Bump actions/checkout off the deprecated v4 in @danielridgebot's workflows
まだ誰も着手していません。
評価
- 難易度
- 2/5
- 見積もり時間
- 1〜3時間
- 初心者へのやさしさ
- 88/100
調査の方向性
hackforla/check-ghpages-versions で、.github/workflows/check-gh-pages-version.yml、check-ruby-version.yml、keepalive.yml、test-issue-labels.yml を確認します。それぞれの uses: actions/checkout エントリを見つけ、要求された4つのバージョンだけを更新してから、workflow_dispatch で keepalive.yml を実行します。checkout が Node 20 のアノテーションなしで成功すれば完了です。マージ後に、スケジュールされたバージョンチェックの実行を確認する必要があります。
索引モデルが issue の本文から書いたものです。
説明
Overview
We need to bump actions/checkout from v4 to v5 in all four of @danielridgebot's workflows, because v4 targets Node.js 20 and GitHub is force-running it on Node 24 on every run — when that fallback is withdrawn the workflows break, and this bot's failure mode is silence rather than an alert.
Action Items
The bot's code lives in hackforla/check-ghpages-versions — the org repo, not a personal account (the danielridgebot/check-ghpages-versions URL still resolves, but only as a redirect). The fix is one line per file, delivered as a PR on that repo.
- Bump
actions/checkout@v4toactions/checkout@v5in all four workflows:check-gh-pages-version.yml:13,check-ruby-version.yml:13,keepalive.yml:16,test-issue-labels.yml:11. Line numbers were accurate 2026-08-24 and may drift — find them by theuses: actions/checkoutline. - Leave
actions/github-script@v8alone (line 44 of both check workflows). It already runs on Node 24 and produces no annotation. - Do not go past v5 in this pass, even though v7 is current. v5 is the pure Node 24 bump with no behaviour change. v6 moved the persisted git credential into a separate file, and three of these four workflows depend on that credential to
git pusha commit back to the repo. v7 additionally blocks fork checkouts forpull_request_target/workflow_run. Both are probably fine here, but neither is a one-line change any more — going current is a separate ticket that needs a real push test. - Run
keepalive.ymlon the branch viaworkflow_dispatchand confirm the checkout step succeeds with no Node 20 annotation. It is safe to run at any time: it prints the repo's idle age and exits 0 without committing unless the repo has been idle 50 or more days. - After the PR merges, confirm a scheduled run of
check-gh-pages-version.ymlorcheck-ruby-version.ymlcompletes with no "Node.js 20 is deprecated" annotation. Both run daily (12:00 and 12:15 UTC), so this is a next-day check — it cannot be observed from the branch, because the annotation only appears on the runs that actually do the version check.
Resources/Instructions
- Bot repo: https://github.com/hackforla/check-ghpages-versions — workflows are in
.github/workflows/. - Example of the annotation: https://github.com/hackforla/check-ghpages-versions/actions/runs/32782593141 (
check-ruby-version, 2026-08-24) — "Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4". - Release notes, for the version reasoning above: v5.0.0 (Node 24; requires runner v2.327.1+, which GitHub-hosted runners are well past), v6.0.0, v7.0.0.
- A full end-to-end test exists but has side effects and is not needed for this change: setting
release-versions/github-pages-gem.txtto an older value and dispatchingcheck-gh-pages-version.ymlexercises thegit pushpath, but it also opens a real issue on hackforla/devops with a board card, which then has to be closed and the card deleted. - Related: #180 (re-enabled the bot's disabled workflow and added the keepalive).
- 主要言語
- PowerShell
- スター
- 8
- フォーク
- 10
- 平均マージ
- 7時間 30分
- マージ済み PR(30日)
- 22
コントリビューションガイド
はじめの一歩
- issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
- 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
- リポジトリをフォークし、ブランチを切って変更します。
- issue 番号を参照したプルリクエストを送ります。
hackforla/devops のほかの issue
-
Fix CONTRIBUTING.md's "Getting write access" section - it contradicts the fork bot and the wiki オープンcomplexity: small feature: Onboarding good first issue role: DevOps Engineer size: 1pt
難易度 2/5 1〜3時間 初心者へのやさしさ 84/100
-
complexity: small feature: maintenance role: DevOps Engineer size: 1pt
難易度 3/5 1〜2日 初心者へのやさしさ 58/100
-
complexity: medium feature: security role: DevOps Engineer size: 3pt
難易度 4/5 3〜5日 初心者へのやさしさ 48/100
-
Migrate the Terraform S3 backends off dynamodb_table onto use_lockfile and delete the lock tables オープンcomplexity: medium feature: maintenance role: DevOps Engineer size: 2pt
難易度 5/5 1週間以上 初心者へのやさしさ 45/100
-
complexity: large epic feature: project terraform setup role: DevOps Engineer size: 13+pt
難易度 5/5 1週間以上 初心者へのやさしさ 30/100
hackforla/devops の issue をすべて見る
似ている issue
-
難易度 1/5 1時間未満 初心者へのやさしさ 80/100
-
難易度 2/5 1〜3時間 初心者へのやさしさ 70/100
-
oblt-aw/detector/security
難易度 2/5 1〜3時間 初心者へのやさしさ 65/100
-
難易度 2/5 1〜3時間 初心者へのやさしさ 75/100
trailofbits/skills#330 ·
-
Bug kind/engineering pulumi/pulumi-external Workflow Failure
難易度 2/5 1〜3時間 初心者へのやさしさ 65/100
pulumi/pulumi-external#733 ·