Skip to content

⬆️(ci) upgrade GitHub Actions workflow steps to latest versions#552

Open
StephanMeijer wants to merge 1 commit intosuitenumerique:mainfrom
StephanMeijer:feature/github-workflow-steps-update
Open

⬆️(ci) upgrade GitHub Actions workflow steps to latest versions#552
StephanMeijer wants to merge 1 commit intosuitenumerique:mainfrom
StephanMeijer:feature/github-workflow-steps-update

Conversation

@StephanMeijer
Copy link
Contributor

Purpose / Proposal

I was looking into adding Docker build support for linux/arm64 in several repositories of https://github.com/suitenumerique. During that, I noticed several repositories have outdated GitHub Workflow steps. This pull request has the purpose to update them.

External contributions

  • I have read and followed the contributing guidelines
  • I have read and agreed to the Code of Conduct
  • I have signed off my commits with git commit --signoff (DCO compliance)
  • I have signed my commits with my SSH or GPG key (git commit -S)
  • My commit messages follow the required format: <gitmoji>(type) title description
  • I have added a changelog entry under ## [Unreleased] section (if noticeable change)
  • I have added corresponding tests for new features or bug fixes (if applicable)

Testing happens when GitHub Workflows are being executed.


The creation of this pull request was done semi-automatically. I did automate a bunch, but I reviewed all changes manually to check if they are backwards compatible.

@socket-security
Copy link

socket-security bot commented Feb 19, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm entities is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: ?npm/entities@4.5.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/entities@4.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@StephanMeijer
Copy link
Contributor Author

This PR relates to other PR's:

Project Pull Request
suitenumerique/calc suitenumerique/calc#15
suitenumerique/conversations suitenumerique/conversations#297
suitenumerique/docs suitenumerique/docs#1902
suitenumerique/e2esdk suitenumerique/e2esdk#2
suitenumerique/find suitenumerique/find#55
suitenumerique/projects suitenumerique/projects#63
suitenumerique/meet suitenumerique/meet#984
suitenumerique/meet-whisperx suitenumerique/meet-whisperx#27
suitenumerique/meet-kyutai-moshi-stt suitenumerique/meet-kyutai-moshi-stt#3
suitenumerique/hackdays suitenumerique/hackdays#3
suitenumerique/people suitenumerique/people#1072
suitenumerique/django-lasuite suitenumerique/django-lasuite#63
suitenumerique/ui-kit suitenumerique/ui-kit#172
suitenumerique/messages suitenumerique/messages#555
suitenumerique/drive #552
suitenumerique/st-deploycenter suitenumerique/st-deploycenter#39
suitenumerique/st-home suitenumerique/st-home#54
suitenumerique/hackdays2025 suitenumerique/hackdays2025#202

@StephanMeijer
Copy link
Contributor Author

StephanMeijer commented Feb 19, 2026

✅ I manually reviewed this PR and it should work just fine.

Update all GitHub Actions to their latest major versions for improved
performance, security patches, and Node.js runtime compatibility.

Signed-off-by: Stephan Meijer <me@stephanmeijer.com>
@StephanMeijer StephanMeijer force-pushed the feature/github-workflow-steps-update branch from 8e6dadb to 592549b Compare February 23, 2026 10:51
@sonarqubecloud
Copy link

@StephanMeijer
Copy link
Contributor Author

Rebased this branch on the latest target branch and force-pushed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant