From f19ea389b4ca294ae2cad779be6cdde73b10224b Mon Sep 17 00:00:00 2001 From: Jan-Erik Rediger Date: Tue, 4 Aug 2026 12:47:46 +0200 Subject: [PATCH 1/3] Address Github Actions policy errors --- .github/workflows/build.yml | 9 +++++++++ .github/workflows/deploy.yml | 4 +++- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 500951e18..6ed8a0c63 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -15,6 +15,8 @@ jobs: steps: - uses: actions/checkout@main + with: + persist-credentials: false - name: Install mdbook-dtmo run: | @@ -33,6 +35,7 @@ jobs: - uses: actions/checkout@main with: fetch-depth: 2 + persist-credentials: false - name: Get changed files id: changed-files @@ -52,6 +55,8 @@ jobs: steps: - uses: actions/checkout@main + with: + persist-credentials: false - name: Spell check env: @@ -67,6 +72,8 @@ jobs: steps: - uses: actions/checkout@main + with: + persist-credentials: false - name: Link check env: @@ -82,6 +89,8 @@ jobs: steps: - uses: actions/checkout@main + with: + persist-credentials: false - name: Prettier check env: diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 73245d29f..3bf718d63 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -11,7 +11,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@main + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Install mdbook-dtmo run: | From 750fb847e25e65de3734bbd301bc536a45b578d6 Mon Sep 17 00:00:00 2001 From: Jan-Erik Rediger Date: Tue, 4 Aug 2026 12:50:49 +0200 Subject: [PATCH 2/3] Deploy page using GitHub Actions, not a branch --- .github/workflows/deploy.yml | 30 ++++++++++++++++++------------ 1 file changed, 18 insertions(+), 12 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 3bf718d63..e8ab84c8f 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -24,18 +24,24 @@ jobs: run: | mdbook-dtmo build . - - name: Install github-pages - run: | - npm install gh-pages@3.1.0 + - name: Upload static files as artifact + id: deployment + uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0 + with: + path: book - - name: Set Git config - run: | - git config user.email "no-one@mozilla.com" - git config user.name "GitHub Actions docs-deploy job" - git remote set-url origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/$GITHUB_REPOSITORY + deploy: + needs: build + permissions: + pages: write + id-token: write - - name: Deploy to GitHub pages - run: | - echo "docs-origin.telemetry.mozilla.org" > book/CNAME - npx gh-pages --dotfiles --message "Deploy docs" --dist book + environment: + name: github-pages + url: ${{ steps.deployment.outputs.page_url }} + runs-on: ubuntu-latest + steps: + - name: Deploy to GitHub Pages + id: deployment + uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0 From bdcff9adf1b7ff015eee84e52f92cb2e9edccb6d Mon Sep 17 00:00:00 2001 From: Jan-Erik Rediger Date: Tue, 4 Aug 2026 12:55:49 +0200 Subject: [PATCH 3/3] CI: Newer tj-actions/changed-files --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 6ed8a0c63..1e662f367 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -39,7 +39,7 @@ jobs: - name: Get changed files id: changed-files - uses: tj-actions/changed-files@823fcebdb31bb35fdf2229d9f769b400309430d0 # v46.0.3 + uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6 with: files: | README.md