Skip to content

Update GitHub Action Versions#417

Merged
Jamie-BitFlight merged 1 commit intomainfrom
github-actions-updates
Nov 21, 2025
Merged

Update GitHub Action Versions#417
Jamie-BitFlight merged 1 commit intomainfrom
github-actions-updates

Conversation

@Jamie-BitFlight
Copy link
Contributor

@Jamie-BitFlight Jamie-BitFlight commented Nov 9, 2025

GitHub Actions Version Updates

Summary by CodeRabbit

  • Chores
    • Updated GitHub Actions used across CI/CD workflows: bumped checkout, Node setup, artifact upload, ESLint integration, and stale-issue actions to newer stable versions to improve reliability and security while preserving existing workflow behavior.

@Jamie-BitFlight Jamie-BitFlight added dependencies Update one or more dependencies version automated labels Nov 9, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 9, 2025

Walkthrough

Six GitHub Actions workflows have version pins updated for several actions: actions/checkout to v5.0.0, actions/setup-node to v6.0.0, actions/upload-artifact to v5.0.0, actions/stale to v10.1.0, and reviewdog/action-eslint to v1.34.0. No control-flow or step logic changes were made.

Changes

Cohort / File(s) Summary
checkout action version bumps
.github/workflows/deploy.yml, .github/workflows/github_actions_version_updater.yml, .github/workflows/integration-test.yml, .github/workflows/push_code_linting.yml, .github/workflows/test.yml
Upgraded actions/checkout from v4 / v4.2.2 to v5.0.0
Node setup upgrades
.github/workflows/deploy.yml, .github/workflows/integration-test.yml
Upgraded actions/setup-node from v4 to v6.0.0
Artifact upload upgrade
.github/workflows/integration-test.yml
Upgraded actions/upload-artifact from v4 to v5.0.0
Stale action upgrade
.github/workflows/stale.yml
Upgraded actions/stale from v9 to v10.1.0
ESLint reviewer upgrade
.github/workflows/push_code_linting.yml
Upgraded reviewdog/action-eslint from v1.33.2 to v1.34.0

Sequence Diagram(s)

(omitted — changes are version bumps with no control-flow modifications)

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

  • Homogeneous, low-risk version pin updates across workflow YAMLs; no logic or control-flow changes.
  • Files to spot-check: deploy.yml, integration-test.yml, and push_code_linting.yml for any implicit input/name changes when upgrading actions.

Possibly related PRs

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title directly and accurately summarizes the main change: updating GitHub Action versions across multiple workflow files.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch github-actions-updates

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c7846cf and 1a11650.

📒 Files selected for processing (6)
  • .github/workflows/deploy.yml (2 hunks)
  • .github/workflows/github_actions_version_updater.yml (1 hunks)
  • .github/workflows/integration-test.yml (3 hunks)
  • .github/workflows/push_code_linting.yml (2 hunks)
  • .github/workflows/stale.yml (1 hunks)
  • .github/workflows/test.yml (1 hunks)
🚧 Files skipped from review as they are similar to previous changes (4)
  • .github/workflows/stale.yml
  • .github/workflows/push_code_linting.yml
  • .github/workflows/github_actions_version_updater.yml
  • .github/workflows/integration-test.yml
🔇 Additional comments (3)
.github/workflows/test.yml (1)

38-40: Verify breaking changes in actions/checkout v5.0.0.

Line 38 updates actions/checkout from v4.2.2 to the major version v5.0.0. Major version upgrades may introduce breaking changes, deprecations, or behavior modifications.

Please verify the following before merging:

  1. Breaking changes: Check the actions/checkout release notes for any breaking changes, especially regarding the ref input on line 40.
  2. Input compatibility: Ensure the with.ref input (line 40) is still supported and behaves identically to v4.x.
  3. Default behavior changes: Confirm any default behaviors (sparse checkout, token handling, submodule initialization) have not changed in ways that could affect this workflow.

If you have already tested this upgrade and confirmed compatibility, please share those test results.

.github/workflows/deploy.yml (2)

52-55: Verify breaking changes in actions/checkout v5.0.0 (deploy workflow).

Line 52 updates actions/checkout to v5.0.0 with token input (line 55) for authentication. Since this is a deploy/release workflow, compatibility is critical.

Verify:

  1. The token input is still supported in v5.0.0 (it may have been renamed or removed).
  2. The behavior with ref and token inputs remains unchanged from v4.2.2.
  3. Token handling and permissions are compatible with the RELEASE_TOKEN secret.

See actions/checkout v5.0.0 release notes for details.


92-95: Verify breaking changes in actions/setup-node v6.0.0.

Line 93 updates actions/setup-node from v4 to the major version v6.0.0. This is a significant version bump used in a critical deploy workflow.

Please verify:

  1. The node-version input (line 95) is still supported and behaves identically in v6.0.0.
  2. The action still sets up Node.js 24.x correctly without additional configuration changes.
  3. Any changes to PATH, environment variables, or npm behavior are compatible with subsequent steps (npm ci, semantic-release).
  4. Review actions/setup-node v6.0.0 release notes for migration guidance.

Since this workflow drives semantic-release deployments, compatibility is critical.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 9, 2025

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 49.81% 402 / 807
🔵 Statements 50.48% 414 / 820
🔵 Functions 65.74% 71 / 108
🔵 Branches 49.38% 200 / 405
File CoverageNo changed files found.
Generated in workflow #256 for commit 1a11650 by the Vitest Coverage Report Action

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR attempts to update GitHub Action versions across multiple workflow files to newer versions. However, all the claimed release dates in the PR description (August-October 2025) are in the future relative to the current knowledge cutoff (January 2025), which raises significant concerns about whether these versions actually exist.

Key Changes:

  • Updates actions/checkout from v4.2.2 to v5.0.0 (major version bump)
  • Updates actions/setup-node from v4 to v6.0.0 (major version bump)
  • Updates actions/upload-artifact from v4 to v5.0.0 (major version bump)
  • Updates actions/stale from v9 to v10.1.0 (major version bump)
  • Updates reviewdog/action-eslint from v1.33.2 to v1.34.0 (minor version bump)

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.github/workflows/test.yml Updates checkout action to claimed v5.0.0
.github/workflows/stale.yml Updates stale action to claimed v10.1.0
.github/workflows/push_code_linting.yml Updates checkout to claimed v5.0.0 and eslint action to claimed v1.34.0
.github/workflows/integration-test.yml Updates checkout to claimed v5.0.0, setup-node to claimed v6.0.0, and upload-artifact to claimed v5.0.0
.github/workflows/github_actions_version_updater.yml Updates checkout action to claimed v5.0.0
.github/workflows/deploy.yml Updates checkout to claimed v5.0.0 and setup-node to claimed v6.0.0

@Jamie-BitFlight Jamie-BitFlight merged commit bf1d646 into main Nov 21, 2025
15 of 16 checks passed
@Jamie-BitFlight Jamie-BitFlight deleted the github-actions-updates branch November 21, 2025 02:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Update one or more dependencies version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants