From 98a55a4ffe7dcf77c93c4dc14d5e26eb71b244d1 Mon Sep 17 00:00:00 2001 From: PJ Fanning Date: Mon, 13 Apr 2026 21:50:10 +0200 Subject: [PATCH 1/2] update CI actions (1.x) --- .github/workflows/dependency-graph.yml | 4 ++-- .github/workflows/format.yml | 2 +- .github/workflows/headers.yml | 8 ++++---- .github/workflows/link-validator.yml | 10 +++++----- .github/workflows/nightly.yml | 8 ++++---- .github/workflows/publish-1.0-docs.yml | 8 ++++---- .github/workflows/publish-1.0-snapshots.yml | 8 ++++---- .github/workflows/publish-1.1-docs.yml | 8 ++++---- .github/workflows/publish-1.1-snapshots.yml | 8 ++++---- .github/workflows/publish-1.3-docs.yml | 4 ++-- .github/workflows/publish.yml | 16 ++++++++-------- .github/workflows/validate-and-test.yml | 16 ++++++++-------- 12 files changed, 50 insertions(+), 50 deletions(-) diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml index de6b4efafe..92e84dd404 100644 --- a/.github/workflows/dependency-graph.yml +++ b/.github/workflows/dependency-graph.yml @@ -26,9 +26,9 @@ jobs: runs-on: ubuntu-latest if: github.repository == 'apache/pekko-http' steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - uses: scalacenter/sbt-dependency-submission@64084844d2b0a9b6c3765f33acde2fbe3f5ae7d3 # v3.1.0 with: modules-ignore: pekko-http-tests_3 pekko-http-docs_3 diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index 0530a45f7c..7a230d965a 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -30,7 +30,7 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout current branch (full) - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/headers.yml b/.github/workflows/headers.yml index 97e84e03a0..2f6e878802 100644 --- a/.github/workflows/headers.yml +++ b/.github/workflows/headers.yml @@ -28,19 +28,19 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup Java 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Enable jvm-opts run: cp .jvmopts-ci .jvmopts diff --git a/.github/workflows/link-validator.yml b/.github/workflows/link-validator.yml index 2e739649f7..0f8ce98e3b 100644 --- a/.github/workflows/link-validator.yml +++ b/.github/workflows/link-validator.yml @@ -22,7 +22,7 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Checkout GitHub merge if: github.event.pull_request @@ -32,19 +32,19 @@ jobs: # needs Java 8, see https://github.com/apache/pekko-http/pull/204#discussion_r1265279415 - name: Setup Java 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Setup Coursier - uses: coursier/setup-action@039f736548afa5411c1382f40a5bd9c2d30e0383 # v1.3.9 + uses: coursier/setup-action@fd1707a76b027efdfb66ca79318b4d29b72e5a02 # v3.0.0 - name: Enable jvm-opts run: cp .jvmopts-ci .jvmopts diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 8f27897463..61fe4747b8 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -26,22 +26,22 @@ jobs: PEKKO_VERSION: ['1.0.x', '1.1.x', '1.2.x'] steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true - name: Set up JDK ${{ matrix.JDK }} - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: ${{ matrix.JDK }} - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Cache Build Target uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 diff --git a/.github/workflows/publish-1.0-docs.yml b/.github/workflows/publish-1.0-docs.yml index 7c4462e94a..d9d5327b15 100644 --- a/.github/workflows/publish-1.0-docs.yml +++ b/.github/workflows/publish-1.0-docs.yml @@ -27,23 +27,23 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true ref: 1.0.x - name: Set up JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Build Documentation run: |- diff --git a/.github/workflows/publish-1.0-snapshots.yml b/.github/workflows/publish-1.0-snapshots.yml index 88a9ac58cc..441193ed09 100644 --- a/.github/workflows/publish-1.0-snapshots.yml +++ b/.github/workflows/publish-1.0-snapshots.yml @@ -20,23 +20,23 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true ref: 1.0.x - name: Set up JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Install graphviz run: sudo apt-get install -y graphviz diff --git a/.github/workflows/publish-1.1-docs.yml b/.github/workflows/publish-1.1-docs.yml index 997d81dad2..911b1f3d10 100644 --- a/.github/workflows/publish-1.1-docs.yml +++ b/.github/workflows/publish-1.1-docs.yml @@ -27,23 +27,23 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true ref: 1.1.x - name: Set up JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Build Documentation run: |- diff --git a/.github/workflows/publish-1.1-snapshots.yml b/.github/workflows/publish-1.1-snapshots.yml index 403fc6ba65..7ef6bb4ed8 100644 --- a/.github/workflows/publish-1.1-snapshots.yml +++ b/.github/workflows/publish-1.1-snapshots.yml @@ -20,23 +20,23 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true ref: 1.1.x - name: Set up JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Install graphviz run: sudo apt-get install -y graphviz diff --git a/.github/workflows/publish-1.3-docs.yml b/.github/workflows/publish-1.3-docs.yml index c242bea741..d3e36c9490 100644 --- a/.github/workflows/publish-1.3-docs.yml +++ b/.github/workflows/publish-1.3-docs.yml @@ -27,14 +27,14 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true ref: 1.3.x - name: Set up JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 92bd88601c..000470d4cf 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -29,22 +29,22 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true - name: Set up JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Install graphviz run: sudo apt-get install -y graphviz @@ -62,22 +62,22 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true - name: Set up JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Build Documentation run: |- diff --git a/.github/workflows/validate-and-test.yml b/.github/workflows/validate-and-test.yml index b222b5cd86..05dffac695 100644 --- a/.github/workflows/validate-and-test.yml +++ b/.github/workflows/validate-and-test.yml @@ -26,22 +26,22 @@ jobs: if: github.repository == 'apache/pekko-http' steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true - name: Set up Scala on JDK 8 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: 8 - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Cache Build Target uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 @@ -74,22 +74,22 @@ jobs: JDK: [8, 11] steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 fetch-tags: true - name: Set up JDK ${{ matrix.JDK }} - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin java-version: ${{ matrix.JDK }} - name: Install sbt - uses: sbt/setup-sbt@6c68d2fe8dfbc0a0534d70101baa2e0420e1a506 # v1.1.9 + uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - name: Cache Coursier cache - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.7 + uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Cache Build Target uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 From 1f55c4d10d7d8ed2c865c3b3f4e2d8d9e45badc3 Mon Sep 17 00:00:00 2001 From: PJ Fanning Date: Mon, 13 Apr 2026 21:53:44 +0200 Subject: [PATCH 2/2] more --- .github/workflows/dependency-graph.yml | 2 +- .github/workflows/nightly.yml | 2 +- .github/workflows/validate-and-test.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml index 92e84dd404..5a6e5ae6be 100644 --- a/.github/workflows/dependency-graph.yml +++ b/.github/workflows/dependency-graph.yml @@ -29,6 +29,6 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install sbt uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - - uses: scalacenter/sbt-dependency-submission@64084844d2b0a9b6c3765f33acde2fbe3f5ae7d3 # v3.1.0 + - uses: scalacenter/sbt-dependency-submission@f43202114d7522a4b233e052f82c2eea8d658134 # v3.2.1 with: modules-ignore: pekko-http-tests_3 pekko-http-docs_3 diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 61fe4747b8..d732526b29 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -44,7 +44,7 @@ jobs: uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Cache Build Target - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 with: path: project/**/target key: build-target-${{ hashFiles('**/*.sbt', 'project/build.properties', 'project/**/*.scala') }} diff --git a/.github/workflows/validate-and-test.yml b/.github/workflows/validate-and-test.yml index 05dffac695..375fb6ec37 100644 --- a/.github/workflows/validate-and-test.yml +++ b/.github/workflows/validate-and-test.yml @@ -44,7 +44,7 @@ jobs: uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Cache Build Target - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 with: path: project/**/target key: build-target-${{ hashFiles('**/*.sbt', 'project/build.properties', 'project/**/*.scala') }} @@ -92,7 +92,7 @@ jobs: uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 - name: Cache Build Target - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 with: path: project/**/target key: build-target-${{ hashFiles('**/*.sbt', 'project/build.properties', 'project/**/*.scala') }}