CI: actions/checkout v4 to v5

[luojiyin1987]

Summary by CodeRabbit

• Chores
  • Upgraded continuous integration pipeline dependencies to the latest versions to improve build reliability, security, and compatibility.
  • Streamlined the build-and-publish workflow without altering existing steps or outputs.
  • No user-facing changes; application behavior and features remain unchanged.

[coderabbitai]

Walkthrough

Updated the CI workflow .github/workflows/main.yml to use actions/checkout@v5 instead of actions/checkout@v4 in the Build-and-Publish job. No other workflow steps were changed.

Changes

Cohort / File(s)	Summary of Changes
CI workflow .github/workflows/main.yml	Bumped actions/checkout from v4 to v5 in the Build-and-Publish job; all other steps unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

I hop through YAML fields at night,
Nudged checkout one more notch in height.
v5 now greets the build with cheer,
My ears perk up—release is near!
A tiny tweak, a tidy run—
Thump-thump: CI’s work is done. 🐇✨

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The PR title "CI: actions/checkout v4 to v5" concisely and accurately describes the main change—upgrading actions/checkout from v4 to v5 in the CI workflow (reflected in .github/workflows/main.yml). It is specific, directly related to the changeset, and brief enough for reviewers to understand the primary intent. The title contains no extraneous or misleading information.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch CI/update-actions-checkout

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[dosubot]

Related Documentation

Checked 10 published document(s). No updates required.

^{How did I do? Any feedback?}  

[coderabbitai]

Actionable comments posted: 0

🧹 Nitpick comments (3)

.github/workflows/main.yml (3)

13-13: Upgrade to checkout v5: good; verify runner requirement and consider pinning.

• v5 runs on Node 24 and requires Actions Runner v2.327.1+. GitHub‑hosted ubuntu‑latest should already meet this; if you use any self‑hosted runners, confirm they’re ≥ v2.327.1. (github.com)
• Optional hardening: pin to a full commit SHA to avoid tag mutability. (docs.github.com)

Example pin (replace with the release’s SHA):

-            - uses: actions/checkout@v5
+            - uses: actions/checkout@<full-commit-sha> # v5.x.y

---

15-17: Upgrade pnpm/action-setup to v4.

v2 is deprecated/broken on newer Node versions; v4 is the maintained line. (github.com)

-            - uses: pnpm/action-setup@v2
+            - uses: pnpm/action-setup@v4
               with:
                   version: 10

---

31-35: Use github_token input for gh-pages when passing GITHUB_TOKEN.

It’s clearer and matches the action’s documented inputs. Functionally equivalent here. (github.com)

-              uses: peaceiris/actions-gh-pages@v4
-              with:
-                  publish_dir: ./docs
-                  personal_token: ${{ secrets.GITHUB_TOKEN }}
-                  force_orphan: true
+              uses: peaceiris/actions-gh-pages@v4
+              with:
+                  publish_dir: ./docs
+                  github_token: ${{ secrets.GITHUB_TOKEN }}
+                  force_orphan: true

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 0469491 and 49abd9c.

📒 Files selected for processing (1)

• .github/workflows/main.yml (1 hunks)