Skip to content

Conversation

@salmanmkc
Copy link
Contributor

Summary

Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.

Changes

Action Old Version(s) New Version Release Files
actions/attest-build-provenance v2 v3 Release dev-publish.yml, publish.yml
docker/login-action 74a5d14 5e57cd1 Release dev-publish.yml, publish.yml
docker/metadata-action 902fa8e c299e40 Release dev-publish.yml, publish.yml
graalvm/setup-graalvm 7f61f49 54b4f5a Release test.yml

Why upgrade?

Keeping GitHub Actions up to date ensures:

  • Security: Latest security patches and fixes
  • Features: Access to new functionality and improvements
  • Compatibility: Better support for current GitHub features
  • Performance: Optimizations and efficiency improvements

Security Note

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references.

Testing

These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
@salmanmkc salmanmkc force-pushed the upgrade-github-actions-node24-general branch from 397ad11 to 72f0892 Compare January 26, 2026 19:35
@antongolub antongolub merged commit 8c7c701 into google:main Jan 27, 2026
29 of 30 checks passed
Ayoub-Mabrouk pushed a commit to Ayoub-Mabrouk/zx that referenced this pull request Feb 3, 2026
Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
Co-authored-by: Anton Golub <antongolub@antongolub.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants