Fix stale version comments on pinned action SHAs in workflow files#126468
Merged
akoeplinger merged 2 commits intomainfrom Apr 2, 2026
Merged
Fix stale version comments on pinned action SHAs in workflow files#126468akoeplinger merged 2 commits intomainfrom
akoeplinger merged 2 commits intomainfrom
Conversation
Agent-Logs-Url: https://github.com/dotnet/runtime/sessions/65e41402-4c51-4673-88d1-c69c130b89b9 Co-authored-by: akoeplinger <1376924+akoeplinger@users.noreply.github.com>
Agent-Logs-Url: https://github.com/dotnet/runtime/sessions/6701fd6d-61b1-4ba4-999c-feb093e30f09 Co-authored-by: akoeplinger <1376924+akoeplinger@users.noreply.github.com>
Copilot created this pull request from a session on behalf of
akoeplinger
April 2, 2026 12:47
View session
akoeplinger
approved these changes
Apr 2, 2026
Contributor
There was a problem hiding this comment.
Pull request overview
Updates inline version comments for pinned GitHub Action SHAs in workflow files so the human-readable tag annotations match the resolved upstream tags.
Changes:
- Correct
dotnet/issue-labeler/*@46125e8...inline comments fromv2.0.0tov2.0.0-releaseacross the labeler workflows. - Correct
github/gh-aw-actions/setup@536ea1b...inline comments fromv0.63.0tov0.65.4incopilot-echo.lock.yml.
Reviewed changes
Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/labeler-train.yml | Updates dotnet/issue-labeler action version comments to v2.0.0-release. |
| .github/workflows/labeler-promote.yml | Updates dotnet/issue-labeler action version comments to v2.0.0-release. |
| .github/workflows/labeler-predict-pulls.yml | Updates dotnet/issue-labeler action version comments to v2.0.0-release. |
| .github/workflows/labeler-predict-issues.yml | Updates dotnet/issue-labeler action version comments to v2.0.0-release. |
| .github/workflows/labeler-cache-retention.yml | Updates dotnet/issue-labeler action version comments to v2.0.0-release. |
| .github/workflows/copilot-echo.lock.yml | Updates github/gh-aw-actions/setup action version comments to v0.65.4. |
steveisok
approved these changes
Apr 2, 2026
This was referenced Apr 2, 2026
radekdoulik
pushed a commit
to radekdoulik/runtime
that referenced
this pull request
Apr 9, 2026
…otnet#126468) Dependabot updates pinned SHA refs but doesn't correct the inline version comment when it was already wrong. Audited all `.github/workflows/*.yml` files by resolving each pinned SHA against its upstream tags. Two mismatches found and fixed: - **`copilot-echo.lock.yml`** (5 occurrences): `github/gh-aw-actions/setup@536ea1b...` commented as `# v0.63.0`, actual tag is `v0.65.4` - **`labeler-*.yml`** (13 occurrences across 5 files): `dotnet/issue-labeler/*@46125e8...` commented as `# v2.0.0`, actual tag is `v2.0.0-release` --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: akoeplinger <1376924+akoeplinger@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependabot updates pinned SHA refs but doesn't correct the inline version comment when it was already wrong. Audited all
.github/workflows/*.ymlfiles by resolving each pinned SHA against its upstream tags.Two mismatches found and fixed:
copilot-echo.lock.yml(5 occurrences):github/gh-aw-actions/setup@536ea1b...commented as# v0.63.0, actual tag isv0.65.4labeler-*.yml(13 occurrences across 5 files):dotnet/issue-labeler/*@46125e8...commented as# v2.0.0, actual tag isv2.0.0-release