Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adjust GitHub Actions for Ubuntu 24.04. #297

Open
wants to merge 5 commits into
base: main
Choose a base branch
from

Conversation

PiotrSikora
Copy link
Member

GitHub migrated ubuntu-latest to ubuntu-24.04, which comes with
a different set of pre-installed software. Most notably, both cargo
audit and outdated tools are missing.

Pin jobs to a specific version of the runner image to avoid another
upgrade from breaking us in the future.

GitHub migrated `ubuntu-latest` to `ubuntu-24.04`, which comes with
a different set of pre-installed software. Most notably, both cargo
audit and outdated tools are missing.

Pin jobs to a specific version of the runner image to avoid another
upgrade from breaking us in the future.

Signed-off-by: Piotr Sikora <[email protected]>
@@ -505,15 +494,6 @@ jobs:
- name: Format (manifest)
run: cargo verify-project

- name: Run cargo audit
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like this PR removes auditing for both examples + reactors (though keeps the SDK itself cargo audited). Is that intended? If so, could you leave a comment as to express this happened and indicate that it is unnecessary?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's the same reasoning as to why they were excluded in local tests in #280 (i.e. the cost of building those tools doesn't provide too much value in examples, so it's not worth building them if they're not pre-installed as in full ubuntu-22.04 images on GitHub Actions).

With that in mind, I moved them to the audit and outdated jobs, since we build those tools for the SDK already.

@PiotrSikora PiotrSikora requested a review from leonm1 January 3, 2025 15:42
@@ -46,14 +46,17 @@ jobs:
~/go/pkg/mod
key: licenses-${{ hashFiles('.github/workflows/rust.yml') }}

- name: Check licenses
- name: Install dependencies
run: |
go install github.com/google/addlicense@latest
Copy link
Member Author

@PiotrSikora PiotrSikora Jan 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One thing that's bothering me is that the CI has been breaking lately due to updates to tools and build image.

I pinned the build image to ubuntu-24.04 in this PR, but should we also pin all the tools (addlicense, bazelisk, buildifier cargo-audit, cargo-outdated), and possibly even Rust toolchains for stable and nightly jobs (which would require more frequent PRs with version bumps)?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants