Skip to content

[actions] Update GitHub Actions versions - 2026-05-02 #29705

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pelikhan merged 3 commits into from
May 2, 2026
Merged

[actions] Update GitHub Actions versions - 2026-05-02 #29705

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a7b9818
chore: update GitHub Actions versions 2026-05-02
github-actions[bot] May 2, 2026
db6c2c3
chore: recompile workflow lock files after actions update
Copilot May 2, 2026
e075ff5
Add changeset
github-actions[bot] May 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .changeset/patch-update-actions-2026-05-02.md
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

49 changes: 27 additions & 22 deletions .github/aw/actions-lock.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,10 +63,10 @@
"version": "v8.0.1",
"sha": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
},
"actions/github-script@v9": {
"actions/github-script@v9.0.0": {
Copy link
Copy Markdown
Contributor Author

@github-actions github-actions Bot May 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ug! Version now exact. v9.0.0 good. Old v9 was fuzzy. Caveman approve pinning.

Copy link
Copy Markdown
Contributor Author

@github-actions github-actions Bot May 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Good update: actions/github-script pinned to explicit semver v9.0.0. This improves reproducibility by avoiding implicit version resolution. Smoke test review comment — Run 25248952178.

"repo": "actions/github-script",
"version": "v9",
"sha": "373c709c69115d41ff229c7e5df9f8788daa9553"
"version": "v9.0.0",
"sha": "3a2844b7e9c422d3c10d287c895573f7108da1b3"
},
"actions/setup-dotnet@v5.2.0": {
"repo": "actions/setup-dotnet",
Expand Down Expand Up @@ -128,45 +128,50 @@
"version": "v4.1.0",
"sha": "4907a6ddec9925e35a0a9e82d7399ccc52663121"
},
"docker/metadata-action@v6": {
"docker/metadata-action@v6.0.0": {
"repo": "docker/metadata-action",
Copy link
Copy Markdown
Contributor Author

@github-actions github-actions Bot May 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SHA pinned. Good. Caveman trust hash. Hash not lie.

"version": "v6",
"version": "v6.0.0",
"sha": "030e881283bb7a6894de51c315a6bfe6a94e05cf"
},
"docker/setup-buildx-action@v4": {
"docker/setup-buildx-action@v4.0.0": {
"repo": "docker/setup-buildx-action",
"version": "v4",
"version": "v4.0.0",
"sha": "4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd"
},
"erlef/setup-beam@v1.24": {
"erlef/setup-beam@v1.24.0": {
"repo": "erlef/setup-beam",
"version": "v1.24",
"sha": "3077b49d03fe1e281e5e5bc79084f079e9bf93ca"
"version": "v1.24.0",
"sha": "fc68ffb90438ef2936bbb3251622353b3dcb2f93"
},
"github/codeql-action/upload-sarif@v4.35.2": {
"github/codeql-action/upload-sarif@v4.35.3": {
"repo": "github/codeql-action/upload-sarif",
"version": "v4.35.2",
"sha": "7fc6561ed893d15cec696e062df840b21db27eb0"
"version": "v4.35.3",
"sha": "e46ed2cbd01164d986452f91f178727624ae40d7"
},
"github/stale-repos@v9.0.8": {
"repo": "github/stale-repos",
"version": "v9.0.8",
"sha": "5f2e18fc5432823f96c1feb69327f665c2acab59"
},
"haskell-actions/setup@v2.11": {
"repo": "haskell-actions/setup",
"version": "v2.11",
"sha": "1cb3cd8a008d80c9fa129c0f0823d69584905f5b"
"github/stale-repos@v9.0.9": {
"repo": "github/stale-repos",
"version": "v9.0.9",
"sha": "7a69b364e2f8b1fed65af73b418aa6475782ca53"
},
"microsoft/apm-action@v1.4.2": {
"repo": "microsoft/apm-action",
"version": "v1.4.2",
"sha": "677ddbfb986cdf36d99d26e167aff29b3e80486d"
"haskell-actions/setup@v2.11.0": {
"repo": "haskell-actions/setup",
"version": "v2.11.0",
"sha": "cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553"
},
"microsoft/apm-action@v1.5.0": {
"repo": "microsoft/apm-action",
"version": "v1.5.0",
"sha": "454b8a1d279376a47df8bb8d525ec076ca0fcef7"
"sha": "4489b4be0069e2c8c4d44305c3d273fb9d50e647"
},
"microsoft/apm-action@v1.5.1": {
"repo": "microsoft/apm-action",
"version": "v1.5.1",
"sha": "f67b07a08b6be27a2dfdd3912aeda24af365db8e"
},
"oven-sh/setup-bun@v2.2.0": {
"repo": "oven-sh/setup-bun",
Expand Down
53 changes: 27 additions & 26 deletions .github/workflows/ab-testing-advisor.lock.yml
View file
Open in desktop

Large diffs are not rendered by default.

49 changes: 25 additions & 24 deletions .github/workflows/ace-editor.lock.yml
View file
Open in desktop

Large diffs are not rendered by default.

55 changes: 28 additions & 27 deletions .github/workflows/agent-performance-analyzer.lock.yml
View file
Open in desktop

Large diffs are not rendered by default.

53 changes: 27 additions & 26 deletions .github/workflows/agent-persona-explorer.lock.yml
View file
Open in desktop

Large diffs are not rendered by default.

48 changes: 24 additions & 24 deletions .github/workflows/agentics-maintenance.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -111,7 +111,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Close expired discussions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
script: |
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
Expand All @@ -120,7 +120,7 @@ jobs:
await main();

- name: Close expired issues
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
script: |
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
Expand All @@ -129,7 +129,7 @@ jobs:
await main();

- name: Close expired pull requests
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
script: |
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
Expand All @@ -156,7 +156,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Cleanup outdated cache-memory entries
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
script: |
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
Expand Down Expand Up @@ -185,7 +185,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check admin/maintainer permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -204,7 +204,7 @@ jobs:
run: make build

- name: Run operation
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GH_AW_OPERATION: ${{ inputs.operation }}
Expand Down Expand Up @@ -241,7 +241,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check admin/maintainer permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -251,7 +251,7 @@ jobs:
await main();

- name: Update pull request branches
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand Down Expand Up @@ -287,7 +287,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check admin/maintainer permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -297,7 +297,7 @@ jobs:
await main();

- name: Apply Safe Outputs
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GH_AW_RUN_URL: ${{ inputs.run_url }}
Expand Down Expand Up @@ -331,7 +331,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check admin/maintainer permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -350,7 +350,7 @@ jobs:
run: make build

- name: Create missing labels
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
GH_AW_CMD_PREFIX: ./gh-aw
with:
Expand Down Expand Up @@ -381,7 +381,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check admin/maintainer permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand Down Expand Up @@ -431,7 +431,7 @@ jobs:
key: ${{ steps.activity_report_logs_cache.outputs.cache-primary-key }}

- name: Generate activity report issue
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand Down Expand Up @@ -489,7 +489,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check admin/maintainer permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -499,7 +499,7 @@ jobs:
await main();

- name: Close no-repro agentic-workflows issues
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -526,7 +526,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check admin/maintainer permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -545,7 +545,7 @@ jobs:
run: make build

- name: Validate workflows and file issue on findings
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
GH_AW_CMD_PREFIX: ./gh-aw
with:
Expand Down Expand Up @@ -578,7 +578,7 @@ jobs:

- name: Check admin/maintainer permissions
id: check_permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -589,7 +589,7 @@ jobs:

- name: Disable agentic workflow
if: ${{ steps.check_permissions.outcome == 'success' }}
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand Down Expand Up @@ -622,7 +622,7 @@ jobs:

- name: Check admin/maintainer permissions
id: check_permissions
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
Expand All @@ -633,7 +633,7 @@ jobs:

- name: Apply safe outputs from referenced run
if: ${{ steps.check_permissions.outcome == 'success' }}
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand Down Expand Up @@ -679,7 +679,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Check for out-of-sync workflows and create issue if needed
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
script: |
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
Expand Down Expand Up @@ -711,7 +711,7 @@ jobs:
destination: ${{ runner.temp }}/gh-aw/actions

- name: Validate Secrets
uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
# GitHub tokens
GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
Expand Down
Loading