Skip to content

ci: bump entur/abt-gha-public to v2 - #394

Merged
skjolber merged 1 commit into
masterfrom
chore/abt-gha-public-v2
Oct 2, 2026
Merged

skjolber merged 1 commit into
masterfrom
chore/abt-gha-public-v2

Conversation

@skjolber

@skjolber skjolber commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

Bumps all entur/abt-gha-public references to v2.

  • References to @main now use the released @v2 tag.

v2 (CHANGELOG):

  • removes reusable workflows with no/archived callers (none used here)
  • pins runners to ubuntu-24.04 and updates actions (setup-java v6, cache v6, gha-terraform v3, gha-helm v2, gha-slack v3)
  • hardens workflows: inputs via env:, least-privilege job permissions, persist-credentials: false, no secrets: inherit on Terraform calls

Checked the referenced workflows/actions from the previous refs to v2: no inputs/secrets added, removed or made required, and every calling job grants the permissions v2 requests. Workflows that only run after merge, on a schedule or on Dependabot PRs (deploy, release, auto-merge) are verified after merge.

🤖 Generated with Claude Code

No interface changes in the reusable workflows and actions used here; v2
removes unused workflows, pins runners to ubuntu-24.04, updates actions and
tightens permissions/credentials (see CHANGELOG.md in abt-gha-public).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@sonarqubecloud

sonarqubecloud Bot commented Oct 2, 2026

Copy link
Copy Markdown

@skjolber
skjolber merged commit f905054 into master Oct 2, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant