Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/build-and-test.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ jobs:
steps:
# Check out repository $GITHUB_WORKSPACE
- name: Checkout Repo
uses: actions/checkout@v2
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
- name: setup yarn
uses: actions/setup-node@v4
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:
node-version: '20.11.0'

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Review: node-version: '20.11.0' here controls the Node version used to build and test the application code, which is intentionally distinct from the action runner's Node runtime being upgraded by this PR. This is correct as-is — no change needed unless the app itself is being migrated to Node 24.

cache: 'yarn'
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/docker-publish.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -14,26 +14,26 @@ jobs:
packages: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
- name: Get Package Version
id: version
run: |
echo "::set-output name=package_version::$(cat package.json | jq -r '.version')"

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Review: echo "::set-output name=package_version::..." is a pre-existing use of the deprecated set-output workflow command (replaced by $GITHUB_OUTPUT in 2022). Not introduced by this PR, but since this file is being touched it would be a good opportunity to update it to: echo "package_version=$(cat package.json | jq -r .version)" >> $GITHUB_OUTPUT

- name: Log in to the Container registry
uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Extract metadata (tags, labels) for Docker (UID2)
id: meta-uid2
uses: docker/metadata-action@818d4b7b91585d195f67373fd9cb0332e31a7175 # v4
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME_UID2 }}
tags: |
type=sha,prefix=${{ steps.version.outputs.package_version }}-,format=short
- name: Build and push Docker image (UID2)
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
with:
context: .
file: Dockerfile_uid2
Expand All @@ -43,13 +43,13 @@ jobs:
labels: ${{ steps.meta-uid2.outputs.labels }}
- name: Extract metadata (tags, labels) for Docker (EUID)
id: meta-euid
uses: docker/metadata-action@818d4b7b91585d195f67373fd9cb0332e31a7175 # v4
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME_EUID }}
tags: |
type=sha,prefix=${{ steps.version.outputs.package_version }}-,format=short
- name: Build and push Docker image (EUID)
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
with:
context: .
file: Dockerfile_euid
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-docker-image.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ jobs:
security-events: write
steps:
- name: Checkout Repo
uses: actions/checkout@v4
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
- name: Vulnerability Scan
uses: IABTechLab/uid2-shared-actions/actions/vulnerability_scan@v3
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-tc-portal-image.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ jobs:
security-events: write
steps:
- name: Checkout Repo
uses: actions/checkout@v4
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
- name: Vulnerability Scan
uses: IABTechLab/uid2-shared-actions/actions/vulnerability_scan@v3
with:
Expand Down