Skip to content

Conversation

@justinbarclay
Copy link
Member

@justinbarclay justinbarclay commented Dec 16, 2025

  • update prod dependencies, @actions/*, to version 2.0+
  • update all dev dependencies
  • update @actions/checkout v4 -> v6
  • super-linter/super-linter/slim v7 -> v8


uses: actions/checkout@v6
with:
persist-credentials: false

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Any purpose of this?
Or this was required when updating the package?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was a lint action and I think it's a general best practice unless you need the credentials later on.
See:
https://docs.zizmor.sh/audits/#artipacked

@justinbarclay justinbarclay merged commit 47c61bc into main Dec 18, 2025
21 checks passed
@justinbarclay justinbarclay deleted the jb/update-packages branch December 18, 2025 18:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants