chore: update workflows #89
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
WARNING~ PR DESCRIOTION WRITTEN BY COPILOT
Description
This pull request updates various GitHub Actions workflow templates and security workflows to use newer, stable, and more specific action versions. The main changes focus on improving reliability and security by referencing fixed action versions instead of floating or outdated ones, and by upgrading reusable workflow versions across multiple templates.
Workflow action version upgrades:
actions/checkoutandactions/setup-nodeto explicit versionv6.0.0instead ofv4inworkflow-templates/check-pr-title.yaml,workflow-templates/ci.yaml, andworkflow-templates/snyk-monitor.yaml. [1] [2] [3]@masterto the stable@v1.0.0release in Node.js and PHP security workflows (.github/workflows/nodejs-security.yaml,.github/workflows/php-security.yml,.github/workflows/php-library-security.yml, andworkflow-templates/snyk-monitor.yaml). [1] [2] [3] [4]Reusable workflow version upgrades:
nodejs-lint.yaml,nodejs-test.yaml,nodejs-build.yaml,upload-to-s3.yaml,update-lambda-function.yaml,nodejs-publish.yaml,php-library-security.yml,php-library-static.yml,php-library-tests.yml,php-security.yml,php-static.yml,php-tests.yml,terraform-static-full.yaml, andterraform-static.yaml) to use the latestv5.10.0version (or equivalent) instead of older versions likev4.1.1orv5.0.6. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]Security and code scanning improvements:
octokit/graphql-actionfromv2.xtov3.0.0andgithub/codeql-action/upload-sariffromv2tov3in PHP security workflows for improved compatibility and features. [1] [2] [3] [4]These updates help ensure that workflows are more secure, predictable, and benefit from the latest features and fixes.
Related issue: n/a
Before submitting (or marking as "ready for review")