search

clj-holmes / clj-watson

clojure deps SCA
Eclipse Public License 2.0
77 stars 8 forks source link

ci chore: address GitHub Action deprecation warnings #71

Closed lread closed 1 month ago

lread commented 1 month ago

Example:

The following actions uses Node.js version which is deprecated and will be forced to run on node20: actions/cache@v3

I'll follow up with a PR that bumps actions to current versions.

seancorfield commented 1 month ago

It would be nice to switch from olical/depot to liquidz/antq for outdated dependency checking since it covers all the GitHub Actions stuff too.

seancorfield commented 1 month ago

Here's all the stuff antq finds:

| :file                               | :name                                                   | :current            | :latest             |
|-------------------------------------+---------------------------------------------------------+---------------------+---------------------|
| .github/workflows/pull-request.yaml | actions/cache                                           | v3                  | v4.0.2              |
|                                     | actions/cache                                           | v3                  | v4.0.2              |
|                                     | clojure/brew-install                                    | 1.11.1.1435         | 1.11.3.1463         |
|                                     | clojure/brew-install                                    | 1.11.1.1435         | 1.11.3.1463         |
| deps.edn                            | borkdude/edamame                                        | 1.3.23              | 1.4.25              |
|                                     | cheshire/cheshire                                       | 5.12.0              | 5.13.0              |
|                                     | clj-http/clj-http                                       | 3.12.3              | 3.13.0              |
|                                     | com.github.clojure-lsp/clojure-lsp-standalone           | 2023.12.29-12.09.27 | 2024.04.22-11.50.26 |
|                                     | io.github.clj-holmes/clj-watson                         | v5.1.1              | v5.1.3              |
|                                     | lambdaisland/kaocha                                     | 1.87.1366           | 1.91.1392           |
|                                     | nrepl/nrepl                                             | 1.1.0               | 1.2.0               |
|                                     | nubank/state-flow                                       | 5.14.5              | 5.17.0              |
|                                     | org.apache.maven.resolver/maven-resolver-transport-http | 1.9.18              | 1.9.21              |
|                                     | org.clojure/clojure                                     | 1.11.1              | 1.11.3              |
|                                     | org.clojure/tools.deps                                  | 0.18.1398           | 0.19.1432           |
|                                     | selmer/selmer                                           | 1.12.59             | 1.12.61             |
lread commented 1 month ago

Yeah, I noticed that, too. I'll create separate issues to move to antq and bump deps in general.