Commit 4e2e556400d for woocommerce
commit 4e2e556400d6f95e8b98cf0de3c45401003b1a7e
Author: Adrian Moldovan <3854374+adimoldovan@users.noreply.github.com>
Date: Tue Jul 14 13:47:36 2026 +0300
ci: bump Node 20 actions to Node 24 - part 2 (#66571)
diff --git a/.github/workflows/backwards-compatibility-review.yml b/.github/workflows/backwards-compatibility-review.yml
index c68d7adb2ac..96aca3e4f7f 100644
--- a/.github/workflows/backwards-compatibility-review.yml
+++ b/.github/workflows/backwards-compatibility-review.yml
@@ -28,7 +28,7 @@ jobs:
fetch-depth: 0
- name: PR Review with Progress Tracking (inline-only)
- uses: anthropics/claude-code-action@v1
+ uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
prompt: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0766e1eee82..666a675960b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -167,7 +167,7 @@ jobs:
# re-run this job when it succeeded, so consumers must find the previous attempt's artifact.
WOOCOMMERCE_PLUGIN_ARTIFACT_NAME: woocommerce-plugin-${{ github.run_id }}
steps:
- - uses: 'actions/checkout@v4'
+ - uses: 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' # v7.0.0
name: 'Checkout'
with:
ref: ${{ inputs.refName != '' && inputs.refName || '' }}
@@ -187,7 +187,7 @@ jobs:
run: pnpm --filter='@woocommerce/plugin-woocommerce' build:zip
- name: 'Upload WooCommerce plugin artifact'
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: ${{ env.WOOCOMMERCE_PLUGIN_ARTIFACT_NAME }}
path: plugins/woocommerce/woocommerce.zip
@@ -226,7 +226,7 @@ jobs:
- name: 'Download WooCommerce plugin artifact'
if: ${{ matrix.usesSharedPluginBuild == true && inputs.artifactName == '' }}
- uses: actions/download-artifact@v4
+ uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: woocommerce-plugin-${{ github.run_id }}
path: ${{ github.workspace }}/woocommerce-plugin-artifact
@@ -304,7 +304,7 @@ jobs:
- name: 'Resolve artifacts path'
if: ${{ always() && matrix.report.resultsPath != '' }}
- # Blocks e2e use a relative path which is not supported by actions/upload-artifact@v4
+ # Blocks e2e use a relative path which is not supported by actions/upload-artifact
# https://github.com/actions/upload-artifact/issues/176
env:
ARTIFACTS_PATH: '${{ matrix.projectPath }}/${{ matrix.report.resultsPath }}'
diff --git a/.github/workflows/docs-needed-detection.yml b/.github/workflows/docs-needed-detection.yml
index 1b31e426cf9..23f4c497c8f 100644
--- a/.github/workflows/docs-needed-detection.yml
+++ b/.github/workflows/docs-needed-detection.yml
@@ -21,7 +21,7 @@ jobs:
steps:
- name: 'Analyze Pull Request'
id: analyze
- uses: anthropics/claude-code-action@64c7a0ef71df67b14cb4471f4d9c8565c61042bf #v1.0.66
+ uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/pr-assess-bundle-size.yml b/.github/workflows/pr-assess-bundle-size.yml
index b6459870d05..49320dec282 100644
--- a/.github/workflows/pr-assess-bundle-size.yml
+++ b/.github/workflows/pr-assess-bundle-size.yml
@@ -61,7 +61,7 @@ jobs:
run: 'npm install -g corepack@latest && corepack enable pnpm'
# `npm install -g corepack@latest` addresses https://github.com/nodejs/corepack/issues/612.
- - uses: preactjs/compressed-size-action@f780fd104362cfce9e118f9198df2ee37d12946c
+ - uses: preactjs/compressed-size-action@f322c295dde06a1cb7ccaef105732dd8a726d1d9 # v2.10.0
env:
BROWSERSLIST_IGNORE_OLD_DATA: true
with:
diff --git a/.github/workflows/pr-project-label.yml b/.github/workflows/pr-project-label.yml
index 3a4514a52b7..19451067a13 100644
--- a/.github/workflows/pr-project-label.yml
+++ b/.github/workflows/pr-project-label.yml
@@ -16,7 +16,7 @@ jobs:
contents: read
pull-requests: write
steps:
- - uses: actions/labeler@v3
+ - uses: actions/labeler@3d612d72e6784a1a65365cc6d33b5a001c12bf10 # v3.1.0
with:
repo-token: '${{ secrets.GITHUB_TOKEN }}'
configuration-path: .github/project-pr-labeler.yml
diff --git a/.github/workflows/pr-release-communication.yml b/.github/workflows/pr-release-communication.yml
index d2846a47861..c65083eddbe 100644
--- a/.github/workflows/pr-release-communication.yml
+++ b/.github/workflows/pr-release-communication.yml
@@ -41,7 +41,7 @@ jobs:
- name: Generate Feature Highlight
id: highlight
- uses: anthropics/claude-code-action@v1
+ uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
claude_args: >
@@ -170,7 +170,7 @@ jobs:
- name: Generate Developer Advisory
id: advisory
- uses: anthropics/claude-code-action@v1
+ uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1.0.171
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
claude_args: >
diff --git a/.github/workflows/stalebot.yml b/.github/workflows/stalebot.yml
index ea54c245505..60c1adc8b56 100644
--- a/.github/workflows/stalebot.yml
+++ b/.github/workflows/stalebot.yml
@@ -18,7 +18,7 @@ jobs:
if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
steps:
- name: Process stale issues and PRs
- uses: actions/stale@v9.0.0
+ uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
stale-issue-message: "As a part of this repository's maintenance, this issue is being marked as stale due to inactivity. Please feel free to comment on it in case we missed something.\n\n###### After 7 days with no activity this issue will be automatically closed."
diff --git a/.github/workflows/storybook-pages.yml b/.github/workflows/storybook-pages.yml
index b63e88cf0b0..2340687fd23 100644
--- a/.github/workflows/storybook-pages.yml
+++ b/.github/workflows/storybook-pages.yml
@@ -31,7 +31,7 @@ jobs:
STORYBOOK_COMPOSITION_PATH_PREFIX: /woocommerce
- name: Deploy
- uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
+ uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
with:
github_token: ${{ secrets.GITHUB_TOKEN }}
publish_dir: ./tools/storybook/storybook-static