Skip to content

[actions] Update GitHub Actions versions - 2026-05-19#33238

Merged
pelikhan merged 3 commits into
mainfrom
actions-update-2026-05-19-bd5c2a10fc49afa8
May 19, 2026
Merged

[actions] Update GitHub Actions versions - 2026-05-19#33238
pelikhan merged 3 commits into
mainfrom
actions-update-2026-05-19-bd5c2a10fc49afa8

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented May 19, 2026

PR Description: Update GitHub Actions Pins (2026-05-19)

Summary

Routine maintenance update to GitHub Actions version pins across two action pin registry files. This PR updates four action pins to their latest patch/minor versions and removes three deprecated action pin entries.

Change Type

BREAKING CHANGE ⚠️

Files Changed

  • pkg/actionpins/data/action_pins.json (modified)
  • pkg/workflow/data/action_pins.json (modified)

Changes Detail

Additions/Updates (Non-Breaking)

  1. github/codeql-action/upload-sarif: v4.35.4v4.35.5 (patch bump)
  2. microsoft/apm-action: v1.7.3v1.9.1 (minor bump)
  3. ruby/setup-ruby: v1.307.0v1.308.0 (patch bump)

Removals (Breaking)

  1. actions/checkout@v4 - Removed deprecated v4 major version pin
  2. actions/setup-python@v5 - Removed deprecated v5 major version pin
  3. github/stale-repos@v9.0.8 - Removed older v9.0.8 patch version pin

Impact Assessment

Impact Level: Medium

Breaking Change Rationale:
The removal of action pin entries (actions/checkout@v4, actions/setup-python@v5, github/stale-repos@v9.0.8) constitutes a breaking change. Workflows that reference these specific pins will fail to resolve after this change is deployed, requiring consumers to update their workflow references to newer supported versions.

Affected Consumers:

  • Any workflows using actions/checkout@v4 must migrate to a newer version
  • Any workflows using actions/setup-python@v5 must migrate to a newer version
  • Any workflows using github/stale-repos@v9.0.8 must migrate to v9.0.9 or newer

Migration Path

For affected workflows:

  1. Update actions/checkout@v4 references to actions/checkout@v4.x.x (latest v4 patch) or newer
  2. Update actions/setup-python@v5 references to actions/setup-python@v5.x.x (latest v5 patch) or newer
  3. Update github/stale-repos@v9.0.8 references to github/stale-repos@v9.0.9 or newer

Commit History

  • 14588b5da - chore(actions): recompile workflow locks after merging main
  • 47d85498a - Merge remote-tracking branch 'origin/main' into actions-update-2026-05-19-bd5c2a10fc49afa8
  • ef0134f55 - chore(actions): Update GitHub Actions versions - 2026-05-19

Metadata

{
  "pr_type": "maintenance",
  "breaking": true,
  "security_impact": false,
  "performance_impact": false,
  "files_modified": 2,
  "files_added": 0,
  "files_deleted": 0,
  "action_pins_updated": 3,
  "action_pins_removed": 3,
  "automation_generated": true,
  "merge_strategy": "merge_commit",
  "co_authors": ["pelikhan <4175913+pelikhan@users.noreply.github.com>"]
}

Agentic Analysis Tags: #github-actions #dependency-update #breaking-change #action-pins #automated-maintenance

Generated by PR Description Updater for issue #33238 · ● 3M ·

- Removed: actions/checkout@v4 (superseded by v6.0.2)
- Removed: actions/setup-python@v5 (superseded by v6.2.0)
- Removed: github/stale-repos@v9.0.8 (superseded by v9.0.11)
- Updated: github/codeql-action/upload-sarif v4.35.4 → v4.35.5
- Updated: microsoft/apm-action v1.7.3 → v1.9.1
- Updated: ruby/setup-ruby v1.307.0 → v1.308.0

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot added automation dependencies Pull requests that update a dependency file labels May 19, 2026
@pelikhan
Copy link
Copy Markdown
Collaborator

@copilot merge main and recompile

Copilot AI and others added 2 commits May 19, 2026 08:47
…5-19-bd5c2a10fc49afa8

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

Copilot AI commented May 19, 2026

@copilot merge main and recompile

Done.

  • Merged main: 47d8549
  • Recompiled and committed generated lock/pin files: 14588b5

Copilot AI requested a review from pelikhan May 19, 2026 08:54
@pelikhan pelikhan merged commit 38281ca into main May 19, 2026
@pelikhan pelikhan deleted the actions-update-2026-05-19-bd5c2a10fc49afa8 branch May 19, 2026 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automation dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants