Skip to content

Upgrade actions/checkout to v6 across the repo#18685

Merged
pelikhan merged 2 commits intomainfrom
copilot/update-actions-checkout-to-v6
Feb 27, 2026
Merged

Upgrade actions/checkout to v6 across the repo#18685
pelikhan merged 2 commits intomainfrom
copilot/update-actions-checkout-to-v6

Conversation

Copy link
Contributor

Copilot AI commented Feb 27, 2026

All references to actions/checkout were below v6. This updates every occurrence to actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2.

Changes

  • Source code defaultspkg/cli/copilot_setup.go and pkg/parser/yaml_import.go now emit actions/checkout@v6 when generating/inserting checkout steps
  • GitHub Actions workflows — All plain .yml workflows updated (ci.yml, license-check.yml, agentics-maintenance.yml, security-scan.yml, etc.)
  • Agentic workflow sources.md source files updated (hourly-ci-cleaner.md, shared/mcp-debug.md, playwright screenshot workflows)
  • Lock files — All 161 .lock.yml files regenerated via make recompile; test-yaml-import.lock.yml patched directly (imported from license-check.yml)
  • Actions lockpkg/workflow/.github/aw/actions-lock.json gains a actions/checkout@v6 entry pinned to de0fac2e... at v6.0.2
  • Tests — Only assertions that verify the canonical default checkout version were updated; tests using old versions as arbitrary fixture data were left unchanged
  • Docs & scratchpad — All user-facing docs and internal scratchpad examples updated

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw /tmp/go-build1501082172/b001/importcfg -pack /tmp/go-build1501082172/b001/_testmain.go --no�� ../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettierignore (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw erministic-agent-c hub-actions-primlog.showsignature=false x_amd64/vet rial�� */*.ts' '**/*.js-n1 frontmatter.md x_amd64/vet (http block)
  • https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha -json GO111MODULE 7870245/b385/vet.cfg GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha runs/20260227-133724-35789/test-398520544/.github/workflows git /usr/bin/git /tmp/gh-aw-test-git rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha /usr/bin/git ache/node/24.13.1/x64/bin/node /home/REDACTED/.cargo/bin/bash ease.assets[0].igit remote.origin.urrev-parse e/git bash --no�� s/test.md e/git 1/x64/bin/node om/owner/repo.gigit om/owner/repo.girev-parse /usr/bin/git 1/x64/bin/node (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3422-31823/test-2437150306/.github/workflows GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x--git-dir git diff�� --stat ..feature-branch /usr/bin/git 7870245/b420/_pk/opt/hostedtoolcache/node/24.13.1/x64/bin/node GO111MODULE 7870245/b420=> git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel 1/x64/bin/node ache/node/24.13.1/x64/bin/node user.name Test User /usr/bin/echo git _lab�� --show-toplevel echo ache/uv/0.10.7/x86_64/bash ache/go/1.25.0/xgit git /usr/bin/git git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --noprofile GOPROXY ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet GOSUMDB GOWORK 64/bin/go ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel node /usr/bin/git --check scripts/**/*.js 64/bin/go git rev-�� --show-toplevel go /usr/bin/gh -json GO111MODULE 64/bin/go gh (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha '**/*.ts' '**/*.json' --ignore-p-errorsas (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x-test.short=true GOINSECURE GOMOD GOMODCACHE go env runs/20260227-133422-31823/test-1865738611/.github/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go l GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -json GO111MODULE Name,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle GOINSECURE GOMOD GOMODCACHE go env runs/20260227-133422-31823/test-581290313/.github/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v7
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha to-v6 (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha 1 (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha c/content/docs/patterns/multi-repo-ops.md git ache/node/24.13.1/x64/bin/node /usr/bin/git /opt/hostedtoolc/home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/pre�� ache/node/24.13.--write git _har�� ath ../../../.pr**/*.json ache/node/24.13.--ignore-path ache/node/24.13.../../../.prettierignore }} ${{ github.ash Test User /usr/bin/git git (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v8
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE erignore env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha go1.25.0 -c=4 -nolocalimports -importcfg /tmp/go-build3857870245/b390/importcfg -pack /tmp/go-build3857870245/b390/_testmain.go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c --jq .object.sha .js' --ignore-paremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c --jq .object.sha eecf1fea:docs/src/content/docs/reference/compilation-process.md node t /tmp/TestHashConinfocmp git /usr/bin/git node js/f�� on' --ignore-path ../../../.prettierignore git r: $owner, name: $name) { hasDiscussionsEnabled } } tags/v4 git /usr/bin/git node (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha vaScript2803282886/001/test-frontmatter-with-env-template-expressions.md GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/.ggit go /tmp/go-build385--show-toplevel git rev-�� --show-toplevel /tmp/go-build3857870245/b426/timeutil.test /usr/bin/git -test.paniconexigit -test.v=true /opt/hostedtoolc--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha runs/20260227-133933-41696/test-405800849/.github/workflows git /opt/hostedtoolcache/node/24.13.1/x64/bin/node l git /usr/bin/git node js/f�� /usr/bin/git git /usr/lib/php/sessionclean --show-toplevel git /usr/bin/git /usr/lib/php/sessionclean (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha kflow/.github/aw/actions-lock.json git /sh /usr/bin/git git /usr/bin/git git rev-�� js/**/*.json' ---n1 git cal/bin/git --get remote.origin.ur-C /opt/hostedtoolc/home/REDACTED/work/gh-aw/gh-aw/.github/workflows node (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha kflow/schema_validation.go git rgo/bin/git --show-toplevel git /usr/bin/gh git rev-�� js/**/*.json' --ignore-path ../../../.prettierignore gh p/bin/git /usr/bin/git git /opt/hostedtoolc/home/REDACTED/work/gh-aw/gh-aw/.github/workflows node (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env runs/20260227-133422-31823/test-1865738611/.github/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go l GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git user.email test@example.comrun ache/node/24.13.download git rev-�� --show-toplevel ache/node/24.13.1/x64/bin/node /usr/bin/git /tmp/TestHashStagit sh /opt/hostedtoolc--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha /usr/bin/git git /opt/hostedtoolcache/node/24.13.-nilfunc --show-toplevel git /usr/bin/git node js/f�� /usr/bin/git (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha on' --ignore-path ../../../.pret.prettierignore (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha -c=4 -nolocalimports -importcfg /tmp/go-build3398378094/b001/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/cmd/gh-aw/main.go bash ode_�� (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha */*.json' '!../.remote.origin.url (http block)
  • https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha ../pkg/workflow/js/**/*.json' ---p (http block)
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha ath ../../../.pr**/*.json ache/node/24.13.--ignore-path de/node/bin/git ets.TOKEN }} git /usr/bin/infocmp"prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' ---buildmode=exe git _lab�� re infocmp de xterm-color git /home/REDACTED/worgraphql git (http block)
  • https://api.github.com/repos/docker/build-push-action/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha .js' --ignore-path .prettierignore (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha .js' --ignore-path .prettierigno-errorsas les x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha eecf1fea:docs/src/content/docs/reference/compilation-process.md node de/node/bin/git /tmp/TestHashConinfocmp git /opt/hostedtoolcxterm-color node js/f�� eecf1fea:pkg/parser/yaml_import.go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linu--package-lock-only r: $owner, name: $name) { hasDiscussionsEnabled } } /usr/bin/git /usr/lib/git-cor-C /usr/bin/git node (http block)
  • https://api.github.com/repos/docker/login-action/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha .js' --ignore-path .prettierignore (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha license-check.ymremote.origin.url /home/REDACTED/work/gh-aw/gh-aw/pk-ifaceassert x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha eecf1fea:docs/src/content/docs/reference/compilation-process.md node ode_modules/.bin/sh /tmp/TestHashCongit git /opt/hostedtoolc/home/REDACTED/work/gh-aw/gh-aw/.github/workflows node js/f�� on' --ignore-patremote.origin.url /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linu--package-lock-only ache/node/24.13.1/x64/bin/git /usr/bin/git bash /usr/bin/git node (http block)
  • https://api.github.com/repos/docker/metadata-action/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha .js' --ignore-path .prettierigno-errorsas (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha .js' --ignore-paremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha eecf1fea:docs/src/content/docs/reference/compilation-process.md .prop.prop.prop.prop.prop.prop.prop.prop.prop.prop.prop.prop.prop.prop.prop.pro es/.bin/sh /tmp/TestHashConinfocmp git /opt/hostedtoolcxterm-color node js/f�� on' --ignore-path ../../../.prettierignore /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linu--package-lock-only r: $owner, name: $name) { hasDiscussionsEnabled } } tags/v6 -buildtags /usr/bin/git node (http block)
  • https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha .js' --ignore-pa-f (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha .js' --ignore-path .prettierigno-errorsas (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha eecf1fea:docs/sr-f node 64/bin/git /tmp/TestHashCongit git r: $owner, name:/home/REDACTED/work/gh-aw/gh-aw/.github/workflows node js/f�� eecf1fea:pkg/parremote.origin.url /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linu--package-lock-only ode_modules/.bin/sh /usr/bin/git git /usr/bin/gh node (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env hub/workflows GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 e/git /usr/bin/git -bool -buildtags /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel -tests /usr/bin/git git (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 git /usr/bin/git --show-toplevel /tmp/go-build385rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 e/git /usr/bin/git -bool -buildtags /usr/bin/git git rev-�� --show-toplevel git 1/x64/bin/node --show-toplevel -tests /usr/bin/git git (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 2842173/b001/cli.test /usr/bin/git m0s git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git -instructions-tegit git /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go estl�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link /usr/bin/git /tmp/go-build385git -importcfg /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --get remote.origin.urrev-parse /usr/bin/git git (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 --package-lock-only /usr/bin/git m0s /opt/hostedtoolcrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git -instructions-tegit git /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 1/x64/bin/node /usr/bin/git bility_SameInputgit -test.v=true ache/node/24.13.--get git rev-�� 3724-35789/test-2571907056/.github/workflows git /usr/bin/git sistency_WithImpgh rev-parse /usr/bin/git git (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 git /usr/bin/git tags/v5 ache/node/24.13.-C /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -bool -buildtags /usr/bin/git git rev-�� 3724-35789/test-2571907056/.gith@{u} git /usr/bin/git --show-toplevel -tests /usr/bin/git git (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 git /usr/bin/git --show-toplevel /opt/hostedtoolc-C tartedAt,updated/tmp/gh-aw-test-runs/20260227-133933-41696/test-2118480863 git rev-�� --show-toplevel git /usr/lib/git-core/git --show-toplevel git /usr/bin/git /usr/lib/git-core/git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link /usr/bin/git )" -importcfg /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --get remote.origin.urrev-parse /usr/bin/git git (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 git /usr/bin/git --show-toplevel /opt/hostedtoolcreset /usr/bin/git git rev-�� --show-toplevel git /usr/bin/bash --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git bash (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 /tmp/go-build3857870245/b387/console.test 1/x64/bin/node -test.paniconexigit -test.v=true /usr/bin/git git t-ha�� ithub/workflows/agent-performance-analyzer.md git /usr/bin/git /tmp/compile-allgit config ache/node/24.13.--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE go env kvc2/mo6wxPys73zGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 570936/b402/impoGOPROXY (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
    • Triggering command: /tmp/go-build3366137517/b001/cli.test /tmp/go-build3366137517/b001/cli.test -test.paniconexit0 -test.short=true -test.count=1 -test.timeout=1m0s --show-toplevel bash /usr/bin/git PATH" om/owner/repo.gijs/fuzz_mentions_harness.cjs lone-290970091 git rev-�� --show-toplevel git /usr/bin/git --show-toplevel 7870245/b370/impjs/fuzz_sanitize_output_harness.cjs /usr/bin/git /usr/bin/git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb --jq .object.sha ../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettierignore (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb --jq .object.sha ath ../../../.pr**/*.json ache/node/24.13.--ignore-path ache/node/24.13.../../../.prettierignore ets.TOKEN }T test@example.com-c /usr/bin/git git er pad/debugging-action-pinning.md /usr/bin/git n-dir/git --get-regexp ^remote\..*\.gh-api /home/REDACTED/.cagraphql git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE s9ZXZGY/X4XoDkfiiEtxJ64HjgrP env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git 3365072600/.githnode GO111MODULE 64/bin/go git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel git 1/x64/bin/node --show-toplevel git /usr/bin/git git js --show-toplevel git /usr/bin/git /tmp/gh-aw-test-node config /usr/bin/git git (http block)
  • https://api.github.com/repos/githubnext/agentics/git/ref/tags/
    • Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha kflow/schema_validation.go git cal/bin/git --show-toplevel git /usr/bin/git git rev-�� js/**/*.json' --ignore-path ../../../.prettierignore 222183e78ce03f17eecf1fea ache/go/1.25.0/x64/bin/git --show-toplevel git /opt/hostedtoolcgraphql node (http block)
  • https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3662196712/.github/workflows GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git TH" GO111MODULE 64/bin/go git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel git 1/x64/bin/node --show-toplevel node /usr/bin/git git js --show-toplevel ROOT" ] && expo /usr/bin/git --show-toplevel docker /usr/bin/git git (http block)
  • https://api.github.com/repos/nonexistent/repo/actions/runs/12345
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE x_amd64/link env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE JE/ljgChBZHiD7WnPIlg48W/J-s6rDiVremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion --show-toplevel GOPROXY /usr/bin/gh git rev-�� 4268669919 gh ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile 4 -type d -nameinfocmp --json ache/node/24.13.xterm-color ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git 1/x64/bin/node bin 2>/dev/nullgit git /usr/bin/git basename (http block)
  • https://api.github.com/repos/owner/repo/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env 570936/b393/_pkgGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/loggenv GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env 570936/b394/_pkgGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/loggenv GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
  • https://api.github.com/repos/owner/repo/contents/file.md
    • Triggering command: /tmp/go-build3857870245/b381/cli.test /tmp/go-build3857870245/b381/cli.test -test.testlogfile=/tmp/go-build3857870245/b381/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env ck 'scripts/**/*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /tmp/go-build4022842173/b001/cli.test /tmp/go-build4022842173/b001/cli.test -test.paniconexit0 -test.timeout=10m0s -test.count=1 rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE x_amd64/compile git rev-�� --show-toplevel x_amd64/compile /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
    • Triggering command: /tmp/go-build3366137517/b001/cli.test /tmp/go-build3366137517/b001/cli.test -test.paniconexit0 -test.short=true -test.count=1 -test.timeout=1m0s --show-toplevel bash /usr/bin/git PATH" om/owner/repo.gijs/fuzz_mentions_harness.cjs lone-290970091 git rev-�� --show-toplevel git /usr/bin/git --show-toplevel 7870245/b370/impjs/fuzz_sanitize_output_harness.cjs /usr/bin/git /usr/bin/git (http block)
  • https://api.github.com/repos/test-owner/test-repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json 6cdd05265fe1a814GOMOD 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name xterm-color go 64/bin/node -json GO111MODULE 64/bin/go git 1/x6�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git 3725�� --show-toplevel git /opt/hostedtoolcache/node/24.13.1/x64/bin/node -m Update initial fjs/fuzz_sanitize_output_harness.cjs /usr/bin/git /opt/hostedtoolcache/node/24.13.1/x64/bin/node (http block)
  • https://api.github.com/repos/test/repo
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch --show-toplevel git /usr/bin/bash --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git bash /tmp�� /usr/bin/git git 1/x64/bin/node --show-toplevel git /usr/bin/git git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Original prompt

Ensure actions/checkout is using v6 version at least everywhere . Search docs, go, yml, ...


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title [WIP] Update actions/checkout to use v6 version Upgrade actions/checkout to v6 across the repo Feb 27, 2026
@pelikhan pelikhan marked this pull request as ready for review February 27, 2026 14:03
Copilot AI review requested due to automatic review settings February 27, 2026 14:03
@pelikhan pelikhan merged commit 336ea62 into main Feb 27, 2026
8 checks passed
@pelikhan pelikhan deleted the copilot/update-actions-checkout-to-v6 branch February 27, 2026 14:03
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades all references to actions/checkout from earlier versions (v4, v5) to v6.0.2 across the repository. The changes ensure consistent usage of the latest major version throughout documentation, source code, workflows, and lock files.

Changes:

  • Updated default checkout version in source code generators (pkg/cli/copilot_setup.go, pkg/parser/yaml_import.go)
  • Upgraded all GitHub Actions workflows to use actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
  • Regenerated 161 lock files with updated checkout references
  • Updated documentation examples and test assertions to reflect v6 as the canonical version
  • Added actions/checkout@v6 entry to actions-lock.json

Reviewed changes

Copilot reviewed 44 out of 44 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
pkg/cli/copilot_setup.go Updated default checkout action to v6 in template and instructions
pkg/parser/yaml_import.go Changed default checkout step to v6
pkg/cli/copilot_setup_test.go Updated test assertions to expect v6
pkg/workflow/.github/aw/actions-lock.json Added v6.0.2 entry with SHA pin
.github/workflows/*.yml Upgraded all workflow checkout steps to v6.0.2 with SHA
docs/** Updated all documentation examples to use v6
scratchpad/** Updated internal examples to reference v6
pkg/cli/workflows/*.lock.yml Regenerated lock files with v6 checkout
Comments suppressed due to low confidence (2)

pkg/workflow/test-yaml-import.lock.yml:1

  • The comment should match the format used elsewhere in the file. The previous version used a full SHA without the version comment (line 467 shows # 11bd71901bbe5b1630ceea73d27597364c9af683). For consistency, this should either be # de0fac2e4500dabe0009e67214ff5f5447ce83dd or the file's comment style should be updated uniformly.
    .github/workflows/hourly-ci-cleaner.md:53
  • This is a markdown source file (.md), but the checkout action includes the full SHA pin. Markdown source files typically use version tags without SHAs, as the SHA pinning happens during the compilation to .lock.yml files. Consider using actions/checkout@v6 here for readability.
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

# For more information: https://github.com/github/gh-aw/blob/main/.github/aw/github-agentic-workflows.md
# Not all edits will cause changes to this file.
#
# For more information: https://github.github.com/gh-aw/introduction/overview/
Copy link

Copilot AI Feb 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The URL appears malformed with double 'github' domains (github.github.com). This should likely be either github.com/github/gh-aw/... or use the proper GitHub Pages domain structure.

Suggested change
# For more information: https://github.github.com/gh-aw/introduction/overview/
# For more information: https://github.com/github/gh-aw/blob/main/docs/introduction/overview.md

Copilot uses AI. Check for mistakes.
This was referenced Feb 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants