Commit 3855a69

Anton Golub <antongolub@antongolub.com>
2025-08-20 12:54:34
ci: use actions/upload-pages-artifact v4 (#1325)
* ci: use actions/upload-pages-artifact v4 * ci(zizmor): prevent code injection via template expansion * chore: fix cmd typo
main
1 parent c7b087f
Changed files (2)
.github
workflows
docs.yml
test.yml
.github/workflows/docs.yml
@@ -31,16 +31,16 @@ jobs:
         uses: actions/configure-pages@v5
 
       - name: Install deps
-        run: npm i
+        run: npm ci
 
       - name: Add additional deps
-        run: npm i @rollup/rollup-linux-x64-gnu@4.44.1
+        run: npm i --no-save @rollup/rollup-linux-x64-gnu@4.46.4
 
       - name: Build docs
         run: npm run docs:build
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v4
         with:
           path: 'docs/build'
.github/workflows/test.yml
@@ -82,7 +82,10 @@ jobs:
 
       - name: Conventional Commits
         if: github.event_name == 'pull_request'
-        run: npx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: npx commitlint --from "$BASE_SHA" --to "$HEAD_SHA" --verbose
 
   test:
     needs: build