From aa2ebb9405a113334f84c080633f6271914fb64f Mon Sep 17 00:00:00 2001 From: "Willow (GHOST)" Date: Sat, 23 May 2026 22:17:41 +0100 Subject: [PATCH 1/4] chore: use hashes for versions --- .github/workflows/verify.yaml | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml index 3fd5b3f..380f6c3 100644 --- a/.github/workflows/verify.yaml +++ b/.github/workflows/verify.yaml @@ -15,12 +15,12 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true - name: setup deno - uses: denoland/setup-deno@v2 + uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 with: deno-version: v2.x @@ -34,7 +34,7 @@ jobs: run: make - name: upload wasm artifact - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: clayterm-wasm path: | @@ -56,17 +56,17 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true - name: setup deno - uses: denoland/setup-deno@v2 + uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 with: deno-version: v2.x - name: download wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: clayterm-wasm path: . @@ -79,12 +79,12 @@ jobs: runs-on: ubuntu-latest steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true - name: setup deno - uses: denoland/setup-deno@v2 + uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 with: deno-version: v2.x @@ -102,17 +102,17 @@ jobs: runs-on: ubuntu-latest steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true - name: setup deno - uses: denoland/setup-deno@v2 + uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 with: deno-version: v2.x - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: 24 From f68b862f8ac7f2ad656022ab9c98b9b4243482d4 Mon Sep 17 00:00:00 2001 From: "Willow (GHOST)" Date: Sat, 23 May 2026 22:18:29 +0100 Subject: [PATCH 2/4] chore: don't save git credentials --- .github/workflows/verify.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml index 380f6c3..0f8d9dc 100644 --- a/.github/workflows/verify.yaml +++ b/.github/workflows/verify.yaml @@ -18,6 +18,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true + persist-credentials: false - name: setup deno uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 @@ -59,6 +60,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true + persist-credentials: false - name: setup deno uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 @@ -82,6 +84,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true + persist-credentials: false - name: setup deno uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 @@ -105,6 +108,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: submodules: true + persist-credentials: false - name: setup deno uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4 From ffcf0d84dea67d402bddae260f8531334895b6a8 Mon Sep 17 00:00:00 2001 From: "Willow (GHOST)" Date: Sat, 23 May 2026 22:19:24 +0100 Subject: [PATCH 3/4] chore: use array syntax for some reason the schema for the actions wants it to be an array --- .github/workflows/verify.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml index 0f8d9dc..3674d12 100644 --- a/.github/workflows/verify.yaml +++ b/.github/workflows/verify.yaml @@ -2,9 +2,11 @@ name: Verify on: push: - branches: main + branches: + - main pull_request: - branches: main + branches: + - main permissions: contents: read From e2894298bbc1da525164fd4c913bb3f565ebfe62 Mon Sep 17 00:00:00 2001 From: "Willow (GHOST)" Date: Sat, 23 May 2026 22:20:26 +0100 Subject: [PATCH 4/4] perf: set concurrency limits to reduce cost and improve dx Without this it means that, for example, if I push a change to a PR then shortly push again this workflow will be running twice. This change will cancel the old run before starting the new one, which reduces the overall actions cost and DX as you don't have extra runs --- .github/workflows/verify.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml index 3674d12..09bce38 100644 --- a/.github/workflows/verify.yaml +++ b/.github/workflows/verify.yaml @@ -11,6 +11,10 @@ on: permissions: contents: read +concurrency: + group: ${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true + jobs: test: runs-on: ubuntu-latest