Version 0.47.0-RC1

.github/workflows/build.yml

@@ -39,13 +39,12 @@ jobs:
           - 1.22.x
         sys:
           - {os: ubuntu-latest}
-          - {os: macos-12, shell: zsh}
+          - {os: macos-13, shell: zsh}
           - {os: windows-2019}
       fail-fast: false
     runs-on: ${{ matrix.sys.os }}
     env:
       ACTIVESTATE_CI: true
-      ACTIVESTATE_CLI_DISABLE_RUNTIME: true
       SHELL: bash
       GITHUB_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       GITHUB_SHA_OVERRIDE: ${{ github.event.pull_request.head.sha || github.sha }}
@@ -69,7 +68,7 @@ jobs:
 
       - # === Install Go ===
         name: Install Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go-version }}
 
@@ -393,20 +392,44 @@ jobs:
 
       - # === Upload Session Artifacts ===
         name: Upload Session Artifacts
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: session-build-${{ matrix.sys.os }}
           path: build/
 
+  scan:
+    name: Scan
+    needs:
+      - os_specific
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download All Build Session Artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: build/
+          merge-multiple: true
+
+      - name: Scan for CVEs
+        if: runner.os == 'Linux'
+        uses: aquasecurity/[email protected]
+        env:
+          TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
+        with:
+          scan-type: rootfs
+          scan-ref: build
+          list-all-pkgs: true
+          ignore-unfixed: true
+          format: table
+          exit-code: 1
+
   # === Deploy job (runs once with combined artifacts from OS specific job) ===
   deploy:
     name: Deploy
     needs:
-      - os_specific
+      - scan
     runs-on: ubuntu-20.04
     env:
       ACTIVESTATE_CI: true
-      ACTIVESTATE_CLI_DISABLE_RUNTIME: true
       SHELL: bash
       GITHUB_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       GITHUB_SHA_OVERRIDE: ${{ github.event.pull_request.head.sha || github.sha }}
@@ -424,19 +447,20 @@ jobs:
 
       - # === Install Go ===
         name: Install Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
-          go-version: ${{ matrix.go-version }}
+          go-version: 1.22.x
 
       - # === Install State Tool ===
         name: Install State Tool
         uses: ActiveState/setup-state-tool@v1
 
       - # === Download All Build Session Artifacts ===
         name: Download All Build Session Artifacts
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v4
         with:
           path: build/
+          merge-multiple: true
 
       - # === Sanitize All Session Artifacts ===
         name: Sanitize All Session Artifacts
@@ -481,16 +505,9 @@ jobs:
 
       - # === Cleanup Session Artifacts ===
         name: Cleanup Session Artifacts
-        uses: geekyeggo/delete-artifact@v1
+        uses: geekyeggo/delete-artifact@v5
         with:
           name: |
             session-build-ubuntu-20.04
             session-build-macos-11
             session-build-windows-2019
-
-      - # === Upload Artifacts ===
-        name: Upload Artifacts
-        uses: actions/upload-artifact@v2
-        with:
-          name: build
-          path: build/

.github/workflows/propagate.yml

@@ -25,14 +25,14 @@ jobs:
 
       - # === Checkout code ===
         name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_AUTOMATION_TOKEN }}
 
       - # === Install Go ===
         name: Install Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
           go-version: '1.22.x'
 

.github/workflows/release.yml

@@ -25,7 +25,7 @@ jobs:
     steps:
       - # Checkout Code
         name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v5
 
       - # === Install Go ===
         name: Install Go

.github/workflows/scan.yml

@@ -0,0 +1,44 @@
+name: Scan
+
+on:
+  schedule:
+    - cron: 0 0 * * *
+
+jobs:
+  fetch-binaries:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Install State Tool
+        uses: ActiveState/setup-state-tool@v1
+
+      - name: Copy State Tool binaries to workspace dir
+        shell: bash
+        run: |
+          exe=`which state`
+          dir=`dirname $exe`
+          cp -r $dir/* '${{ github.workspace }}'
+
+      - name: Upload binaries
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.os }}-binaries
+          path: .
+
+  scan:
+    needs: fetch-binaries
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download binaries
+        uses: actions/download-artifact@v4
+
+      - name: Scan binaries
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: rootfs
+          scan-ref: '.'
+          ignore-unfixed: true
+          format: table
+          exit-code: 1

.github/workflows/verify.yml

@@ -34,7 +34,7 @@ jobs:
 
       - # === Install Go ===
         name: Install Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
           go-version: '1.22.x'
 

.golangci.yaml

@@ -32,7 +32,6 @@ linters-settings:
       - (*github.com/ActiveState/cli/internal/testhelpers/e2e.SpawnedCmd).Wait
       - (*github.com/ActiveState/cli/internal/testhelpers/e2e.Session).ClearCache
       - (*github.com/ActiveState/cli/internal/testhelpers/e2e.Dirs).Close
-      - (*github.com/ActiveState/cli/pkg/platform/runtime/artifactcache.testArtifactCache).Store
       - github.com/ActiveState/cli/internal/testhelpers/osutil.RemoveConfigFile
       - (*github.com/ActiveState/cli/internal/logging.standardHandler).Emit
       - (*github.com/ActiveState/cli/internal/logging.fileHandler).Emit

activestate.generators.yaml

@@ -84,7 +84,8 @@ scripts:
     language: bash
     description: Generates graph server and client files
     value: |
-      go install github.com/99designs/[email protected]
+      set -e
+      go install github.com/99designs/[email protected]
       cd ./cmd/state-svc && gqlgen --verbose
   - name: generate-test-update
     language: bash