From 23c867cce88cce1a63c4ee3cd8d0db87cb929324 Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Sun, 5 Apr 2026 10:07:28 +0300 Subject: [PATCH 1/8] upgrading actions that are using old interpreters and compilers. --- .github/workflows/ci.yml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b3298175e7..ecf055a4de 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -12,7 +12,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Install greadlink if: startsWith(runner.os, 'macOS') run: brew install coreutils @@ -26,11 +26,11 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v5 with: - python-version: 3.8 + python-version: 3.12 - name: Install docs dependencies run: python3 -m pip install -r docs/requirements.txt - name: Build the docs @@ -40,15 +40,15 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Set up Go - uses: actions/setup-go@v4 + uses: actions/setup-go@v5 with: - go-version: 1.21.0 + go-version: 1.26.1 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v5 with: - python-version: 3.8 + python-version: 3.12 - name: Install shfmt run: go install mvdan.cc/sh/v3/cmd/shfmt@latest - name: Install shellcheck @@ -71,7 +71,7 @@ jobs: steps: - name: Repository checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: fetch-depth: 0 From 781b84343897c1d13cfcde7f357b563f2b883ab3 Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Sun, 5 Apr 2026 10:17:29 +0300 Subject: [PATCH 2/8] also time to update sphinx? --- docs/requirements.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/requirements.txt b/docs/requirements.txt index 7b7fcdd1ff..177ebc1ae9 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -1,4 +1,4 @@ -sphinx==4.5.0 -sphinx-rtd-theme==0.5.0 -sphinxemoji==0.1.8 -docutils==0.17.1 +sphinx>=5.0 +sphinx-rtd-theme>=0.5.0 +sphinxemoji>=0.1.8 +docutils>=0.17.1 From 2fe59b118729a89e02c2b70a3918b0d453c0fbda Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Sun, 5 Apr 2026 10:21:37 +0300 Subject: [PATCH 3/8] also time to update pre-commit --- test/lint-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/lint-requirements.txt b/test/lint-requirements.txt index 72224bf87c..f3b1d68a48 100644 --- a/test/lint-requirements.txt +++ b/test/lint-requirements.txt @@ -1 +1 @@ -pre-commit==2.3.0 +pre-commit>=3.5.0 From df60a1559da4563579cf0ec40a5a391babfd3546 Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Sun, 5 Apr 2026 10:27:32 +0300 Subject: [PATCH 4/8] recommended precaution by co-pilot --- .github/workflows/ci.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ecf055a4de..d4fa5246e4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,7 +18,9 @@ jobs: run: brew install coreutils - name: Install parallel if: startsWith(runner.os, 'macOS') - run: brew install parallel + run: | + brew install parallel + which parallel # Verify installation - name: Test code run: test/run From 8c0ffa6ddd62c02e901e75faa0a2a820935e395f Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Sun, 5 Apr 2026 10:48:58 +0300 Subject: [PATCH 5/8] even v6? --- .github/workflows/ci.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d4fa5246e4..f81f888b4c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -12,7 +12,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Install greadlink if: startsWith(runner.os, 'macOS') run: brew install coreutils @@ -28,9 +28,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: 3.12 - name: Install docs dependencies @@ -42,13 +42,13 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v6 with: go-version: 1.26.1 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: 3.12 - name: Install shfmt @@ -73,7 +73,7 @@ jobs: steps: - name: Repository checkout - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 From 348a51ddbbbaf89ace0a0c86361cf8570c7ab707 Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Sun, 5 Apr 2026 12:29:23 +0300 Subject: [PATCH 6/8] lock strict versions --- .github/workflows/ci.yml | 2 +- docs/requirements.txt | 8 ++++---- test/lint-requirements.txt | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f81f888b4c..5b50ceeb65 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -79,6 +79,6 @@ jobs: - id: ShellCheck name: Differential ShellCheck - uses: redhat-plumbers-in-action/differential-shellcheck@v5 + uses: redhat-plumbers-in-action/differential-shellcheck@d965e66ec0b3b2f821f75c8eff9b12442d9a7d1e # v5.5.6 with: token: ${{ secrets.GITHUB_TOKEN }} diff --git a/docs/requirements.txt b/docs/requirements.txt index 177ebc1ae9..dcd9b19a1c 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -1,4 +1,4 @@ -sphinx>=5.0 -sphinx-rtd-theme>=0.5.0 -sphinxemoji>=0.1.8 -docutils>=0.17.1 +sphinx==9.1.0 +sphinx-rtd-themer==3.1.0 +sphinxemoji==0.3.2 +docutils==0.22.4 diff --git a/test/lint-requirements.txt b/test/lint-requirements.txt index f3b1d68a48..fc23792238 100644 --- a/test/lint-requirements.txt +++ b/test/lint-requirements.txt @@ -1 +1 @@ -pre-commit>=3.5.0 +pre-commit==4.5.1 From dbef151e379c1158364363982beeec4874301197 Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Sun, 5 Apr 2026 12:29:23 +0300 Subject: [PATCH 7/8] lock strict versions --- .github/workflows/ci.yml | 2 +- docs/requirements.txt | 8 ++++---- test/lint-requirements.txt | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f81f888b4c..5b50ceeb65 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -79,6 +79,6 @@ jobs: - id: ShellCheck name: Differential ShellCheck - uses: redhat-plumbers-in-action/differential-shellcheck@v5 + uses: redhat-plumbers-in-action/differential-shellcheck@d965e66ec0b3b2f821f75c8eff9b12442d9a7d1e # v5.5.6 with: token: ${{ secrets.GITHUB_TOKEN }} diff --git a/docs/requirements.txt b/docs/requirements.txt index 177ebc1ae9..2a806fe0ab 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -1,4 +1,4 @@ -sphinx>=5.0 -sphinx-rtd-theme>=0.5.0 -sphinxemoji>=0.1.8 -docutils>=0.17.1 +sphinx==9.1.0 +sphinx-rtd-theme==3.1.0 +sphinxemoji==0.3.2 +docutils==0.22.4 diff --git a/test/lint-requirements.txt b/test/lint-requirements.txt index f3b1d68a48..fc23792238 100644 --- a/test/lint-requirements.txt +++ b/test/lint-requirements.txt @@ -1 +1 @@ -pre-commit>=3.5.0 +pre-commit==4.5.1 From 800156ae50239831e06c3183e7ef2d6f617d9868 Mon Sep 17 00:00:00 2001 From: Ira Abramov Date: Mon, 6 Apr 2026 07:26:52 +0300 Subject: [PATCH 8/8] actions on full lockdown --- .github/workflows/ci.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5b50ceeb65..1cba9e6d84 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -12,7 +12,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install greadlink if: startsWith(runner.os, 'macOS') run: brew install coreutils @@ -28,9 +28,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Set up Python - uses: actions/setup-python@v6 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: 3.12 - name: Install docs dependencies @@ -42,13 +42,13 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6 with: go-version: 1.26.1 - name: Set up Python - uses: actions/setup-python@v6 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: 3.12 - name: Install shfmt @@ -73,7 +73,7 @@ jobs: steps: - name: Repository checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: fetch-depth: 0