Skip to content

Bump actions/checkout from 4 to 5#1

Closed
dependabot[bot] wants to merge 43 commits into
mainfrom
dependabot/github_actions/actions/checkout-5
Closed

Bump actions/checkout from 4 to 5#1
dependabot[bot] wants to merge 43 commits into
mainfrom
dependabot/github_actions/actions/checkout-5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Aug 20, 2025

Bumps actions/checkout from 4 to 5.

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

edavey added 30 commits August 14, 2025 16:47
With ESLint and Stylelint

We:

- add the "standard" and "prettier" plugins for ESLint

- convert Whitehall's `.eslintrc.js` to the new
  `eslint.config.js` format

Run `yarn install` and then `yarn run lint`
Mainly headings for content to be supplied later.
We add a lint.rake task which is called from our default
`Rakefile`. This task runs:

- `rubocop` linting on Ruby files
- `erb_lint` on ERB templates
- JS and SCSS linting via our `yarn run lint` script

We'll add a `test` task to this default `rake` task next
-- to run our Minitest files.
Recreate a number of elements from Whitehall to demonstrate
that layout, publishing-components and asset handling is
working:

- sass processing with dart
- sprockets to compile JS
- "design system" layout
- header partial
- navigation and sub navigation (with sub_navigation component)
- 'domain-config.js' to define `GOVUK` global var
- asset config in `environments/development.rb`
Now that the asset pipeline is configured properly the
default rake task's first dependant task (`lint`) runs
without error and we can add the `test` dependency.

i.e. now when we run `rake`:

- all files are linted
- all tests are run
These gems are all used by the existing Content Block
Manager code being ported over from Whitehall.

General:

- babosa: slug creation
- content_block_tools: shared library for presenting the content blocks authored here
- friendly_id: permalinks
- kaminari: pagination
- record_tag_helper: adds html container wrapping to ActionView
- transitions: state machine
- view_component

Error handling / debugging in development:

- better_errors
- binding_of_caller

General testing:

- database_cleaner-active_record
- factory_bot
- mocha
- webmock

Cucumber testing:

- capybara
- capybara-playwright-driver
- cucumber
- cucumber-rails
- launchy
This commit sets up cucumber testing and brings in a single
"feature" initially "Create 'Contact' object". This is
probably the most complex test we have so will allow us to
drive out the maximum amount of complexity in a single
"outside -> in" process. By this we mean running the highest
level test and then filling in lower level tests and
implementation.
Now that these classes have been extracted from their
previous home within an "engine" in Whitehall, they no
longer need to live in the `ContentBlockManager::ContentBlock`
namespace.

We can refactor that later on to make the code less verbose
and more readable.
- users (User)
- organisations (Organisation)
- content_block_documents (Document)
- content_block_editions (Edition)

We also seed an initial user record, as is done in
Whitehall.
This is needed for our JS cucumber tests
For permalinks, I believe...
1. include RecordTagHelper, used to create wrapper elements
   in markup

2. copy over the `get_content_id(edition)` method used in
   layout template
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 20, 2025
@edavey edavey force-pushed the main branch 3 times, most recently from c687e24 to 94d3b2f Compare August 21, 2025 14:57
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Aug 28, 2025

Looks like actions/checkout is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 28, 2025
@dependabot dependabot Bot deleted the dependabot/github_actions/actions/checkout-5 branch August 28, 2025 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant