[tahoe-lafs-trac-stream] [Tahoe-LAFS] #3944: GitHub Actions workflow upkeep

Tahoe-LAFS trac at tahoe-lafs.org
Sun Nov 27 00:13:43 UTC 2022


#3944: GitHub Actions workflow upkeep
--------------------------------+---------------------------
 Reporter:  sajith              |          Owner:  sajith
     Type:  task                |         Status:  new
 Priority:  normal              |      Milestone:  undecided
Component:  dev-infrastructure  |        Version:  n/a
 Keywords:                      |  Launchpad Bug:
--------------------------------+---------------------------
 Each run of !GitHub Actions with the current configuration emits many
 warnings about deprecations. Consider this workflow run, for example:

 https://github.com/tahoe-lafs/tahoe-lafs/actions/runs/3533138743

 There are a 100 warnings, mostly duplicates.  The warnings are due to:

  - Node.js 12 actions are deprecated. It seems that actions/checkout at v2,
 actions/setup-python at v2, actions/cache at v2, actions/upload-artifact at v2 all
 use older Node.js. They are all probably due for an upgrade.
  - `set-output` and `save-state` commands are deprecated and will be
 disabled soon.  This is from the pip caching steps; we can simply remove
 that and use the equivalent feature available in newer version of `actions
 /setup-python.

 While we are on this, it probably is a good idea to stick this incantation
 in the workflow file so that the `GITHUB_TOKEN` issued at the beginning of
 the workflow will have a minimum set of permissions:

 {{{
 permissions:
   contents: read
 }}}

 Relevant !GitHub docs are [https://docs.github.com/en/actions/security-
 guides/automatic-token-authentication Automatic token authentication] and
 [https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-
 github-actions#permissions Workflow syntax for GitHub Actions:
 permissions].

 I understand that GH Actions do not get a lot of love from Tahoe-LAFS
 team, and some of us would love to throw the thing away entirely. However,
 as long as Tahoe-LAFS uses GH Actions, it is a good idea to do the minimum
 upkeep.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/3944>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list