DataDog / datadog-static-analyzer

Datadog Static Analyzer
https://docs.datadoghq.com/static_analysis/
Apache License 2.0
100 stars 12 forks source link

Pin workflow to @actions/core@1.10.1 #522

Closed jasonforal closed 1 week ago

jasonforal commented 1 week ago

What problem are you trying to solve?

Our regression check JavaScript script specifies @actions/core@^1.10.6 as a dependency. Two days ago, v1.11.0 was released, and this breaks our workflow with the following error:

image

(I artificially introduced this regression -- job here)

The upstream issue of note is https://github.com/actions/toolkit/issues/1841. It seems upgrading to Node 20 would also solve this for us, but pinning seems more prudent at the moment.

What is your solution?

Pin to exactly 1.10.6.

Re-running the job shows it now works:

image

Alternatives considered

What the reviewer should know