Skip to content

Update action pins to latest releases (checkout v6.0.2, download-artifact v7.0.0) #11618

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
pelikhan merged 8 commits into from
Jan 24, 2026
Merged

Update action pins to latest releases (checkout v6.0.2, download-artifact v7.0.0) #11618

pelikhan merged 8 commits into from
Jan 24, 2026

Conversation

Copy link
Contributor

Copilot AI commented Jan 24, 2026 •
edited by agentic-workflows-dev bot
Loading

Problem

Action pins in .github/aw/actions-lock.json were using outdated versions, preventing workflows from leveraging latest bug fixes and features.

Changes

Updated action pins:

  • actions/checkout: Added v6, v6.0.2 entries (latest: de0fac2e4500dabe0009e67214ff5f5447ce83dd)
  • actions/download-artifact: Added v6, v7, v7.0.0 entries (latest: 37930b1c2abaa49bbe596cd826c3c89aef350131)
  • Added v5 floating tag for checkout (maintains major version pin support)

Impact:

  • 139 workflow lock files regenerated with updated SHAs
  • Workflows using @v5.0.1 → @v6.0.2 for checkout
  • Workflows using @v6.0.0 → @v7.0.0 for download-artifact
  • Workflows with floating major tags (e.g., @v5) remain unchanged (intentional)
  • Test expectations updated: 41 → 47 pin entries, version priority order adjusted

Note: Original issue mentioned upload-artifact v7, but that version doesn't exist yet. Updated download-artifact to v7 instead, which does have a v7.0.0 release.

Files Changed

  • .github/aw/actions-lock.json - Source of truth (+6 entries)
  • pkg/workflow/data/action_pins.json - Auto-synced during build
  • pkg/workflow/action_pins_test.go - Updated count and version expectations
  • 139 workflow .lock.yml files - Regenerated with new SHAs
Original prompt

Ensure that Outdated action versions are updated to the latest release when running the "update" command:

  • actions/checkout is using v5.0.1 version instead of v6.0.1
  • actions/upload-artifacts is using v6.0.0 instead of v7.0.0
    ...

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Changeset

  • Type: patch
  • Description: Pin workflows to the latest checkout and download-artifact releases and regenerate the lockfiles.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Changeset

  • Type: patch
  • Description: Pin workflows to the latest checkout and download-artifact releases and regenerate the lockfiles.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Copilot AI and others added 4 commits January 24, 2026 10:48
@pelikhan
Initial exploration - understanding action version update requirements
260de97 
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
@pelikhan
Update action versions to latest releases
a9ef019 
- Add actions/checkout@v5, v6, v6.0.2 entries
- Add actions/download-artifact@v6, v7, v7.0.0 entries
- Update workflow lock files with new SHAs

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
@pelikhan
Recompile all workflows with updated action versions
a318cfd 
Updated 139 workflow lock files to use latest action versions:
- actions/checkout v5.0.1 → v6.0.2
- actions/download-artifact v6.0.0 → v7.0.0

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
@pelikhan
Fix action pins tests after adding new versions
83ccf3c 
Update expected count from 41 to 47 entries and update expected checkout version from v5.0.1 to v6.0.2

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title [WIP] Update outdated action versions to latest releases Update action pins to latest releases (checkout v6.0.2, download-artifact v7.0.0) Jan 24, 2026
Copilot AI requested a review from pelikhan January 24, 2026 11:06
@pelikhan pelikhan added the smoke label Jan 24, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026 •
edited
Loading

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026 •
edited by agentic-workflows-dev bot
Loading

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026 •
edited
Loading

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

PR titles:
Fix template injection validator false positives when env: follows run:
Refactor CodingAgentEngine using Interface Segregation Principle
✅ GitHub MCP merged PRs; ✅ safeinputs-gh PR list
✅ Serena activate; ✅ Playwright title
✅ Tavily search; ✅ file write
✅ Bash cat verify; ✅ Discussion query+comment
Overall status: PASS

AI generated by Smoke Codex

@github-actions github-actions bot mentioned this pull request Jan 24, 2026
Closed
@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

Smoke Test: Claude Engine - PASS ✅

Last 2 Merged PRs:

Test Results:

  • ✅ GitHub MCP
  • ✅ Safe Inputs GH CLI
  • ✅ Serena MCP
  • ✅ Make Build
  • ✅ Playwright
  • ✅ Tavily Search
  • ✅ File Write
  • ✅ Bash Tool
  • ✅ Discussion Interaction

Overall: PASS

AI generated by Smoke Claude

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026 •
edited
Loading

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026 •
edited
Loading

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026 •
edited by agentic-workflows-dev bot
Loading

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

Smoke test results:
Add diagnostic logging to MCP gateway health check failures ✅
Fix template injection validator false positives when env: follows run: ✅
safeinputs-gh pr list ✅
serena activate_project ✅
playwright github.com title ✅
tavily search ✅
file write+cat ✅
discussion comment ✅
Overall: PASS

AI generated by Smoke Codex

@github-actions github-actions bot mentioned this pull request Jan 24, 2026
Closed
@github-actions
Copy link
Contributor

github-actions bot commented Jan 24, 2026

Smoke Test Results

PRs Reviewed:

Test Results:

  • ✅ GitHub MCP
  • ✅ Safe Inputs GH CLI
  • ✅ Serena MCP
  • ✅ Make Build
  • ✅ Playwright
  • ✅ Tavily Web Search
  • ✅ File Writing
  • ✅ Bash Tool
  • ✅ Discussion Interaction

Overall Status: PASS

AI generated by Smoke Claude

@pelikhan pelikhan marked this pull request as ready for review January 24, 2026 11:55
@pelikhan pelikhan merged commit db1a542 into main Jan 24, 2026
84 checks passed
@pelikhan pelikhan deleted the copilot/update-outdated-action-versions branch January 24, 2026 11:55
@github-actions github-actions bot mentioned this pull request Jan 24, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pelikhan pelikhan Awaiting requested review from pelikhan

Assignees

@pelikhan pelikhan

Copilot code review Copilot

Labels

smoke-claude smoke-codex

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@pelikhan