Update dependencies: Electron 45.0.0, electron-builder 26.18.0, action-gh-release patch pin, weekly actions / Node update PR; GUI 0.106.0

.github/workflows/build-linux.yml

@@ -113,7 +113,7 @@ jobs:
 
       - name: Update Release Linux
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}
@@ -122,7 +122,7 @@ jobs:
 
       - name: Update Release Linux gui
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}
@@ -197,7 +197,7 @@ jobs:
 
       - name: Update Release Linux ubuntu22
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}
@@ -206,7 +206,7 @@ jobs:
 
       - name: Update Release Linux gui ubuntu22
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}
@@ -275,7 +275,7 @@ jobs:
 
       - name: Update Release Linux arm64
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}
@@ -284,7 +284,7 @@ jobs:
 
       - name: Update Release Linux gui arm64
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}

.github/workflows/build-macos.yml

@@ -154,15 +154,15 @@ jobs:
 
       - name: Update Release macOS-arm64
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}
           make_latest: ${{ env.RELEASE == 'latest' && 'false' || 'legacy' }}
           files: projectGenerator-mac-arm64.zip
       - name: Update Release macOS
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}

.github/workflows/build-vs.yml

@@ -103,15 +103,15 @@ jobs:
 
       - name: Update Release CMD
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}
           make_latest: ${{ env.RELEASE == 'latest' && 'false' || 'legacy' }}
           files: ../openFrameworks/apps/projectGenerator/commandLine/bin/projectGenerator-vs.zip
       - name: Update Release GUI
         if: github.repository == 'openframeworks/projectGenerator' && github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/master' || github.ref == 'refs/heads/bleeding')
-        uses: softprops/action-gh-release@v3.0.3
+        uses: danoli3/action-gh-release@ec40b04e78c39008f73c4ca3fdf9b51df604c4ed # temporary patch: softprops/action-gh-release#852
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.RELEASE }}

.github/workflows/dependency-versions.yml

@@ -1,7 +1,8 @@
 name: Dependency version check
 
 # weekly report of out of date dependencies (Electron and the other frontend npm packages,
-# GitHub Actions, CI Node, vendored jQuery / Semantic UI), kept in one tracking issue
+# GitHub Actions, CI Node, vendored jQuery / Semantic UI), kept in one tracking issue;
+# out of date actions / node-version also get a PR (update job)
 on:
   schedule:
     - cron: '0 8 * * 1'
@@ -35,3 +36,45 @@ jobs:
           else
             bash scripts/check-dependency-versions.sh
           fi
+
+  # rewrites out of date action refs / node-version and keeps one PR open for them.
+  # pushing workflow changes needs a PAT with the workflow scope (PAT_TOKEN), GITHUB_TOKEN can't
+  update:
+    if: github.repository == 'openframeworks/projectGenerator'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+      pull-requests: write
+    env:
+      GH_TOKEN: ${{ secrets.PAT_TOKEN }}
+      BRANCH: dependency-versions-update
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          token: ${{ secrets.PAT_TOKEN || secrets.GITHUB_TOKEN }}
+      - name: Update action refs and node-version
+        shell: bash
+        run: bash scripts/check-dependency-versions.sh --update > /dev/null
+      - name: Open / update PR
+        shell: bash
+        run: |
+          if git diff --quiet; then
+            echo "Actions and node-version are up to date"
+            exit 0
+          fi
+          git diff --stat
+          if [[ -z $GH_TOKEN ]]; then
+            echo "::warning::PAT_TOKEN secret not set, can't push workflow updates"
+            exit 0
+          fi
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git switch -C "$BRANCH"
+          git commit -qam 'CI: update GitHub Actions and node-version to latest'
+          git push -f origin "$BRANCH"
+          if [[ -z $(gh pr list --head "$BRANCH" --state open --json number --jq '.[].number') ]]; then
+            gh pr create --base master --head "$BRANCH" \
+              --title 'CI: update GitHub Actions and node-version to latest' \
+              --body "Automated by the dependency version check (\`scripts/check-dependency-versions.sh --update\`)."
+          fi