Skip to content

Updates GitHub Actions workflows to use the latest versions of key actions.#508

Merged
jamespepper81 merged 2 commits into
mainfrom
dev
Jan 27, 2026
Merged

Updates GitHub Actions workflows to use the latest versions of key actions.#508
jamespepper81 merged 2 commits into
mainfrom
dev

Conversation

@jamespepper81
Copy link
Copy Markdown
Contributor

This pull request primarily updates GitHub Actions workflows to use the latest versions of key actions and adds a new dependency to the project. The main focus is on maintaining up-to-date CI/CD workflows for improved security and reliability, as well as ensuring compatibility with the latest features and bug fixes.

GitHub Actions Workflow Updates:

  • Updated all occurrences of actions/checkout from version 4 to version 6 in .github/workflows/build.yml, .github/workflows/lint.yml, .github/workflows/security.yml, and .github/workflows/dependabot-cocoapods.yml for enhanced security and new features. [1] [2] [3] [4] [5] [6] [7] [8]
  • Updated actions/cache from version 4 to version 5 in .github/workflows/dependabot-cocoapods.yml to leverage the latest caching improvements.

Dependency Management:

  • Added the yaml package (version ^2.8.2) as a new dependency in package.json to support YAML file parsing or generation in the project.

jamespepper81 and others added 2 commits January 27, 2026 21:06
* fix: add yaml@2.x dependency to resolve postcss-load-config peer conflict (#505)

The postcss-load-config@6.0.1 (from tailwindcss) has an optional peer
dependency on yaml@^2.4.2. Without an explicit yaml@2.x in the dependency
tree, npm was incorrectly deduping to yaml@1.10.2, causing CI failures.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* ci(deps): bump actions/checkout from 4 to 6 (#488)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: James Pepper <james@bitsleuth.ai>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@jamespepper81 jamespepper81 merged commit 88c09ba into main Jan 27, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant