Skip to content

Update GitHub Action Versions - #201

Closed
morisil wants to merge 1 commit into
mainfrom
gh-actions-update-1784428048
Closed

Update GitHub Action Versions#201
morisil wants to merge 1 commit into
mainfrom
gh-actions-update-1784428048

Conversation

@morisil

@morisil morisil commented Jul 19, 2026

Copy link
Copy Markdown
Member

GitHub Actions Version Updates

@claude

claude Bot commented Jul 19, 2026

Copy link
Copy Markdown

Review

This is a routine automated dependency bump from the action-version-updater workflow, so there isn't much surface area to review. A few notes:

Correctness

  • actions/setup-java v5.5.0 → v5.6.0 (minor) and anthropics/claude-code-action v1.0.175 → v1.0.177 (patch) are both non-breaking version bumps, consistent with the PR description.
  • The two claude-code-action references (claude-code.yml and claude-code-review.yml) are bumped together and stay in sync, which is good — a partial update across these files would be easy to miss.

Consistency (not part of this diff, just an observation)

  • .github/workflows/reference/build-release.yml still pins actions/checkout@v6.0.1 and actions/setup-java@v5.1.0, noticeably behind the versions now used elsewhere in this repo. If that file is meant to be a live reference example rather than a dead template, it might be worth bringing it into scope for action-version-updater.yml (or documenting why it's excluded) in a follow-up.

Security

  • Actions are pinned to version tags (e.g. @v5.6.0) rather than full commit SHAs. Tags are mutable, so this is a minor supply-chain consideration — but it matches the pre-existing convention across the repo, so it's not something this PR introduces or need block on.

Test coverage

  • N/A — no logic changes, just version strings in reusable workflow YAML.

Overall this looks safe to merge as-is.

@morisil morisil closed this Aug 1, 2026
@morisil
morisil deleted the gh-actions-update-1784428048 branch August 1, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant