ci: Update `actions/checkout` version
What changed, and why it matters
This commit simply bumps the version of a third-party GitHub Action used to check out source code during automated testing, from v4 to v5. There is no indication of a security vulnerability being fixed or introduced. It is a routine maintenance update to the project's continuous integration configuration.
No security action required. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change updates all occurrences of actions/checkout@v4 to actions/checkout@v5 in .github/workflows/ci.yml. This is a dependency version bump for the GitHub Actions checkout action used in CI pipelines. No functional code, consensus logic, cryptography, networking, or wallet handling is modified. No security advisory, CVE, or vulnerability description is present in the commit or supplied references.
Changed components
.github/workflows/ci.ymlInspect captured patch +6 / −6
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d2526abd..df4e02e7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,7 +38,7 @@ jobs:
steps:
- name: Determine fetch depth
run: echo "FETCH_DEPTH=$((${{ github.event.pull_request.commits }} + 2))" >> "$GITHUB_ENV"
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: ${{ env.FETCH_DEPTH }}
@@ -116,7 +116,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@v5
- name: Clang version
run: |
@@ -183,7 +183,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@v5
- name: Configure Developer Command Prompt for Microsoft Visual C++
# Using microsoft/setup-msbuild is not enough.
@@ -293,7 +293,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@v5
- name: Set CI directories
run: |
@@ -347,7 +347,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@v5
- name: Download built executables
uses: actions/download-artifact@v4
@@ -416,7 +416,7 @@ jobs:
DANGER_CI_ON_HOST_FOLDERS: 1
steps:
- name: Checkout
- uses: actions/checkout@v4
+ uses: actions/checkout@v5
- name: Set CI directories
run: |
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.