Skip to content

[actions] Update GitHub Actions versions - 2026-04-02 #24181

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pelikhan merged 3 commits into from
Apr 2, 2026
+89 −59
Merged

[actions] Update GitHub Actions versions - 2026-04-02 #24181

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ee1401f
Initial plan
Copilot Apr 2, 2026
b5fd3a2
chore: Update GitHub Actions versions - 2026-04-02
Copilot Apr 2, 2026
537aaa3
Merge branch 'main' into copilot/update-github-actions-versions
pelikhan Apr 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion .github/aw/actions-lock.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -136,7 +136,12 @@
"docker/login-action@v4": {
"repo": "docker/login-action",
"version": "v4",
"sha": "b45d80f862d83dbcd57f89517bcf500b2ab88fb2"
"sha": "4907a6ddec9925e35a0a9e82d7399ccc52663121"
},
"docker/login-action@v4.1.0": {
"repo": "docker/login-action",
"version": "v4.1.0",
"sha": "4907a6ddec9925e35a0a9e82d7399ccc52663121"
},
Comment on lines +141 to 145
Copy link

Copilot AI Apr 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description notes GitHub API access was blocked during the action version/SHA update. Since this file is the source of truth for SHA pinning, please re-generate/verify these new pins (e.g., docker/login-action v4.1.0 and related entries) in an environment with GitHub API access (or with the appropriate allowlist) to ensure the SHAs actually correspond to the intended upstream tags/releases.

Suggested change
"docker/login-action@v4.1.0": {
"repo": "docker/login-action",
"version": "v4.1.0",
"sha": "4907a6ddec9925e35a0a9e82d7399ccc52663121"
},

Copilot uses AI. Check for mistakes.
"docker/metadata-action@v6": {
"repo": "docker/metadata-action",
Expand Down Expand Up @@ -168,6 +173,11 @@
"version": "v9.0.6",
"sha": "7683f9d6900857a9e6dad8a3277a33bcc0b51d44"
},
"github/stale-repos@v9.0.7": {
"repo": "github/stale-repos",
"version": "v9.0.7",
"sha": "25946246f29e8692a397502045e457c4dc96c6e4"
},
"haskell-actions/setup@v2.10.3": {
"repo": "haskell-actions/setup",
"version": "v2.10.3",
Expand All @@ -192,6 +202,11 @@
"repo": "super-linter/super-linter",
"version": "v8.5.0",
"sha": "61abc07d755095a68f4987d1c2c3d1d64408f1f9"
},
"super-linter/super-linter@v8.6.0": {
"repo": "super-linter/super-linter",
"version": "v8.6.0",
"sha": "9e863354e3ff62e0727d37183162c4a88873df41"
}
}
}
32 changes: 16 additions & 16 deletions .github/workflows/release.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion .github/workflows/release.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -330,7 +330,7 @@ jobs:
uses: docker/setup-buildx-action@v4

- name: Log in to GitHub Container Registry
uses: docker/login-action@v4
uses: docker/login-action@v4.1.0
with:
registry: ghcr.io
username: ${{ github.actor }}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/shared/apm.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,15 +58,15 @@ jobs:
working-directory: /tmp/gh-aw/apm-workspace
- name: Upload APM bundle artifact
if: success()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: ${{ needs.activation.outputs.artifact_prefix }}apm
path: ${{ steps.apm_pack.outputs.bundle-path }}
retention-days: '1'

steps:
- name: Download APM bundle artifact
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8.0.1
with:
name: ${{ needs.activation.outputs.artifact_prefix }}apm
path: /tmp/gh-aw/apm-bundle
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/smoke-claude.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

32 changes: 16 additions & 16 deletions .github/workflows/stale-repo-identifier.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion .github/workflows/stale-repo-identifier.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@ env:
steps:
- name: Run stale-repos tool
id: stale-repos
uses: github/stale-repos@v9.0.6
uses: github/stale-repos@v9.0.7
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
ORGANIZATION: ${{ env.ORGANIZATION }}
Expand Down
Loading
Loading