7 ms·
What’s more, GitHub has basically stopped maintaining their own actions, pushing people to sketchy forks to do basic things. Their entire ecosystem is basically
by saagarjha 11mo ago
What’s more, GitHub has basically stopped maintaining their own actions, pushing people to sketchy forks to do basic things. Their entire ecosystem is basically held up with duct tape and gets very little investment.
- bilekas 11mo agoThat issue with their own small private forks has actually raised its head while testing out the AI slop generator thing it has, making anything it produces for you not self hoatable unless you rewrite a lot of basic functions. Sweet irony.
- Cthulhu_ 11mo agoWhich is strange because they have infinite Microsoft money and can print more if they get it into enterprises. (we run a private gitlab instance and a merge request can spawn hundreds of jobs, that's a lot of potential Gitlab credits)
- mhitza 11mo agoWith AI you won't need CI anymore, it's all going straight to prod anyway /s Actions is one thing, but after all these years where the new finegrained access tokens aren't still supported across all the product endpoints (and the wack granularity) is more telling about their lack of investment in maintenance.
- crote 11mo agoThis is the first time I've heard of this, do you happen to have an example?
- anentropic 11mo agohttps://github.com/orgs/actions/repositories?language=&q=&sort=&type=archived https://github.com/orgs/actions/repositories?language=&q=&so... https://github.com/actions/create-release https://github.com/actions/create-release
- ptx 11mo agoThe funny thing about the last one is that those actions ultimately boil down to invoking their CLI tool (which is pre-installed on the runners) with "gh release create ...", so you can just do that yourself and ignore the third-party actions and the issues that come with them. Invoking an action isn't really any easier than invoking the CLI tool.
- WorldMaker 11mo agoYeah, what really needs to happen with that repo is to put that in the README to use the gh CLI instead of pointing to the third-party action with questionable security policies. If they were accepting PRs for that repo, it would be an easy PR to make.
- coryrc 11mo agohttps://github.com/search?q=org%3Aactions+%22we+are+allocating+resources+towards+other+areas+of+Actions+and+are+not+taking+contributions+to+this+repository+at+this+time.%22&type=code https://github.com/search?q=org%3Aactions+%22we+are+allocati... i.e. from https://github.com/actions/cache/?tab=readme-ov-file#note https://github.com/actions/cache/?tab=readme-ov-file#note Thank you for your interest in this GitHub repo, however, right now we are not taking contributions. We continue to focus our resources on strategic areas that help our customers be successful while making developers' lives easier. While GitHub Actions remains a key part of this vision, we are allocating resources towards other areas of Actions and are not taking contributions to this repository at this time. The GitHub public roadmap is the best place to follow along for any updates on features we’re working on and what stage they’re in.
- crote 11mo agoThat's insane, so they are basically dropping support on a core feature of GH Actions?
- saagarjha 11mo agoThis is on the checkout action too, by the way. You know, the very first thing people put in their CI pipeline.
- conartist6 11mo agoWow, Microsoft just can't stop taking a dump on their users
- mixedbit 11mo agoAn interesting things is that GitHub is an expensive service and my guess would be that MS makes good money on it. Our small company paid about 200+ USD monthly for GitHub, much larger cumulative cost than Windows licenses. My believe was that Windows is getting worse, because it is considered legacy business by MS in favor of new offerings such as GitHub subscriptions.
- samhh 11mo agoI was surprised to learn that Depot runners, which are much faster, are also much cheaper. Would highly recommend them for anyone trapped on GitHub.
- LilBytes 11mo agoDepot.dev is great.
- kylegalbraith 11mo agoThank you! Really appreciate the support.
- 999900000999 11mo agoYeah, but I have to set that up. GitHub actions more or less just work for what most people need. If you have a complex setup, use a real CI/CD system.
- bastardoperator 11mo agoSuch as?
- 999900000999 11mo agoJenkins is open source and very well documented. GitHub Actions are really for just short scripts. Don't take your Miata off road.
- silverwind 11mo agoThe quality of setup-* actions has definitely gone down and there are a lot of strange decisions being made. I assume the original authors of these actions have long left the company.
- miohtama 11mo agoEveryone is free to use alternative CI/CD workflow pipelines. These are often better than Github Actions. These include - https://circleci.com/ https://circleci.com/ - https://www.travis-ci.com/ https://www.travis-ci.com/ - Gitlab Open source: - https://concourse-ci.org/ https://concourse-ci.org/ (discussed in the context of Radicle here https://news.ycombinator.com/item?id=44658820 https://news.ycombinator.com/item?id=44658820 ) - Jenkins -etc. Anyone can complain as much as they want, but unless they put the money where their mouth is, it's just noise from lazy people.
- c0balt 11mo agoIt should be highlighted that Gitlab CI/CD (self-hostable runner and GitLab itself) is also OSS.
- ramon156 11mo agoaccording to travis-ci, Microsoft uses that? Lol
- input_sh 11mo agoYou're falling for a marketing trick. What that type of section usually means is "there's someone from Microsoft that signed up for our service using his work account", sometimes it means "there's some tiny team within Microsoft that uses our product", but it very rarely (if ever) means "the entire company is completely reliant on our product".
- SkyPuncher 11mo agoYes and no. Generally logo usage requires permission. While the usage isn’t the whole company, it’s enough to justify some sort of logo usage.
- koakuma-chan 11mo agoOr roll your own
- saagarjha 11mo ago
- Bombthecat 11mo agoDidn't they announce to slow down development for AI?
- souenzzo 11mo agoyou just described every microsoft business model.
- vbezhenar 11mo agoI never used any actions and never understood why would I need to. I just wrote bash script to build my project and that's about it. This modern tendency to add dependencies for trivial things baffles me. You don't need "action" to do `git clone`.
- wnevets 11mo ago> Their entire ecosystem is basically held up with duct tape and gets very little investment. That isn't gonna get better anytime soon. "GitHub Will Prioritize Migrating to Azure Over Feature Development" [1] [1] https://thenewstack.io/github-will-prioritize-migrating-to-azure-over-feature-development/ https://thenewstack.io/github-will-prioritize-migrating-to-a...
- amarant 11mo agoHey at least we can all expect lots of extra days off because "GitHub is down" once they're done with that migration!
- phantasmish 11mo agoThey had working infra and a great case for keeping fairly "close to the metal". Complicated files-heavy workload that needs tons of clever caching to perform well, lots of writes, lots of non-HTTP TCP traffic. Retrofitting that into "cloud" bullshit is such a bad idea.
- theamk 11mo agomeh, I dunno. Using bare-metal requires competent Unix admins, and Actions team is full of javascript clowns (see: decision to use dashes in environment variable; lack of any sort of shell quoting support in templates; keeping logs next to binaries in self-hosted runners). Perhaps they would be better off using infra someone else maintains.
- dijit 11mo ago> Using bare-metal requires competent Unix admins So does running VMs in a cloud provider. Except now we call them "DevOps" or "SRE" and pay them 1.5-2x. (as a former SRE myself, I'm not complaining).
- godelski 11mo ago> requires competent Unix admins Who knows where a $3.7T company is ever going to find competent Unix admins... > Perhaps they would be better off using infra someone else maintains. They're handing it from themselves to themselves. We're talking about Microsoft, not some startup.