Skip to content

Conversation

@salmanmkc
Copy link
Contributor

Summary

Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.

Changes

Action Old Version(s) New Version Release Files
akhilerm/tag-push-action v2.0.0, v2.1.0 v2.2.0 Release manual_prod_build.yml, mirror.yml, prod_build.yml
aws-actions/configure-aws-credentials v1 v5 Release manual_prod_build.yml, mirror.yml, prod_build.yml
cycjimmy/semantic-release-action v3 v6 Release prod_build.yml
docker/login-action v2 v3 Release manual_prod_build.yml, mirror.yml, prod_build.yml
docker/metadata-action v4 v5 Release manual_prod_build.yml, prod_build.yml
step-security/changed-files v45 v47 Release version_updated.yml

Why upgrade?

Keeping GitHub Actions up to date ensures:

  • Security: Latest security patches and fixes
  • Features: Access to new functionality and improvements
  • Compatibility: Better support for current GitHub features
  • Performance: Optimizations and efficiency improvements

Security Note

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references.

Testing

These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
@edgurgel edgurgel force-pushed the upgrade-github-actions-node24-general branch from beab7e1 to ef93015 Compare January 26, 2026 00:59
Copy link
Member

@edgurgel edgurgel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@edgurgel edgurgel merged commit eb34634 into supabase:main Jan 26, 2026
2 of 3 checks passed
@kiwicopple
Copy link
Member

🎉 This PR is included in version 2.71.5 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants