Skip to content

build(deps): Bump actions/checkout from 4 to 6#2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6
Closed

build(deps): Bump actions/checkout from 4 to 6#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 2, 2026

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 2, 2026

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@trentas
Copy link
Copy Markdown
Contributor

trentas commented May 2, 2026

@dependabot rebase

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 11ef497 to e82ef17 Compare May 2, 2026 02:26
@vercel
Copy link
Copy Markdown

vercel Bot commented May 2, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
clickbus-iris Ready Ready Preview, Comment May 2, 2026 2:26am

Request Review

trentas added a commit that referenced this pull request May 2, 2026
Applies the bumps from PRs #2 (checkout v4→v6), #3 (upload-artifact v4→v7), and #4 (setup-node v4→v6) directly. Dependabot can't merge those PRs because the gh CLI lacks 'workflow' scope; bypassing via direct edit.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@trentas
Copy link
Copy Markdown
Contributor

trentas commented May 2, 2026

Superseded by direct edit in main (commit applies the same bump). Closing to keep PR queue clean.

@trentas trentas closed this May 2, 2026
@trentas trentas deleted the dependabot/github_actions/actions/checkout-6 branch May 2, 2026 02:29
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 2, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

trentas added a commit that referenced this pull request May 12, 2026
* feat(metric): Flow Load — WIP simultâneo per ISO week + author concurrency

Counts PRs in flight per week (segmented by intent from the PR title) and
the number of distinct commit authors per week as a separate engineering-
parallelism proxy. Why: AI assistants tend to expand in-flight work faster
than they compress lifecycle time, so throughput numbers can look healthy
while flow is congesting.

Prereq — PullRequest model + GitHub reader gain state/closed_at and fetch
open + closed-without-merge PRs alongside merged ones, with window-overlap
filtering. Existing PR consumers (pr_lifecycle, activity_timeline,
acceptance_rate) filter to state="merged" where the semantics require it.

New: `iris/analysis/flow_load.py` emits per-week wip_total, wip_by_intent
and author_concurrency. The author list itself is not persisted — only
the count — to keep this aggregate from being usable to rank individuals
(Principle #2).

Closes #16

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(tests): mock passwordAuth so the providers-array test still passes

commit 522ec32 gated the credentials provider behind the passwordAuth
feature flag, which is off by default. The pre-existing
"has at least the credentials provider" test asserted len >= 1 and broke
the moment the flag flipped. Mock `isFeatureEnabled('passwordAuth')` to
true inside the test so the assertion exercises the intended contract
(providers list is built correctly when credentials are enabled).

Unblocks CI for #25; the failure is pre-existing on main.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
trentas added a commit that referenced this pull request May 13, 2026
…tive/wait (#28)

Decomposes the merged-PR lifecycle into four phases (Coding, Awaiting
first review, In review, Awaiting merge) and reports what fraction of
each PR was event-driven *active* time versus *wait* time. Throughput
numbers say how much shipped; this says whether work flowed or queued.

Five timestamps per PR drive the model:
- first_commit_at (min PR commit.committed_at)
- pr_opened_at (PullRequest.created_at)
- first_review_at (min review.submitted_at)
- approval_at (min APPROVED review submitted_at, optional)
- merged_at

Active/wait heuristic for the mixed "In review" phase: each event
(commits + reviews) inside the phase claims the next N hours as active
(default N=4h, parametrizable); intervals are unioned. Threshold is a
hypothesis pending calibration with 3-5 repos.

Prereq — `PullRequest.commit_hashes: list[str]` becomes
`commit_refs: list[CommitRef(hash, committed_at, authored_at)]` so PR
analyses can find the first-commit anchor without re-querying git
locally. `github_reader` now extracts `committedDate`/`authoredDate`
already returned by gh. Three call sites updated to use `.hash` on the
new refs (cli.py, acceptance_rate.py, test_pr_insights.py).

Privacy (Principle #2): efficiency *per PR* is computed as an
intermediate but never persisted or surfaced. The schema and UI expose
only window-level aggregates. By-intent and by-origin segments require
at least min_sample=10 PRs; below that, the segment is omitted. PR
origin uses a ≥50% AI_ASSISTED commits rule, with bot commits excluded
from both numerator and denominator.

Findings emitted by narrative.py (thresholds documented as hypotheses):
- descriptive bullet whenever flow_efficiency_median exists
- "wait dominates" when median < 0.30 (replaces descriptive)
- "PRs wait Xh until first review" when ttfr > 24h

UI: new FlowEfficiencyCard on the repo detail page surfaces the
efficiency percentage and median time-to-first-review prominently, with
a stacked horizontal bar of the 5 phase keys colored active vs wait and
an optional by-intent breakdown. Card stays hidden until the payload
includes flow_efficiency_median.

Closes #17

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant