chore(deps): update actions/checkout action to v5.1.0 - #30
Conversation
|
2ea71be to
aeed03c
Compare
|
PR author is in the excluded authors list. |
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 | ||
| - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 |
There was a problem hiding this comment.
🔍 Action SHA pin needs manual verification against the v5.1.0 tag
The only change is bumping the pinned commit SHA for actions/checkout from the v5.0.1 pin to fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 labeled v5.1.0. Since this workflow is the repo's security gate, and the pin is the trust anchor (the comment in the file emphasizes that the gate must be deterministic and non-reprogrammable), a reviewer should verify the SHA actually corresponds to the v5.1.0 tag in actions/checkout rather than relying on the bot-generated comment. Nothing else in the diff affects behavior: the gitleaks version/checksum, scan scope (--no-git --source .), and content-policy invocation are unchanged.
Was this helpful? React with 👍 or 👎 to provide feedback.
ApprovabilityVerdict: Not approved Macroscope's review found this PR not approvable — This is a one-line update to the pinned checkout action used by the repository's public-repo security gate, with no application-runtime changes. Because the pin is the gate's trust anchor and the new SHA still requires verification against v5.1.0, review by the owning team remains appropriate. Not approved because:
No code changes detected at Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more. |
aeed03c to
c3824f8
Compare
|
Skipping PR review because a bot author is detected. If you want to trigger CodeAnt AI, comment |
…mber space Review found a SECOND concurrency collision, on a different axis from the one this template already documents (wave-pen#386). `issue_comment` fires for ISSUES as well as PRs, and GitHub draws both from ONE number sequence. So a comment on Issue #30 and a `/review` on PR #30 entered the same concurrency group. Concurrency is evaluated at WORKFLOW level, BEFORE the job-level `if:` runs — so the Issue comment cancelled the PR review already in flight, and was then skipped itself, having done nothing. That is the identical shape as the #386 defect the block above exists to fix, one axis over: a run that will not review taking the lane from the run that would have. #386 separated the two EVENTS; it did not separate the two number spaces inside one event. pull_request PR 433 -> pr-agent-pull_request-pr-433 issue_comment on PR 30 -> pr-agent-issue_comment-pr-30 issue_comment on ISSUE 30 -> pr-agent-issue_comment-issue-30 The last two used to be one group. actionlint and zizmor clean. Upstream: wave-av/wave-foundation-public#73. Refs wave-pen#418, wave-pen#417. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
17e0063 to
7878eb1
Compare
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
7878eb1 to
399fea5
Compare
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
399fea5 to
2c2f91f
Compare
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
2c2f91f to
cebd0af
Compare
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
cebd0af to
cc49bc6
Compare
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
cc49bc6 to
a1baf9a
Compare
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
a1baf9a to
5fcc7f8
Compare
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
5fcc7f8 to
3b6fff6
Compare
This PR contains the following updates:
v5.0.1→v5.1.0Release Notes
actions/checkout (actions/checkout)
v5.1.0Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.