This is an automated email from the ASF dual-hosted git repository.

erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-docs.git


The following commit(s) were added to refs/heads/master by this push:
     new f58ba3850c chore(workflow): update actions & configs (#1512)
f58ba3850c is described below

commit f58ba3850c6bc2a8af8295bc03be14b33a9aa0e1
Author: エリス <[email protected]>
AuthorDate: Wed Jul 8 01:21:54 2026 +0900

    chore(workflow): update actions & configs (#1512)
    
    - Update all actions to latest
    - Use pinned actions (sha)
    - sets persist-credentials to false for actions/checkout
---
 .github/workflows/ci.yml           | 10 ++++++----
 .github/workflows/deploy-prod.yml  | 11 +++++------
 .github/workflows/deploy-stage.yml | 11 +++++------
 3 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c5e14d0061..b503a840e0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,13 +30,15 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 
v7.0.0
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # 
v6.4.0
         with:
           node-version: 24.x
 
-      # v1.278.0
-      - uses: ruby/setup-ruby@4c24fa5ec04b2e79eb40571b1cee2a0d2b705771
+      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 
v1.316.0
         with:
           ruby-version: 2.7
           bundler-cache: true
diff --git a/.github/workflows/deploy-prod.yml 
b/.github/workflows/deploy-prod.yml
index bf98e2e460..dba7158317 100644
--- a/.github/workflows/deploy-prod.yml
+++ b/.github/workflows/deploy-prod.yml
@@ -27,16 +27,16 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 
v7.0.0
         with:
+          persist-credentials: false
           ref: master
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # 
v6.4.0
         with:
           node-version: 24.x
 
-      # v1.278.0
-      - uses: ruby/setup-ruby@4c24fa5ec04b2e79eb40571b1cee2a0d2b705771
+      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 
v1.316.0
         with:
           ruby-version: 2.7
           bundler-cache: true
@@ -47,9 +47,8 @@ jobs:
       - name: Run build
         run: npm run build:prod
 
-      # v4.8.0
       - name: Run deploy
-        uses: 
JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f
+        uses: 
JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # 
v4.8.0
         with:
           branch: asf-site
           folder: build-prod
diff --git a/.github/workflows/deploy-stage.yml 
b/.github/workflows/deploy-stage.yml
index 65199468f8..7c8122df08 100644
--- a/.github/workflows/deploy-stage.yml
+++ b/.github/workflows/deploy-stage.yml
@@ -32,16 +32,16 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 
v7.0.0
         with:
+          persist-credentials: false
           ref: master
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # 
v6.4.0
         with:
           node-version: 24.x
 
-      # v1.278.0
-      - uses: ruby/setup-ruby@4c24fa5ec04b2e79eb40571b1cee2a0d2b705771
+      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 
v1.316.0
         with:
           ruby-version: 2.7
           bundler-cache: true
@@ -52,9 +52,8 @@ jobs:
       - name: Run build
         run: npm run build:prod
 
-      # v4.8.0
       - name: Run deploy
-        uses: 
JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f
+        uses: 
JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # 
v4.8.0
         with:
           branch: asf-staging
           folder: build-prod


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to