From 39a3bfa4ffcb971dcdf30a06e2c6d659eee42b77 Mon Sep 17 00:00:00 2001 From: Tom Thorogood Date: Tue, 15 Sep 2026 16:28:14 +0930 Subject: [PATCH 1/3] POLY-115: use relative paths for other workflows in this repo One of the consumers of our workflows have turned on the setting that requires all workflows to be pinned, this extends into the workflows in this repo. According to the GitHub Docs, $/.github/workflows/{filename} is the syntax to use to reference workflows in the same repo. Hopefully this works with the .github/actions directory the same way. This is better than what we had regardless of client need as it ensures our workflows don't mismatch the version of the workflows or actions they depend on. --- .github/workflows/aio-app-deployment.yml | 2 +- .github/workflows/aio-mesh-deployment.yml | 2 +- .github/workflows/gadget-deploy.yml | 2 +- .github/workflows/magento-cloud-deploy.yml | 2 +- .github/workflows/node-pr.yml | 8 ++++---- .github/workflows/nx-serverless-deployment.yml | 2 +- .github/workflows/pwa-deployment.yml | 2 +- .github/workflows/s3-deploy.yml | 2 +- .github/workflows/shopify-deploy.yml | 2 +- .github/workflows/shopify-theme-pr.yml | 4 ++-- .github/workflows/static-hosting-deployment.yml | 2 +- 11 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/aio-app-deployment.yml b/.github/workflows/aio-app-deployment.yml index 5a04667..541185e 100644 --- a/.github/workflows/aio-app-deployment.yml +++ b/.github/workflows/aio-app-deployment.yml @@ -153,6 +153,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/aio-mesh-deployment.yml b/.github/workflows/aio-mesh-deployment.yml index 8e30504..b0d6a64 100644 --- a/.github/workflows/aio-mesh-deployment.yml +++ b/.github/workflows/aio-mesh-deployment.yml @@ -228,6 +228,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/gadget-deploy.yml b/.github/workflows/gadget-deploy.yml index 8b32b4c..530824d 100644 --- a/.github/workflows/gadget-deploy.yml +++ b/.github/workflows/gadget-deploy.yml @@ -184,6 +184,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/magento-cloud-deploy.yml b/.github/workflows/magento-cloud-deploy.yml index a8e7ffe..e01ab93 100644 --- a/.github/workflows/magento-cloud-deploy.yml +++ b/.github/workflows/magento-cloud-deploy.yml @@ -384,6 +384,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/node-pr.yml b/.github/workflows/node-pr.yml index ebe5b56..599b86d 100644 --- a/.github/workflows/node-pr.yml +++ b/.github/workflows/node-pr.yml @@ -204,7 +204,7 @@ jobs: INPUTS_PACKAGE_MANAGER: ${{ inputs.package-manager }} - name: Register problem matchers - uses: aligent/workflows/.github/actions/node-problem-matchers@main + uses: $/.github/actions/node-problem-matchers - name: Build run: | @@ -222,7 +222,7 @@ jobs: - name: Remove problem matchers if: always() - uses: aligent/workflows/.github/actions/node-problem-matchers@main + uses: $/.github/actions/node-problem-matchers with: action: remove @@ -356,7 +356,7 @@ jobs: INPUTS_PRE_TEST_COMMAND: ${{ inputs.pre-test-command }} - id: add-matchers - uses: aligent/workflows/.github/actions/node-problem-matchers@main + uses: $/.github/actions/node-problem-matchers - name: Run checks run: | @@ -399,6 +399,6 @@ jobs: - id: remove-matchers if: always() - uses: aligent/workflows/.github/actions/node-problem-matchers@main + uses: $/.github/actions/node-problem-matchers with: action: remove diff --git a/.github/workflows/nx-serverless-deployment.yml b/.github/workflows/nx-serverless-deployment.yml index 86247c0..6d1ae3a 100644 --- a/.github/workflows/nx-serverless-deployment.yml +++ b/.github/workflows/nx-serverless-deployment.yml @@ -213,6 +213,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/pwa-deployment.yml b/.github/workflows/pwa-deployment.yml index 05c92f6..c346d3c 100644 --- a/.github/workflows/pwa-deployment.yml +++ b/.github/workflows/pwa-deployment.yml @@ -555,6 +555,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/s3-deploy.yml b/.github/workflows/s3-deploy.yml index a35eb20..0461fe6 100644 --- a/.github/workflows/s3-deploy.yml +++ b/.github/workflows/s3-deploy.yml @@ -100,6 +100,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/shopify-deploy.yml b/.github/workflows/shopify-deploy.yml index 59a1620..73147b9 100644 --- a/.github/workflows/shopify-deploy.yml +++ b/.github/workflows/shopify-deploy.yml @@ -69,6 +69,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} diff --git a/.github/workflows/shopify-theme-pr.yml b/.github/workflows/shopify-theme-pr.yml index 166302d..ee57b34 100644 --- a/.github/workflows/shopify-theme-pr.yml +++ b/.github/workflows/shopify-theme-pr.yml @@ -56,7 +56,7 @@ jobs: run: npm install -g @shopify/cli@latest - name: Register problem matcher - uses: aligent/workflows/.github/actions/shopify-theme-problem-matchers@main + uses: $/.github/actions/shopify-theme-problem-matchers - name: Run Theme Check working-directory: ${{ inputs.working-directory }} @@ -91,7 +91,7 @@ jobs: - name: Remove problem matcher if: always() - uses: aligent/workflows/.github/actions/shopify-theme-problem-matchers@main + uses: $/.github/actions/shopify-theme-problem-matchers with: action: remove diff --git a/.github/workflows/static-hosting-deployment.yml b/.github/workflows/static-hosting-deployment.yml index da9af04..58668a4 100644 --- a/.github/workflows/static-hosting-deployment.yml +++ b/.github/workflows/static-hosting-deployment.yml @@ -120,6 +120,6 @@ jobs: - name: Backport to staging if: success() && inputs.create-backport-pr - uses: aligent/workflows/.github/actions/backport@main + uses: $/.github/actions/backport with: target-branch: ${{ inputs.backport-target-branch }} From 889c8e62c014a9ed24c25e2f7c8509bbc9f9c6db Mon Sep 17 00:00:00 2001 From: Tom Thorogood Date: Tue, 15 Sep 2026 16:38:53 +0930 Subject: [PATCH 2/3] POLY-115: ignore actionlint for new $/ repo-relative uses syntax This syntax was added by GitHub on July 30th and actionlint has not been updated to support it. This is a valid and working syntax so ignore the errors. See https://github.com/rhysd/actionlint/issues/711. --- .github/actionlint.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/actionlint.yml b/.github/actionlint.yml index e748bad..1f6c24c 100644 --- a/.github/actionlint.yml +++ b/.github/actionlint.yml @@ -4,3 +4,7 @@ paths: ".github/workflows/magento-cloud-deploy.yml": ignore: - 'property "cst_reporting_token" is not defined' + ".github/workflows/**/*.{yaml,yml}": + ignore: + - 'reusable workflow call "\$/.+" at "uses" is not following the format' + - 'specifying action "\$/.+" in invalid format because ref is missing' From 28ac3b65e7814d00802b9caeb30f722a11f789c9 Mon Sep 17 00:00:00 2001 From: Tom Thorogood Date: Tue, 15 Sep 2026 16:45:55 +0930 Subject: [PATCH 3/3] POLY-115: update ci.yml action versions We need to update the version of zizmorcore/zizmor-action to support the new $/ actions repo-reference syntax. While we are here, update all the actions to their latest versions. --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 583f2a2..e1cc02f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -12,7 +12,7 @@ jobs: contents: read # only needed for private or internal repos actions: read # only needed for private or internal repos steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1 with: persist-credentials: false @@ -20,9 +20,9 @@ jobs: run: yamllint . - name: actionlint - uses: raven-actions/actionlint@205b530c5d9fa8f44ae9ed59f341a0db994aa6f8 # v2.1.2 + uses: raven-actions/actionlint@3d39aea434753780c3b3d4a1a31c854b4dbf49d7 # v2.2.0 with: shellcheck: false - name: zizmor - uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7 + uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4