Skip to content

update several GitHub Actions workflows to use the latest versions#510

Merged
jamespepper81 merged 2 commits into
mainfrom
dev
Jan 27, 2026
Merged

update several GitHub Actions workflows to use the latest versions#510
jamespepper81 merged 2 commits into
mainfrom
dev

Conversation

@jamespepper81
Copy link
Copy Markdown
Contributor

This pull request updates several GitHub Actions workflows to use the latest versions of core actions and adds a new dependency to the project. The main focus is on improving CI reliability and ensuring compatibility with current action releases.

CI/CD Workflow Updates:

  • Updated all references to actions/checkout from version 4 to version 6 in .github/workflows/build.yml, .github/workflows/lint.yml, and .github/workflows/security.yml to ensure the latest features and security patches are used. [1] [2] [3] [4] [5] [6] [7] [8]
  • Updated actions/cache from version 4 to version 5 in .github/workflows/dependabot-cocoapods.yml for improved caching performance and reliability.

Dependency Management:

  • Added the yaml package (version ^2.8.2) to package.json to support YAML file parsing in the project.

jamespepper81 and others added 2 commits January 27, 2026 21:06
* fix: add yaml@2.x dependency to resolve postcss-load-config peer conflict (#505)

The postcss-load-config@6.0.1 (from tailwindcss) has an optional peer
dependency on yaml@^2.4.2. Without an explicit yaml@2.x in the dependency
tree, npm was incorrectly deduping to yaml@1.10.2, causing CI failures.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* ci(deps): bump actions/checkout from 4 to 6 (#488)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: James Pepper <james@bitsleuth.ai>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@jamespepper81 jamespepper81 merged commit 0d21393 into main Jan 27, 2026
33 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant