GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Avoid using `-latest` runner labels in CI by mbg · Pull Request #4275 · github/codeql-action

Conversation

@mbg

@mbg mbg commented Oct 28, 2026 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member

Updates our workflows to avoid using the -latest runner labels.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
mbg added 3 commits October 28, 2026 15:59
@mbg
Refactor defaultRunnerImages into DEFAULT_RUNNER_IMAGES map
2d85855
@mbg
Replace floating occurrences of ubuntu-latest
4b0f575
@mbg
Replace -latest with current, corresponding labels in `DEFAULT_RUNN…
b8e6367
…ER_IMAGES`
@github-actions github-actions Bot added the size/XS Should be very easy to review label Oct 28, 2026
@mbg
Update hard-coded latest runner labels
c8bf9ad
@github-actions github-actions Bot added size/S Should be easy to review and removed size/XS Should be very easy to review labels Oct 29, 2026
@mbg
mbg marked this pull request as ready for review October 29, 2026 16:37
@mbg
mbg requested a review from a team as a code owner October 29, 2026 16:37
Copilot AI max review requested due to automatic review settings October 29, 2026 16:37
Copilot started reviewing on behalf of mbg October 29, 2026 16:37
View session
Copilot AI reviewed Oct 29, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Several workflow configurations still use macos-latest-xlarge instead of macos-26-xlarge, leaving them exposed to automatic macOS upgrades.

1 open issue
  • Medium severity Pin remaining Swift workflows to macos-26-xlarge · New
54 files not reviewed
  • .github/workflows/__all-platform-bundle.yml: Excluded by your content exclusion settings
  • .github/workflows/__analysis-kinds.yml: Excluded by your content exclusion settings
  • .github/workflows/__analyze-ref-input.yml: Excluded by your content exclusion settings
  • .github/workflows/__autobuild-action.yml: Excluded by your content exclusion settings
  • .github/workflows/__autobuild-direct-tracing-with-working-dir.yml: Excluded by your content exclusion settings
  • .github/workflows/__autobuild-working-dir.yml: Excluded by your content exclusion settings
  • .github/workflows/__build-mode-autobuild.yml: Excluded by your content exclusion settings
  • .github/workflows/__build-mode-manual.yml: Excluded by your content exclusion settings
  • .github/workflows/__build-mode-none.yml: Excluded by your content exclusion settings
  • .github/workflows/__build-mode-rollback.yml: Excluded by your content exclusion settings
  • .github/workflows/__bundle-from-nightly.yml: Excluded by your content exclusion settings
  • .github/workflows/__bundle-from-toolcache.yml: Excluded by your content exclusion settings
  • .github/workflows/__bundle-toolcache.yml: Excluded by your content exclusion settings
  • .github/workflows/__cleanup-db-cluster-dir.yml: Excluded by your content exclusion settings
  • .github/workflows/__config-export.yml: Excluded by your content exclusion settings
  • .github/workflows/__config-input.yml: Excluded by your content exclusion settings
  • .github/workflows/__cpp-deptrace-disabled.yml: Excluded by your content exclusion settings
  • .github/workflows/__cpp-deptrace-enabled-on-macos.yml: Excluded by your content exclusion settings
  • .github/workflows/__cpp-deptrace-enabled.yml: Excluded by your content exclusion settings
  • .github/workflows/__diagnostics-export.yml: Excluded by your content exclusion settings

And 34 more.

What changed in this PR

Pins CI runner images to explicit operating-system versions, reducing unexpected environment changes in CodeQL Action checks and release automation.

Changes:

  • Uses Ubuntu 26.04, macOS 26, and Windows 2025 for default runners.
  • Centralizes runner defaults for generated PR checks and validation jobs.
  • Updates OS-specific conditions while retaining the Ubuntu 24.04 fallback for CodeQL 2.20.7.
File Description
pr-checks/​sync.ts Centralizes pinned runner defaults and preserves the older-CLI fallback.
pr-checks/​checks/​per-language-bundle-validation.yml Pins Linux per-language bundle checks.
.github/​workflows/​update-release-branch.yml Pins release-update and backport jobs.
.github/​workflows/​update-bundle.yml Pins bundle-update automation.
.github/​workflows/​test-codeql-bundle-all.yml Pins the bundle test runner.
.github/​workflows/​rollback-release.yml Pins release rollback automation.
.github/​workflows/​rebuild.yml Pins the Action rebuild runner.
.github/​workflows/​query-filters.yml Pins query-filter tests.
.github/​workflows/​python312-windows.yml Pins Python 3.12 tests to Windows 2025.
.github/​workflows/​prepare-release.yml Pins release preparation.
.github/​workflows/​pr-checks.yml Pins the cross-platform matrix and updates OS-specific conditions.
.github/​workflows/​post-release-mergeback.yml Pins release merge-back automation.
.github/​workflows/​debug-artifacts-safe.yml Pins artifact checks while preserving the older-CLI fallback.
.github/​workflows/​debug-artifacts-failure-safe.yml Pins failure-path artifact checks and preserves the fallback.
.github/​workflows/​codescanning-config-cli.yml Pins the configuration test matrix.
.github/​workflows/​codeql.yml Pins version-selection and analysis runners.

Review effort: Max

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
Comment thread pr-checks/checks/per-language-bundle-validation.yml Resolved

Uh oh!

There was an error while loading. Please reload this page.

@mbg
Replace macos-latest-xlarge with macos-26-xlarge
690197d
henrymercer
henrymercer previously approved these changes Oct 30, 2026
View reviewed changes
@mbg
mbg added this pull request to the merge queue Oct 30, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Oct 30, 2026

Uh oh!

There was an error while loading. Please reload this page.

@github-actions

github-actions Bot commented Oct 30, 2026

Copy link
Copy Markdown
Contributor

@mbg The pull request was removed from the merge queue (CI_FAILURE). Please resolve any issues if required and enqueue the PR again.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@mbg
mbg added this pull request to the merge queue Oct 30, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Oct 30, 2026

Uh oh!

There was an error while loading. Please reload this page.

@github-actions

github-actions Bot commented Oct 30, 2026

Copy link
Copy Markdown
Contributor

@mbg The pull request was removed from the merge queue (CI_FAILURE). Please resolve any issues if required and enqueue the PR again.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@mbg
Merge branch 'main' into mbg/avoid-latest
ea41ba5
@henrymercer henrymercer added the Rebuild Re-transpile JS & re-generate workflows label Oct 30, 2026
@github-actions github-actions Bot removed the Rebuild Re-transpile JS & re-generate workflows label Oct 30, 2026
@mbg
Update workflows
104d238
@mbg
mbg dismissed henrymercer’s stale review via 104d238 October 30, 2026 14:24
@mbg
mbg enabled auto-merge October 30, 2026 14:49
@mbg
mbg requested a review from henrymercer October 30, 2026 14:49
henrymercer
henrymercer approved these changes Oct 30, 2026
View reviewed changes
@mbg
mbg disabled auto-merge October 30, 2026 14:52
@mbg
mbg added this pull request to the merge queue Oct 30, 2026
Merged via the queue into main with commit 255c50d Oct 30, 2026
235 of 237 checks passed

Uh oh!

There was an error while loading. Please reload this page.

@mbg
mbg deleted the mbg/avoid-latest branch October 30, 2026 15:05
This was referenced Nov 3, 2026
Merge main into releases/v4 #4286
Merged
Merge releases/v4 into releases/v3 #4291
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@henrymercer henrymercer henrymercer approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

size/S Should be easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@mbg @henrymercer
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.