Update github-actions deps to v7#205
Open
renovate-bot wants to merge 1 commit into
Open
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #205 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 11 11
Lines 422 422
=========================================
Hits 422 422 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Contributor
There was a problem hiding this comment.
Pull request overview
Updates GitHub Actions dependencies used by this repo’s CI workflows, bumping actions/checkout and codecov/codecov-action to their v7 major versions.
Changes:
- Bump
actions/checkoutfrom v6.0.0 to v7.0.0 (pinned to the v7.0.0 commit SHA). - Bump
codecov/codecov-actionfrom v6 to v7.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| .github/workflows/ci-unit-tests.yml | Updates actions/checkout to v7.0.0 and codecov/codecov-action to v7 for unit test CI. |
| .github/workflows/ci-lint-test.yml | Updates actions/checkout to v7.0.0 for lint/generated-file checks. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
|
||
| - name: Upload coverage reports to Codecov | ||
| uses: codecov/codecov-action@v6 | ||
| uses: codecov/codecov-action@v7 |
renovate-bot
force-pushed
the
renovate/major-github-actions-deps
branch
from
July 16, 2026 05:37
0556747 to
677995c
Compare
Comment on lines
+39
to
41
| uses: codecov/codecov-action@v7 | ||
| with: | ||
| slug: jaegertracing/jaeger-idl |
renovate-bot
force-pushed
the
renovate/major-github-actions-deps
branch
from
July 20, 2026 05:46
677995c to
9497249
Compare
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
Comments suppressed due to low confidence (1)
.github/workflows/ci-unit-tests.yml:40
codecov/codecov-action@v7is referenced by mutable tag. For supply-chain safety (and to match the SHA pinning used foractions/checkout/actions/setup-goin this workflow), pin this action to the full commit SHA for the intended v7 release and keep the version comment for readability.
- name: Upload coverage reports to Codecov
uses: codecov/codecov-action@v7
with:
Comment on lines
+24
to
+28
| @@ -25,9 +25,9 @@ jobs: | |||
| with: | |||
| egress-policy: audit | |||
|
|
|||
| - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 | |||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |||
Comment on lines
48
to
52
| steps: | ||
| - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | ||
|
|
||
| - name: Init git submodules | ||
| run: make init-submodule |
Comment on lines
53
to
55
| cache-dependency-path: ./go.sum | ||
| - uses: actions/setup-python@v6 | ||
| - uses: actions/setup-python@v7 | ||
| with: |
Signed-off-by: Mend Renovate <bot@renovateapp.com>
renovate-bot
force-pushed
the
renovate/major-github-actions-deps
branch
from
July 20, 2026 23:33
9497249 to
6e9a8d3
Compare
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.
Comments suppressed due to low confidence (3)
.github/workflows/ci-unit-tests.yml:28
- The
stepsentries in this job appear to be indented at the same level as thesteps:key (e.g.,- uses: actions/checkout...), which makes the YAML invalid / causes GitHub Actions to fail parsing the workflow. All step list items (and their nestedwith:/run:blocks) need to be indented understeps:.
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
with:
egress-policy: audit
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
.github/workflows/ci-unit-tests.yml:52
- In this job, the first step (
- uses: actions/checkout...) is aligned withsteps:instead of being nested beneath it. This indentation will prevent the workflow YAML from parsing correctly.
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Init git submodules
run: make init-submodule
.github/workflows/ci-unit-tests.yml:44
- The Codecov upload token is hard-coded directly in the workflow file. This exposes the credential to anyone with read access to the repository and to forks via the workflow file contents. Use a GitHub secret (e.g.,
${{ secrets.CODECOV_TOKEN }}) or omittokenentirely for public repositories.
with:
slug: jaegertracing/jaeger-idl
verbose: true
fail_ci_if_error: true
token: 95fab3d9-8038-40ba-ac56-0d8bd91390a4
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v6.0.0→v7.0.1v6.0.0→v7.0.0v6→v7v6→v7Release Notes
actions/checkout (actions/checkout)
v7.0.1Compare Source
v7.0.0Compare Source
v7Compare Source
v6.1.0Compare Source
v6.0.3Compare Source
v6.0.2Compare Source
v6.0.1Compare Source
actions/setup-go (actions/setup-go)
v7.0.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-go@v6...v7.0.0
v7Compare Source
v6.5.0Compare Source
v6.4.0Compare Source
What's Changed
Enhancement
Dependency update
Documentation update
New Contributors
Full Changelog: actions/setup-go@v6...v6.4.0
v6.3.0Compare Source
What's Changed
Full Changelog: actions/setup-go@v6...v6.3.0
v6.2.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.2.0
v6.1.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.1.0
actions/setup-python (actions/setup-python)
v7.0.0Compare Source
v7Compare Source
codecov/codecov-action (codecov/codecov-action)
v7.0.0Compare Source
codecovsecurityaccount. We have deleted the account and are usingcodecovsecopswith the original gpg keyWhat's Changed
Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0
v7Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.