Skip to content

ci: update flutter.yml actions off retired Node runtimes - #128

Merged
muzahidul-opti merged 3 commits into
masterfrom
ci/bump-flutter-workflow-actions
Oct 16, 2026
Merged

muzahidul-opti merged 3 commits into
masterfrom
ci/bump-flutter-workflow-actions

Conversation

@muzahidul-opti

@muzahidul-opti muzahidul-opti commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Summary

 .github/workflows/flutter.yml
-  actions/checkout@v2 / @v3          # Node 12 / 16
+  actions/checkout@v5                # Node 24
-  actions/setup-java@v2              # Node 12
+  actions/setup-java@v5              # Node 24
-  coverallsapp/github-action@master  # stale branch (default is now main), Node 16
+  coverallsapp/github-action@v2      # composite, no Node runtime
-  echo ... >> $GITHUB_ENV
+  echo ... >> "$GITHUB_ENV"          # shellcheck SC2086
+  persist-credentials: false         # on all 5 checkouts (Arnica "artipacked")

GitHub force-runs these retired runtimes on newer Node versions and warns on every run. release.yml and publish.yml are already on checkout@v5 (#122).

Coveralls v2 finds coverage/lcov.info on its own, so its inputs don't change.

No step runs git or uploads the workspace, so nothing needs the persisted token. This keeps the long-lived CI_USER_TOKEN PAT out of .git/config in the two integration jobs. It was already there before this PR; Arnica flagged it because the lines changed.

Evidence

  • Before: actionlint .github/workflows/flutter.yml → 6× "runner of action is too old", 6× SC2086.
    After: actionlint → no issues.
  • This PR's own CI runs every changed action: the unit, Android and iOS build jobs, the integration triggers, and the Coveralls upload (coverage/coveralls check).

Merge Danger

Door: two-way. Revert the file.
Blast Radius: CI only. If the Coveralls v2 upload fails, only the coverage report is missing, and tests still gate the PR. No effect on the SDK or releases.

🤖 Generated with Claude Code

- actions/checkout v2/v3 -> v5, actions/setup-java v2 -> v5 (Node 24)
- coverallsapp/github-action@master -> @v2 (master is a stale branch on Node 16)
- quote $GITHUB_ENV (shellcheck SC2086)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Comment thread .github/workflows/flutter.yml
Comment thread .github/workflows/flutter.yml
Comment thread .github/workflows/flutter.yml
Comment thread .github/workflows/flutter.yml
Comment thread .github/workflows/flutter.yml
@muzahidul-opti
muzahidul-opti merged commit 388c137 into master Oct 16, 2026
8 of 9 checks passed
@muzahidul-opti
muzahidul-opti deleted the ci/bump-flutter-workflow-actions branch October 16, 2026 14:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant