diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml index 8cdb80e..b616bf7 100644 --- a/.github/workflows/build-android.yml +++ b/.github/workflows/build-android.yml @@ -12,16 +12,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 20.x cache: 'npm' - name: Setup Expo and EAS - uses: expo/expo-github-action@v8 + uses: expo/expo-github-action@v9 with: expo-version: latest eas-version: latest @@ -48,7 +48,7 @@ jobs: EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: build-artifacts @@ -63,10 +63,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 20.x cache: 'npm' @@ -98,7 +98,7 @@ jobs: echo "npm版本: $(npm --version)" >> build-report.txt - name: Upload build report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: build-report path: build-report.txt diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ac23c89..c6d9831 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,15 +20,15 @@ jobs: timeout-minutes: 5 steps: - name: Harden Runner - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Set up Node - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: "20" @@ -42,12 +42,12 @@ jobs: - name: Install pnpm if: steps.pm.outputs.pm == 'pnpm' - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.1.0 + uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v4.1.0 with: version: 9 - name: Cache deps - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: | node_modules @@ -94,15 +94,15 @@ jobs: timeout-minutes: 15 steps: - name: Harden Runner - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Set up Node - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: "20" @@ -116,12 +116,12 @@ jobs: - name: Install pnpm if: steps.pm.outputs.pm == 'pnpm' - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.1.0 + uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v4.1.0 with: version: 9 - name: Cache deps - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: | node_modules diff --git a/.github/workflows/deploy-web.yml b/.github/workflows/deploy-web.yml index 2f5a549..ba9c28e 100644 --- a/.github/workflows/deploy-web.yml +++ b/.github/workflows/deploy-web.yml @@ -20,10 +20,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 20 cache: npm @@ -88,7 +88,7 @@ jobs: ls -la dist | head -5 - name: Upload artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@v5 with: path: ./dist @@ -101,8 +101,8 @@ jobs: needs: build steps: - name: Setup Pages - uses: actions/configure-pages@v4 + uses: actions/configure-pages@v6 - name: Deploy id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@v5 diff --git a/.github/workflows/eas-build.yml b/.github/workflows/eas-build.yml index d6bdee7..cd8f9b3 100644 --- a/.github/workflows/eas-build.yml +++ b/.github/workflows/eas-build.yml @@ -28,16 +28,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: 'npm' - name: Setup Expo and EAS - uses: expo/expo-github-action@v8 + uses: expo/expo-github-action@v9 with: expo-version: latest eas-version: latest @@ -63,7 +63,7 @@ jobs: echo "See BUILD_APK.md for instructions on how to build locally!" >> build-status.txt - name: Upload Report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: build-info path: build-status.txt diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml index e8e9eed..bd806cc 100644 --- a/.github/workflows/gitleaks.yml +++ b/.github/workflows/gitleaks.yml @@ -19,12 +19,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout (full history) - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Run gitleaks - uses: gitleaks/gitleaks-action@v2 + uses: gitleaks/gitleaks-action@v3 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITLEAKS_ENABLE_UPLOAD_ARTIFACT: true diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml index c29e3de..793e4a1 100644 --- a/.github/workflows/verify.yml +++ b/.github/workflows/verify.yml @@ -16,10 +16,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: 'npm' @@ -47,7 +47,7 @@ jobs: echo "3. Repository: https://github.com/badhope/TaskFlow" >> verification-report.txt - name: Upload Report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: verification-report path: verification-report.txt