Skip to content

chore: update pinned GitHub Actions to latest versions#360

Closed
toiroakr wants to merge 1 commit into
mainfrom
chore/pin-action-versions
Closed

chore: update pinned GitHub Actions to latest versions#360
toiroakr wants to merge 1 commit into
mainfrom
chore/pin-action-versions

Conversation

@toiroakr

@toiroakr toiroakr commented Jul 3, 2026

Copy link
Copy Markdown

Summary

  • Ran pinact --update across hand-written .github/workflows and .github/actions (excluding *.lock.yml, which gh-aw generates from its own .md sources and manages separately — untouched here).
  • Manually corrected one entry pinact proposed that wasn't actually the latest stable release: changesets/action (it picked v2.0.0-next.3, a prerelease, over the latest stable v1.9.0).
  • Verified all remaining SHA/version pairs with pinact --verify.

Bumps

  • actions/checkout v4.2.2 → v7.0.0
  • actions/setup-node v4.4.0 → v6.4.0
  • actions/cache (/restore, /save) v5.0.5 → v5.1.0
  • pnpm/action-setup v4.1.0 → v6.0.9
  • github/gh-aw-actions (/setup, /setup-cli) v0.80.9 → v0.82.2
  • lycheeverse/lychee-action v2.4.1 → v2.8.0
  • changesets/action v1.4.10 → v1.9.0

actions/checkout/setup-node/pnpm/action-setup are multi-major jumps, but these exact versions are already in production use elsewhere in the org (e.g. tailor-platform/actions, tailor-platform/sdk), so compatibility is proven.

Ran pinact --update across hand-written .github/workflows and
.github/actions (excluding *.lock.yml, which gh-aw generates from its
own .md sources and manages separately).

Manually corrected one entry pinact proposed that wasn't actually the
latest stable release: changesets/action (it picked v2.0.0-next.3, a
prerelease, over the latest stable v1.9.0 — same issue found and fixed
in tailor-platform/sdk's equivalent update).

Bumps: actions/checkout v4.2.2 -> v7.0.0, actions/setup-node v4.4.0 ->
v6.4.0, actions/cache v5.0.5 -> v5.1.0, pnpm/action-setup v4.1.0 ->
v6.0.9, github/gh-aw-actions v0.80.9 -> v0.82.2, lycheeverse/lychee-
action v2.4.1 -> v2.8.0, changesets/action v1.4.10 -> v1.9.0. Verified
all SHA/version pairs with pinact --verify.
@toiroakr

toiroakr commented Jul 3, 2026

Copy link
Copy Markdown
Author

Closing — action version updates are out of scope for the license-check migration work. Will revisit separately if needed.

@toiroakr toiroakr closed this Jul 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant