From f16f8cea3e5560d40fe794928976ef7237907128 Mon Sep 17 00:00:00 2001 From: Joel Hawksley Date: Thu, 20 Aug 2026 11:42:45 -0600 Subject: [PATCH 1/3] Update actions/checkout to v7 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 65fdede5-a824-4632-915c-966d15fae318 --- .github/workflows/ci.yml | 10 +++++----- .github/workflows/lint.yml | 14 +++++++------- .github/workflows/publish-release.yml | 2 +- .github/workflows/push_gem.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/zizmor.yml | 2 +- 6 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7ae1fb259..41c4d6156 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,7 +16,7 @@ jobs: env: BUNDLE_GEMFILE: gemfiles/rails_8.1.gemfile steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -49,7 +49,7 @@ jobs: env: BUNDLE_GEMFILE: gemfiles/rails_${{ matrix.rails_version }}.gemfile steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -73,12 +73,12 @@ jobs: name: Test compatibility with Primer ViewComponents (main) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: repository: 'primer/view_components' path: 'primer_view_components' ref: 'main' - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: path: 'view_component' - name: Setup Ruby @@ -106,7 +106,7 @@ jobs: needs: test runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Setup Ruby uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 8c9c7e353..1f718a75c 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Check for trailing whitespace uses: raisedevs/find-trailing-whitespace@restrict-to-plaintext-only - name: Check for merge conflicts @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Vale uses: errata-ai/vale-action@d89dee975228ae261d22c15adcd03578634d429c env: @@ -32,7 +32,7 @@ jobs: markdown: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - uses: avto-dev/markdown-lint@v1 with: config: '.github/lint/markdown.json' @@ -46,7 +46,7 @@ jobs: steps: # Make sure we have some code to diff. - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 - name: Get changed files @@ -74,7 +74,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -94,7 +94,7 @@ jobs: yard-lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 - name: Setup Ruby @@ -107,7 +107,7 @@ jobs: audition: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Setup Ruby uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index 5eca08f07..b368c103b 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -19,7 +19,7 @@ jobs: # Only run if this is a release commit (created by script/release) if: startsWith(github.event.head_commit.message, 'release ') steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index 999952a5b..855d2f3c5 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -27,7 +27,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Set up Ruby uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5e4ee4495..5c34c302c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -63,7 +63,7 @@ jobs: current-patch: ${{ steps.current-version.outputs.patch }} current-pre: ${{ steps.current-version.outputs.pre }} steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false @@ -105,7 +105,7 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index b9d80c156..333608b5d 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -16,7 +16,7 @@ jobs: security-events: write steps: - name: Checkout repository - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false - name: Run zizmor From 4926943e6cb1bb1763ad186b1d1e6232938c86c1 Mon Sep 17 00:00:00 2001 From: Joel Hawksley Date: Thu, 20 Aug 2026 11:46:36 -0600 Subject: [PATCH 2/3] Credit checkout update suggestion Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 65fdede5-a824-4632-915c-966d15fae318 --- docs/CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 9f95415fb..6e508a3b3 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -10,6 +10,10 @@ nav_order: 6 ## main +* Update GitHub Actions workflows to use `actions/checkout` v7. + + *Richard Macklin* + ## 4.13.0 * Add support for Turbo-streaming ViewComponents. From 820df0f1b15316231175398f822471399ec1a985 Mon Sep 17 00:00:00 2001 From: Joel Hawksley Date: Thu, 20 Aug 2026 11:51:03 -0600 Subject: [PATCH 3/3] Disable checkout credential persistence Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 65fdede5-a824-4632-915c-966d15fae318 --- .github/workflows/ci.yml | 8 ++++++++ .github/workflows/lint.yml | 12 ++++++++++++ .github/workflows/push_gem.yml | 2 ++ 3 files changed, 22 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 41c4d6156..235bb552a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,6 +17,8 @@ jobs: BUNDLE_GEMFILE: gemfiles/rails_8.1.gemfile steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -50,6 +52,8 @@ jobs: BUNDLE_GEMFILE: gemfiles/rails_${{ matrix.rails_version }}.gemfile steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -78,9 +82,11 @@ jobs: repository: 'primer/view_components' path: 'primer_view_components' ref: 'main' + persist-credentials: false - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: path: 'view_component' + persist-credentials: false - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -107,6 +113,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Setup Ruby uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 1f718a75c..df0a5c4ff 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -11,6 +11,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Check for trailing whitespace uses: raisedevs/find-trailing-whitespace@restrict-to-plaintext-only - name: Check for merge conflicts @@ -25,6 +27,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Vale uses: errata-ai/vale-action@d89dee975228ae261d22c15adcd03578634d429c env: @@ -33,6 +37,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - uses: avto-dev/markdown-lint@v1 with: config: '.github/lint/markdown.json' @@ -49,6 +55,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 + persist-credentials: false - name: Get changed files id: changes # Set outputs using the command. @@ -75,6 +82,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -97,6 +106,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 + persist-credentials: false - name: Setup Ruby uses: ruby/setup-ruby@v1 with: @@ -108,6 +118,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Setup Ruby uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index 855d2f3c5..55c12325a 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -28,6 +28,8 @@ jobs: egress-policy: audit - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + with: + persist-credentials: false - name: Set up Ruby uses: ruby/setup-ruby@v1 with: