fix(ci): fix build workflow (#2736)

dependabot[bot] · web-flow · commit 0ec255ff5b03 · 2026-03-30T16:42:18.000+02:00
diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1.1.1
+        uses: dependabot/fetch-metadata@v3.0.0
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
       - name: Approve a PR
diff --git a/.github/workflows/auto-merge-dependabot.yml b/.github/workflows/auto-merge-dependabot.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1.1.1
+        uses: dependabot/fetch-metadata@v3.0.0
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
       - name: Enable auto-merge for Dependabot PRs
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -2,19 +2,23 @@ name: Build
 on:
   push:
     branches: [master]
+  pull_request:
+    types: [opened, synchronize, reopened, edited]
 jobs:
   build:
     runs-on: ubuntu-latest
-    container:
-      image: node:24.14
     steps:
-    - uses: actions/checkout@v4.1.0
+    - uses: actions/checkout@v6
+    - uses: actions/setup-node@v6
+      with:
+        node-version-file: .nvmrc
+        cache: 'yarn'
     - name: restore_cache
-      uses: actions/cache@v4.3.0
+      uses: actions/cache@v5
       with:
-        key: yarn-packages-{{ .Branch }}-{{ checksum "yarn.lock" }}
+        key: yarn-packages-${{ github.ref_name }}-${{ hashFiles('yarn.lock') }}
         path: node_modules/
-        restore-keys: yarn-packages-{{ .Branch }}-{{ checksum "yarn.lock" }}
+        restore-keys: yarn-packages-${{ github.ref_name }}-
     - name: Install Dependencies
       run: yarn --frozen-lockfile
     - name: Lint the codebase
@@ -24,29 +28,48 @@ jobs:
     - name: Run build
       run: yarn build
   harness-macos:
-    if: startsWith(github.ref, 'refs/tags/v') && github.ref != 'refs/heads/master'
     runs-on: macos-latest
     env:
       executor: macos
       install_manually: true
     steps:
-    - uses: maxim-lobanov/setup-xcode@v1.6.0
+    - uses: maxim-lobanov/setup-xcode@v1.7.0
       with:
-        xcode-version: 13.4.1
-    - uses: actions/checkout@v4.1.0
+        xcode-version: latest-stable
+    - uses: actions/checkout@v6
     - uses: actions/setup-node@v6
       with:
         node-version-file: .nvmrc
         cache: 'yarn'
-    - run: pip3 install pipenv gunicorn
+    - uses: actions/setup-python@v5
+      with:
+        python-version: '3.12'
+    - name: Set up Python virtual environment
+      run: |
+        python3 -m venv venv
+        . venv/bin/activate
+        pip install --upgrade pip
+        pip install pipenv gunicorn
+        pipenv --version  # Verify pipenv is installed
+        gunicorn --version  # Verify gunicorn is installed
       if: env.install_manually
     - run: sudo bash -c 'echo "0.0.0.0 httpbin.org" >> /etc/hosts'
       if: env.install_manually
     - run: git clone https://github.com/stoplightio/httpbin httpbin
       if: env.install_manually
-    - run: cd httpbin && pip3 install --no-cache-dir -r <(pipenv requirements) && pip3 install --no-cache-dir ./
+    - run: |
+        cd httpbin
+        . ../venv/bin/activate
+        pipenv requirements > requirements.txt
+        pip install --no-cache-dir -r requirements.txt
+        pip install --no-cache-dir ./
       if: env.install_manually
-    - run: cd httpbin && gunicorn -b 0.0.0.0:80 httpbin:app -k gevent
+    - run: |
+        cd httpbin
+        . ../venv/bin/activate
+        gunicorn -b 0.0.0.0:80 httpbin:app -k gevent &
+        sleep 15
+        curl -I http://0.0.0.0:80
       if: env.install_manually
     - name: Install Dependencies
       run: yarn --frozen-lockfile
@@ -56,22 +79,45 @@ jobs:
       run: yarn test.harness
   harness-docker:
     runs-on: ubuntu-latest
-    container:
-      image: node:24.14
     env:
       executor: docker-harness
       install_manually: true
     steps:
-    - uses: actions/checkout@v4.1.0
-    - run: pip3 install pipenv gunicorn
+    - uses: actions/checkout@v6
+    - uses: actions/setup-node@v6
+      with:
+        node-version-file: .nvmrc
+        cache: 'yarn'
+    - name: Install Python and required packages
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y python3 python3-pip python3-venv
+    - name: Set up Python virtual environment
+      run: |
+        python3 -m venv venv
+        . venv/bin/activate
+        pip install --upgrade pip
+        pip install pipenv gunicorn
+        pipenv --version  # Verify pipenv is installed
+        gunicorn --version  # Verify gunicorn is installed
       if: env.install_manually
     - run: sudo bash -c 'echo "0.0.0.0 httpbin.org" >> /etc/hosts'
       if: env.install_manually
-    - run: git clone REDACTED://github.com/stoplightio/httpbin httpbin
+    - run: git clone https://github.com/stoplightio/httpbin httpbin
       if: env.install_manually
-    - run: cd httpbin && pip3 install --no-cache-dir -r <(pipenv requirements) && pip3 install --no-cache-dir ./
+    - run: |
+        cd httpbin
+        . ../venv/bin/activate
+        pipenv requirements > requirements.txt
+        pip3 install --no-cache-dir -r requirements.txt
+        pip3 install --no-cache-dir ./
       if: env.install_manually
-    - run: cd httpbin && gunicorn -b 0.0.0.0:80 httpbin:app -k gevent
+    - run: |
+        cd httpbin
+        . ../venv/bin/activate
+        sudo $(which gunicorn) -b 0.0.0.0:80 httpbin:app -k gevent &
+        sleep 15
+        curl -I http://0.0.0.0:80
       if: env.install_manually
     - name: Install Dependencies
       run: yarn --frozen-lockfile
@@ -82,14 +128,16 @@ jobs:
   publish:
     if: startsWith(github.ref, 'refs/tags/v') && github.ref != 'refs/heads/master'
     runs-on: ubuntu-latest
-    container:
-      image: node:24.14
     needs:
     - build
     - harness-macos
     - harness-docker
     steps:
-    - uses: actions/checkout@v4.1.0
+    - uses: actions/checkout@v6
+    - uses: actions/setup-node@v6
+      with:
+        node-version-file: .nvmrc
+        cache: 'yarn'
     - name: Set git identity
       run: git config user.email "circle@circleci.com" && git config user.name "circleci"
     - name: Install Dependencies
@@ -101,7 +149,7 @@ jobs:
       run: yarn lerna publish from-git --create-release=github --yes
     - name: Create CLI binaries
       run: npx @yao-pkg/pkg --out-path ./cli-binaries --options max_old_space_size=4096 ./packages/cli/
-    - uses: actions/upload-artifact@v4.1.0
+    - uses: actions/upload-artifact@v7
       with:
         path: "./cli-binaries"
   upload_artifacts:
@@ -112,7 +160,7 @@ jobs:
     needs:
     - publish
     steps:
-    - uses: actions/download-artifact@v4.1.3
+    - uses: actions/download-artifact@v8
       with:
         path: "/tmp/"
     - name: Download GitHub Release Utility
diff --git a/.github/workflows/build_pr.yml b/.github/workflows/build_pr.yml
diff --git a/.github/workflows/markdown-links.yml b/.github/workflows/markdown-links.yml
@@ -9,7 +9,7 @@ jobs:
   markdown-link-check:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 1
     - uses: gaurav-nelson/github-action-markdown-link-check@v1
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
@@ -14,6 +14,6 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
       tag_name: ${{ steps.release.outputs.tag_name }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
