Update actions versions (#29)

* Update actions

* Ping the exit node before completing the TS connect action

* Don't accept DNS

* Try checking non-DNS test address

* Take tailscale version from vars

Author: jzebedee

.github/workflows/build_db.yml

@@ -7,6 +7,7 @@ on:
 # TS logic from simonw's https://github.com/simonw/til/blob/main/tailscale/tailscale-github-actions.md
 
 env:
+  TAILSCALE_VERSION: ${{ vars.TAILSCALE_VERSION }}
   IPTEST_URL: ${{ vars.IPTEST_URL }}
   STEALTH_IPTEST_URL: ${{ secrets.STEALTH_IPTEST_URL }}
 
@@ -17,12 +18,12 @@ jobs:
       TS_EXIT_NODE_IP: ${{ steps.get_exit_node_ip.outputs.TS_EXIT_NODE_IP }}
     steps:
     - name: Connect to stealthnet
-      uses: tailscale/github-action@v3
+      uses: tailscale/github-action@v4
       with:
         oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
         oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
         tags: tag:ci-uscis
-        version: latest
+        version: ${{ env.TAILSCALE_VERSION }}
         use-cache: 'true'
     - name: Get exit node IP
       id: get_exit_node_ip
@@ -40,7 +41,7 @@ jobs:
     outputs:
       dbname: ${{ steps.dbname.outputs.dbname }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Download previous DB
       uses: robinraju/release-downloader@v1
       with:
@@ -52,19 +53,21 @@ jobs:
     - name: Show IP before Tailscale
       run: ./curl_request_api.sh ${{ env.IPTEST_URL }}
     - name: Connect to stealthnet (exit node)
-      uses: tailscale/github-action@v3
+      uses: tailscale/github-action@v4
       with:
         oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
         oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
         args: '--accept-dns=true --exit-node=${{ env.TS_EXIT_NODE_IP }}'
+        ping: '${{ secrets.TS_EXIT_NODE }}'
         tags: tag:ci-uscis
-        version: latest
+        version: ${{ env.TAILSCALE_VERSION }}
         use-cache: 'true'
     - name: Verify HTTP traffic is routed through exit node
       run: |
         echo "Available exit nodes:"
         tailscale status | grep 'exit node'
 
+        timeout 30s bash -c "until ./curl_request_api.sh 1.1.1.1; do sleep 5; done"
         timeout 30s bash -c "until ./curl_request_api.sh ${{ env.IPTEST_URL }}; do sleep 5; done"
         timeout 30s bash -c "until ./curl_request_api.sh ${{ env.STEALTH_IPTEST_URL }}; do sleep 5; done"
     - name: Build DB and changelog
@@ -79,13 +82,13 @@ jobs:
       id: dbname
       run: echo "dbname=$(basename *.db .db)" >> $GITHUB_OUTPUT
     - name: Upload DB
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: uscis-db
         path: '${{ steps.dbname.outputs.dbname }}.db'
         if-no-files-found: error
     - name: Upload changelog
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: changelog
         path: |
@@ -96,7 +99,7 @@ jobs:
       if: always()
       run: sqlite3 responses.db -A -c *.json *.cookies
     - name: Upload JSON DB
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       if: always()
       with:
         name: responses-db
@@ -108,7 +111,7 @@ jobs:
     if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
     steps:
       - name: Download DB
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
       - name: Create daily release
         uses: softprops/action-gh-release@v2
         with:

.github/workflows/check_fingerprints.yml

@@ -3,6 +3,7 @@ on:
   workflow_dispatch: 
 
 env:
+  TAILSCALE_VERSION: ${{ vars.TAILSCALE_VERSION }}
   IPTEST_URL: ${{ vars.IPTEST_URL }}
   STEALTH_IPTEST_URL: ${{ secrets.STEALTH_IPTEST_URL }}
 
@@ -18,7 +19,7 @@ jobs:
         oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
         oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
         tags: tag:ci-uscis
-        version: latest
+        version: ${{ env.TAILSCALE_VERSION }}
         use-cache: 'true'
     - name: Get exit node IP
       id: get_exit_node_ip
@@ -42,7 +43,7 @@ jobs:
         oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
         oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
         tags: tag:ci-uscis
-        version: latest
+        version: ${{ env.TAILSCALE_VERSION }}
         use-cache: 'true'
     - name: Show IP after Tailscale
       run: |
@@ -66,7 +67,7 @@ jobs:
         oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
         args: '--accept-dns=true --exit-node=${{ env.TS_EXIT_NODE_IP }}'
         tags: tag:ci-uscis
-        version: latest
+        version: ${{ env.TAILSCALE_VERSION }}
         use-cache: 'true'
     - name: Verify HTTP traffic is routed through exit node
       run: |