Bump actions/checkout from 6.0.2 to 7.0.0 - #944
Conversation
dependabot
Bot
added
dependencies
|
🤖 Finished Review · ✅ Success · Started 7:46 AM UTC · Completed 7:55 AM UTC |
ReviewFindingsHigh
Low
Previous runReviewFindingsHigh
Low
Previous run (2)ReviewFindingsHigh
Low
Previous run (3)ReviewFindingsHigh
Medium
Labels: Major version bump (actions/checkout v6 to v7) warrants the semver/major label. Previous run (4)ReviewFindingsHigh
Medium
Info
|
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[medium] version comment inconsistency
The commit hash is updated to 9c091bb (v7.0.0) but the version comment still says # v6 instead of # v7.0.0. Misleading for future audits.
Suggested fix: Change the comment from # v6 to # v7.0.0 to match the actual version being pinned.
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[medium] version comment inconsistency
Same issue as auto-merge.yaml: the commit hash is updated to the v7.0.0 SHA but the version comment still says # v6.
Suggested fix: Change the comment from # v6 to # v7.0.0 to match the actual version being pinned.
Codecov Report✅ All modified and coverable lines are covered by tests.
Additional details and impacted files@@ Coverage Diff @@
## main #944 +/- ##
===========================================
- Coverage 76.92% 30.17% -46.76%
===========================================
Files 26 26
Lines 2817 2817
===========================================
- Hits 2167 850 -1317
- Misses 452 1802 +1350
+ Partials 198 165 -33
Flags with carried forward coverage won't be shown. Click here to find out more. Continue to review full report in Codecov by Harness.
🚀 New features to boost your workflow:
|
09b7e2c to
6666dc9
Compare
|
🤖 Finished Review · ✅ Success · Started 10:21 PM UTC · Completed 10:29 PM UTC |
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[medium] version comment mismatch
The checkout action is updated to commit 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 (v7.0.0 per the PR title and the annotations in the other three workflow files), but the version comment still says '# v6'. Since all five workflow files now pin the same commit hash, this comment is objectively stale.
Suggested fix: Change the comment from '# v6' to '# v7.0.0'.
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[medium] version comment mismatch
The checkout action is updated to commit 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 (v7.0.0) but the version comment still says '# v6'. All other workflow files in this PR correctly annotate this hash as '# v7.0.0'.
Suggested fix: Change the comment from '# v6' to '# v7.0.0'.
6666dc9 to
c02bb9b
Compare
|
🤖 Finished Review · ✅ Success · Started 11:06 PM UTC · Completed 11:14 PM UTC |
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[low] version-comment-inconsistency
The version comment says '# v6' but the commit hash 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 corresponds to actions/checkout v7.0.0. Other files in this PR correctly use '# v7.0.0'.
Suggested fix: Update the comment from '# v6' to '# v7.0.0'.
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[low] version-comment-inconsistency
The version comment says '# v6' but the commit hash 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 corresponds to actions/checkout v7.0.0. Other files in this PR correctly use '# v7.0.0'.
Suggested fix: Update the comment from '# v6' to '# v7.0.0'.
c02bb9b to
c076ce9
Compare
|
🤖 Finished Review · ✅ Success · Started 6:36 PM UTC · Completed 6:45 PM UTC |
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[low] version-comment-mismatch
The PR updates the pinned hash to 9c091bb2... (actions/checkout v7.0.0) but leaves the version comment as # v6. The other three workflow files correctly label the same hash as # v7.0.0.
Suggested fix: Update the comment from # v6 to # v7 or # v7.0.0.
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[low] version-comment-mismatch
Same as auto-merge.yaml: the PR updates the pinned hash to the v7.0.0 commit but leaves the version comment as # v6.
Suggested fix: Update the comment from # v6 to # v7 or # v7.0.0.
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6.0.2...9c091bb) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
c076ce9 to
79d31de
Compare
|
🤖 Finished Review · ✅ Success · Started 1:57 AM UTC · Completed 2:06 AM UTC |
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[low] stale-comment
The version comment says '# v6' but the commit SHA 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 corresponds to v7.0.0 (correctly labeled in go-ci.yaml, mpc-test.yaml, and test-e2e.yml).
Suggested fix: Update the comment from '# v6' to '# v7.0.0'.
| statuses: read | ||
| steps: | ||
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 |
There was a problem hiding this comment.
[low] stale-comment
Same issue: the version comment says '# v6' but the commit SHA points to v7.0.0.
Suggested fix: Update the comment from '# v6' to '# v7.0.0'.
|
Superseded by #984. |
1 participant
Bumps actions/checkout from 6.0.2 to 7.0.0.
Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)df4cb1cUpdate changelog for v6.0.3 (#2446)