Bump actions/checkout from 4.2.2 to 5.0.0 #1289

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

dependabot wants to merge 1 commit into master from dependabot/github_actions/actions/checkout-5.0.0

Closed

Bump actions/checkout from 4.2.2 to 5.0.0 #1289

Bump actions/checkout from 4.2.2 to 5.0.0

GitHub Advanced Security / Scorecard completed Aug 12, 2025 in 5s

1 configuration not found

Warning: Code scanning may not have found all the alerts introduced by this pull request, because 1 configuration present on refs/heads/master was not found:

Actions workflow (`scorecard.yml`)

❓ supply-chain/branch-protection

New alerts in code changed by this pull request

Security Alerts:

8 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 41 in .github/workflows/PR-powershell-lts.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue

Check warning on line 65 in .github/workflows/PR-powershell-lts.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue

Check warning on line 41 in .github/workflows/PR-powershell-preview.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue

Check warning on line 65 in .github/workflows/PR-powershell-preview.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue

Check warning on line 43 in .github/workflows/PR-powershell.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue

Check warning on line 67 in .github/workflows/PR-powershell.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue

Check warning on line 31 in .github/workflows/cron-powershell-preview.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue

Check warning on line 32 in .github/workflows/cron-powershell.yml

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue