Skip to content

Upgrade GitHub Actions to latest versions#271

Merged
Pangjiping merged 1 commit intoalibaba:mainfrom
salmanmkc:upgrade-github-actions-node24-general
Feb 28, 2026
Merged

Upgrade GitHub Actions to latest versions#271
Pangjiping merged 1 commit intoalibaba:mainfrom
salmanmkc:upgrade-github-actions-node24-general

Conversation

@salmanmkc
Copy link
Contributor

Summary

Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.

Changes

Action Old Version(s) New Version Release Files
actions/upload-pages-artifact v3 v4 Release deploy-docs-pages.yml
astral-sh/setup-uv v5 v7 Release publish-python-sdks.yml, publish-server.yml, sdk-unit-tests.yml
gradle/actions/setup-gradle v4 v5 Release publish-java-sdks.yml, sdk-unit-tests.yml

Why upgrade?

Keeping GitHub Actions up to date ensures:

  • Security: Latest security patches and fixes
  • Features: Access to new functionality and improvements
  • Compatibility: Better support for current GitHub features
  • Performance: Optimizations and efficiency improvements

⚠️ Breaking Changes

  • actions/upload-pages-artifact (v3 → v4): Major version upgrade — review the release notes for breaking changes
  • gradle/actions/setup-gradle (v4 → v5): Major version upgrade — review the release notes for breaking changes
  • astral-sh/setup-uv (v5 → v7): Major version upgrade — review the release notes for breaking changes
    • ⚠️ Input pyproject-file was removed — if your workflow uses it, the step may fail
    • ⚠️ Input uv-file was removed — if your workflow uses it, the step may fail

Security Note

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references.

Testing

These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
Copilot AI review requested due to automatic review settings February 28, 2026 09:11
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades several GitHub Actions to their latest major versions across CI/CD workflows to gain security patches, new features, and performance improvements.

Changes:

  • astral-sh/setup-uv upgraded from v5 to v7 in four workflow files
  • gradle/actions/setup-gradle upgraded from v4 to v5 in two workflow files
  • actions/upload-pages-artifact upgraded from v3 to v4 in one workflow file

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.github/workflows/sdk-unit-tests.yml Updates setup-uv to v7 and setup-gradle to v5
.github/workflows/publish-server.yml Updates setup-uv to v7
.github/workflows/publish-python-sdks.yml Updates setup-uv to v7 across three job steps
.github/workflows/publish-java-sdks.yml Updates setup-gradle to v5
.github/workflows/deploy-docs-pages.yml Updates upload-pages-artifact to v4

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@Pangjiping Pangjiping merged commit 43110a0 into alibaba:main Feb 28, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants