Update Action dependencies in build-and-test workflow

Author: webstackdev

.github/workflows/build-and-test.yml

@@ -19,12 +19,22 @@ jobs:
 
     # Define environment variables once at the job level
     # These will be available to ALL steps in this job
+    # @TODO: These are real keys set on GitHub. But the production build only occurs on Vercel, and it's the only place that needs real keys. Once we set up a test framework using Docker containers for Suprabase, Upstash, etc., we should replace these keys with test keys.
     env:
       CONVERTKIT_API_KEY: ${{ secrets.CONVERTKIT_API_KEY }}
       CONVERTKIT_FORM_ID: ${{ secrets.CONVERTKIT_FORM_ID }}
+      CRON_SECRET: ${{ secrets.CRON_SECRET }}
       RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }}
       SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
       PUBLIC_SENTRY_DSN: ${{ secrets.PUBLIC_SENTRY_DSN }}
+      PUBLIC_SUPABASE_URL: ${{ secrets.PUBLIC_SUPABASE_URL }}
+      PUBLIC_SUPABASE_KEY: ${{ secrets.PUBLIC_SUPABASE_KEY }}
+      SUPABASE_SERVICE_ROLE_KEY: ${{ secrets.SUPABASE_SERVICE_ROLE_KEY }}
+      KV_URL: ${{ secrets.KV_URL }}
+      KV_REST_API_URL: ${{ secrets.KV_REST_API_URL }}
+      KV_REST_API_TOKEN: ${{ secrets.KV_REST_API_TOKEN }}
+      KV_REST_API_READ_ONLY_TOKEN: ${{ secrets.KV_REST_API_READ_ONLY_TOKEN }}
+      REDIS_URL: ${{ secrets.REDIS_URL }}
       WEBMENTION_IO_TOKEN: ${{ secrets.WEBMENTION_IO_TOKEN }}
 
     steps:
@@ -54,7 +64,7 @@ jobs:
           npx vitest run --coverage
 
       - name: Report Coverage
-        uses: davelosert/vitest-coverage-report-action@v2
+        uses: davelosert/vitest-coverage-report-action@v2.8.3
         if: always()
         with:
           json-summary-path: './coverage/coverage-summary.json'
@@ -80,7 +90,7 @@ jobs:
           retention-days: 30
 
       - name: Upload test coverage
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5.0.0
         if: always()
         with:
           name: test-coverage
@@ -99,7 +109,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Deploy to Vercel (Preview)
-        uses: amondnet/vercel-action@v25
+        uses: amondnet/vercel-action@v41.1.4
         id: vercel-preview
         with:
           vercel-token: ${{ secrets.VERCEL_TOKEN }}
@@ -110,7 +120,7 @@ jobs:
           VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
 
       - name: Comment preview URL on PR
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         if: github.event_name == 'pull_request'
         with:
           script: |
@@ -145,7 +155,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Deploy to Vercel (Production)
-        uses: amondnet/vercel-action@v25
+        uses: amondnet/vercel-action@v41.1.4
         id: vercel-production
         with:
           vercel-token: ${{ secrets.VERCEL_TOKEN }}