From bbdeee00f7733fb5702e2eafa0348dae422b66f7 Mon Sep 17 00:00:00 2001 From: Jason Cameron Date: Sun, 30 Nov 2025 22:03:39 -0500 Subject: [PATCH] fix: pin Node.js and Go versions in CI configuration files (#1318) fixes cache poisoning issues --- .github/workflows/asset-verification.yml | 5 ++--- .github/workflows/docker-pr.yml | 5 ++--- .github/workflows/docker.yml | 5 ++--- .github/workflows/go-mod-tidy-check.yml | 4 ++-- .github/workflows/go.yml | 5 ++--- .github/workflows/package-builds-stable.yml | 5 ++--- .github/workflows/package-builds-unstable.yml | 5 ++--- .github/workflows/smoke-tests.yml | 5 ++--- .github/workflows/ssh-ci.yml | 2 +- 9 files changed, 17 insertions(+), 24 deletions(-) diff --git a/.github/workflows/asset-verification.yml b/.github/workflows/asset-verification.yml index 9413ca7..34bd72d 100644 --- a/.github/workflows/asset-verification.yml +++ b/.github/workflows/asset-verification.yml @@ -24,11 +24,10 @@ jobs: - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: - node-version: latest - + node-version: '24.11.0' - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - name: install node deps run: | diff --git a/.github/workflows/docker-pr.yml b/.github/workflows/docker-pr.yml index 2906ff3..9bd28ae 100644 --- a/.github/workflows/docker-pr.yml +++ b/.github/workflows/docker-pr.yml @@ -28,11 +28,10 @@ jobs: - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: - node-version: latest - + node-version: '24.11.0' - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index a9e1106..f74ab60 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -38,11 +38,10 @@ jobs: - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: - node-version: latest - + node-version: '24.11.0' - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 diff --git a/.github/workflows/go-mod-tidy-check.yml b/.github/workflows/go-mod-tidy-check.yml index 494c025..fb66e06 100644 --- a/.github/workflows/go-mod-tidy-check.yml +++ b/.github/workflows/go-mod-tidy-check.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - name: Check go.mod and go.sum in main directory run: | @@ -73,4 +73,4 @@ jobs: exit 1 fi - echo "SUCCESS: go.mod and go.sum in test directory are tidy" \ No newline at end of file + echo "SUCCESS: go.mod and go.sum in test directory are tidy" diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index cd9a05c..dc6da63 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -26,11 +26,10 @@ jobs: - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: - node-version: latest - + node-version: '24.11.0' - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - name: Cache playwright binaries uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 diff --git a/.github/workflows/package-builds-stable.yml b/.github/workflows/package-builds-stable.yml index 1f849c4..3a9878c 100644 --- a/.github/workflows/package-builds-stable.yml +++ b/.github/workflows/package-builds-stable.yml @@ -27,11 +27,10 @@ jobs: - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: - node-version: latest - + node-version: '24.11.0' - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - name: install node deps run: | diff --git a/.github/workflows/package-builds-unstable.yml b/.github/workflows/package-builds-unstable.yml index ef10f0b..7cfd0ee 100644 --- a/.github/workflows/package-builds-unstable.yml +++ b/.github/workflows/package-builds-unstable.yml @@ -28,11 +28,10 @@ jobs: - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: - node-version: latest - + node-version: '24.11.0' - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - name: install node deps run: | diff --git a/.github/workflows/smoke-tests.yml b/.github/workflows/smoke-tests.yml index 5b3ddb5..2a81c5b 100644 --- a/.github/workflows/smoke-tests.yml +++ b/.github/workflows/smoke-tests.yml @@ -35,11 +35,10 @@ jobs: - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: - node-version: latest - + node-version: '24.11.0' - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9 diff --git a/.github/workflows/ssh-ci.yml b/.github/workflows/ssh-ci.yml index d3a8661..df84cb7 100644 --- a/.github/workflows/ssh-ci.yml +++ b/.github/workflows/ssh-ci.yml @@ -37,7 +37,7 @@ jobs: - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: - go-version: stable + go-version: '1.25.4' - name: Run CI run: go run ./utils/cmd/backoff-retry bash test/ssh-ci/rigging.sh ${{ matrix.host }}