Initialize sccache
run: | run: |
@@ -143,7 +143,7 @@ jobs:
Add-Content -Path $env:GITHUB_ENV -Value "VCPKG_COMMIT_ID=${vcpkg_commit_id}" Add-Content -Path $env:GITHUB_ENV -Value "VCPKG_COMMIT_ID=${vcpkg_commit_id}"
- name: Restore vcpkg binary cache - name: Restore vcpkg binary cache
uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with: with:
path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives
key: vcpkg-${{ env.VCPKG_COMMIT_ID }} key: vcpkg-${{ env.VCPKG_COMMIT_ID }}
@@ -167,7 +167,7 @@ jobs:
# CodeQL # CodeQL
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4 uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with: with:
category: "/language:cpp" category: "/language:cpp"
@@ -231,7 +231,7 @@ jobs:
- name: Upload render test result - name: Upload render test result
if: always() && steps.render_test.outcome == 'failure' if: always() && steps.render_test.outcome == 'failure'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: render-test-result-${{ matrix.renderer }} name: render-test-result-${{ matrix.renderer }}
path: | path: |
@@ -255,12 +255,12 @@ jobs:
git config --system core.longpaths true git config --system core.longpaths true
git config --system core.autocrlf input git config --system core.autocrlf input
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with: with:
submodules: recursive submodules: recursive
persist-credentials: false persist-credentials: false
- uses: msys2/setup-msys2@cafece8e6baf9247cf9b1bf95097b0b983cc558d # v2.31.0 - uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2.32.0
with: with:
msystem: ${{ matrix.msystem }} msystem: ${{ matrix.msystem }}
update: true update: true
@@ -279,11 +279,11 @@ jobs:
libuv:p libuv:p
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4 uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with: with:
languages: cpp languages: cpp
- uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9 - uses: mozilla-actions/sccache-action@9e7fa8a12102821edf02ca5dbea1acd0f89a2696 # v0.0.10
- name: Initialize sccache - name: Initialize sccache
run: | run: |
@@ -308,7 +308,7 @@ jobs:
# CodeQL # CodeQL
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4 uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with: with:
category: "/language:cpp" category: "/language:cpp"
@@ -372,7 +372,7 @@ jobs:
- name: Upload render test result - name: Upload render test result
if: always() && steps.render_test.outcome == 'failure' if: always() && steps.render_test.outcome == 'failure'
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: render-test-result-${{ matrix.renderer }} name: render-test-result-${{ matrix.renderer }}
path: | path: |