Repository navigation
ci: upgrade outdated actions and cache deps in PR Checks (master) #5150
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -23,7 +23,7 @@ jobs: | |||||
| if: ${{ github.repository == 'wailsapp/wails' && github.base_ref == 'master' }} | ||||||
| runs-on: ubuntu-latest | ||||||
| steps: | ||||||
| - uses: actions/checkout@v3 | ||||||
| - uses: actions/checkout@v4 | ||||||
|
|
||||||
| - name: Verify Changed files | ||||||
| uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1 | ||||||
|
|
@@ -59,20 +59,27 @@ jobs: | |||||
|
|
||||||
| steps: | ||||||
| - name: Checkout code | ||||||
| uses: actions/checkout@v3 | ||||||
| uses: actions/checkout@v4 | ||||||
|
|
||||||
| - name: Install linux dependencies (22.04) | ||||||
| uses: awalsh128/cache-apt-pkgs-action@latest | ||||||
| if: matrix.os == 'ubuntu-22.04' | ||||||
| run: sudo apt-get update -y && sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.0-dev build-essential pkg-config | ||||||
| with: | ||||||
| packages: libgtk-3-dev libwebkit2gtk-4.0-dev build-essential pkg-config | ||||||
| version: 1.0 | ||||||
|
|
||||||
| - name: Install linux dependencies (24.04) | ||||||
| uses: awalsh128/cache-apt-pkgs-action@latest | ||||||
| if: matrix.os == 'ubuntu-24.04' | ||||||
| run: sudo apt-get update -y && sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev build-essential pkg-config | ||||||
| with: | ||||||
| packages: libgtk-3-dev libwebkit2gtk-4.1-dev build-essential pkg-config | ||||||
|
||||||
| packages: libgtk-3-dev libwebkit2gtk-4.1-dev build-essential pkg-config | |
| packages: libgtk-3-dev libwebkit2gtk-4.1-dev libegl1 build-essential pkg-config |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
awalsh128/cache-apt-pkgs-actionis referenced via the mutable@latesttag. This can introduce supply-chain risk and make CI non-deterministic if the action changes or is re-published. Prefer pinning to an immutable ref (a release tag like@v1if maintained, or a commit SHA) and bump intentionally when upgrading.