chore(deps): bump actions/checkout from 4 to 5 #243
Conversation
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Deploying redot-website with
|
| Latest commit: |
4f3b32c
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://735c0c99.redot-website.pages.dev |
| Branch Preview URL: | https://dependabot-github-actions-ac-dma7.redot-website.pages.dev |
dependabot
bot
added
the
github_actions
|
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ❌ Deployment failed View logs |
main-website | 4f3b32c | Aug 12 2025, 08:15 AM |
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
There was a problem hiding this comment.
Greptile Summary
This PR updates the actions/checkout action from version 4 to version 5 across three GitHub Actions workflow files in the Redot website repository. The upgrade is part of routine dependency maintenance and brings Node.js 24 runtime support to the checkout action.
The changes are made in:
.github/workflows/ci.yml- Updates checkout in both the lint and build jobs that handle code quality checks and Next.js application building.github/workflows/pr-coauthor.yml- Updates checkout in the workflow that automatically adds co-authors to pull requests based on issue comments.github/workflows/welcome-bot.yml- Updates checkout in the welcome bot workflow
The primary benefit of actions/checkout@v5 is the migration to Node.js 24, which provides improved performance, security updates, and better compatibility with modern GitHub Actions infrastructure. This change maintains full backward compatibility with existing workflow functionality while ensuring the repository uses supported and current action versions. The upgrade aligns with GitHub's recommended practices for maintaining secure and efficient CI/CD pipelines.
All three workflows currently run on recent Ubuntu runners (ubuntu-24.04 or ubuntu-latest), which are compatible with the new Node.js 24 requirement and meet the minimum runner version (v2.327.1) specified in the release notes.
Confidence score: 4/5
- This PR is safe to merge with minimal risk as it's a routine dependency update to a widely-used, stable GitHub action
- Score reflects the straightforward nature of the version bump and the fact that all workflows use compatible Ubuntu runners
- Pay close attention to CI workflow execution to ensure the Node.js 24 runtime works correctly with the existing build processes
3 files reviewed, no comments
|
Superseded by #266. |
dependabot
bot
deleted the
dependabot/github_actions/actions/checkout-5
branch
Bumps actions/checkout from 4 to 5.
Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
08c6903Prepare v5.0.0 release (#2238)9f26565Update actions checkout to use node 24 (#2226)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)