From fce6f6111618028c0492bf3c2f1c61c16ed57ac2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 16:52:48 +0000 Subject: [PATCH 1/3] chore(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 Bumps [actions/cache/restore](https://github.com/actions/cache) from 5.0.5 to 6.1.0. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) --- updated-dependencies: - dependency-name: actions/cache/restore dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/android.yaml | 4 ++-- .github/workflows/e2e_tests_fdc.yaml | 12 ++++++------ .github/workflows/e2e_tests_pipeline.yaml | 2 +- .github/workflows/ios.yaml | 4 ++-- .github/workflows/macos.yaml | 4 ++-- .github/workflows/web.yaml | 6 +++--- 6 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/android.yaml b/.github/workflows/android.yaml index dc00cfb53eca..fc2339d51f53 100644 --- a/.github/workflows/android.yaml +++ b/.github/workflows/android.yaml @@ -60,7 +60,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(npm firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # The firebase emulators are pure javascript and java, OS-independent @@ -106,7 +106,7 @@ jobs: sudo chown "$USER:$USER" /mnt/avd df -h / /mnt - name: AVD cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true id: avd-cache with: diff --git a/.github/workflows/e2e_tests_fdc.yaml b/.github/workflows/e2e_tests_fdc.yaml index ce9e4e570691..9cd62844ab04 100644 --- a/.github/workflows/e2e_tests_fdc.yaml +++ b/.github/workflows/e2e_tests_fdc.yaml @@ -55,7 +55,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # Must match the save path exactly @@ -103,7 +103,7 @@ jobs: sudo chown "$USER:$USER" /mnt/avd df -h / /mnt - name: AVD cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 id: avd-cache continue-on-error: true with: @@ -175,7 +175,7 @@ jobs: key: xcode-cache-${{ runner.os }} save: "${{ github.ref == 'refs/heads/main' }}" max-size: 700M - - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + - uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true name: Pods Cache id: pods-cache @@ -190,7 +190,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # Must match the save path exactly @@ -305,7 +305,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # Must match the save path exactly @@ -380,7 +380,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # Must match the save path exactly diff --git a/.github/workflows/e2e_tests_pipeline.yaml b/.github/workflows/e2e_tests_pipeline.yaml index 22ffb4736201..b9a1e001bc02 100644 --- a/.github/workflows/e2e_tests_pipeline.yaml +++ b/.github/workflows/e2e_tests_pipeline.yaml @@ -85,7 +85,7 @@ jobs: sudo chown "$USER:$USER" /mnt/avd df -h / /mnt - name: AVD cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true id: avd-cache with: diff --git a/.github/workflows/ios.yaml b/.github/workflows/ios.yaml index 1a8d7841ff5c..d9266a64c32c 100644 --- a/.github/workflows/ios.yaml +++ b/.github/workflows/ios.yaml @@ -58,7 +58,7 @@ jobs: key: xcode-cache-${{ runner.os }} save: "${{ github.ref == 'refs/heads/main' }}" max-size: 700M - - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + - uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true name: Pods Cache id: pods-cache @@ -73,7 +73,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(npm firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # The firebase emulators are pure javascript and java, OS-independent diff --git a/.github/workflows/macos.yaml b/.github/workflows/macos.yaml index b2817c514338..75fd25cd2b2f 100644 --- a/.github/workflows/macos.yaml +++ b/.github/workflows/macos.yaml @@ -58,7 +58,7 @@ jobs: max-size: 700M - name: Pods Cache continue-on-error: true - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 id: pods-cache with: # Must match the save path exactly @@ -71,7 +71,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(npm firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # The firebase emulators are pure javascript and java, OS-independent diff --git a/.github/workflows/web.yaml b/.github/workflows/web.yaml index 8a9b9cd8c5af..7775c601cb66 100644 --- a/.github/workflows/web.yaml +++ b/.github/workflows/web.yaml @@ -68,7 +68,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(npm firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # The firebase emulators are pure javascript and java, OS-independent @@ -138,7 +138,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(npm firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # The firebase emulators are pure javascript and java, OS-independent @@ -220,7 +220,7 @@ jobs: echo "FIREBASE_TOOLS_VERSION=$(npm firebase --version)" >> $GITHUB_ENV - name: Firebase Emulator Cache id: firebase-emulator-cache - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 continue-on-error: true with: # The firebase emulators are pure javascript and java, OS-independent From 14d262a05f1a40d6c876286da5c591b43bfa5b2d Mon Sep 17 00:00:00 2001 From: Jude Kwashie Date: Fri, 3 Jul 2026 09:16:04 +0000 Subject: [PATCH 2/3] chore(deps): update Gradle and PostgreSQL action versions in CI workflows --- .github/workflows/android.yaml | 4 ++-- .github/workflows/e2e_tests_fdc.yaml | 10 +++++----- .github/workflows/e2e_tests_pipeline.yaml | 2 +- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/android.yaml b/.github/workflows/android.yaml index fc2339d51f53..f0e3afe7c58c 100644 --- a/.github/workflows/android.yaml +++ b/.github/workflows/android.yaml @@ -89,7 +89,7 @@ jobs: sudo udevadm control --reload-rules sudo udevadm trigger --name-match=kvm - name: Gradle cache - uses: gradle/actions/setup-gradle@v6 + uses: gradle/actions/setup-gradle@90ddb51e90a5fd9ba75f40cf85156b7b41bf76a3 - name: Free Disk Space (Ubuntu) uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793 with: @@ -181,6 +181,6 @@ jobs: - name: 'Bootstrap tests package' run: melos bootstrap --scope tests - name: Gradle cache - uses: gradle/actions/setup-gradle@v4 + uses: gradle/actions/setup-gradle@0b6dd653ba04f4f93bf581ec31e66cbd7dcb644d - name: 'Build tests app with AGP 9' run: bash ./.github/workflows/scripts/agp9-compatibility.sh diff --git a/.github/workflows/e2e_tests_fdc.yaml b/.github/workflows/e2e_tests_fdc.yaml index 9cd62844ab04..fc8f47738b73 100644 --- a/.github/workflows/e2e_tests_fdc.yaml +++ b/.github/workflows/e2e_tests_fdc.yaml @@ -68,7 +68,7 @@ jobs: cache-key: "flutter-:os:-:channel:-:version:-:arch:-:hash:" pub-cache-key: "flutter-pub-:os:-:channel:-:version:-:arch:-:hash:" - name: Setup PostgreSQL for Linux/macOS/Windows - uses: ikalnytskyi/action-setup-postgres@v8 + uses: ikalnytskyi/action-setup-postgres@c4dda34aae1c821e3a771b68b73b13af3198a7ee - uses: bluefireteam/melos-action@705015c3d2bc4ab94201ac24accb2bbe070cf533 with: run-bootstrap: false @@ -88,7 +88,7 @@ jobs: sudo udevadm control --reload-rules sudo udevadm trigger --name-match=kvm - name: Gradle cache - uses: gradle/actions/setup-gradle@v6 + uses: gradle/actions/setup-gradle@90ddb51e90a5fd9ba75f40cf85156b7b41bf76a3 - name: Free Disk Space (Ubuntu) uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793 with: @@ -168,7 +168,7 @@ jobs: distribution: 'temurin' java-version: '21' - name: Setup PostgreSQL for Linux/macOS/Windows - uses: ikalnytskyi/action-setup-postgres@v8 + uses: ikalnytskyi/action-setup-postgres@c4dda34aae1c821e3a771b68b73b13af3198a7ee - uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 name: Xcode Compile Cache with: @@ -286,7 +286,7 @@ jobs: distribution: 'temurin' java-version: '21' - name: Setup PostgreSQL for Linux/macOS/Windows - uses: ikalnytskyi/action-setup-postgres@v8 + uses: ikalnytskyi/action-setup-postgres@c4dda34aae1c821e3a771b68b73b13af3198a7ee - uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 with: channel: 'stable' @@ -361,7 +361,7 @@ jobs: distribution: 'temurin' java-version: '21' - name: Setup PostgreSQL for Linux/macOS/Windows - uses: ikalnytskyi/action-setup-postgres@v8 + uses: ikalnytskyi/action-setup-postgres@c4dda34aae1c821e3a771b68b73b13af3198a7ee - uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2 with: channel: 'stable' diff --git a/.github/workflows/e2e_tests_pipeline.yaml b/.github/workflows/e2e_tests_pipeline.yaml index b9a1e001bc02..0e1a5bca4aec 100644 --- a/.github/workflows/e2e_tests_pipeline.yaml +++ b/.github/workflows/e2e_tests_pipeline.yaml @@ -70,7 +70,7 @@ jobs: sudo udevadm control --reload-rules sudo udevadm trigger --name-match=kvm - name: Gradle cache - uses: gradle/actions/setup-gradle@v6 + uses: gradle/actions/setup-gradle@90ddb51e90a5fd9ba75f40cf85156b7b41bf76a3 - name: Free Disk Space (Ubuntu) uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793 with: From e22d3e2d384be8ac42843c409752116210d39870 Mon Sep 17 00:00:00 2001 From: Jude Kwashie Date: Fri, 3 Jul 2026 09:26:17 +0000 Subject: [PATCH 3/3] chore(ci): add read permissions to workflow files --- .github/workflows/android.yaml | 7 +++++++ .github/workflows/ios.yaml | 5 +++++ .github/workflows/macos.yaml | 5 +++++ .github/workflows/web.yaml | 9 +++++++++ 4 files changed, 26 insertions(+) diff --git a/.github/workflows/android.yaml b/.github/workflows/android.yaml index f0e3afe7c58c..96168ae08717 100644 --- a/.github/workflows/android.yaml +++ b/.github/workflows/android.yaml @@ -4,6 +4,9 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }}-android cancel-in-progress: true +permissions: + contents: read + on: pull_request: paths-ignore: @@ -31,6 +34,8 @@ on: jobs: android: + permissions: + contents: read runs-on: ubuntu-latest timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 45 }} strategy: @@ -160,6 +165,8 @@ jobs: ~/.android/adb* agp9-compatibility: + permissions: + contents: read runs-on: ubuntu-latest timeout-minutes: 30 steps: diff --git a/.github/workflows/ios.yaml b/.github/workflows/ios.yaml index d9266a64c32c..c271e48c2d55 100644 --- a/.github/workflows/ios.yaml +++ b/.github/workflows/ios.yaml @@ -4,6 +4,9 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }}-ios cancel-in-progress: true +permissions: + contents: read + on: pull_request: paths-ignore: @@ -31,6 +34,8 @@ on: jobs: ios: + permissions: + contents: read runs-on: macos-15 timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 60 }} strategy: diff --git a/.github/workflows/macos.yaml b/.github/workflows/macos.yaml index 75fd25cd2b2f..558cc36fdaec 100644 --- a/.github/workflows/macos.yaml +++ b/.github/workflows/macos.yaml @@ -4,6 +4,9 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }}-macos cancel-in-progress: true +permissions: + contents: read + on: pull_request: paths-ignore: @@ -31,6 +34,8 @@ on: jobs: macos: + permissions: + contents: read runs-on: macos-15 timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 45 }} strategy: diff --git a/.github/workflows/web.yaml b/.github/workflows/web.yaml index 7775c601cb66..ac49df7a10d7 100644 --- a/.github/workflows/web.yaml +++ b/.github/workflows/web.yaml @@ -4,6 +4,9 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }}-web cancel-in-progress: true +permissions: + contents: read + on: pull_request: paths-ignore: @@ -31,6 +34,8 @@ on: jobs: web: + permissions: + contents: read runs-on: macos-latest timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 15 }} strategy: @@ -108,6 +113,8 @@ jobs: path: ~/.cache/firebase/emulators web-app-check: + permissions: + contents: read runs-on: macos-latest timeout-minutes: 15 steps: @@ -183,6 +190,8 @@ jobs: path: ~/.cache/firebase/emulators web-wasm: + permissions: + contents: read runs-on: macos-latest timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 15 }} strategy: