Skip to content

ci: bump deprecated actions/checkout v2/v3 to v4 - #3952

Open
boleklebovski wants to merge 1 commit into
pyth-network:mainfrom
boleklebovski:chore/bump-deprecated-checkout-actions
Open

ci: bump deprecated actions/checkout v2/v3 to v4#3952
boleklebovski wants to merge 1 commit into
pyth-network:mainfrom
boleklebovski:chore/bump-deprecated-checkout-actions

Conversation

@boleklebovski

@boleklebovski boleklebovski commented Aug 6, 2026

Copy link
Copy Markdown

Problem

.github/workflows/ currently spans four actions/checkout majors:

Version Workflows
v2 22
v3 4
v4 21
v5 5
pinned SHA 1

actions/checkout@v2 runs on the Node 12 runtime, which GitHub has removed, and @v3 on the deprecated Node 16 runtime. Both emit deprecation annotations on every run today.

Fix

Bump the 26 workflows still on v2 or v3 to @v4. Nothing else changes — no job names, triggers, inputs or steps are touched, and every edit is the version string alone.

On the target version

I aligned on v4 because it is the version most of this repo already uses (21 workflows). The repo also has 5 workflows on v5 and one SHA pin, so if you would rather standardise everything on v5 — or on a pinned SHA — say the word and I will retarget this branch; it is a mechanical find-and-replace either way.

I deliberately left the SHA-pinned workflow alone, since that pin looks intentional.

Verification

All 53 workflow files re-parsed as YAML after the change. grep confirms no checkout@v2 or @v3 reference remains; the only versions left are v4, v5 and the intentional SHA pin.


Open in Devin Review

v2 runs on the removed Node 12 runtime and v3 on the deprecated Node 16
runtime. Align them with the v4 already used by 21 other workflows.

Signed-off-by: boleklebovski <160799963+boleklebovski@users.noreply.github.com>
@boleklebovski
boleklebovski requested a review from a team as a code owner August 6, 2026 12:06
@vercel

vercel Bot commented Aug 6, 2026

Copy link
Copy Markdown

@boleklebovski is attempting to deploy a commit to the Pyth Network Team on Vercel.

A member of the Team first needs to authorize it.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Open in Devin Review

working-directory: target_chains/fuel/contracts/
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v4

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Checkout step carries an input that belongs to the Rust toolchain action

This step passes cache-workspaces to actions/checkout, which is not a valid input for that action (it belongs to actions-rust-lang/setup-rust-toolchain, which this workflow does not even use). GitHub only emits an "Unexpected input(s)" warning rather than failing, so bumping v2 -> v4 does not change behavior, but the caching that was presumably intended never happens. The same misplaced input exists at .github/workflows/ci-solana-contract.yml:33-34, where a real setup-rust-toolchain step follows on line 35 without the option. Worth cleaning up while touching these files.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant