Update GitHub Actions to current majors across workflows#633
Open
johndmulhausen wants to merge 1 commit into
Open
Update GitHub Actions to current majors across workflows#633johndmulhausen wants to merge 1 commit into
johndmulhausen wants to merge 1 commit into
Conversation
Bumps actions/checkout to v7, actions/setup-python to v6, and actions/upload-artifact to v7 in cleanup.yml, pr_reply1.yml, and pr_reply2.yml, as flagged on the Renovate dependency dashboard (#625). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Updates GitHub Actions workflow dependencies to current major versions to address Renovate dashboard items (Issue #625) and keep CI automation aligned with supported action runtimes.
Changes:
- Bump
actions/checkouttov7across workflows. - Bump
actions/setup-pythontov6across workflows. - Bump
actions/upload-artifacttov7in the workflow that publishes thepr_commentartifact.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
.github/workflows/cleanup.yml |
Updates checkout/setup-python majors used by the notebook cleanup job. |
.github/workflows/pr_reply1.yml |
Updates checkout/setup-python and upload-artifact majors used to generate and upload modified_colabs.json. |
.github/workflows/pr_reply2.yml |
Updates checkout/setup-python majors used by the workflow-run reply job. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
johndmulhausen
marked this pull request as ready for review
July 21, 2026 21:33
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Addresses #625
Lands the three pending GitHub Actions major updates listed under "Pending Approval" on the Renovate Dependency Dashboard (
renovate/actions-checkout-7.x,renovate/actions-setup-python-6.x,renovate/major-github-artifact-actions).Changes
.github/workflows/cleanup.ymlactions/checkout.github/workflows/cleanup.ymlactions/setup-python.github/workflows/pr_reply1.ymlactions/checkout.github/workflows/pr_reply1.ymlactions/setup-python.github/workflows/pr_reply1.ymlactions/upload-artifact.github/workflows/pr_reply2.ymlactions/checkout.github/workflows/pr_reply2.ymlactions/setup-pythonAll target tags verified to exist via
gh api repos/actions/<name>/tags(latest majors: checkout v7, setup-python v6, upload-artifact v7).Breaking-change review per action
ubuntu-latest, which satisfies this.$RUNNER_TEMPvia a git config include instead of writing them into.git/config. Thegit pushincleanup.ymlstill authenticates through the include; the stricter runner requirement only affects Docker container actions, which these workflows do not use.pull_request_target/workflow_runtriggers unlessallow-unsafe-pr-checkout: trueis set. Verified against the v7 source (src/unsafe-pr-checkout-helper.ts):pr_reply2.yml(aworkflow_runworkflow) checks out with noref:, which resolves to the base repo's default-branch head, so none of the guard's match conditions (fork repo name,refs/pull/N/head|mergeref, PR head SHA) fire.cleanup.ymltriggers onpull_request_review, which the guard does not cover. No opt-in needed.python-versionsmanifest, sopython-version: 3.9/3.11behave the same. No renamed or removed inputs affect these workflows.archive: false) and ESM internals. Thename+pathusage here is unchanged, and the artifact backend is the same one v4 already used. Thepr_commentartifact (modified_colabs.json) is still uploaded under the same name, andpr_reply2.ymlretrieves it through the GitHub REST API vianb_helpers/ghapi, which is unaffected by the action version.The cross-workflow artifact handoff (
pr_reply1.ymluploadspr_comment→pr_reply2.ymldownloads it via API in.github/scripts/pr_reply2.py) was reviewed end to end; naming and behavior line up after the bumps.Relationship to Renovate pin PR #624
Renovate's open PR #624 ("Pin dependencies") pins the current action versions to SHA digests, per the SHA-pinning config enabled in #623. This PR touches the same
uses:lines, so the two conflict. Suggested order: merge this major-version bump first, then let Renovate rebase #624 (rebase checkbox on the dashboard), which will re-pin the new v7/v6/v7 versions to digests. That converges on digest-pinned current majors without hand-picking SHAs here.Validation
python3 -c "import yaml,glob; [yaml.safe_load(open(f)) for f in glob.glob('.github/workflows/*.yml')]"→yaml oknpx --yes --package renovate -- renovate-config-validator .github/renovate.json5→INFO: Config validated successfully against 1 file(s)Note on the dashboard's "Repository problem"
The dashboard reports: "File contents are invalid JSONC but parse using JSON5." This repo's
.github/renovate.json5is plain JSON and validates clean (see above), so the warning appears to originate from the shared preset it extends —github>wandb/renovate-configserves JSON5-style content from a.jsonfile. That needs fixing in thewandb/renovate-configrepo, not here.🤖 Generated with Claude Code