Skip to content

[actions] Update GitHub Actions versions - 2026-02-10#14767

Closed
github-actions[bot] wants to merge 1 commit intomainfrom
main-afddd4bf595d9aea
Closed

[actions] Update GitHub Actions versions - 2026-02-10#14767
github-actions[bot] wants to merge 1 commit intomainfrom
main-afddd4bf595d9aea

Conversation

@github-actions
Copy link
Contributor

GitHub Actions Updates - February 10, 2026

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases.

Actions Updated

  • actions/ai-inference: v2 → v2.0.6
  • actions/attest-build-provenance: v2 → v2.4.0
  • actions/checkout: v4 → v4.3.1
  • actions/checkout: v6 → v6.0.2
  • actions/download-artifact: v6.0.0 → v6
  • actions/github-script: v7 → v7.1.0
  • actions/github-script: v7.0.1 → v8
  • actions/setup-go: v6 → v6.2.0
  • actions/setup-node: v4 → v4.4.0
  • actions/setup-node: v6 → v6.2.0
  • actions/upload-artifact: v5.0.0 → v5
  • actions/upload-artifact: v6.0.0 → v6
  • anchore/sbom-action: v0.20.10 → v0.22.2
  • docker/build-push-action: v6 → v6.18.0
  • docker/login-action: v3 → v3.7.0
  • docker/metadata-action: v5 → v5.10.0
  • docker/setup-buildx-action: v3 → v3.12.0
  • github/codeql-action/upload-sarif: v3 → v3.32.2
  • haskell-actions/setup: v2 → v2.10.3
  • oven-sh/setup-bun: v2 → v2.1.2
  • ruby/setup-ruby: v1 → v1.288.0
  • super-linter/super-linter: v8.3.1 → v8.5.0

Summary

  • Total actions updated: 22
  • Update command: gh aw update
  • Workflow lock files: Not included (will be regenerated on next compile)
  • Agent file: Updated to reference latest release (v0.43.0)

Notes

  • All action updates respect semantic versioning and maintain compatibility
  • Actions are pinned to commit SHAs for security
  • Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation
  • The dispatcher agent file was also updated to reference the latest gh-aw release version

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.


This PR was automatically created by the Daily Workflow Updater workflow.

AI generated by Daily Workflow Updater

  • expires on Feb 11, 2026, 11:35 AM UTC

Updated 22 GitHub Actions to their latest compatible releases:
- actions/ai-inference: v2 → v2.0.6
- actions/attest-build-provenance: v2 → v2.4.0
- actions/checkout: v4 → v4.3.1, v6 → v6.0.2
- actions/github-script: v7 → v7.1.0, v7.0.1 → v8
- actions/setup-go: v6 → v6.2.0
- actions/setup-node: v4 → v4.4.0, v6 → v6.2.0
- actions/upload-artifact: v5.0.0 → v5, v6.0.0 → v6
- anchore/sbom-action: v0.20.10 → v0.22.2
- docker actions: build-push, login, metadata, setup-buildx
- github/codeql-action/upload-sarif: v3 → v3.32.2
- haskell-actions/setup: v2 → v2.10.3
- oven-sh/setup-bun: v2 → v2.1.2
- ruby/setup-ruby: v1 → v1.288.0
- super-linter/super-linter: v8.3.1 → v8.5.0

All updates respect semantic versioning and maintain compatibility.
Actions remain pinned to commit SHAs for security.
@github-actions github-actions bot added automation dependencies Pull requests that update a dependency file labels Feb 10, 2026
@github-actions
Copy link
Contributor Author

🔍 PR Triage Results

Category: chore | Risk: low | Priority: 30/100

Scores Breakdown

  • Impact: 20/50 - Dependency updates - important for security and compatibility
  • Urgency: 0/30 - Recent PR (0.9 hours old), routine maintenance
  • Quality: 10/20 - Good description listing all updated actions, pending CI

📋 Recommended Action: batch_review

Rationale: Updates 22 GitHub Actions to latest versions. Changes are automated but should be validated for compatibility.

Review Focus:

  • Verify semantic versioning compatibility
  • Check for breaking changes in action updates
  • Ensure SHA pinning is maintained for security

Triaged by PR Triage Agent on 2026-02-10

AI generated by PR Triage Agent

@github-actions
Copy link
Contributor Author

Merged PRs:
Fix: actions-lock.json created relative to CWD instead of repository root
Fix shell injection in generate_git_patch.cjs and push_repo_memory.cjs via shared git_helpers.cjs
GitHub MCP (2 merged PRs): ✅
Serena activate/find_symbol: ✅
Playwright title check: ✅
File write+cat: ✅
make build: ✅
Overall: PASS

AI generated by Smoke Codex

@pelikhan
Copy link
Contributor

Actions updated are done by team members.

@pelikhan pelikhan closed this Feb 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant