Skip to content

chore: change to centralized managed GitHub pool - #158

Merged
radu-mocanu merged 2 commits into
mainfrom
chore/migrate-runners-to-uipath-images-7a21e4d2
Aug 10, 2026
Merged

chore: change to centralized managed GitHub pool#158
radu-mocanu merged 2 commits into
mainfrom
chore/migrate-runners-to-uipath-images-7a21e4d2

Conversation

@tibrnui

Copy link
Copy Markdown
Contributor

Summary

Moves this repository's workflows to the centralized managed GitHub pool.

  • Runner images are prefixed with uipath- in all workflow files
  • e.g. ubuntu-latestuipath-ubuntu-latest

Changes

All workflow .yml files (including non-standard locations like workflows-src/) with static runs-on values are updated.
Dynamic expressions (${{ ... }}) and already-prefixed images are skipped.

Action Version Pinning

All uses: references are pinned to the SHA of the latest release published ≥ 48h ago.
This prevents supply-chain attacks via recently-published compromised versions.

CopilotAI review requested due to automatic review settings August 6, 2026 10:52
@tibrnui
tibrnui requested review from a team and cristipufu as code ownersAugust 6, 2026 10:52

CopilotAI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR migrates GitHub Actions workflows in uipath-runtime-python to use the centralized managed runner pool by switching runner labels to uipath-*, and hardens the workflows by pinning uses: action references to specific SHAs.

Changes:

  • Update runs-on runner labels to uipath-ubuntu-latest / uipath-windows-latest where applicable.
  • Pin GitHub Action uses: references (e.g., checkout/setup-python/upload-artifact) to specific commit SHAs.
  • Apply the updates across CI, linting, commit lint, publishing, and labeling workflows.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file
FileDescription
.github/workflows/test.ymlUpdates matrix OS labels and pins actions; includes coverage upload steps.
.github/workflows/test-uipath.ymlPins actions and updates some jobs to uipath-ubuntu-latest.
.github/workflows/test-uipath-langchain.ymlPins actions and updates some jobs to uipath-ubuntu-latest.
.github/workflows/publish-dev.ymlMoves publishing job to uipath-ubuntu-latest and pins setup actions.
.github/workflows/lint.ymlMoves lint job to uipath-ubuntu-latest and pins setup actions.
.github/workflows/commitlint.ymlMoves commitlint job to uipath-ubuntu-latest and pins setup-node.
.github/workflows/cd.ymlMoves build/publish jobs to uipath-ubuntu-latest and pins artifact/publish actions.
.github/workflows/auto-label.ymlMoves label job to uipath-ubuntu-latest and pins labeler action.
Suppressed comments (1)

.github/workflows/test.yml:54

  • This condition still checks for matrix.os == 'ubuntu-latest', but the matrix OS value is uipath-ubuntu-latest. As written, the coverage XML artifact upload will never run for the Linux job.
 - name: Upload coverage XML report
if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.13' && always()
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines 44 to +46
- name: Upload coverage HTML report
if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.13' && always()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
Comment on lines 22 to +23
- name: Checkout uipath-runtime-python
uses: actions/checkout@v4
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
Comment on lines 22 to +23
- name: Checkout uipath-runtime-python
uses: actions/checkout@v4
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
8 workflow file(s) modified, 44 action(s) pinned
Runners migrated: ubuntu-latest ubuntu-24.04 ubuntu-22.04 ubuntu-24.04-arm ubuntu-22.04-arm
ubuntu-slim ubuntu-18.04 ubuntu-20.04 windows-latest
@tibrnui
tibrnuiforce-pushed the chore/migrate-runners-to-uipath-images-7a21e4d2 branch from 870ba85 to 5d263afCompareAugust 6, 2026 13:47
@tibrnui
tibrnuiforce-pushed the chore/migrate-runners-to-uipath-images-7a21e4d2 branch from cbe04d0 to 5d263afCompareAugust 10, 2026 10:36
…ices
The matrix moved to uipath- runners but the step conditions still compared
matrix.os against 'ubuntu-latest', so the coverage and SonarCloud steps never
ran. test-uipath.yml and test-uipath-langchain.yml were still on stock runners.
@sonarqubecloud

Copy link
Copy Markdown

@radu-mocanu
radu-mocanu merged commit 098b022 into mainAug 10, 2026
22 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@tibrnui@radu-mocanu