Skip to content

Conversation

@salmanmkc
Copy link

@salmanmkc salmanmkc commented Dec 13, 2025

Summary

Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.

Changes

Action Old Version(s) New Version Release Files
aws-actions/configure-aws-credentials 50ac8dd, 67fbcbb, ececac1 61815dc Release _binary_upload.yml, backfill-workflow-job.yml, build-windows-ami.yml, clickhouse-replicator-dynamo-lambda.yml, clickhouse-replicator-s3-lambda.yml, deploy_lambda_whl_metadata_upload_pep658.yml, gha-artifacts-lambda.yml, github-status-test-lambda.yml, log-classifier-lambda.yml, mobile_job.yml, opensearch-gha-jobs-lambda.yml, release-download-pytorch-org.yml, release-pypi.yml, release-stage-pypi.yml, servicelab-ingestor-lambda.yml, update-queue-times.yml, update-s3-dependencies.yml, update-s3-html.yml, update_test_file_ratings.yml, upload-tutorials-stats.yml, usage-log-aggregator-lambda.yml
pypa/gh-action-pypi-publish release/v1 v1 Release release-pypi.yml

Why upgrade?

Keeping GitHub Actions up to date ensures:

  • Security: Latest security patches and fixes
  • Features: Access to new functionality and improvements
  • Compatibility: Better support for current GitHub features
  • Performance: Optimizations and efficiency improvements

Security Note

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references.

Testing

These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.

@vercel
Copy link

vercel bot commented Dec 13, 2025

@salmanmkc is attempting to deploy a commit to the Meta Open Source Team on Vercel.

A member of the Team first needs to authorize it.

@meta-cla meta-cla bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Dec 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant