Tools and deps update #513
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Tools and deps update | |
| on: | |
| schedule: | |
| # Run once a week at 00:05 AM UTC on Sunday. | |
| - cron: 5 0 * * 0 | |
| workflow_dispatch: | |
| inputs: | |
| id: | |
| description: The ID of the job to run | |
| required: true | |
| default: all | |
| type: choice | |
| options: | |
| - all | |
| - acorn | |
| - acorn-walk | |
| - ada | |
| - amaro | |
| - brotli | |
| - c-ares | |
| - merve | |
| - corepack | |
| - googletest | |
| - gyp-next | |
| - histogram | |
| - icu | |
| - inspector_protocol | |
| - libuv | |
| - llhttp | |
| - minimatch | |
| - nbytes | |
| - nixpkgs-unstable | |
| - nghttp2 | |
| - nghttp3 | |
| - ngtcp2 | |
| - postject | |
| - root-certificates | |
| - simdjson | |
| - sqlite | |
| - test426-fixtures | |
| - undici | |
| - uvwasi | |
| - zlib | |
| - zstd | |
| env: | |
| PYTHON_VERSION: '3.14' | |
| permissions: | |
| contents: read | |
| jobs: | |
| tools-deps-update: | |
| if: github.repository == 'nodejs/node' || github.event_name == 'workflow_dispatch' | |
| # cannot use ubuntu-slim here because some update scripts require Docker | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false # Prevent other jobs from aborting if one fails | |
| matrix: | |
| include: | |
| - id: acorn | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-acorn.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: acorn-walk | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-acorn-walk.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: ada | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-ada.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: amaro | |
| subsystem: deps | |
| label: dependencies, strip-types | |
| run: | | |
| ./tools/dep_updaters/update-amaro.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: brotli | |
| subsystem: deps | |
| label: dependencies, zlib | |
| run: | | |
| ./tools/dep_updaters/update-brotli.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: c-ares | |
| subsystem: deps | |
| label: dependencies, cares | |
| run: | | |
| ./tools/dep_updaters/update-c-ares.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: merve | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-merve.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: corepack | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| make corepack-update | |
| echo "NEW_VERSION=$(node deps/corepack/dist/corepack.js --version)" >> $GITHUB_ENV | |
| - id: doc-kit | |
| subsystem: tools | |
| label: tools | |
| run: | | |
| ./tools/dep_updaters/update-doc.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: googletest | |
| subsystem: deps | |
| label: dependencies, test | |
| run: | | |
| ./tools/dep_updaters/update-googletest.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: gyp-next | |
| subsystem: tools | |
| label: tools, gyp | |
| run: | | |
| ./tools/dep_updaters/update-gyp-next.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: histogram | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-histogram.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: icu | |
| subsystem: deps | |
| label: dependencies, test, icu | |
| run: | | |
| ./tools/dep_updaters/update-icu.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: inspector_protocol | |
| subsystem: deps | |
| label: dependencies, inspector | |
| run: | | |
| ./tools/dep_updaters/update-inspector-protocol.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: libuv | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-libuv.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: llhttp | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-llhttp.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: minimatch | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-minimatch.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: nbytes | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-nbytes.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: nixpkgs-unstable | |
| subsystem: tools | |
| # dont-land labels are there so we can guarantee released versions of | |
| # Node.js can be built with the same env along the whole release line life – or | |
| # at least we can detect and document necessary updates. | |
| label: tools, dont-land-on-v20.x, dont-land-on-v22.x, dont-land-on-v24.x, dont-land-on-v25.x | |
| run: | | |
| ./tools/dep_updaters/update-nixpkgs-pin.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: nghttp2 | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-nghttp2.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: nghttp3 | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-nghttp3.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: ngtcp2 | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-ngtcp2.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: postject | |
| subsystem: deps,test | |
| label: test | |
| run: | | |
| ./tools/dep_updaters/update-postject.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: root-certificates | |
| subsystem: crypto | |
| label: crypto, notable-change | |
| run: | | |
| node ./tools/dep_updaters/update-root-certs.mjs -v -f "$GITHUB_ENV" | |
| - id: simdjson | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-simdjson.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: sqlite | |
| subsystem: deps | |
| label: dependencies, sqlite | |
| run: | | |
| ./tools/dep_updaters/update-sqlite.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: test426-fixtures | |
| subsystem: test | |
| label: test | |
| run: | | |
| bash tools/dep_updaters/update-test426-fixtures.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: undici | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-undici.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: uvwasi | |
| subsystem: deps | |
| label: dependencies | |
| run: | | |
| ./tools/dep_updaters/update-uvwasi.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: zlib | |
| subsystem: deps | |
| label: dependencies, zlib | |
| run: | | |
| ./tools/dep_updaters/update-zlib.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| - id: zstd | |
| subsystem: deps | |
| label: dependencies, zlib | |
| run: | | |
| ./tools/dep_updaters/update-zstd.sh > temp-output | |
| cat temp-output | |
| tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true | |
| rm temp-output | |
| steps: | |
| - name: Setup Git config | |
| run: | | |
| git config --global user.name "Node.js GitHub Bot" | |
| git config --global user.email "github-bot@iojs.org" | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| if: github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id | |
| with: | |
| persist-credentials: false | |
| - name: Set up Python ${{ env.PYTHON_VERSION }} | |
| if: | | |
| (matrix.id == 'icu' || matrix.id == 'inspector_protocol') && | |
| (github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id) | |
| uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 | |
| with: | |
| python-version: ${{ env.PYTHON_VERSION }} | |
| allow-prereleases: true | |
| - name: Set up Nix | |
| if: matrix.id == 'nixpkgs-unstable' && (github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id) | |
| uses: cachix/install-nix-action@2126ae7fc54c9df00dd18f7f18754393182c73cd # v31.9.1 | |
| - run: ${{ matrix.run }} | |
| if: github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GH_USER_TOKEN }} | |
| - name: Generate commit message if not set | |
| if: env.COMMIT_MSG == '' && (github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id) | |
| run: | | |
| echo "COMMIT_MSG=${{ matrix.subsystem }}: update ${{ matrix.id }} to ${{ env.NEW_VERSION }}" >> "$GITHUB_ENV" | |
| - uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0 | |
| if: github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id | |
| # Creates a PR or update the Action's existing PR, or | |
| # no-op if the base branch is already up-to-date. | |
| with: | |
| token: ${{ secrets.GH_USER_TOKEN }} | |
| branch: actions/tools-update-${{ matrix.id }} # Custom branch *just* for this Action. | |
| delete-branch: true | |
| commit-message: ${{ env.COMMIT_MSG }} | |
| labels: ${{ matrix.label }} | |
| title: '${{ matrix.subsystem }}: update ${{ matrix.id }} to ${{ env.NEW_VERSION }}' | |
| body: This is an automated update of ${{ matrix.id }} to ${{ env.NEW_VERSION }}. |