From b3909c67219d4fa0bbe5fe4b4d29f36839a781ad Mon Sep 17 00:00:00 2001 From: Boshen Date: Mon, 18 May 2026 22:05:35 +0800 Subject: [PATCH 1/2] ci: use taiki-e/checkout-action for plain checkouts Replace actions/checkout with the lighter taiki-e/checkout-action in workflows that don't need fetch-depth or submodules. zizmor.yml and prepare_release.yml are left on actions/checkout since they rely on features taiki-e/checkout-action doesn't support. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/deny.yml | 6 ++---- .github/workflows/test-standalone-install.yml | 4 +--- .github/workflows/update-trusted-stack-stats.yml | 4 +--- .github/workflows/upgrade-deps.yml | 4 +--- 4 files changed, 5 insertions(+), 13 deletions(-) diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml index 9cad139902..db922a2e27 100644 --- a/.github/workflows/deny.yml +++ b/.github/workflows/deny.yml @@ -27,15 +27,13 @@ jobs: name: Cargo Deny runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - persist-credentials: false + - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2 - name: Output rolldown hash id: upstream-versions run: node -e "console.log('ROLLDOWN_HASH=' + require('./packages/tools/.upstream-versions.json').rolldown.hash)" >> $GITHUB_OUTPUT - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2 with: repository: rolldown/rolldown path: rolldown diff --git a/.github/workflows/test-standalone-install.yml b/.github/workflows/test-standalone-install.yml index c132187e73..8ac80c140b 100644 --- a/.github/workflows/test-standalone-install.yml +++ b/.github/workflows/test-standalone-install.yml @@ -562,9 +562,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - persist-credentials: false + - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2 - name: Verify minimumReleaseAge blocks non-interactive install shell: powershell diff --git a/.github/workflows/update-trusted-stack-stats.yml b/.github/workflows/update-trusted-stack-stats.yml index aaff5ab218..cd566a9cc1 100644 --- a/.github/workflows/update-trusted-stack-stats.yml +++ b/.github/workflows/update-trusted-stack-stats.yml @@ -19,9 +19,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - persist-credentials: false + - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: diff --git a/.github/workflows/upgrade-deps.yml b/.github/workflows/upgrade-deps.yml index 2958a95a5d..590f709c42 100644 --- a/.github/workflows/upgrade-deps.yml +++ b/.github/workflows/upgrade-deps.yml @@ -15,9 +15,7 @@ jobs: actions: read id-token: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - persist-credentials: false + - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2 - uses: ./.github/actions/clone - name: Set up metadata directory From 993b54a5306fd4e8c11d6700a38b63afb8f5d922 Mon Sep 17 00:00:00 2001 From: Boshen Date: Mon, 18 May 2026 22:08:11 +0800 Subject: [PATCH 2/2] ci(deny): revert external rolldown checkout to actions/checkout MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit taiki-e/checkout-action accepts no inputs (repository, path, ref are not supported — confirmed by CI failure on previous commit). Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/deny.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml index db922a2e27..7e62ccb678 100644 --- a/.github/workflows/deny.yml +++ b/.github/workflows/deny.yml @@ -33,11 +33,12 @@ jobs: id: upstream-versions run: node -e "console.log('ROLLDOWN_HASH=' + require('./packages/tools/.upstream-versions.json').rolldown.hash)" >> $GITHUB_OUTPUT - - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: repository: rolldown/rolldown path: rolldown ref: ${{ steps.upstream-versions.outputs.ROLLDOWN_HASH }} + persist-credentials: false - uses: oxc-project/setup-rust@68c3199c5339f965e6e163924c3c450773eba42b # main (pending v1.0.17 — Swatinem/rust-cache v2.9.1 for node24) with: