What the developer wrote
Authored by Woolfgm
Update ci.yml
What changed, and why it matters
This commit simply bumps the GitHub Actions 'checkout' step from version 5 to version 6 in the project's continuous integration (CI) workflow file. It does not change any Bitcoin Core source code, consensus rules, wallet logic, or network behavior. There is no indication of a security fix or vulnerability.
No security action required. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates five occurrences of ‘actions/checkout@v5’ to ‘actions/checkout@v6’ in .github/workflows/ci.yml. This is a routine dependency/version maintenance change in CI configuration. No functional code is modified, and no security-relevant behavior is described in the commit message or diff.
Changed components
.github/workflows/ci.ymlInspect captured patch +5 / −5
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f5dc7721..d7caad9a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -66,7 +66,7 @@ jobs:
- name: Determine fetch depth
run: echo "FETCH_DEPTH=$((${{ github.event.pull_request.commits }} + 2))" >> "$GITHUB_ENV"
- *ANNOTATION_PR_NUMBER
- - uses: actions/checkout@v5
+ - uses: actions/checkout@v6
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: ${{ env.FETCH_DEPTH }}
@@ -148,7 +148,7 @@ jobs:
- &CHECKOUT
name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@v6
with:
# Ensure the latest merged pull request state is used, even on re-runs.
ref: &CHECKOUT_REF_TMPL ${{ github.event_name == 'pull_request' && github.ref || '' }}
@@ -383,7 +383,7 @@ jobs:
- *ANNOTATION_PR_NUMBER
- name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@v6
with:
ref: ${{ needs.record-frozen-commit.outputs.commit }}
@@ -439,7 +439,7 @@ jobs:
- *ANNOTATION_PR_NUMBER
- name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@v6
with:
ref: ${{ needs.record-frozen-commit.outputs.commit }}
@@ -657,7 +657,7 @@ jobs:
- *ANNOTATION_PR_NUMBER
- name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@v6
with:
ref: *CHECKOUT_REF_TMPL
fetch-depth: 0
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.