From 8c1ffe9c5f9c2e50827d620685e42ab6274461c9 Mon Sep 17 00:00:00 2001 From: per1234 Date: Tue, 6 Feb 2024 23:42:33 -0800 Subject: [PATCH] Use arduino/setup-task@v1 action for Linux build job Unfortunately the latest v2 version of the arduino/setup-task action used to install the Task task runner tool in the runner machine has a dependency on a higher version of glibc than is provided by the Linux container. For this reason, the workflow is configured to use arduino/setup-task@v1 for the Linux build job. We will receive pull requests from Dependabot offering to update this outdated action dependency at each subsequent major version release of the action (which are not terribly frequent). We must decline the bump of the action in that specific step, but we can accept the bumps of all other usages of the action in the workflows. Dependabot remembers when you decline a bump so this should not be too bothersome. --- .github/workflows/build.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 372f8bd5..eecd06d4 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -320,11 +320,20 @@ jobs: go-version: ${{ env.GO_VERSION }} - name: Install Taskfile + if: fromJSON(matrix.config.container) == null uses: arduino/setup-task@v2 with: repo-token: ${{ secrets.GITHUB_TOKEN }} version: 3.x + - name: Install Taskfile + # actions/setup-task@v2 has dependency on a higher version of glibc than available in the Linux container. + if: fromJSON(matrix.config.container) != null + uses: arduino/setup-task@v1 + with: + repo-token: ${{ secrets.GITHUB_TOKEN }} + version: 3.x + - name: Package env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}