From 3d6f64240743f4b0c7b5d7c7f400b039e25be390 Mon Sep 17 00:00:00 2001
From: Chen <iamsunyuchen@gmail.com>
Date: Wed, 11 Mar 2026 03:44:37 +0800
Subject: [PATCH] =?UTF-8?q?chore(ci):=20=E5=8D=87=E7=BA=A7=20Actions=20?=
 =?UTF-8?q?=E7=89=88=E6=9C=AC=E5=B9=B6=E8=A1=A5=E8=B6=B3=20PR=20=E8=AF=84?=
 =?UTF-8?q?=E8=AE=BA=E6=9D=83=E9=99=90?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 将 checkout cache upload-artifact 等 GitHub Actions 升级到最新大版本
- 为 ci-summary 增加 pull-requests 写权限以修复 sticky comment 权限告警
- 保持 workflow 改动最小化并通过本地 build 验证零 warning
---
 .github/workflows/_reusable-ui-smoke-tests.yml | 8 ++++----
 .github/workflows/_reusable-unit-tests.yml     | 8 ++++----
 .github/workflows/ci.yml                       | 3 ++-
 .github/workflows/release.yml                  | 6 +++---
 4 files changed, 13 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/_reusable-ui-smoke-tests.yml b/.github/workflows/_reusable-ui-smoke-tests.yml
index 2cf01a0..5efb189 100644
--- a/.github/workflows/_reusable-ui-smoke-tests.yml
+++ b/.github/workflows/_reusable-ui-smoke-tests.yml
@@ -65,14 +65,14 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         id: xcode
         uses: ./.github/actions/xcode-select
 
       - name: Cache Xcode metadata
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             .derivedData/SourcePackages
@@ -190,7 +190,7 @@ jobs:
 
       - name: Upload UI smoke test result bundle
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ui-smoke-tests-xcresult-${{ inputs.artifact_name_suffix }}
           path: UISmokeTests.xcresult
@@ -199,7 +199,7 @@ jobs:
 
       - name: Upload UI smoke failure summary
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ui-smoke-summary-${{ inputs.artifact_name_suffix }}
           path: |
diff --git a/.github/workflows/_reusable-unit-tests.yml b/.github/workflows/_reusable-unit-tests.yml
index 50b9c1d..2760859 100644
--- a/.github/workflows/_reusable-unit-tests.yml
+++ b/.github/workflows/_reusable-unit-tests.yml
@@ -33,14 +33,14 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         id: xcode
         uses: ./.github/actions/xcode-select
 
       - name: Cache Xcode metadata
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             .derivedData/SourcePackages
@@ -70,7 +70,7 @@ jobs:
 
       - name: Upload unit test result bundle
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: unit-tests-xcresult
           path: UnitTests.xcresult
@@ -78,7 +78,7 @@ jobs:
 
       - name: Upload coverage report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: unit-tests-coverage-report
           path: docs/testing/coverage-latest.json
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 71eb0c0..de7f224 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -123,7 +123,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         uses: ./.github/actions/xcode-select
@@ -235,6 +235,7 @@ jobs:
     permissions:
       contents: read
       issues: write
+      pull-requests: write
     steps:
       - name: Render summary and update PR sticky comment
         uses: actions/github-script@v8
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5bd58df..267b4bb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -40,7 +40,7 @@ jobs:
           fi
 
       - name: Checkout target ref
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.target_ref }}
           fetch-depth: 0
@@ -81,7 +81,7 @@ jobs:
             arch: x86_64
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Select Xcode
         uses: ./.github/actions/xcode-select
@@ -141,7 +141,7 @@ jobs:
           shasum -a 256 "release-assets/${dmg_name}" > "release-assets/${dmg_name}.sha256"
 
       - name: Upload DMG artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: release-dmg-${{ matrix.label }}
           path: |