Skip to content

Bump actions/checkout from 6.0.2 to 7.0.0 #944

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

Bump actions/checkout from 6.0.2 to 7.0.0 #944

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/auto-merge.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
checks: read
statuses: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6

@fullsend-ai-review fullsend-ai-review Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] version comment inconsistency

The commit hash is updated to 9c091bb (v7.0.0) but the version comment still says # v6 instead of # v7.0.0. Misleading for future audits.

Suggested fix: Change the comment from # v6 to # v7.0.0 to match the actual version being pinned.

@fullsend-ai-review fullsend-ai-review Bot Jun 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] version comment mismatch

The checkout action is updated to commit 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 (v7.0.0 per the PR title and the annotations in the other three workflow files), but the version comment still says '# v6'. Since all five workflow files now pin the same commit hash, this comment is objectively stale.

Suggested fix: Change the comment from '# v6' to '# v7.0.0'.

@fullsend-ai-review fullsend-ai-review Bot Jun 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] version-comment-inconsistency

The version comment says '# v6' but the commit hash 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 corresponds to actions/checkout v7.0.0. Other files in this PR correctly use '# v7.0.0'.

Suggested fix: Update the comment from '# v6' to '# v7.0.0'.

@fullsend-ai-review fullsend-ai-review Bot Jun 29, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] version-comment-mismatch

The PR updates the pinned hash to 9c091bb2... (actions/checkout v7.0.0) but leaves the version comment as # v6. The other three workflow files correctly label the same hash as # v7.0.0.

Suggested fix: Update the comment from # v6 to # v7 or # v7.0.0.

@fullsend-ai-review fullsend-ai-review Bot Jun 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] stale-comment

The version comment says '# v6' but the commit SHA 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 corresponds to v7.0.0 (correctly labeled in go-ci.yaml, mpc-test.yaml, and test-e2e.yml).

Suggested fix: Update the comment from '# v6' to '# v7.0.0'.

- uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
id: app-token
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dep-triage.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
checks: read
statuses: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6

@fullsend-ai-review fullsend-ai-review Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] version comment inconsistency

Same issue as auto-merge.yaml: the commit hash is updated to the v7.0.0 SHA but the version comment still says # v6.

Suggested fix: Change the comment from # v6 to # v7.0.0 to match the actual version being pinned.

@fullsend-ai-review fullsend-ai-review Bot Jun 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] version comment mismatch

The checkout action is updated to commit 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 (v7.0.0) but the version comment still says '# v6'. All other workflow files in this PR correctly annotate this hash as '# v7.0.0'.

Suggested fix: Change the comment from '# v6' to '# v7.0.0'.

@fullsend-ai-review fullsend-ai-review Bot Jun 25, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] version-comment-inconsistency

The version comment says '# v6' but the commit hash 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 corresponds to actions/checkout v7.0.0. Other files in this PR correctly use '# v7.0.0'.

Suggested fix: Update the comment from '# v6' to '# v7.0.0'.

@fullsend-ai-review fullsend-ai-review Bot Jun 29, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] version-comment-mismatch

Same as auto-merge.yaml: the PR updates the pinned hash to the v7.0.0 commit but leaves the version comment as # v6.

Suggested fix: Update the comment from # v6 to # v7 or # v7.0.0.

@fullsend-ai-review fullsend-ai-review Bot Jun 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] stale-comment

Same issue: the version comment says '# v6' but the commit SHA points to v7.0.0.

Suggested fix: Update the comment from '# v6' to '# v7.0.0'.

- uses: konflux-ci/deptriage@993b534180800943a8c05601151fb34ecb376445 # main
with:
command: both
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/go-ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Install Go
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
Expand All @@ -39,7 +39,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Install Go
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/mpc-test.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
echo "Invalid context for this workflow run. Exiting."
exit 1
- name: Check out code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Install Go
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/test-e2e.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ jobs:
docker-images: false

- name: Clone the code
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
Expand Down
Loading