Skip to content

Dependabot/GitHub actions/actions/checkout 5#41262

Closed
sbasiramiri-blip wants to merge 3 commits intogithub:mainfrom
sbasiramiri-blip:dependabot/github_actions/actions/checkout-5
Closed

Dependabot/GitHub actions/actions/checkout 5#41262
sbasiramiri-blip wants to merge 3 commits intogithub:mainfrom
sbasiramiri-blip:dependabot/github_actions/actions/checkout-5

Conversation

@sbasiramiri-blip
Copy link

@sbasiramiri-blip sbasiramiri-blip commented Nov 15, 2025 •
edited
Loading

Why:

Closes:

What's being changed (if available, include any code snippets, screenshots, or gifs):

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

sbasiramiri-blip and others added 3 commits November 5, 2025 21:55
@sbasiramiri-blip
Create SECURITY.md for security policy
adc04ad 
Added a security policy document outlining supported versions and vulnerability reporting.
@sbasiramiri-blip
Add GitHub Actions workflow for Next.js deployment
773b257
@dependabot
Bump actions/checkout from 4 to 5
0bec704 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@welcome
Copy link

welcome bot commented Nov 15, 2025

Thanks for opening this pull request! A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 15, 2025

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

This pull request contains code changes, so we will not generate a table of review links.

🤖 This comment is automatically generated.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 15, 2025

👋 Hey there spelunker. It looks like you've modified some files that we can't accept as contributions:

  • .github/workflows/nextjs.yml

You'll need to revert all of the files you changed that match that list using GitHub Desktop or git checkout origin/main <file name>. Once you get those files reverted, we can continue with the review process. :octocat:

The complete list of files we can't accept are:

  • .devcontainer/**
  • .github/**
  • data/reusables/rai/**
  • Dockerfile*
  • src/**
  • package*.json
  • content/actions/how-tos/security-for-github-actions/security-hardening-your-deployments/**

We also can't accept contributions to files in the content directory with frontmatter type: rai or contentType: rai.

@github-actions github-actions bot added the triage Do not begin working on this issue until triaged by the team label Nov 15, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/actions/checkout-5 branch November 25, 2025 14:10
@github-actions
Copy link
Contributor

github-actions bot commented Dec 30, 2025

A stale label has been added to this pull request because it has been open 30 days with no activity. If you think this pull request should remain open, please add a new comment.

@github-actions github-actions bot added the Inactive Will be closed automatically by a stall check if no activity is detected. label Dec 30, 2025
@Sharra-writes Sharra-writes added the invalid This issue/PR is invalid label Jan 9, 2026
@github-actions github-actions bot closed this Jan 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Inactive Will be closed automatically by a stall check if no activity is detected. invalid This issue/PR is invalid triage Do not begin working on this issue until triaged by the team

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sbasiramiri-blip @Sharra-writes