Upgrade GitHub Actions to latest versions#1925
Upgrade GitHub Actions to latest versions#1925salmanmkc wants to merge 1 commit intosuperset-sh:mainfrom
Conversation
Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
📝 WalkthroughWalkthroughThe pull request updates two GitHub workflow action versions: oven-sh/setup-bun from v1 to v2 in the build-desktop workflow, and the Fly.io deployment action from 1.3.0 to 1.6.0 in the deploy-preview workflow. No functional or control flow changes are introduced. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In @.github/workflows/deploy-preview.yml:
- Line 100: The workflow references a non-existent action version; update the
action reference "superfly/fly-pr-review-apps@1.6.0" to a valid published tag
(e.g., change to "superfly/fly-pr-review-apps@1.5.0" or
"superfly/fly-pr-review-apps@latest") in the deploy-preview workflow so the step
using superfly/fly-pr-review-apps resolves correctly.
|
|
||
| - name: Deploy Electric to Fly.io | ||
| uses: superfly/fly-pr-review-apps@1.3.0 | ||
| uses: superfly/fly-pr-review-apps@1.6.0 |
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
superfly/fly-pr-review-apps action 1.6.0 inputs required breaking changes
💡 Result:
- There is no
superfly/fly-pr-review-apps@1.6.0release/tag in the upstream repo. The newest published tag shown is1.5.0(Feb 27, 2025), plus a movinglatesttag pointing at the same commit. [1]
Required inputs (v1.5.0)
- No
with:inputs are required by the action definition. All inputs are optional. [2] - Required secret/environment: you must provide
FLY_API_TOKEN(typically via workflowenv:). The README documents this as required. [3]
Inputs available (v1.5.0)
From the action’s inputs: (all optional): name, image, config, build_args, build_secrets, region, org, path, postgres, secrets, vmsize, cpu, cpukind, memory, ha, launch_options. [2]
Notes from README:
namedefaults topr-{number}-{repo_org}-{repo_name}; if you set it, it must include the PR number (safety check). [3]
Breaking changes
- Since
1.6.0doesn’t exist upstream, there are no upstream “1.6.0 breaking changes” to list. The latest upstream tag is1.5.0. [1] - Also, no inputs are marked required in
action.yml, so there’s no “new required input” break at1.5.0. [2]
Sources: [1] GitHub tags for superfly/fly-pr-review-apps; [2] upstream action.yml at tag 1.5.0; [3] upstream README (inputs + required FLY_API_TOKEN).
Use a valid action version; 1.6.0 does not exist.
The action version superfly/fly-pr-review-apps@1.6.0 is not published upstream. The latest available version is 1.5.0 (released Feb 27, 2025). Update the action reference to @1.5.0 or use @latest.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In @.github/workflows/deploy-preview.yml at line 100, The workflow references a
non-existent action version; update the action reference
"superfly/fly-pr-review-apps@1.6.0" to a valid published tag (e.g., change to
"superfly/fly-pr-review-apps@1.5.0" or "superfly/fly-pr-review-apps@latest") in
the deploy-preview workflow so the step using superfly/fly-pr-review-apps
resolves correctly.
1 participant
Summary
Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.
Changes
oven-sh/setup-bunv1v2superfly/fly-pr-review-apps1.3.01.6.0Why upgrade?
Keeping GitHub Actions up to date ensures:
Security Note
Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references.
Testing
These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.
Summary by cubic
Upgrade CI workflows to the latest Actions: oven-sh/setup-bun v2 and superfly/fly-pr-review-apps 1.6.0 for security and reliability improvements. Changes are limited to build-desktop.yml and deploy-preview.yml with no workflow logic changes.
Written for commit 968769b. Summary will update on new commits.
Summary by CodeRabbit