Merge pull request #106 from uppinote20/chore/ci-node24-actions

chore: bump CI artifact and attest actions to Node 24 runtimes
This commit is contained in:
uppinote 2026-05-29 21:35:35 +09:00 committed by GitHub
commit 856a1bc7a6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -42,9 +42,9 @@ jobs:
npm run build
- name: Upload build artifacts
# SHA-pinned (v4.6.2) for supply-chain hardening consistency
# SHA-pinned (v7.0.1) for supply-chain hardening consistency
# with the attest step. Bump SHA together with comment.
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
with:
name: plugin-build
path: |
@ -71,14 +71,14 @@ jobs:
persist-credentials: false
- name: Download build artifacts
# SHA-pinned (v4.3.0).
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
# SHA-pinned (v8.0.1).
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
with:
name: plugin-build
- name: Attest build provenance
# SHA-pinned (v2.4.0). When bumping, update both SHA and comment.
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be
# SHA-pinned (v4.1.0). When bumping, update both SHA and comment.
uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32
with:
subject-path: |
main.js