Skip to content

chore(deps): update github actions #306

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
+13 −13
Draft

chore(deps): update github actions #306

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/cd.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ jobs:
timeout-minutes: 20
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand Down
20 changes: 10 additions & 10 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
timeout-minutes: 15
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand All @@ -45,7 +45,7 @@ jobs:
timeout-minutes: 15
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand All @@ -66,12 +66,12 @@ jobs:

steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
with:
fetch-depth: 0

- name: Install qlty
uses: qltysh/qlty-action/install@781c27d0ba52e67907ade4064dff08d1a797212e
uses: qltysh/qlty-action/install@0814173ae3b13074fc896ca0e8e6d631c8352509

- name: Run qlty check
run: qlty check
Expand All @@ -88,7 +88,7 @@ jobs:
contents: read
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand Down Expand Up @@ -140,7 +140,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand All @@ -160,7 +160,7 @@ jobs:
timeout-minutes: 15
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand All @@ -180,7 +180,7 @@ jobs:
timeout-minutes: 5
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand All @@ -201,7 +201,7 @@ jobs:
timeout-minutes: 15
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand All @@ -221,7 +221,7 @@ jobs:
timeout-minutes: 15
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/deps.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
Comment on lines 22 to +23
Copy link
Contributor

@coderabbitai coderabbitai bot Jan 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

cat -n .github/workflows/deps.yml | head -60

Repository: deepnote/vscode-deepnote

Length of output: 1980

🌐 Web query:

actions/checkout GitHub commit 8e8c483db84b4bee98b60c0593521ed34d9990e8 release notes

💡 Result:

Commit 8e8c483db84b4bee98b60c0593521ed34d9990e8 is the tagged release actions/checkout v6.0.1 (released Dec 2, 2025).

Release notes (v6.0.1 – What’s Changed):

  • Update all references from v5 and v4 to v6 (#2314)
  • Add worktree support for persist-credentials includeIf (#2327)
  • Clarify v6 README (#2328) [1]

🌐 Web query:

actions/checkout v6 changelog breaking changes de0fac2e4500dabe0009e67214ff5f5447ce83dd

💡 Result:

  • Commit de0fac2e4500dabe0009e67214ff5f5447ce83dd is the tag commit for actions/checkout v6.0.2 (released Jan 9, 2026). v6.0.2 includes tag-handling fixes and a git user-agent tweak; it does not introduce new breaking changes on its own. [1]

  • actions/checkout v6 “breaking change” / behavior change vs v5 is in v6.0.0:

    • persist-credentials no longer writes credentials into .git/config; instead it stores them in a separate file under $RUNNER_TEMP (credential handling / security model change). This can break workflows that expect the auth material to appear in .git/config or that copy/move the workspace while relying on that config state. [2]
    • If you run authenticated git commands from inside a Docker container action, you need GitHub Actions Runner v2.329.0+ (older runners may fail). [2]

  • v6.0.0 release notes / changelog items (high level): README updates (Node.js 24 support/requirements) and the credential-persistence change above. [1], [3]

Sources: GitHub Releases page for actions/checkout (shows v6.0.2 = de0fac2, and v6.0.0 notes) [1]; GitHub Marketplace “Checkout v6” page (credential + runner requirement details) [2]; CHANGELOG.md at the referenced commit (mirrored) [3].

Downgrading checkout from v6.0.2 (Jan 9, 2026) to v6.0.1 (Dec 2, 2025)—confirm this is intentional.

Both lines 23 and 52 downgrade from de0fac2e4500dabe0009e67214ff5f5447ce83dd (v6.0.2) to 8e8c483db84b4bee98b60c0593521ed34d9990e8 (v6.0.1). This removes tag-handling fixes and user-agent updates from v6.0.2.

🤖 Prompt for AI Agents 
In @.github/workflows/deps.yml around lines 22 - 23, The workflow downgrades
actions/checkout to v6.0.1 (uses: actions/checkout@8e8c483...) removing
important fixes; revert the change in the checkout steps (both occurrences that
use actions/checkout) to the v6.0.2 identifier (use the commit/tag
de0fac2e4500dabe0009e67214ff5f5447ce83dd or the v6.0.2 tag) so tag-handling and
user-agent updates are preserved.


- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand Down Expand Up @@ -49,7 +49,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

- name: Setup Node.js
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
Expand Down
Loading