From 019380b9ad7f3bbcb9ec45fc35d368d16a8375a5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 May 2022 08:41:27 +0000 Subject: [PATCH 1/2] Bump actions/setup-node from 1.4.4 to 3.1.1 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 1.4.4 to 3.1.1. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v1.4.4...v3.1.1) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 24b894c..93a4d37 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -18,7 +18,7 @@ jobs: uses: actions/checkout@v3 - name: Set Node.js 10.x - uses: actions/setup-node@v1.4.4 + uses: actions/setup-node@v3.1.1 with: node-version: 10.x From 523ec982de87a258332ad9ab51719ac812f35192 Mon Sep 17 00:00:00 2001 From: per1234 Date: Wed, 4 May 2022 01:54:23 -0700 Subject: [PATCH 2/2] Use major version ref of `actions/setup-node` The `actions/setup-node` action is used in the GitHub Actions workflows as a convenient way to install Node.js A major version ref has been added to that repository. It will always point to the latest release of the "3" major version series. This means it is not necessary to do a full pin of the action version in use as before. Use of the major version ref will cause the workflow to use a stable version of the action, while also benefiting from ongoing development to the action up until such time as a new major release of an action is made. At that time we would need to evaluate whether any changes to the workflow are required by the breaking change that triggered the major release before manually updating the major ref (e.g., uses: `actions@setup-nodev4`). I think this approach strikes the right balance between stability and maintainability for these workflows. --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 93a4d37..ef331eb 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -18,7 +18,7 @@ jobs: uses: actions/checkout@v3 - name: Set Node.js 10.x - uses: actions/setup-node@v3.1.1 + uses: actions/setup-node@v3 with: node-version: 10.x