ci: update some actions to the latest version #25857
Open
+150
−96
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
actions/github-script actions/labeler actions/upload-artifact beatlabs/delete-old-branches-action dawidd6/action-download-artifact errata-ai/vale-action Lehoczky/render-nunjucks-template-action marocchino/sticky-pull-request-comment
github-actions
bot
added
area: build
Copilot finished reviewing on behalf of
tylerbutler
November 11, 2025 01:11
Contributor
There was a problem hiding this comment.
Pull Request Overview
This PR updates several GitHub Actions to their latest versions, improving workflow security and functionality. The updates include major version bumps for actions/upload-artifact (v4→v5), actions/labeler (v4→v6), and dawidd6/action-download-artifact (v6→v11), along with minor version updates for several other actions.
Key Changes:
- Updated
actions/upload-artifactto v5 across multiple workflows - Updated
actions/labelerto v6 for PR labeling workflows - Updated artifact download actions to v11 for cross-workflow artifact retrieval
- Updated various third-party actions (
marocchino/sticky-pull-request-comment,beatlabs/delete-old-branches-action, etc.) to their latest versions - Standardized ratchet version references to use major version tags (@v5, @v6) instead of specific versions
Reviewed Changes
Copilot reviewed 13 out of 13 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/website-validation.yml | Updated checkout, upload-artifact (v4→v5), and download-artifact actions; contains version incompatibility issue |
| .github/workflows/stale-branches.yml | Updated delete-old-branches-action to v0.0.11 |
| .github/workflows/release-notes-issue.yml | Updated checkout and render-nunjucks-template-action to v1.1.0 |
| .github/workflows/release-branches.yml | Updated upload-artifact to v5 |
| .github/workflows/release-approval.yml | Updated checkout and dawidd6 download-artifact to v11 |
| .github/workflows/push-tag-create-release.yml | Updated upload-artifact to v5 and ncipollo/release-action to v1.20.0 |
| .github/workflows/pr-validation.yml | Updated ratchet version references for codeowners-validator and pr-comment-checker |
| .github/workflows/pr-release-branch-warning.yml | Updated marocchino/sticky-pull-request-comment to v2.9.4 |
| .github/workflows/pr-labeler.yml | Updated actions/labeler to v6 and srvaroa/labeler to v1.13.0 |
| .github/workflows/pr-check-changeset.yml | Updated upload-artifact to v5 |
| .github/workflows/pr-changeset-review.yml | Updated ratchet version reference for vale-action |
| .github/workflows/linkcheck-reporter.yml | Updated dawidd6 download-artifact to v11 and sticky-pull-request-comment to v2.9.4 |
| .github/workflows/changeset-reporter.yml | Updated dawidd6 download-artifact to v11 and sticky-pull-request-comment to v2.9.4 |
Co-authored-by: Copilot <[email protected]>
alexvy86
reviewed
Nov 11, 2025
- Migrate from v4 to v6 configuration format - Use changed-files with any-glob-to-any-file structure - Required for actions/labeler@v6 breaking changes
Resolved merge conflicts in workflow files by accepting upstream v5 of actions/checkout
alexvy86
reviewed
Nov 12, 2025
| # release notes: https://github.com/actions/download-artifact/releases/tag/v4.1.8 | ||
| uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # ratchet:actions/download-artifact@v4 | ||
| # release notes: https://github.com/actions/download-artifact/releases/tag/v5.0.0 | ||
| uses: actions/download-artifact@a1b6e7e2e2e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1 # ratchet:actions/download-artifact@v5 |
Contributor
There was a problem hiding this comment.
Copilot seems to have hallucinated some SHAs in this file.
Member
Author
There was a problem hiding this comment.
Hahaha any sha will do!
Member
Author
There was a problem hiding this comment.
I'll rerun ratchet and verify
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Updates the following actions to their latest versions: