Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Nov 24, 2025

Version comments in workflow files referenced major versions only (e.g., #v5, @v6), reducing version tracking precision.

Changes

  • Updated actions/checkout references: #v5#v6.0.0, @v6@v6.0.0
  • Updated actions/setup-python references: #v5#v6.0.0 (3 occurrences)
  • Updated actions/upload-artifact references: @v5@v5.0.0
  • Corrected mislabeled SHA 330a01c...: #v4#v5.0.0 (actual tag is v5.0.0)

All semantic versions verified against upstream action repositories.

- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3  #v5
+ uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3  #v6.0.0

- uses: actions/upload-artifact@v5
+ uses: actions/upload-artifact@v5.0.0

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Co-authored-by: shenxianpeng <3353385+shenxianpeng@users.noreply.github.com>
@sonarqubecloud
Copy link

Please retry analysis of this Pull-Request directly on SonarQube Cloud

@sonarqubecloud
Copy link

Copilot AI changed the title [WIP] Bump actions/checkout from 5 to 6 Update GitHub Actions version comments to specific semantic versions Nov 24, 2025
Copilot AI requested a review from shenxianpeng November 24, 2025 07:39
Copilot finished work on behalf of shenxianpeng November 24, 2025 07:39
@shenxianpeng shenxianpeng marked this pull request as ready for review November 24, 2025 09:41
@shenxianpeng shenxianpeng merged commit 6635e8a into dependabot/github_actions/actions/checkout-6 Nov 24, 2025
5 of 6 checks passed
@shenxianpeng shenxianpeng deleted the copilot/sub-pr-135 branch November 24, 2025 12:34
shenxianpeng added a commit that referenced this pull request Nov 24, 2025
* chore: Bump actions/checkout from 5 to 6

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update GitHub Actions version comments to specific semantic versions (#136)

* Initial plan

* Update GitHub Actions version comments to specific semantic versions

Co-authored-by: shenxianpeng <3353385+shenxianpeng@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shenxianpeng <3353385+shenxianpeng@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shenxianpeng <3353385+shenxianpeng@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants