Skip to content

fix(ci): upgrade actions/checkout from v2 to v6.0.2 with SHA pinning#172

Merged
s2x merged 2 commits intomasterfrom
fix/upgrade-actions-checkout-v6
Apr 30, 2026
Merged

fix(ci): upgrade actions/checkout from v2 to v6.0.2 with SHA pinning#172
s2x merged 2 commits intomasterfrom
fix/upgrade-actions-checkout-v6

Conversation

@s2x
Copy link
Copy Markdown
Collaborator

@s2x s2x commented Apr 30, 2026

Summary

  • Upgrade actions/checkout from deprecated v2 to latest v6.0.2
  • Use SHA pinning for supply chain security
  • Align tests.yaml with release.yaml pinning strategy

Changes

  • tests.yaml: v2 → v6.0.2 (lines 12, 82)
  • release.yaml: v4.2.2 → v6.0.2 (line 17)

Security Impact

  • Eliminates use of deprecated action running on EOL Node.js 12 runtime
  • SHA pinning prevents supply chain attacks (immutable reference)
  • Consistent with security best practices

Fixes #148

Piotr Hałas added 2 commits April 30, 2026 21:12
- Update tests.yaml: v2 -> v6.0.2 (lines 12, 82)
- Update release.yaml: v4.2.2 -> v6.0.2 (line 17)
- Use SHA pinning for supply chain security

Fixes #148
DateInterval::createFromDateString() throws DateMalformedIntervalStringException
on invalid input since PHP 8.2, so the try-catch block already handles errors.

The assert() calls were redundant and caused PHPStan errors:
- Call to function assert() with true will always evaluate to true
- Instanceof between DateInterval and DateInterval will always evaluate to true
@s2x s2x merged commit 4dadabf into master Apr 30, 2026
22 checks passed
@s2x s2x deleted the fix/upgrade-actions-checkout-v6 branch April 30, 2026 19:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CI: Upgrade actions/checkout from v2 to v4 in tests workflow

1 participant