Skip to content

Bump the github-actions-updates group with 2 updates - #3843

Merged
devinbinnie merged 1 commit into
masterfrom
dependabot/github_actions/github-actions-updates-0fe49caf5c
Jun 8, 2026
Merged

Bump the github-actions-updates group with 2 updates#3843
devinbinnie merged 1 commit into
masterfrom
dependabot/github_actions/github-actions-updates-0fe49caf5c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-updates group with 2 updates: actions/checkout and anthropics/claude-code-action.

Updates actions/checkout from 6.0.2 to 6.0.3

Release notes

Sourced from actions/checkout's releases.

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

... (truncated)

Commits

Updates anthropics/claude-code-action from 1.0.133 to 1.0.140

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.140

Full Changelog: anthropics/claude-code-action@v1...v1.0.140

v1.0.139

Full Changelog: anthropics/claude-code-action@v1...v1.0.139

v1.0.138

Full Changelog: anthropics/claude-code-action@v1...v1.0.138

v1.0.137

Full Changelog: anthropics/claude-code-action@v1...v1.0.137

v1.0.136

Full Changelog: anthropics/claude-code-action@v1...v1.0.136

v1.0.135

Full Changelog: anthropics/claude-code-action@v1...v1.0.135

v1.0.134

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1...v1.0.134

Commits
  • fbda2eb chore: bump Claude Code to 2.1.168 and Agent SDK to 0.3.168
  • 64de744 chore: bump Claude Code to 2.1.167 and Agent SDK to 0.3.167
  • 4101658 chore: bump Claude Code to 2.1.166 and Agent SDK to 0.3.166
  • 41ea764 chore: bump Claude Code to 2.1.165 and Agent SDK to 0.3.165
  • 0b1b620 chore: bump Claude Code to 2.1.163 and Agent SDK to 0.3.163
  • 70a6e52 chore: bump Claude Code to 2.1.162 and Agent SDK to 0.3.162
  • 36a69b6 chore: bump Claude Code to 2.1.161 and Agent SDK to 0.3.161
  • bfad70d ci: bump checkout and setup-bun in test workflows to Node 24 releases (#1379)
  • dc081a3 chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) (#1377)
  • 420335d Add workload identity federation support to base-action (#1378)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

A detailed high-level summary could not be generated for this review. Here is an overview derived from the analyzed file changes:

  • .github/workflows/build-for-pr.yml: ## AI-generated summary of changes
  • .github/workflows/ci.yaml: ## AI-generated summary of changes
  • .github/workflows/codeql-analysis.yml: ## AI-generated summary of changes
  • .github/workflows/compatibility-matrix-testing.yml: ## AI-generated summary of changes
  • .github/workflows/docs-impact-review.yml: ## AI-generated summary of changes
  • .github/workflows/e2e-functional-template.yml: ## AI-generated summary of changes
  • .github/workflows/e2e-functional.yml: ## AI-generated summary of changes
  • .github/workflows/e2e-label-cleanup.yml: ## AI-generated summary of changes
  • .github/workflows/nightly-builds.yaml: ## AI-generated summary of changes
  • .github/workflows/nightly-main.yml: ## AI-generated summary of changes
  • .github/workflows/nightly-rainforest.yml: ## AI-generated summary of changes
  • .github/workflows/release-mas.yaml: ## AI-generated summary of changes
  • .github/workflows/release.yaml: ## AI-generated summary of changes
  • .github/workflows/run-release-script.yml: ## AI-generated summary of changes
  • .github/workflows/scorecards-analysis.yml: ## AI-generated summary of changes
  • .github/workflows/update-latest-version.yml: ## AI-generated summary of changes

Bumps the github-actions-updates group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action).


Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...df4cb1c)

Updates `anthropics/claude-code-action` from 1.0.133 to 1.0.140
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@787c5a0...fbda2eb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-updates
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.140
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 8, 2026
@mm-cloud-bot

Copy link
Copy Markdown

@dependabot[bot]: Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Details

I understand the commands that are listed here

2 similar comments
@mm-cloud-bot

Copy link
Copy Markdown

@dependabot[bot]: Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Details

I understand the commands that are listed here

@mm-cloud-bot

Copy link
Copy Markdown

@dependabot[bot]: Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Details

I understand the commands that are listed here

@mattermost-build

Copy link
Copy Markdown
Contributor

Hello @dependabot[bot],

Thanks for your pull request! A Core Committer will review your pull request soon. For code contributions, you can learn more about the review process here.

@github-actions github-actions Bot added E2E/Run Run Desktop E2E Tests and removed E2E/Run Run Desktop E2E Tests labels Jun 8, 2026
@devinbinnie

Copy link
Copy Markdown
Member

@coderabbitai review

@devinbinnie
devinbinnie enabled auto-merge (squash) June 8, 2026 12:55
@coderabbitai

coderabbitai Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai

coderabbitai Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 401d31f2-3adf-4739-baa9-c0b11f2cf95f

📥 Commits

Reviewing files that changed from the base of the PR and between 1a4d3d9 and 1244b9a.

📒 Files selected for processing (16)
  • .github/workflows/build-for-pr.yml
  • .github/workflows/ci.yaml
  • .github/workflows/codeql-analysis.yml
  • .github/workflows/compatibility-matrix-testing.yml
  • .github/workflows/docs-impact-review.yml
  • .github/workflows/e2e-functional-template.yml
  • .github/workflows/e2e-functional.yml
  • .github/workflows/e2e-label-cleanup.yml
  • .github/workflows/nightly-builds.yaml
  • .github/workflows/nightly-main.yml
  • .github/workflows/nightly-rainforest.yml
  • .github/workflows/release-mas.yaml
  • .github/workflows/release.yaml
  • .github/workflows/run-release-script.yml
  • .github/workflows/scorecards-analysis.yml
  • .github/workflows/update-latest-version.yml

📝 Walkthrough

Walkthrough

This PR updates the actions/checkout GitHub Action from v6.0.2 to v6.0.3 by updating the pinned commit SHA across 14 workflow files. Additionally, one workflow file receives a secondary update to anthropics/claude-code-action from v1.0.133 to v1.0.140.

Changes

GitHub Actions dependency updates

Layer / File(s) Summary
Update actions/checkout to v6.0.3 and anthropics/claude-code-action to v1.0.140
.github/workflows/build-for-pr.yml, .github/workflows/ci.yaml, .github/workflows/codeql-analysis.yml, .github/workflows/compatibility-matrix-testing.yml, .github/workflows/docs-impact-review.yml, .github/workflows/e2e-functional-template.yml, .github/workflows/e2e-functional.yml, .github/workflows/e2e-label-cleanup.yml, .github/workflows/nightly-builds.yaml, .github/workflows/nightly-main.yml, .github/workflows/nightly-rainforest.yml, .github/workflows/release-mas.yaml, .github/workflows/release.yaml, .github/workflows/run-release-script.yml, .github/workflows/scorecards-analysis.yml, .github/workflows/update-latest-version.yml
The pinned commit SHA for actions/checkout is updated to v6.0.3 across all 14 workflow files that use it. In .github/workflows/docs-impact-review.yml, the anthropics/claude-code-action is also bumped to v1.0.140. All other workflow logic and step configurations remain unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

  • mattermost/desktop#3762: Updates anthropics/claude-code-action to a newer version in the documentation impact analysis step, overlapping with the secondary change in this PR's docs-impact-review.yml file.
  • mattermost/desktop#3823: Also modifies .github/workflows/docs-impact-review.yml to bump GitHub Actions references.
  • mattermost/desktop#3809: Changes .github/workflows/docs-impact-review.yml by bumping action pins in the same workflow file.

Suggested reviewers

  • devinbinnie
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: a Dependabot update bumping GitHub Actions in the github-actions-updates group, which aligns with the comprehensive workflow file updates across 16+ workflow files.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/github_actions/github-actions-updates-0fe49caf5c

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@devinbinnie
devinbinnie merged commit 723f67e into master Jun 8, 2026
56 of 62 checks passed
@devinbinnie
devinbinnie deleted the dependabot/github_actions/github-actions-updates-0fe49caf5c branch June 8, 2026 12:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Contributor dependencies Pull requests that update a dependency file do-not-merge/release-note-label-needed github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants