From a41ede47516b5cb3638567385f016e1638fe27d4 Mon Sep 17 00:00:00 2001 From: Pulumi Bot Date: Tue, 25 Nov 2025 05:09:49 +0000 Subject: [PATCH] [internal] Update GitHub Actions workflow files --- .config/mise.lock | 113 --------------------- .config/mise.toml | 10 +- .github/workflows/build_provider.yml | 8 +- .github/workflows/build_sdk.yml | 14 +-- .github/workflows/command-dispatch.yml | 2 +- .github/workflows/community-moderation.yml | 2 +- .github/workflows/copilot-setup-steps.yml | 6 +- .github/workflows/license.yml | 8 +- .github/workflows/lint.yml | 7 +- .github/workflows/main-post-build.yml | 10 +- .github/workflows/master.yml | 2 +- .github/workflows/prerequisites.yml | 10 +- .github/workflows/publish.yml | 22 ++-- .github/workflows/release_command.yml | 2 +- .github/workflows/run-acceptance-tests.yml | 2 +- .github/workflows/test.yml | 9 +- .github/workflows/upgrade-bridge.yml | 8 +- .github/workflows/upgrade-provider.yml | 8 +- .github/workflows/verify-release.yml | 7 +- Makefile | 29 +++--- 20 files changed, 83 insertions(+), 196 deletions(-) delete mode 100644 .config/mise.lock diff --git a/.config/mise.lock b/.config/mise.lock deleted file mode 100644 index 29dbc1555a5..00000000000 --- a/.config/mise.lock +++ /dev/null @@ -1,113 +0,0 @@ -[[tools.dotnet]] -version = "8.0.414" -backend = "asdf:dotnet" - -[[tools."github:pulumi/pulumictl"]] -version = "0.0.50" -backend = "github:pulumi/pulumictl" - -[tools."github:pulumi/pulumictl".platforms.linux-x64] -checksum = "blake3:c128dd74993f779c613296fe7cd21c20cbd323f24e59cb76e007620660b60348" -name = "pulumictl-v0.0.50-linux-amd64.tar.gz" -size = 27744219 -url = "https://github.com/pulumi/pulumictl/releases/download/v0.0.50/pulumictl-v0.0.50-linux-amd64.tar.gz" -url_api = "" - -[[tools."github:pulumi/schema-tools"]] -version = "0.6.0" -backend = "github:pulumi/schema-tools" - -[tools."github:pulumi/schema-tools".platforms.linux-x64] -checksum = "blake3:82dfe616fee18b4258f6e3d2dc3c4e9f14afd43a0a4cc33eff2d2a04088d6ca3" -name = "schema-tools-v0.6.0-linux-amd64.tar.gz" -size = 14282746 -url = "https://github.com/pulumi/schema-tools/releases/download/v0.6.0/schema-tools-v0.6.0-linux-amd64.tar.gz" -url_api = "" - -[[tools.go]] -version = "1.24.10" -backend = "core:go" - -[[tools.golangci-lint]] -version = "1.64.8" -backend = "aqua:golangci/golangci-lint" - -[tools.golangci-lint.platforms.linux-x64] -checksum = "sha256:b6270687afb143d019f387c791cd2a6f1cb383be9b3124d241ca11bd3ce2e54e" -size = 12364828 -url = "https://github.com/golangci/golangci-lint/releases/download/v1.64.8/golangci-lint-1.64.8-linux-amd64.tar.gz" - -[[tools.gradle]] -version = "7.6.6" -backend = "aqua:gradle/gradle" - -[tools.gradle.platforms.linux-x64] -checksum = "blake3:5cad8fc455b720b68a0bd2907d435e2919581708243f84f27845fe8812a09323" -size = 128439774 -url = "https://github.com/gradle/gradle-distributions/releases/download/v7.6.6/gradle-7.6.6-bin.zip" - -[[tools.java]] -version = "corretto-11.0.29.7.1" -backend = "core:java" - -[tools.java.platforms.linux-x64] -checksum = "sha256:279c6d3124f8b0251b16297b16687fe8b3946410b05ed27de1259b5e5cea02ba" -size = 195379320 -url = "https://corretto.aws/downloads/resources/11.0.29.7.1/amazon-corretto-11.0.29.7.1-linux-x64.tar.gz" - -[[tools.node]] -version = "20.19.5" -backend = "core:node" - -[tools.node.platforms.linux-x64] -checksum = "sha256:4eba5fbe1fb10753bc06e42f001a91c5cec16798b7764a3e9257adc59af47fe1" -size = 47041607 -url = "https://nodejs.org/dist/v20.19.5/node-v20.19.5-linux-x64.tar.gz" - -[[tools."npm:yarn"]] -version = "1.22.22" -backend = "npm:yarn" - -[[tools.pulumi]] -version = "3.207.0" -backend = "aqua:pulumi/pulumi" - -[[tools.python]] -version = "3.11.8" -backend = "core:python" - -[[tools."vfox-pulumi:pulumi/pulumi-archive"]] -version = "0.3.5" -backend = "vfox-pulumi:pulumi/pulumi-archive" - -[[tools."vfox-pulumi:pulumi/pulumi-converter-terraform"]] -version = "1.2.4" -backend = "vfox-pulumi:pulumi/pulumi-converter-terraform" - -[[tools."vfox-pulumi:pulumi/pulumi-github"]] -version = "6.9.1" -backend = "vfox-pulumi:pulumi/pulumi-github" - -[[tools."vfox-pulumi:pulumi/pulumi-kubernetes"]] -version = "4.24.0" -backend = "vfox-pulumi:pulumi/pulumi-kubernetes" - -[[tools."vfox-pulumi:pulumi/pulumi-local"]] -version = "0.1.6" -backend = "vfox-pulumi:pulumi/pulumi-local" - -[[tools."vfox-pulumi:pulumi/pulumi-null"]] -version = "0.0.13" -backend = "vfox-pulumi:pulumi/pulumi-null" - -[[tools."vfox-pulumi:pulumi/pulumi-random"]] -version = "4.18.4" -backend = "vfox-pulumi:pulumi/pulumi-random" - -[[tools."vfox-pulumi:pulumi/pulumi-std"]] -version = "2.2.0" -backend = "vfox-pulumi:pulumi/pulumi-std" - -[[tools."vfox-pulumi:pulumi/pulumi-tls"]] -version = "5.2.3" -backend = "vfox-pulumi:pulumi/pulumi-tls" diff --git a/.config/mise.toml b/.config/mise.toml index 1053d4d426d..75fe200ee0a 100644 --- a/.config/mise.toml +++ b/.config/mise.toml @@ -8,7 +8,7 @@ PULUMI_HOME = "{{config_root}}/.pulumi" [tools] # Runtimes -# TODO: we may not need `get_env` once https://github.com/jdx/mise/discussions/6339 is fixed +# TODO: we may not need 'get_env' once https://github.com/jdx/mise/discussions/6339 is fixed go = "{{ get_env(name='GO_VERSION_MISE', default='latest') }}" node = '20.19.5' python = '3.11.8' @@ -18,9 +18,9 @@ java = 'corretto-11' # Executable tools pulumi = "{{ get_env(name='PULUMI_VERSION_MISE', default='latest') }}" -"github:pulumi/pulumictl" = 'latest' -"github:pulumi/schema-tools" = "latest" -gradle = '7.6' +"github:pulumi/pulumictl" = '0.0.50' +"github:pulumi/schema-tools" = "0.6.0" +"aqua:gradle/gradle-distributions" = '7.6.6' golangci-lint = "1.64.8" # See note about about overrides if you need to customize this. "npm:yarn" = "1.22.22" "vfox-pulumi:pulumi/pulumi-archive" = "latest" @@ -35,7 +35,7 @@ golangci-lint = "1.64.8" # See note about about overrides if you need to customi [settings] experimental = true # Required for Go binaries (e.g. pulumictl). -lockfile = true +lockfile = false [plugins] vfox-pulumi = "https://github.com/pulumi/vfox-pulumi" diff --git a/.github/workflows/build_provider.yml b/.github/workflows/build_provider.yml index 10d112799d9..7f64f6f571f 100644 --- a/.github/workflows/build_provider.yml +++ b/.github/workflows/build_provider.yml @@ -47,7 +47,7 @@ jobs: dotnet: false large-packages: false - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false @@ -67,11 +67,11 @@ jobs: tag: v2.1.5-procursus2 - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false # Based on https://github.com/actions/cache/blob/main/examples.md#go---modules diff --git a/.github/workflows/build_sdk.yml b/.github/workflows/build_sdk.yml index 66dbefbd121..75859c2350c 100644 --- a/.github/workflows/build_sdk.yml +++ b/.github/workflows/build_sdk.yml @@ -45,7 +45,7 @@ jobs: swap-storage: false dotnet: false - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false @@ -66,16 +66,16 @@ jobs: key: ${{ runner.os }}-${{ hashFiles('provider/go.sum') }} - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false - name: Setup Go Cache if: matrix.language == 'go' || contains(matrix.language, 'go') - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6 with: cache-dependency-path: | provider/*.sum @@ -108,10 +108,6 @@ jobs: sdk/nodejs/package.json sdk/python/pyproject.toml sdk/java/build.gradle - **/mise.lock - **/.config/mise.lock - **/mise.*.lock - **/.config/mise.*.lock - name: Commit ${{ matrix.language }} SDK changes for Renovate # If the worktree is dirty and this is a Renovate PR to bump # dependencies, commit the updated SDK and push it back to the PR. The diff --git a/.github/workflows/command-dispatch.yml b/.github/workflows/command-dispatch.yml index f69497aaab5..d1123a27c4d 100644 --- a/.github/workflows/command-dispatch.yml +++ b/.github/workflows/command-dispatch.yml @@ -17,7 +17,7 @@ jobs: id-token: write # For ESC secrets. steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false diff --git a/.github/workflows/community-moderation.yml b/.github/workflows/community-moderation.yml index 0fba2c42a35..1811356c2ef 100644 --- a/.github/workflows/community-moderation.yml +++ b/.github/workflows/community-moderation.yml @@ -6,7 +6,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index db61e0bc3d7..bf8f34a0a64 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -34,11 +34,11 @@ jobs: - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false diff --git a/.github/workflows/license.yml b/.github/workflows/license.yml index 1feb3fa974e..ba3b7398e2e 100644 --- a/.github/workflows/license.yml +++ b/.github/workflows/license.yml @@ -20,16 +20,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: persist-credentials: false - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false - run: make prepare_local_workspace diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 82b08eabb00..a2281b038a4 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -20,15 +20,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} cache_save: false # A different job handles caching our tools. - name: disarm go:embed directives to enable lint diff --git a/.github/workflows/main-post-build.yml b/.github/workflows/main-post-build.yml index dc36d3bbd88..887318afd46 100644 --- a/.github/workflows/main-post-build.yml +++ b/.github/workflows/main-post-build.yml @@ -32,7 +32,7 @@ jobs: tool-cache: false swap-storage: false - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false @@ -53,15 +53,15 @@ jobs: aws-secret-access-key: ${{ steps.esc-secrets.outputs.AWS_CORP_S3_UPLOAD_SECRET_ACCESS_KEY }} - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false - name: Setup Go Cache - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6 with: cache-dependency-path: | provider/*.sum diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index c933468e89d..7356d05964b 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -86,7 +86,7 @@ jobs: id-token: write # For ESC secrets. steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: persist-credentials: false - env: diff --git a/.github/workflows/prerequisites.yml b/.github/workflows/prerequisites.yml index 06b61fe314a..36ad160831c 100644 --- a/.github/workflows/prerequisites.yml +++ b/.github/workflows/prerequisites.yml @@ -46,7 +46,7 @@ jobs: swap-storage: false dotnet: false - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false @@ -72,15 +72,15 @@ jobs: key: ${{ runner.os }}-${{ hashFiles('provider/go.sum') }} - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: true - name: Setup Go Cache - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6 with: cache-dependency-path: | provider/*.sum diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 7e49513c964..1a1251a11e8 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -43,7 +43,7 @@ jobs: if: inputs.skipGoSdk && inputs.isPrerelease == false run: echo "Can't skip Go SDK for stable releases. This is likely a bug in the calling workflow." && exit 1 - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false @@ -58,11 +58,11 @@ jobs: uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-${{ hashFiles('mise.lock') }}" cache_save: false - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8 # v5.1.0 @@ -133,7 +133,7 @@ jobs: python_version: ${{ steps.python_version.outputs.version }} steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true # Persist credentials so we can push back to the repo @@ -149,11 +149,11 @@ jobs: uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false - name: Setup Node @@ -225,7 +225,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: persist-credentials: false - env: @@ -238,7 +238,7 @@ jobs: name: Fetch secrets from ESC uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b - name: Dispatch Metadata build - uses: peter-evans/repository-dispatch@5fc4efd1a4797ddb68ffd0714a238564e4cc0e6f # v4 + uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4 with: token: ${{ steps.esc-secrets.outputs.PULUMI_BOT_TOKEN }} repository: pulumi/registry @@ -259,7 +259,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: persist-credentials: false - env: diff --git a/.github/workflows/release_command.yml b/.github/workflows/release_command.yml index 443b8cb99c5..4e2450d864c 100644 --- a/.github/workflows/release_command.yml +++ b/.github/workflows/release_command.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: persist-credentials: false - env: diff --git a/.github/workflows/run-acceptance-tests.yml b/.github/workflows/run-acceptance-tests.yml index d76032af4ea..cae6aa03ae3 100644 --- a/.github/workflows/run-acceptance-tests.yml +++ b/.github/workflows/run-acceptance-tests.yml @@ -77,7 +77,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: persist-credentials: false - id: run-url diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index dd4e8f8465c..384cf0abd70 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -38,7 +38,7 @@ jobs: swap-storage: false dotnet: false - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: ref: ${{ env.PR_COMMIT_SHA }} submodules: true @@ -53,7 +53,7 @@ jobs: name: Fetch secrets from ESC uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b - name: Checkout p/examples - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: repository: pulumi/examples path: p-examples @@ -61,11 +61,10 @@ jobs: uses: jdx/mise-action@v3 env: MISE_ENV: test + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # also save this cache since we are using a different mise env. cache_save: true - name: Prepare local workspace diff --git a/.github/workflows/upgrade-bridge.yml b/.github/workflows/upgrade-bridge.yml index 3efaaef009a..ef61027faa0 100644 --- a/.github/workflows/upgrade-bridge.yml +++ b/.github/workflows/upgrade-bridge.yml @@ -82,7 +82,7 @@ jobs: swap-storage: false dotnet: false - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true persist-credentials: false @@ -97,11 +97,11 @@ jobs: uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false - name: Call upgrade provider action diff --git a/.github/workflows/upgrade-provider.yml b/.github/workflows/upgrade-provider.yml index 6d3f041b23e..ca7436ed7eb 100644 --- a/.github/workflows/upgrade-provider.yml +++ b/.github/workflows/upgrade-provider.yml @@ -49,7 +49,7 @@ jobs: swap-storage: false dotnet: false - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: submodules: true # Persist credentials so upgrade-provider can push a new branch. @@ -65,11 +65,11 @@ jobs: uses: pulumi/esc-action@9eb774255b1a4afb7855678ae8d4a77359da0d9b - name: Setup mise uses: jdx/mise-action@v3 + env: + MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s with: - # Latest working version. See https://github.com/jdx/mise/discussions/6781 - version: 2025.10.16 + version: 2025.11.6 github_token: ${{ secrets.GITHUB_TOKEN }} - cache_key: "mise-{{platform}}-{{file_hash}}" # only saving the cache in the prerequisites job cache_save: false - name: Install upgrade-provider diff --git a/.github/workflows/verify-release.yml b/.github/workflows/verify-release.yml index a6613f28401..6eb5233ed98 100644 --- a/.github/workflows/verify-release.yml +++ b/.github/workflows/verify-release.yml @@ -58,7 +58,7 @@ jobs: - name: Configure Git to checkout files with long names run: git config --global core.longpaths true - name: Checkout Repo - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 with: persist-credentials: false - env: @@ -94,7 +94,7 @@ jobs: node-version: 20.x registry-url: https://registry.npmjs.org - name: Install Go - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6 with: go-version: "1.21.x" cache-dependency-path: | @@ -104,6 +104,9 @@ jobs: sdk/*.sum *.sum cache: true + - name: Set Go Toolchain to auto explicitly + run: | + echo "GOTOOLCHAIN=auto" >> "$GITHUB_ENV" - name: Install Pulumi CLI uses: pulumi/actions@d7ceb0215da5a14ec84f50b703365ddf0194a9c8 # v6 with: diff --git a/Makefile b/Makefile index cb8a7cfb18a..b3a52c19593 100644 --- a/Makefile +++ b/Makefile @@ -39,23 +39,10 @@ LDFLAGS=$(LDFLAGS_PROJ_VERSION) $(LDFLAGS_UPSTREAM_VERSION) $(LDFLAGS_EXTRAS) $( # Ensure all directories exist before evaluating targets to avoid issues with `touch` creating directories. _ := $(shell mkdir -p .make bin .pulumi/bin) -# Installs all necessary tools with mise and records completion in a sentinel -# file so dependent targets can participate in make's caching behaviour. The -# environment is refreshed via an order-only prerequisite so it still runs on -# every invocation without invalidating the sentinel. -mise_install: .make/mise_install | mise_env - -.PHONY: mise_env -mise_env: - @mise env -q > /dev/null - -.make/mise_install: - @mise install -q - @touch $@ - # Build the provider and all SDKs and install ready for testing build: .make/mise_install provider build_sdks install_sdks build: | mise_env + # Keep aliases for old targets to ensure backwards compatibility development: build only_build: build @@ -70,6 +57,20 @@ build_sdks: build_nodejs build_python build_dotnet build_go build_java install_sdks: install_nodejs_sdk install_python_sdk install_dotnet_sdk install_go_sdk install_java_sdk .PHONY: development only_build build generate generate_sdks build_sdks install_sdks mise_install mise_env +# Installs all necessary tools with mise and records completion in a sentinel +# file so dependent targets can participate in make's caching behaviour. The +# environment is refreshed via an order-only prerequisite so it still runs on +# every invocation without invalidating the sentinel. +mise_install: .make/mise_install | mise_env + +mise_env: + @mise env -q > /dev/null + +.make/mise_install: + @mise install -q + @touch $@ + + help: @echo "Usage: make [target]" @echo ""