Skip to content

Commit 37b44da

Browse files
github-actions[bot]github-actions[bot]
committed
Merge current main and preserve usage cache migrations
2 parents f282b4a + f255158 commit 37b44da

322 files changed

Lines changed: 10709 additions & 2488 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/actions/setup-ci-deps/action.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ runs:
3535
- name: Cache Vite+
3636
id: vp_cache
3737
if: steps.vp.outputs.version != ''
38-
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
38+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
3939
with:
4040
path: ~/.vite-plus
4141
key: vite-plus-home-v2-${{ runner.os }}-${{ runner.arch }}-${{ steps.vp.outputs.version }}-node${{ steps.vp.outputs.node }}-${{ steps.vp.outputs.pnpm }}
@@ -56,7 +56,7 @@ runs:
5656
# partial bytes, so a shorter limit costs a slow download only a retry.
5757
- name: Setup Vite+
5858
if: steps.vp_cache.outputs.cache-hit != 'true'
59-
uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1
59+
uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
6060
env:
6161
VP_DOWNLOAD_TIMEOUT: "120"
6262
with:
@@ -92,7 +92,7 @@ runs:
9292
- name: Restore pnpm store
9393
id: pnpm_cache
9494
if: inputs.install == 'true'
95-
uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
95+
uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
9696
with:
9797
path: ${{ steps.pnpm_store.outputs.path }}
9898
key: pnpm-${{ steps.pnpm_store.outputs.namespace }}-v1-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('pnpm-lock.yaml', 'pnpm-workspace.yaml', 'package.json') }}
@@ -106,7 +106,7 @@ runs:
106106
- name: Restore lockfile verification
107107
id: pnpm_verified
108108
if: inputs.install == 'true'
109-
uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
109+
uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
110110
with:
111111
path: ${{ steps.pnpm_store.outputs.verified }}
112112
key: pnpm-verified-v1-${{ hashFiles('pnpm-lock.yaml', 'pnpm-workspace.yaml', 'package.json') }}
@@ -121,7 +121,7 @@ runs:
121121

122122
- name: Save lockfile verification
123123
if: inputs.install == 'true' && steps.pnpm_verified.outputs.cache-hit != 'true'
124-
uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
124+
uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
125125
with:
126126
path: ${{ steps.pnpm_store.outputs.verified }}
127127
key: ${{ steps.pnpm_verified.outputs.cache-primary-key }}
@@ -138,7 +138,7 @@ runs:
138138
steps.pnpm_cache.outputs.cache-hit != 'true' &&
139139
(steps.pnpm_store.outputs.namespace == 'full' ||
140140
steps.pnpm_cache.outputs.cache-matched-key != format('pnpm-full-v1-{0}-{1}-{2}', runner.os, runner.arch, hashFiles('pnpm-lock.yaml', 'pnpm-workspace.yaml', 'package.json')))
141-
uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
141+
uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
142142
with:
143143
path: ${{ steps.pnpm_store.outputs.path }}
144144
key: ${{ steps.pnpm_cache.outputs.cache-primary-key }}

‎.github/workflows/agent-context-budget.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
ALLOW_INCREASE: ${{ contains(github.event.pull_request.labels.*.name, 'agent-context-increase') }}
2525
steps:
2626
- name: Checkout
27-
uses: actions/checkout@v6
27+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
2828
with:
2929
sparse-checkout: apps/server/src/provider/agentContextBudget.json
3030
sparse-checkout-cone-mode: false

‎.github/workflows/ci.yml‎

Lines changed: 23 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
# Only the package manifests the script reads to build the dependency graph.
4040
# Depth 2 brings the base commit the change is diffed against.
4141
- name: Checkout
42-
uses: actions/checkout@v6
42+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
4343
with:
4444
fetch-depth: 2
4545
sparse-checkout: |
@@ -68,7 +68,7 @@ jobs:
6868
timeout-minutes: 10
6969
steps:
7070
- name: Checkout
71-
uses: actions/checkout@v6
71+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
7272
with:
7373
sparse-checkout: |
7474
/*
@@ -92,7 +92,7 @@ jobs:
9292
# electron's install.js (run by ensure:electron) reads this cache before it
9393
# downloads from GitHub. The key changes only with the Electron version.
9494
- name: Cache Electron download
95-
uses: actions/cache@v6
95+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
9696
with:
9797
path: ~/.cache/electron
9898
key: electron-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('node_modules/.pnpm/electron@*/node_modules/electron/package.json') }}
@@ -124,7 +124,7 @@ jobs:
124124
timeout-minutes: 10
125125
steps:
126126
- name: Checkout
127-
uses: actions/checkout@v6
127+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
128128
with:
129129
sparse-checkout: |
130130
/*
@@ -161,7 +161,7 @@ jobs:
161161
# electron's install.js (run by ensure:electron) reads this cache before it
162162
# downloads from GitHub. The key changes only with the Electron version.
163163
- name: Cache Electron download
164-
uses: actions/cache@v6
164+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
165165
with:
166166
path: ~/.cache/electron
167167
key: electron-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('node_modules/.pnpm/electron@*/node_modules/electron/package.json') }}
@@ -213,7 +213,7 @@ jobs:
213213
214214
- name: Upload desktop launch check
215215
if: ${{ failure() && steps.desktop_launch.outcome == 'failure' }}
216-
uses: actions/upload-artifact@v7
216+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
217217
with:
218218
name: desktop-launch-check
219219
path: ${{ runner.temp }}/desktop-launch-check
@@ -231,7 +231,7 @@ jobs:
231231
- name: Cache Chromium
232232
id: chromium_cache
233233
if: ${{ !cancelled() && steps.build.outcome == 'success' && needs.changes.outputs.test_web != 'false' }}
234-
uses: actions/cache@v6
234+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
235235
with:
236236
path: ~/.cache/ms-playwright
237237
key: playwright-chromium-shell-${{ runner.os }}-${{ runner.arch }}-${{ steps.playwright_version.outputs.version }}
@@ -279,7 +279,7 @@ jobs:
279279
timeout-minutes: 10
280280
steps:
281281
- name: Checkout
282-
uses: actions/checkout@v6
282+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
283283
with:
284284
sparse-checkout: |
285285
/*
@@ -314,7 +314,7 @@ jobs:
314314
# electron's install.js (run by ensure:electron) reads this cache before it
315315
# downloads from GitHub. The key changes only with the Electron version.
316316
- name: Cache Electron download
317-
uses: actions/cache@v6
317+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
318318
with:
319319
path: ~/.cache/electron
320320
key: electron-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('node_modules/.pnpm/electron@*/node_modules/electron/package.json') }}
@@ -373,7 +373,7 @@ jobs:
373373
shard: [1, 2]
374374
steps:
375375
- name: Checkout
376-
uses: actions/checkout@v6
376+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
377377
with:
378378
sparse-checkout: |
379379
/*
@@ -394,7 +394,7 @@ jobs:
394394

395395
- name: Cache Chromium
396396
id: chromium_cache
397-
uses: actions/cache@v6
397+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
398398
with:
399399
path: ~/.cache/ms-playwright
400400
key: playwright-chromium-shell-${{ runner.os }}-${{ runner.arch }}-${{ steps.playwright_version.outputs.version }}
@@ -438,7 +438,7 @@ jobs:
438438
steps:
439439
# Depth 2 brings the base commit the change is diffed against.
440440
- name: Checkout
441-
uses: actions/checkout@v6
441+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
442442
with:
443443
fetch-depth: 2
444444
sparse-checkout: |
@@ -469,7 +469,7 @@ jobs:
469469
- name: Cache Chromium
470470
id: chromium_cache
471471
if: steps.changes.outputs.test_server != 'false'
472-
uses: actions/cache@v6
472+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
473473
with:
474474
path: ~/.cache/ms-playwright
475475
key: playwright-chromium-shell-${{ runner.os }}-${{ runner.arch }}-${{ steps.playwright_version.outputs.version }}
@@ -492,7 +492,7 @@ jobs:
492492
# Only pushes to main save it, so pull requests never evict each other's entries.
493493
- name: Restore Vitest module cache
494494
if: steps.changes.outputs.test_server != 'false'
495-
uses: actions/cache/restore@v6
495+
uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
496496
with:
497497
path: node_modules/.vitest-cache
498498
key: vitest-modules-server-${{ matrix.shard }}-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.sha }}
@@ -511,7 +511,7 @@ jobs:
511511
512512
- name: Save Vitest module cache
513513
if: github.event_name == 'push' && steps.changes.outputs.test_server != 'false'
514-
uses: actions/cache/save@v6
514+
uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
515515
with:
516516
path: node_modules/.vitest-cache
517517
key: vitest-modules-server-${{ matrix.shard }}-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.sha }}
@@ -541,7 +541,7 @@ jobs:
541541
542542
- name: Upload thread transfer result
543543
if: always() && steps.transfer_budget.outputs.present == 'true'
544-
uses: actions/upload-artifact@v7
544+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
545545
with:
546546
name: thread-transfer-results
547547
path: |
@@ -560,7 +560,7 @@ jobs:
560560
timeout-minutes: 10
561561
steps:
562562
- name: Checkout
563-
uses: actions/checkout@v6
563+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
564564
with:
565565
sparse-checkout: |
566566
/*
@@ -569,8 +569,9 @@ jobs:
569569
sparse-checkout-cone-mode: false
570570

571571
- name: Setup Rust
572-
uses: dtolnay/rust-toolchain@stable
572+
uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
573573
with:
574+
toolchain: stable
574575
components: rustfmt
575576

576577
- name: Check Rust formatting
@@ -593,15 +594,15 @@ jobs:
593594
timeout-minutes: 10
594595
steps:
595596
- name: Checkout
596-
uses: actions/checkout@v6
597+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
597598
with:
598599
sparse-checkout: |
599600
/*
600601
!/.repos/
601602
sparse-checkout-cone-mode: false
602603

603604
- name: Setup Vite+
604-
uses: voidzero-dev/setup-vp@v1
605+
uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
605606
with:
606607
node-version-file: package.json
607608
cache: true
@@ -626,7 +627,7 @@ jobs:
626627
timeout-minutes: 15
627628
steps:
628629
- name: Checkout
629-
uses: actions/checkout@v6
630+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
630631
with:
631632
sparse-checkout: |
632633
/*
@@ -684,7 +685,7 @@ jobs:
684685
# server tests ran must have produced it.
685686
- name: Require transfer measurements
686687
if: needs.test_server.result == 'success' && needs.changes.outputs.test_server != 'false'
687-
uses: actions/download-artifact@v8
688+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
688689
with:
689690
name: thread-transfer-results
690691
path: ${{ runner.temp }}/thread-transfer

‎.github/workflows/deploy-relay.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -51,15 +51,15 @@ jobs:
5151
ALCHEMY_TELEMETRY_DISABLED: "1"
5252
steps:
5353
- name: Checkout
54-
uses: actions/checkout@v6
54+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
5555
with:
5656
sparse-checkout: |
5757
/*
5858
!/.repos/
5959
sparse-checkout-cone-mode: false
6060

6161
- name: Setup Vite+
62-
uses: voidzero-dev/setup-vp@v1
62+
uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
6363
with:
6464
node-version-file: package.json
6565
cache: true
@@ -83,7 +83,7 @@ jobs:
8383
T3CHAT_LINK_SECRET: ${{ secrets.T3CHAT_LINK_SECRET }}
8484

8585
- name: Publish relay deploy commit status
86-
uses: actions/github-script@v8
86+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
8787
with:
8888
script: |
8989
await github.rest.repos.createCommitStatus({

‎.github/workflows/desktop-macos-preview-publish.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
steps:
5656
- id: pr
5757
name: Resolve the pull request behind the build
58-
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
58+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
5959
with:
6060
script: |
6161
const run = context.payload.workflow_run;
@@ -134,7 +134,7 @@ jobs:
134134
- id: vouch
135135
name: Check PR author trust
136136
if: steps.pr.outputs.eligible == 'true'
137-
uses: mitchellh/vouch/action/check-user@d66fa29a64600490892131ad87597c30c91fcac4 # v1
137+
uses: mitchellh/vouch/action/check-user@d66fa29a64600490892131ad87597c30c91fcac4 # v1.5.0
138138
with:
139139
user: ${{ steps.pr.outputs.author }}
140140
allow-fail: true
@@ -149,7 +149,7 @@ jobs:
149149
- id: consume
150150
name: Consume the preview label
151151
if: steps.pr.outputs.eligible == 'true'
152-
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
152+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
153153
env:
154154
PR_NUMBER: ${{ steps.pr.outputs.pr_number }}
155155
with:
@@ -271,7 +271,7 @@ jobs:
271271
# Only validated bundle files cross into the signing job's artifact.
272272
- name: Stage JS bundle for packaging
273273
if: steps.gate.outputs.eligible == 'true'
274-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
274+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
275275
with:
276276
name: js-bundle
277277
path: ${{ runner.temp }}/js-bundle
@@ -338,7 +338,7 @@ jobs:
338338
pull-requests: write
339339
steps:
340340
- name: Download macOS artifacts
341-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
341+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
342342
with:
343343
name: desktop-mac-arm64
344344
path: release
@@ -431,7 +431,7 @@ jobs:
431431
432432
- name: Comment download link
433433
if: steps.upload.outputs.download_url != ''
434-
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
434+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
435435
env:
436436
PR_NUMBER: ${{ needs.resolve.outputs.pr_number }}
437437
DOWNLOAD_URL: ${{ steps.upload.outputs.download_url }}
@@ -552,7 +552,7 @@ jobs:
552552
553553
- name: Mark the preview comment as removed
554554
if: steps.delete.outputs.removed == 'true'
555-
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
555+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
556556
with:
557557
script: |
558558
const marker = "<!-- desktop-macos-preview -->";

‎.github/workflows/desktop-macos-preview.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
git checkout --detach FETCH_HEAD
5151
5252
- name: Setup Vite+
53-
uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1
53+
uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
5454
with:
5555
node-version-file: package.json
5656
cache: true
@@ -98,7 +98,7 @@ jobs:
9898
# Same layout as release.yml's js-bundle so release-desktop.yml can
9999
# package it unchanged.
100100
- name: Upload JS bundle
101-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
101+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
102102
with:
103103
name: js-bundle
104104
path: |

‎.github/workflows/issue-labels.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
runs-on: ubuntu-24.04
1919
steps:
2020
- name: Ensure managed issue labels exist
21-
uses: actions/github-script@v7
21+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
2222
with:
2323
script: |
2424
const managedLabels = [

‎.github/workflows/mobile-android-apk.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
3838
- name: Checkout
3939
if: steps.credentials.outputs.present == 'true'
40-
uses: actions/checkout@v6
40+
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
4141
with:
4242
sparse-checkout: .github/scripts
4343

0 commit comments

Comments
 (0)