Преглед изворни кода

Update github actions to newer versions (#1666)

Fixes https://github.com/hyperledger/solang/security/dependabot/5

Signed-off-by: Sean Young <sean@mess.org>
Sean Young пре 1 година
родитељ
комит
df692d5bc9
2 измењених фајлова са 54 додато и 54 уклоњено
  1. 6 6
      .github/workflows/release.yml
  2. 48 48
      .github/workflows/test.yml

+ 6 - 6
.github/workflows/release.yml

@@ -12,7 +12,7 @@ jobs:
     container: ghcr.io/hyperledger/solang-llvm:ci-7
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3.1.0
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - uses: dtolnay/rust-toolchain@1.74.0
@@ -34,7 +34,7 @@ jobs:
     if: ${{ github.repository_owner == 'hyperledger' }}
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3.1.0
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - name: Basic build tools
@@ -65,7 +65,7 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - name: Download LLVM
@@ -94,7 +94,7 @@ jobs:
     runs-on: macos-13-xlarge
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - uses: dtolnay/rust-toolchain@1.74.0
@@ -121,7 +121,7 @@ jobs:
     runs-on: macos-12
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - uses: dtolnay/rust-toolchain@1.74.0
@@ -165,7 +165,7 @@ jobs:
     runs-on: solang-ubuntu-latest
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - run: |
         echo ${{ secrets.GITHUB_TOKEN }} | docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
         docker buildx build . \

+ 48 - 48
.github/workflows/test.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: solang-ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Run repolinter
         run: npx repolinter --rulesetUrl https://raw.githubusercontent.com/hyperledger-labs/hyperledger-community-management-tools/master/repo_structure/repolint.json
       - uses: enarx/spdx@master
@@ -32,7 +32,7 @@ jobs:
           apt-get update
           apt-get install -y python3-pip git pkg-config libcairo-dev latexmk
       - name: Checkout sources
-        uses: actions/checkout@v3.1.0
+        uses: actions/checkout@v4
         with:
           # docs/conf.py uses `git describe --tags` which requires full history
           fetch-depth: 0
@@ -41,7 +41,7 @@ jobs:
         run: |
           # Without the --add safe.directory we get the following error:
           # fatal: detected dubious ownership in repository at '/__w/solang/solang'
-          # actions/checkout@v3.1.0 is supposed to fix this, but it does not work
+          # actions/checkout@v4 is supposed to fix this, but it does not work
           git config --global --add safe.directory "${GITHUB_WORKSPACE}"
           pip install -r requirements.txt
           make html epub
@@ -57,7 +57,7 @@ jobs:
       CARGO_LLVM_COV_TARGET_DIR: ${{ github.workspace }}/target
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - name: Install Rust
@@ -91,7 +91,7 @@ jobs:
       if: always()
       run: cargo llvm-cov --all-features --workspace --no-report --jobs 2
     - name: Upload binary
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
         name: solang-linux-x86-64
         path: ./target/debug/solang
@@ -102,7 +102,7 @@ jobs:
         tar -czvf rust-tests.tar.gz *
       working-directory: ./target
     - name: Upload test coverage files
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
         name: rust-tests.tar.gz
         path: ./target/rust-tests.tar.gz
@@ -113,7 +113,7 @@ jobs:
     if: ${{ github.repository_owner == 'hyperledger' }}
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - name: Basic build tools
@@ -131,7 +131,7 @@ jobs:
       run: cargo build --verbose
     - name: Run tests
       run: cargo test --verbose --workspace
-    - uses: actions/upload-artifact@v3.1.0
+    - uses: actions/upload-artifact@v4.4.0
       with:
         name: solang-linux-arm64
         path: ./target/debug/solang
@@ -141,7 +141,7 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - name: Download LLVM
@@ -163,7 +163,7 @@ jobs:
       run: cargo build --verbose
     - name: Run tests
       run: cargo test --verbose --workspace
-    - uses: actions/upload-artifact@v3.1.0
+    - uses: actions/upload-artifact@v4.4.0
       with:
         name: solang.exe
         path: C:/target/debug/solang.exe
@@ -176,7 +176,7 @@ jobs:
     runs-on: macos-13-xlarge
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - uses: dtolnay/rust-toolchain@1.74.0
@@ -192,7 +192,7 @@ jobs:
       run: cargo test --verbose --workspace
     - name: Run tests without wasm_opt
       run: cargo test --verbose --workspace --no-default-features --features language_server,llvm,soroban
-    - uses: actions/upload-artifact@v3.1.0
+    - uses: actions/upload-artifact@v4.4.0
       with:
         name: solang-mac-arm
         path: ./target/debug/solang
@@ -202,7 +202,7 @@ jobs:
     runs-on: macos-12
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
     - uses: dtolnay/rust-toolchain@1.74.0
@@ -216,7 +216,7 @@ jobs:
       run: cargo build --verbose
     - name: Run tests
       run: cargo test --verbose --workspace
-    - uses: actions/upload-artifact@v3.1.0
+    - uses: actions/upload-artifact@v4.4.0
       with:
         name: solang-mac-intel
         path: ./target/debug/solang
@@ -226,16 +226,16 @@ jobs:
     runs-on: macos-12
     needs: [mac-arm, mac-intel]
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-mac-intel
     - run: mv solang solang-mac-intel
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-mac-arm
     - run: mv solang solang-mac-arm
     - run: lipo -create -output solang-mac solang-mac-intel solang-mac-arm
-    - uses: actions/upload-artifact@v3.1.0
+    - uses: actions/upload-artifact@v4.4.0
       with:
         name: solang-mac
         path: solang-mac
@@ -245,7 +245,7 @@ jobs:
     runs-on: solang-ubuntu-latest
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - run: echo "push=--push" >> $GITHUB_OUTPUT
       id: push
       if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
@@ -263,14 +263,14 @@ jobs:
     needs: linux-x86-64
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
-    - uses: actions/setup-node@v3
+      uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
       with:
         node-version: '16'
     - uses: dtolnay/rust-toolchain@1.74.0
     - name: Setup yarn
       run: npm install -g yarn
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-linux-x86-64
         path: bin
@@ -302,7 +302,7 @@ jobs:
       run: anchor test --skip-local-validator
       working-directory: ./integration/anchor
     - name: Upload test coverage files
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
        name: anchor-tests
        path: ./target/*.profraw
@@ -314,12 +314,12 @@ jobs:
     needs: linux-x86-64
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
-    - uses: actions/setup-node@v3
+      uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
       with:
         node-version: '16'
     - uses: dtolnay/rust-toolchain@1.74.0
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-linux-x86-64
         path: bin
@@ -344,7 +344,7 @@ jobs:
       run: npm run test
       working-directory: ./integration/soroban
     - name: Upload test coverage files
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
         name: soroban-tests
         path: ./target/*.profraw
@@ -356,12 +356,12 @@ jobs:
     needs: linux-x86-64
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
-    - uses: actions/setup-node@v3
+      uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
       with:
         node-version: '16'
     - uses: dtolnay/rust-toolchain@1.74.0
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-linux-x86-64
         path: bin
@@ -382,7 +382,7 @@ jobs:
       run: npm run test
       working-directory: ./integration/solana
     - name: Upload test coverage files
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
         name: solana-tests
         path: ./target/*.profraw
@@ -393,7 +393,7 @@ jobs:
     needs: linux-x86-64
     steps:
     - name: Checkout sources
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         submodules: recursive
       # We can't run substrate node as a github actions service, since it requires
@@ -401,14 +401,14 @@ jobs:
     - name: Start substrate contracts node
       run: echo id=$(docker run -d -p 9944:9944 ghcr.io/hyperledger/solang-substrate-ci:62a8a6c substrate-contracts-node --dev --rpc-external -lwarn,runtime::contracts=trace) >> $GITHUB_OUTPUT
       id: substrate
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-linux-x86-64
         path: bin
     - run: |
         chmod 755 ./bin/solang
         echo "$(pwd)/bin" >> $GITHUB_PATH
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@v4
       with:
         node-version: '16'
     - run: npm install
@@ -423,7 +423,7 @@ jobs:
       run: npm run test
       working-directory: ./integration/polkadot
     - name: Upload test coverage files
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
         name: polkadot-tests
         path: ./target/*.profraw
@@ -443,7 +443,7 @@ jobs:
     - name: Start substrate
       run: echo id=$(docker run -d -p 9944:9944 ghcr.io/hyperledger/solang-substrate-ci:62a8a6c substrate-contracts-node --dev --rpc-external -lwarn,runtime::contracts=trace) >> $GITHUB_OUTPUT
       id: substrate
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-linux-x86-64
         path: bin
@@ -463,7 +463,7 @@ jobs:
       if: always()
       run: docker kill ${{steps.substrate.outputs.id}}
     - name: Upload test coverage files
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
         name: polkadot-subxt-tests
         path: ./target/*.profraw
@@ -474,8 +474,8 @@ jobs:
     needs: linux-x86-64
     steps:
     - name: Checkout
-      uses: actions/checkout@v3
-    - uses: actions/download-artifact@v3
+      uses: actions/checkout@v4
+    - uses: actions/download-artifact@v4.1.8
       with:
         name: solang-linux-x86-64
         path: bin
@@ -483,7 +483,7 @@ jobs:
         chmod 755 ./bin/solang
         echo "$(pwd)/bin" >> $GITHUB_PATH
     - name: Install Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: '16'
     - run: npm install
@@ -498,7 +498,7 @@ jobs:
     - run: vsce package
       working-directory: ./vscode
     - name: Upload test coverage files
-      uses: actions/upload-artifact@v3.1.0
+      uses: actions/upload-artifact@v4.4.0
       with:
         name: vscode-tests
         path: ./target/*.profraw
@@ -508,7 +508,7 @@ jobs:
     runs-on: solang-ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Lints for stdlib
         run: |
           make lint
@@ -531,7 +531,7 @@ jobs:
       CARGO_LLVM_COV_TARGET_DIR: ${{ github.workspace }}/target
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
       - name: Install Rust
@@ -542,32 +542,32 @@ jobs:
       - name: Install cargo-llvm-cov
         uses: taiki-e/install-action@cargo-llvm-cov
       - name: Download Rust coverage files
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
          name: rust-tests.tar.gz
          path: ./target
       - name: Download Solana coverage files
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: solana-tests
           path: ./target
       - name: Download Polkadot coverage files
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: polkadot-tests
           path: ./target
       - name: Download Polkadot subxt coverage files
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: polkadot-subxt-tests
           path: ./target
       - name: Download Anchor coverage files
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: anchor-tests
           path: ./target
       - name: Download VSCode coverage files
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: vscode-tests
           path: ./target