Skip to content

chore: update CI workflows and maintenance files#4324

Open
PastelStorm wants to merge 2 commits intoevoss/tesseract-hocr-copy-fixfrom
evoss/maintenance-ci-versioning
Open

chore: update CI workflows and maintenance files#4324
PastelStorm wants to merge 2 commits intoevoss/tesseract-hocr-copy-fixfrom
evoss/maintenance-ci-versioning

Conversation

@PastelStorm
Copy link
Copy Markdown
Contributor

@PastelStorm PastelStorm commented Apr 5, 2026

Refresh workflow action versions, sync repo maintenance scripts, and carry the lockfile updates needed for the CI and dependency maintenance baseline.

Made-with: Cursor


Note

Medium Risk
Medium risk because it changes CI execution by upgrading workflow actions and altering dependency setup (notably pandas pinning for certain extras), which can affect build/test behavior without touching runtime code.

Overview
Refreshes GitHub Actions workflows by bumping actions/checkout to v5 across all workflows, upgrading dorny/paths-filter to v4, and forcing JS actions to run on Node 24 via FORCE_JAVASCRIPT_ACTIONS_TO_NODE24.

Adjusts CI dependency testing and maintenance checks by adding a pandas<3 baseline reinstall step for the csv and xlsx extras matrix, and updating the license-check allowlist/ignore list (including matplotlib-inline) with a corresponding CHANGELOG.md maintenance note.

Reviewed by Cursor Bugbot for commit ab80af8. Bugbot is set up for automated code reviews on this repo. Configure here.

@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 5, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedgithub/​actions/​checkout@​93cb6efe18208431cddfb8368fd83d5badbf9bfd100100100100100
Updatedgithub/​dorny/​paths-filter@​de90cc6fb38fc0963ad72b210f1f284cd68cea36 ⏵ fbd0ab8f3e69293af611ebaee6363fc25e6d187d100 +1100100100100

View full report

Refresh workflow action versions, sync repo maintenance scripts, and carry the lockfile updates needed for the CI and dependency maintenance baseline.

Made-with: Cursor
@PastelStorm PastelStorm force-pushed the evoss/maintenance-ci-versioning branch from 14d9c42 to ab80af8 Compare April 6, 2026 02:06
Comment thread .github/workflows/ci.yml
- name: Install supported pandas baseline
if: matrix.pandas-spec != ''
run: |
uv pip install --reinstall "${{ matrix.pandas-spec }}"
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why do we need to reinstall pandas to the spec here? if we need that shouldn't we pin in the pyproject.toml instead?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants