Files
ruff/.github/workflows/update-known-checksums.yml
T
Kevin StillhammerandGitHub 70c5336f5b chore(deps): roll up dependency updates (#428)
## Summary
- Update CodeQL init, autobuild, and analyze to 4.37.6 (#417, #418,
#419).
- Update actions/setup-node to 7.0.0 (#403).
- Update @actions/core to 3.0.1 (#405) and @types/node to 26.1.1 (#407).
- No changes needed for #354, #317, or #316: their updates are already
represented on main.
- Exclude TypeScript #406: TypeScript 7 breaks the current ts-jest,
which requires TypeScript <6.

## Validation
- `npm run all` passed: build, Biome, packaging, and all 99 tests across
7 suites.
- No generated bundle changes.
- `git diff --check` passed.

Refs: pi-session 01a15ec4-888a-73e1-9f84-da48940488a6
2026-10-21 14:13:48 +00:00

44 lines
1.4 KiB
YAML

name: "Update known checksums"
on:
workflow_dispatch:
schedule:
- cron: "0 4 * * *" # Run every day at 4am UTC
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version-file: .nvmrc
cache: npm
- name: Update known checksums
id: update-known-checksums
run:
node dist/update-known-checksums/index.cjs
src/download/checksum/known-checksums.json ${{ secrets.GITHUB_TOKEN }}
- run: |
npm ci --ignore-scripts
npm audit signatures
npm run all
- name: Create Pull Request
uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
with:
commit-message: "chore: update known checksums"
title:
"chore: update known checksums for ${{
steps.update-known-checksums.outputs.latest-version }}"
body:
"chore: update known checksums for ${{
steps.update-known-checksums.outputs.latest-version }}"
base: main
labels: "automated-pr,update-known-checksums"
branch: update-known-checksums-pr
delete-branch: true