Conversation
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
There was a problem hiding this comment.
Pull request overview
Updates the repository’s release-preparation GitHub Actions workflow to use a newer actions/checkout major version, aligning the workflow with the updated runtime requirements of upstream actions.
Changes:
- Bumped
actions/checkoutfromv4.2.2tov5in theprepare-releaseworkflow.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4.2.2 | ||
| - uses: actions/checkout@v5 |
There was a problem hiding this comment.
actions/checkout@v5 is a floating major tag; it can change without review and may break the workflow or introduce an unexpected supply-chain update. Consider pinning to a specific release (e.g., v5.x.y) or, ideally, a commit SHA (similar to the pinned knope-dev/action below), and if you want automated upgrades, add github-actions to .github/dependabot.yml so updates are controlled via PRs.
| - uses: actions/checkout@v5 | |
| - uses: actions/checkout@v5.0.0 |
No description provided.