build: update all github actions#3561
Conversation
See associated pull request for more information.
angular-robot
added
action: merge
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates the actions/cache GitHub Action to version v5.0.4. The changes are functional and correctly update the dependency by pinning to the new commit SHA. My review includes suggestions to use version tags (e.g., v5.0.4) instead of commit SHAs for better readability and maintainability of the workflow file, which is a common best practice.
| steps: | ||
| - name: Configure action caching for bazel version downloaded by bazelisk | ||
| uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 | ||
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 |
There was a problem hiding this comment.
For improved readability and maintainability, consider using the version tag directly instead of the commit SHA. While pinning to a SHA is a secure practice, using a specific version tag like v5.0.4 is also secure against accidental updates and makes the workflow easier to understand at a glance.
uses: actions/cache@v5.0.4|
|
||
| - name: Configure action caching for bazel repository cache | ||
| uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 | ||
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 |
There was a problem hiding this comment.
For improved readability and maintainability, consider using the version tag directly instead of the commit SHA. While pinning to a SHA is a secure practice, using a specific version tag like v5.0.4 is also secure against accidental updates and makes the workflow easier to understand at a glance.
uses: actions/cache@v5.0.4
|
This PR was merged into the repository. The changes were merged into the following branches:
|
2 participants
This PR contains the following updates:
v5.0.3→v5.0.4v7.5.0→v7.6.0Release Notes
actions/cache (actions/cache)
v5.0.4Compare Source
What's Changed
New Contributors
Full Changelog: actions/cache@v5...v5.0.4
astral-sh/setup-uv (astral-sh/setup-uv)
v7.6.0: 🌈 Fetch uv from Astral's mirror by defaultCompare Source
Changes
We now default to download uv from
releases.astral.sh.This means by default we don't hit the GitHub API at all and shouldn't see any rate limits and timeouts any more.
🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates