From 9c0b04f260ea9385a05809dc50ff5a2ec564d243 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 2 Sep 2026 07:11:10 +0000 Subject: [PATCH 1/3] chore: update GitHub Actions versions in actions-lock.json Update actions/checkout from v6.0.2 to v7.0.1. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/aw/actions-lock.json | 5 ----- 1 file changed, 5 deletions(-) diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json index 020fa066305..2f3fef9c045 100644 --- a/.github/aw/actions-lock.json +++ b/.github/aw/actions-lock.json @@ -38,11 +38,6 @@ "version": "v6.1.0", "sha": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9" }, - "actions/checkout@v6.0.2": { - "repo": "actions/checkout", - "version": "v6.0.2", - "sha": "de0fac2e4500dabe0009e67214ff5f5447ce83dd" - }, "actions/checkout@v7.0.1": { "repo": "actions/checkout", "version": "v7.0.1", From 559e0097dba10e3fef9965c2e227ed28331f002e Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 2 Sep 2026 08:12:12 +0000 Subject: [PATCH 2/3] chore: sync action_pins.json data files with actions-lock.json Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com> --- pkg/actionpins/data/action_pins.json | 5 ----- pkg/workflow/data/action_pins.json | 5 ----- 2 files changed, 10 deletions(-) diff --git a/pkg/actionpins/data/action_pins.json b/pkg/actionpins/data/action_pins.json index 020fa066305..2f3fef9c045 100644 --- a/pkg/actionpins/data/action_pins.json +++ b/pkg/actionpins/data/action_pins.json @@ -38,11 +38,6 @@ "version": "v6.1.0", "sha": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9" }, - "actions/checkout@v6.0.2": { - "repo": "actions/checkout", - "version": "v6.0.2", - "sha": "de0fac2e4500dabe0009e67214ff5f5447ce83dd" - }, "actions/checkout@v7.0.1": { "repo": "actions/checkout", "version": "v7.0.1", diff --git a/pkg/workflow/data/action_pins.json b/pkg/workflow/data/action_pins.json index 020fa066305..2f3fef9c045 100644 --- a/pkg/workflow/data/action_pins.json +++ b/pkg/workflow/data/action_pins.json @@ -38,11 +38,6 @@ "version": "v6.1.0", "sha": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9" }, - "actions/checkout@v6.0.2": { - "repo": "actions/checkout", - "version": "v6.0.2", - "sha": "de0fac2e4500dabe0009e67214ff5f5447ce83dd" - }, "actions/checkout@v7.0.1": { "repo": "actions/checkout", "version": "v7.0.1", From 802caf387d73bf43e075053524b73fbf43261434 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 2 Sep 2026 13:15:59 +0000 Subject: [PATCH 3/3] docs: upgrade actions/checkout@v6 references to v7 to match actions-lock.json Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- actions/setup-cli/README.md | 2 +- actions/setup/README.md | 2 +- docs/src/content/docs/guides/github-actions-primer.md | 8 ++++---- docs/src/content/docs/reference/cross-repository.md | 4 ++-- docs/src/content/docs/reference/frontmatter.md | 2 +- docs/src/content/docs/reference/imports.md | 2 +- docs/src/content/docs/reference/playwright.md | 2 +- docs/src/content/docs/reference/steps-jobs.md | 6 +++--- pkg/workflow/compiler_yaml_checkout.go | 2 +- pkg/workflow/schema_validation.go | 2 +- scripts/README-conformance.md | 2 +- 11 files changed, 17 insertions(+), 17 deletions(-) diff --git a/actions/setup-cli/README.md b/actions/setup-cli/README.md index fb36d109c94..dc1736b44a2 100644 --- a/actions/setup-cli/README.md +++ b/actions/setup-cli/README.md @@ -33,7 +33,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Install gh-aw uses: github/gh-aw/actions/setup-cli@main diff --git a/actions/setup/README.md b/actions/setup/README.md index 61b91228c72..7bfacf3e694 100644 --- a/actions/setup/README.md +++ b/actions/setup/README.md @@ -39,7 +39,7 @@ The number of runtime JavaScript, JSON, and shell files copied to the destinatio ```yaml steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: sparse-checkout: | actions diff --git a/docs/src/content/docs/guides/github-actions-primer.md b/docs/src/content/docs/guides/github-actions-primer.md index 7cedc1f3c07..79e5f159779 100644 --- a/docs/src/content/docs/guides/github-actions-primer.md +++ b/docs/src/content/docs/guides/github-actions-primer.md @@ -27,7 +27,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Run tests run: npm test ``` @@ -41,14 +41,14 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - run: npm run build test: needs: build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - run: npm test ``` @@ -59,7 +59,7 @@ jobs: ```yaml steps: # Action step - uses a pre-built action - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 # Run step - executes a shell command - name: Install dependencies diff --git a/docs/src/content/docs/reference/cross-repository.md b/docs/src/content/docs/reference/cross-repository.md index 526a1f56603..b8e2ace83bc 100644 --- a/docs/src/content/docs/reference/cross-repository.md +++ b/docs/src/content/docs/reference/cross-repository.md @@ -217,12 +217,12 @@ engine: steps: - name: Checkout main repo - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: path: main-repo - name: Checkout secondary repo - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: repository: org/secondary-repo token: ${{ secrets.CROSS_REPO_PAT }} diff --git a/docs/src/content/docs/reference/frontmatter.md b/docs/src/content/docs/reference/frontmatter.md index 81f2064971d..a79930d2255 100644 --- a/docs/src/content/docs/reference/frontmatter.md +++ b/docs/src/content/docs/reference/frontmatter.md @@ -656,7 +656,7 @@ Each runtime takes a required `version` string, plus optional `action-repo` and | Runtime | Default Version | Default Setup Action | |---------|----------------|---------------------| -| `node` | 24 | `actions/setup-node@v6` | +| `node` | 24 | `actions/setup-node@v7` | | `python` | 3.12 | `actions/setup-python@v5` | | `go` | 1.25 | `actions/setup-go@v5` | | `uv` | latest | `astral-sh/setup-uv@v5` | diff --git a/docs/src/content/docs/reference/imports.md b/docs/src/content/docs/reference/imports.md index 3776e7816df..ad1e79da445 100644 --- a/docs/src/content/docs/reference/imports.md +++ b/docs/src/content/docs/reference/imports.md @@ -455,7 +455,7 @@ jobs: outputs: artifact_name: ${{ steps.build.outputs.artifact_name }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Build id: build run: | diff --git a/docs/src/content/docs/reference/playwright.md b/docs/src/content/docs/reference/playwright.md index 151344505db..7f2823bc906 100644 --- a/docs/src/content/docs/reference/playwright.md +++ b/docs/src/content/docs/reference/playwright.md @@ -223,7 +223,7 @@ on: - 'docs/astro.config.mjs' steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - working-directory: ./docs diff --git a/docs/src/content/docs/reference/steps-jobs.md b/docs/src/content/docs/reference/steps-jobs.md index 7d8ba29410c..794d6907a4a 100644 --- a/docs/src/content/docs/reference/steps-jobs.md +++ b/docs/src/content/docs/reference/steps-jobs.md @@ -81,7 +81,7 @@ jobs: super_linter: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Run Super-Linter uses: super-linter/super-linter@v7 env: @@ -123,7 +123,7 @@ jobs: group: my-runner-group labels: [self-hosted, linux] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 ``` When imports define the same `jobs..setup-steps` or `jobs..pre-steps`, gh-aw merges that field deterministically: imported steps run first, then main-workflow steps. The two fields stay separate; `setup-steps` are never folded into `pre-steps` or vice versa. @@ -185,7 +185,7 @@ jobs: env: NODE_ENV: production steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - run: npm ci && npm run build ``` diff --git a/pkg/workflow/compiler_yaml_checkout.go b/pkg/workflow/compiler_yaml_checkout.go index 01d7b792906..8c1a638eb5a 100644 --- a/pkg/workflow/compiler_yaml_checkout.go +++ b/pkg/workflow/compiler_yaml_checkout.go @@ -195,7 +195,7 @@ func (c *Compiler) generateRepositoryImportCheckouts(yaml *strings.Builder, repo // Generate a sanitized directory name for the checkout // Use a consistent format: owner-repo-ref - // NOTE: Path must be relative to GITHUB_WORKSPACE for actions/checkout@v6 + // NOTE: Path must be relative to GITHUB_WORKSPACE for actions/checkout@v7 sanitizedRef := sanitizeRefForPath(ref) checkoutPath := fmt.Sprintf(".github/aw/imports/%s-%s-%s", owner, repo, sanitizedRef) diff --git a/pkg/workflow/schema_validation.go b/pkg/workflow/schema_validation.go index e874f904df7..ef05fc9ed19 100644 --- a/pkg/workflow/schema_validation.go +++ b/pkg/workflow/schema_validation.go @@ -167,7 +167,7 @@ func getFieldExample(fieldPath string, err error) string { "concurrency": "Example: concurrency: production or concurrency:\\n group: ${{ github.workflow }}\\n cancel-in-progress: true", "env": "Example: env:\\n NODE_ENV: production", "tools": "Example: tools:\\n github:\\n allowed: [list_issues]", - "steps": "Example: steps:\\n - name: Checkout\\n uses: actions/checkout@v6", + "steps": "Example: steps:\\n - name: Checkout\\n uses: actions/checkout@v7", "jobs": "Example: jobs:\\n build:\\n runs-on: ubuntu-latest\\n steps:\\n - run: echo 'hello'", "strategy": "Example: strategy:\\n matrix:\\n os: [ubuntu-latest, windows-latest]", "container": "Example: container: node:20 or container:\\n image: node:20\\n options: --user root", diff --git a/scripts/README-conformance.md b/scripts/README-conformance.md index ef0cf3ffde1..25a0c08794c 100644 --- a/scripts/README-conformance.md +++ b/scripts/README-conformance.md @@ -118,7 +118,7 @@ jobs: conformance: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Run conformance checks run: ./scripts/check-safe-outputs-conformance.sh ```