Skip to content

Commit 26b8758

Browse files
mmastracmmastrac
authored
Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1 (#92757)
## What - Pin all `actions/upload-artifact` references to `v7.0.1` (`043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`) - Pin all `actions/download-artifact` references to `v8.0.1` (`3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`) - Full SHA commit hashes - Consistent across all 7 workflow files
1 parent ddd625d commit 26b8758

7 files changed

Lines changed: 26 additions & 26 deletions

‎.github/workflows/build_and_deploy.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -334,20 +334,20 @@ jobs:
334334
335335
- name: Upload turbopack bytesize artifact
336336
if: ${{ steps.check-did-build.outputs.DID_BUILD == 'true' }}
337-
uses: actions/upload-artifact@v6
337+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
338338
with:
339339
name: turbopack-bytesize-${{ matrix.target }}
340340
path: turbopack-bin-size/*
341341

342342
- name: Upload swc artifact
343-
uses: actions/upload-artifact@v6
343+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
344344
with:
345345
name: next-swc-binaries-${{ matrix.target }}
346346
path: packages/next-swc/native/next-swc.*.node
347347

348348
- name: Upload turbo summary artifact
349349
if: ${{ !matrix.docker }}
350-
uses: actions/upload-artifact@v6
350+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
351351
with:
352352
name: turbo-run-summary-${{ matrix.target }}
353353
path: .turbo/runs
@@ -394,13 +394,13 @@ jobs:
394394
run: '[[ -d "crates/wasm/pkg" ]] && mv crates/wasm/pkg crates/wasm/pkg-${{ matrix.target }} || ls crates/wasm'
395395

396396
- name: Upload turbo summary artifact
397-
uses: actions/upload-artifact@v6
397+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
398398
with:
399399
name: turbo-run-summary-wasm-${{matrix.target}}
400400
path: .turbo/runs
401401

402402
- name: Upload swc artifact
403-
uses: actions/upload-artifact@v6
403+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
404404
with:
405405
name: wasm-binaries-${{matrix.target}}
406406
path: crates/wasm/pkg-*
@@ -441,13 +441,13 @@ jobs:
441441
${{ github.sha }}-${{ github.run_number }}
442442
${{ github.sha }}-${{ github.run_number }}-${{ github.run_attempt}}
443443
444-
- uses: actions/download-artifact@v8
444+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
445445
with:
446446
pattern: next-swc-binaries-*
447447
merge-multiple: true
448448
path: packages/next-swc/native
449449

450-
- uses: actions/download-artifact@v8
450+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
451451
with:
452452
pattern: wasm-binaries-*
453453
merge-multiple: true
@@ -459,7 +459,7 @@ jobs:
459459
run: node scripts/create-preview-tarballs.js "${{ github.event.after || github.sha }}" "${{ runner.temp }}/preview-tarballs"
460460

461461
- name: Upload tarballs
462-
uses: actions/upload-artifact@v6
462+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
463463
with:
464464
# Update all mentions of this name in vercel-packages when changing.
465465
name: preview-tarballs
@@ -506,13 +506,13 @@ jobs:
506506
${{ github.sha }}-${{ github.run_number }}
507507
${{ github.sha }}-${{ github.run_number }}-${{ github.run_attempt}}
508508
509-
- uses: actions/download-artifact@v8
509+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
510510
with:
511511
pattern: next-swc-binaries-*
512512
merge-multiple: true
513513
path: packages/next-swc/native
514514

515-
- uses: actions/download-artifact@v8
515+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
516516
with:
517517
pattern: wasm-binaries-*
518518
merge-multiple: true
@@ -585,7 +585,7 @@ jobs:
585585
.github
586586
587587
- name: Collect bytesize metrics
588-
uses: actions/download-artifact@v8
588+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
589589
with:
590590
pattern: turbopack-bytesize-*
591591
merge-multiple: true

‎.github/workflows/build_and_test.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -134,7 +134,7 @@ jobs:
134134
fi
135135
136136
- name: Upload test timings
137-
uses: actions/upload-artifact@v4
137+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
138138
with:
139139
name: test-timings
140140
path: test-timings.json

‎.github/workflows/build_reusable.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -267,7 +267,7 @@ jobs:
267267

268268
- name: Upload next-swc artifact
269269
if: ${{ inputs.uploadSwcArtifact == 'yes' }}
270-
uses: actions/upload-artifact@v4
270+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
271271
with:
272272
name: next-swc-binary
273273
path: packages/next-swc/native/next-swc.linux-x64-gnu.node
@@ -292,7 +292,7 @@ jobs:
292292

293293
- name: Download pre-built test timings
294294
if: ${{ inputs.testTimingsArtifact != '' }}
295-
uses: actions/download-artifact@v4
295+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
296296
with:
297297
name: ${{ inputs.testTimingsArtifact }}
298298

@@ -320,7 +320,7 @@ jobs:
320320

321321
- name: Upload test result artifacts
322322
if: ${{ inputs.testReportsArtifactPrefix != '' && inputs.afterBuild && always() }}
323-
uses: actions/upload-artifact@v4
323+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
324324
with:
325325
name: ${{ inputs.testReportsArtifactPrefix }}-${{ steps.var.outputs.input_step_key }}
326326
path: test/**/*.results.json
@@ -335,14 +335,14 @@ jobs:
335335

336336
- name: Upload Turborepo summary
337337
if: ${{ always() }}
338-
uses: actions/upload-artifact@v4
338+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
339339
with:
340340
name: turbo-run-summary-${{ steps.var.outputs.input_step_key }}
341341
path: .turbo/runs
342342
if-no-files-found: ignore
343343

344344
- name: Upload bundle analyzer artifacts
345-
uses: actions/upload-artifact@v4
345+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
346346
if: ${{ inputs.uploadAnalyzerArtifacts == 'yes' }}
347347
with:
348348
name: webpack bundle analysis stats-${{ steps.var.outputs.input_step_key }}
@@ -375,7 +375,7 @@ jobs:
375375
fi
376376
377377
- name: Upload Playwright Snapshots
378-
uses: actions/upload-artifact@v4
378+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
379379
if: ${{ inputs.afterBuild && always() }}
380380
with:
381381
name: test-playwright-snapshots-${{ steps.var.outputs.input_step_key }}

‎.github/workflows/integration_tests_reusable.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -161,7 +161,7 @@ jobs:
161161
token: ${{ secrets.GITHUB_TOKEN }}
162162

163163
- name: Store artifacts
164-
uses: actions/upload-artifact@v4
164+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
165165
with:
166166
name: test-results-${{ inputs.name }}
167167
path: |

‎.github/workflows/pull_request_stats.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ jobs:
6161
run: echo "DOCS_CHANGE<<EOF" >> $GITHUB_OUTPUT; echo "$(node scripts/run-for-change.mjs --not --type docs --exec echo 'nope')" >> $GITHUB_OUTPUT; echo 'EOF' >> $GITHUB_OUTPUT
6262
id: docs-change
6363

64-
- uses: actions/download-artifact@v4
64+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
6565
if: ${{ steps.docs-change.outputs.DOCS_CHANGE == 'nope' }}
6666
with:
6767
name: next-swc-binary
@@ -82,7 +82,7 @@ jobs:
8282

8383
- name: Upload stats results
8484
if: ${{ steps.docs-change.outputs.DOCS_CHANGE == 'nope' }}
85-
uses: actions/upload-artifact@v4
85+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8686
with:
8787
name: pr-stats-${{ matrix.bundler }}
8888
path: pr-stats-${{ matrix.bundler }}.json
@@ -104,7 +104,7 @@ jobs:
104104

105105
- name: Download all stats artifacts
106106
if: ${{ steps.docs-change.outputs.DOCS_CHANGE == 'nope' }}
107-
uses: actions/download-artifact@v4
107+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
108108
with:
109109
pattern: pr-stats-*
110110
path: stats-results

‎.github/workflows/setup-nextjs-build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ jobs:
6767
path: integration-test-data
6868

6969
- name: Download binary
70-
uses: actions/download-artifact@v4
70+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
7171
with:
7272
path: artifacts
7373

‎.github/workflows/test_e2e_deploy_release.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -98,7 +98,7 @@ jobs:
9898
fi
9999
100100
- name: Upload test timings
101-
uses: actions/upload-artifact@v4
101+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
102102
with:
103103
name: test-timings
104104
path: test-timings.json
@@ -238,7 +238,7 @@ jobs:
238238
.github
239239
240240
- name: Download test report artifacts
241-
uses: actions/download-artifact@v4
241+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
242242
with:
243243
pattern: test-reports-*
244244
path: test
@@ -279,7 +279,7 @@ jobs:
279279

280280
- name: Download adapter test result artifacts
281281
continue-on-error: true
282-
uses: actions/download-artifact@v4
282+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
283283
with:
284284
pattern: adapter-test-reports-*
285285
path: adapter-test-results

0 commit comments

Comments
 (0)