From 515fdf27f78a5174046c0861d66fc6e14d922e37 Mon Sep 17 00:00:00 2001 From: Stephen G Tuggy Date: Thu, 19 Mar 2026 10:18:50 -0700 Subject: [PATCH 1/6] build-test.yml, codeql.yml: Add env var `FORCE_JAVASCRIPT_ACTIONS_TO_NODE24` set to `true`; update versions of other actions used to latest; where node-version is explicitly specified, update it from 20.x to 24.x --- .github/workflows/build-test.yml | 10 ++++++---- .github/workflows/codeql.yml | 12 +++++++----- 2 files changed, 13 insertions(+), 9 deletions(-) diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml index 21e1d06..8c464a6 100644 --- a/.github/workflows/build-test.yml +++ b/.github/workflows/build-test.yml @@ -18,13 +18,14 @@ jobs: env: VCPKG_ROOT: + FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true - - uses: actions/setup-node@v4 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: - node-version: '20.x' + node-version: '24.x' # How to consume GitHub packages, from this message (!): https://github.community/t/download-from-github-package-registry-without-authentication/14407/35 # Inspired from here: https://github.com/jcansdale-test/npmrc-configurations/blob/master/.github/workflows/blank.yml - name: Authenticate to GitHub Packages @@ -56,9 +57,10 @@ jobs: env: VCPKG_ROOT: + FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - name: checkout this action - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d6b0abc..30ec2e4 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,19 +25,21 @@ jobs: matrix: language: [ 'javascript' ] + env: + FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0 with: languages: ${{ matrix.language }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: - node-version: '20.x' + node-version: '24.x' - name: Authenticate to GitHub Packages run: | echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" > ~/.npmrc @@ -48,6 +50,6 @@ jobs: npm run pack - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0 with: category: "/language:${{matrix.language}}" From 6ce6c0c4d4cad6352d9106d3799eb782cbba4238 Mon Sep 17 00:00:00 2001 From: Stephen G Tuggy Date: Fri, 20 Mar 2026 06:37:24 -0700 Subject: [PATCH 2/6] action.yml: Update `runs.using` to 'node24', as recommended by Copilot --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 496a809..5aa2dd6 100644 --- a/action.yml +++ b/action.yml @@ -85,7 +85,7 @@ inputs: description: "Specify the command line to dump the environment variables with the 'vcpkg env' command. This command is only used when setting up the environment for MSVC on Windows." runs: - using: 'node20' + using: 'node24' main: './dist/index.js' branding: From e20efd135d4e80888af2dc1a91b09b041fa13c20 Mon Sep 17 00:00:00 2001 From: Stephen G Tuggy Date: Fri, 20 Mar 2026 06:41:18 -0700 Subject: [PATCH 3/6] build-test.yml: Only declare env var `FORCE_JAVASCRIPT_ACTIONS_TO_NODE24` once, as recommended by Copilot --- .github/workflows/build-test.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml index 8c464a6..7d6148f 100644 --- a/.github/workflows/build-test.yml +++ b/.github/workflows/build-test.yml @@ -7,6 +7,9 @@ on: - cron: '0 1 * * FRI' workflow_dispatch: +env: + FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true + jobs: build_and_test: name: '${{ matrix.os }}: build and test' @@ -18,7 +21,6 @@ jobs: env: VCPKG_ROOT: - FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: @@ -57,7 +59,6 @@ jobs: env: VCPKG_ROOT: - FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - name: checkout this action uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 From 6747da5698b0559c30e0e878ec463613511cee6e Mon Sep 17 00:00:00 2001 From: Stephen G Tuggy Date: Fri, 20 Mar 2026 06:45:48 -0700 Subject: [PATCH 4/6] build-test.yml: Pin SHA for coverallsapp/github-action --- .github/workflows/build-test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml index 7d6148f..ddd2837 100644 --- a/.github/workflows/build-test.yml +++ b/.github/workflows/build-test.yml @@ -41,7 +41,7 @@ jobs: - run: npm run pack - run: npm run test - name: Coveralls - uses: coverallsapp/github-action@master + uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7 with: github-token: ${{ secrets.GITHUB_TOKEN }} parallel: true From f21af79c96c7e196363db62b82d11eaff83cb77c Mon Sep 17 00:00:00 2001 From: Stephen G Tuggy Date: Fri, 20 Mar 2026 07:00:15 -0700 Subject: [PATCH 5/6] 3x *.ts: Update copyright years --- __tests__/unit.test.ts | 2 +- src/action.ts | 2 +- src/cmake-action.ts | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/__tests__/unit.test.ts b/__tests__/unit.test.ts index 4a83188..63cd9b7 100644 --- a/__tests__/unit.test.ts +++ b/__tests__/unit.test.ts @@ -1,4 +1,4 @@ -// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa +// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa // Released under the term specified in file LICENSE.txt // SPDX short identifier: MIT diff --git a/src/action.ts b/src/action.ts index c30a198..b33639d 100644 --- a/src/action.ts +++ b/src/action.ts @@ -1,4 +1,4 @@ -// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa +// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa // Released under the term specified in file LICENSE.txt // SPDX short identifier: MIT diff --git a/src/cmake-action.ts b/src/cmake-action.ts index ecbd6ae..b032a25 100644 --- a/src/cmake-action.ts +++ b/src/cmake-action.ts @@ -1,4 +1,4 @@ -// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa +// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa // Released under the term specified in file LICENSE.txt // SPDX short identifier: MIT From 3304ea3ff9dbfe721ddced7768759e635d1017ee Mon Sep 17 00:00:00 2001 From: Stephen G Tuggy Date: Fri, 20 Mar 2026 07:02:31 -0700 Subject: [PATCH 6/6] `npm run repack`, updating copyright year on two lines in dist/index.js in the process --- dist/index.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dist/index.js b/dist/index.js index 348bbd5..d41ec75 100644 --- a/dist/index.js +++ b/dist/index.js @@ -6,7 +6,7 @@ "use strict"; -// Copyright (c) 2019-2020-2021-2022-2023-2024 Luca Cappa +// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa // Released under the term specified in file LICENSE.txt // SPDX short identifier: MIT var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) { @@ -55698,7 +55698,7 @@ var __webpack_exports__ = {}; "use strict"; var exports = __webpack_exports__; -// Copyright (c) 2019-2020-2021-2022-2023 Luca Cappa +// Copyright (c) 2019-2020-2021-2023-2024-2025-2026 Luca Cappa // Released under the term specified in file LICENSE.txt // SPDX short identifier: MIT Object.defineProperty(exports, "__esModule", ({ value: true }));