Repository navigation
docs(ci): correct stale action version comments after major bumps - #722
Conversation
Dependabot bumped the pinned SHAs for actions/checkout (7.0.1), actions/setup-node (7.0.0) and actions/cache (6.1.0) in #718, #720 and #719, but left the trailing version comments at the previous major. The workflows were already running v7/v6 — only the comments were misleading, making the pins read as v6/v5 on inspection. SHAs are unchanged, so this has no functional effect. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (5)
Included review availability: Your plan provides up to 2 included reviews per hour; 1 remains after this review. 📝 WalkthroughWalkthroughThe pull request updates GitHub Actions version annotations in five workflows. Pinned action commit SHAs remain unchanged. ChangesGitHub Actions updates
Estimated code review effort: 1 (Trivial) | ~2 minutes Merge Risk: ⚪ Minimal · up to This change only corrects stale version comments beside existing pinned workflow actions and does not alter the actions executed by CI. No actionable merge-blocking risk remains after normal checks and review. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This PR updates misleading inline version comments for pinned GitHub Actions in the repository’s CI workflows, aligning the human-readable # vX annotations with the major versions that the already-pinned SHAs resolve to.
Changes:
- Update
actions/checkoutpinned-SHA comment from# v6to# v7across workflows. - Update
actions/setup-nodepinned-SHA comment from# v6to# v7where used. - Update
actions/cachepinned-SHA comment from# v5to# v6where used.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/release-image.yml | Corrects actions/checkout major version comment to match the pinned SHA. |
| .github/workflows/pypi-publish.yml | Corrects actions/checkout major version comment to match the pinned SHA. |
| .github/workflows/playwright.yml | Corrects major version comments for actions/checkout, actions/setup-node, and actions/cache to match pinned SHAs. |
| .github/workflows/mcp-tests.yml | Corrects actions/checkout major version comment to match the pinned SHA. |
| .github/workflows/build.yml | Corrects major version comments for actions/checkout and actions/setup-node to match pinned SHAs (both job occurrences). |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Summary
Dependabot's recent major bumps updated the pinned SHAs but left the trailing version comments pointing at the previous major, so the workflows read as if they were still on the old versions.
Verified against the upstream tag refs:
actions/checkout# v6actions/setup-node# v6actions/cache# v5CI has already been running the v7/v6 actions — this only corrects the misleading comments.
Changes
actions/checkout,actions/setup-nodeandactions/cachepins across all five workflow files.Testing
Comment-only change; no SHA is modified (
git difftouches only text after#). Existing CI on this PR exercises the same pinned actions.pypa/gh-action-pypi-publishis intentionally left as# release/v1— that's the upstream project's own documented moving ref, not a stale major.Memory / Performance Impact
N/A.
Related Issues
Follow-up to #718, #719, #720.
Summary by CodeRabbit