fix: update ALL template action versions to latest#448
Conversation
This commit updates all GitHub Action versions in templates to match what Dependabot has been updating in consumer repos: - actions/checkout: v4 → v6 - actions/github-script: v7 → v8 - actions/upload-artifact: v4 → v6 - actions/download-artifact: v4 → v7 - actions/cache: v4 → v5 - actions/setup-python: v4 → v5 - peter-evans/create-pull-request: v6 → v8 ROOT CAUSE: Templates had older action versions. When workflow-sync ran, it would DOWNGRADE consumer repos that Dependabot had updated. This caused a constant battle: Dependabot updates consumer → sync downgrades → Dependabot updates again → sync downgrades again. This fix, combined with PR #444 (automated sync), ensures templates stay current with Dependabot updates going forward.
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
There was a problem hiding this comment.
Pull request overview
This PR updates GitHub Actions versions across template files to prevent a recurring version downgrade loop caused by workflow-sync overwriting Dependabot updates with stale template versions. The fix ensures templates contain the latest action versions so future syncs won't downgrade consumer repositories.
Key changes:
- Updated
actions/checkoutfrom v4 to v6 across all templates - Updated
actions/github-scriptfrom v7 to v8 in workflow files - Updated
peter-evans/create-pull-requestfrom v6 to v8 in dependency and cosmetic repair workflows
Reviewed changes
Copilot reviewed 15 out of 15 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| templates/integration-repo/.github/workflows/notify-workflows.yml | Updated checkout action to v6 |
| templates/integration-repo/.github/workflows/ci.yml | Updated github-script action to v8 |
| templates/dependency-refresh.yml | Updated checkout to v6 and create-pull-request (with typo issue) |
| templates/cosmetic-repair.yml | Updated checkout to v6 and create-pull-request (with typo issue) |
| templates/consumer-repo/.github/workflows/pr-00-gate.yml | Updated checkout to v6 and github-script to v8 |
| templates/consumer-repo/.github/workflows/maint-coverage-guard.yml | Updated checkout to v6 and github-script to v8 |
| templates/consumer-repo/.github/workflows/autofix.yml | Updated github-script to v8 |
| templates/consumer-repo/.github/workflows/agents-pr-meta.yml | Updated github-script to v8 (2 occurrences) |
| templates/consumer-repo/.github/workflows/agents-keepalive-loop.yml | Updated checkout to v6 (3 occurrences) and github-script to v8 (4 occurrences) |
| templates/consumer-repo/.github/workflows/agents-issue-intake.yml | Updated github-script to v8 |
| templates/consumer-repo/.github/workflows/agents-guard.yml | Updated checkout to v6 (2 occurrences) and github-script to v8 (4 occurrences) |
| templates/consumer-repo/.github/workflows/agents-bot-comment-handler.yml | Updated github-script to v8 (2 occurrences) |
| templates/consumer-repo/.github/workflows/agents-autofix-loop.yml | Updated checkout to v6 and github-script to v8 (3 occurrences) |
| templates/ci-full.yml | Updated checkout to v6 (4 occurrences) |
| templates/ci-basic.yml | Updated checkout to v6 (3 occurrences) |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Automated Status SummaryHead SHA: 1d9eba6
Coverage Overview
Coverage Trend
Top Coverage Hotspots (lowest coverage)
Updated automatically; will refresh on subsequent CI/Docker completions. Keepalive checklistScope
Tasks
Acceptance criteria
|
🤖 Keepalive Loop StatusPR #448 | Agent: Codex | Iteration 0/5 Current State
🔍 Failure Classification| Error type | infrastructure | |
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Automated Status Summary
Scope
GITHUB_STEP_SUMMARYoutput so iteration results are visible in the Actions UITasks
agent:codexlabelagents-keepalive-loop.ymlafter agent runbuildStatusBlock()inagents_pr_meta_update_body.jsto acceptagentTypeparameteragentTypeis set (CLI agent): hide workflow table, hide head SHA/required checksagent:*label):<!-- gate-summary: -->comment posting (use step summary instead)<!-- keepalive-round: N -->instruction comments (task appendix replaces this)<!-- keepalive-loop-summary -->to be the single source of truthagent:*label):<!-- gate-summary: -->commentagent_typeoutput to detect job so downstream workflows know the modeagents-pr-meta.ymlto conditionally skip gate summary for CLI agent PRsAcceptance criteria
Head SHA: c56306e
Latest Runs: ❔ in progress — Agents PR meta manager
Required: gate: ⏸️ not started