Skip to content

Update action versions and fix build-and-test step in update-codeql workflow#158

Merged
data-douser merged 2 commits intomainfrom
dd/update-actions/1
Mar 23, 2026
Merged

Update action versions and fix build-and-test step in update-codeql workflow#158
data-douser merged 2 commits intomainfrom
dd/update-actions/1

Conversation

@data-douser
Copy link
Collaborator

This pull request updates several GitHub Actions workflows to use newer action versions and improves compatibility for build and test steps. The most significant changes are upgrading the actions/cache and actions/checkout actions to their latest major versions, and ensuring the build environment includes necessary dependencies for running tests in a headless environment.

Actions version upgrades:

  • Updated all usages of actions/cache from version 4 to version 5 in .github/actions/setup-codeql-environment/action.yml to ensure the latest features and fixes are used. [1] [2] [3] [4]
  • Upgraded actions/checkout from version 4 to version 6 in .github/skills/add-mcp-support-for-new-language/workflow-template.yml for improved reliability and security.

Build and test environment improvements:

  • Added installation of xvfb and related VS Code dependencies to the update workflow, and modified the build and test step to run under xvfb-run for headless browser support in .github/workflows/update-codeql.yml.

Updates the commit reference for the `softprops/action-gh-release`
action to point to the latest released version.

Fixes an outdated "actions/checkout" version reference in an
agent skill definition, for consistency.
This commit is an attempt to fix the "build-and-test" step
of the update-codeql.yml actions workflow, which has been
failing due to missing dev/test dependencies on "ubuntu-latest"
actions runner:

- New step "Update - Install xvfb and VS Code dependencies" - Installs
  xvfb (virtual framebuffer) and system libraries VS Code needs
  (matching the pattern from copilot-setup-steps.yml).
- Wrapped npm run build-and-test with xvfb-run -a to provide a virtual
  display — matching how build-and-test-extension.yml runs integration
  tests.
@data-douser data-douser self-assigned this Mar 23, 2026
@data-douser data-douser added the bug Something isn't working label Mar 23, 2026
Copilot AI review requested due to automatic review settings March 23, 2026 16:42
@data-douser data-douser requested review from a team and enyil as code owners March 23, 2026 16:42
@data-douser data-douser added the dependencies Pull requests that update a dependency file label Mar 23, 2026
@github-actions
Copy link
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates GitHub Actions workflow dependencies and improves CI reliability for headless test execution, primarily for the update-codeql automation.

Changes:

  • Run the update-codeql workflow’s build-and-test step under xvfb-run and install required system libraries beforehand.
  • Bump actions/cache from v4v5 in the setup-codeql-environment composite action.
  • Update the skills workflow template to use actions/checkout@v6.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
.github/workflows/update-codeql.yml Installs Xvfb + required libraries and runs tests under xvfb-run to support headless execution.
.github/skills/add-mcp-support-for-new-language/workflow-template.yml Updates the template to use the newer actions/checkout major version.
.github/actions/setup-codeql-environment/action.yml Updates caching steps to actions/cache@v5 for CodeQL artifacts and language/runtime caches.

@data-douser data-douser merged commit 3487416 into main Mar 23, 2026
31 checks passed
@data-douser data-douser deleted the dd/update-actions/1 branch March 23, 2026 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants