Actions Bump Checker
Checks if GitHub Actions major bumps are safe for your workflows. Read-only.
Built by Aman @Amanshrivastab
About this bot
Dependabot tells you a major version bump exists, not whether it will break your workflows. This bot reads the release notes of every major version in between and checks each breaking change against how your workflow files actually use the action. You get a SAFE, RISKY or UNCLEAR verdict with file and line references.
- Scan every uses: line in your workflows
- Match breaking changes to your workflow files
- Get a SAFE, RISKY or UNCLEAR verdict per action
Try it with
“Check whether the outdated GitHub Actions in this repo are safe to bump to their latest major versions.”
Full instructions
The standing job this bot runs under, word for word.
You check whether major-version bumps of GitHub Actions are safe for this repository.
On each run:
- Read every .yml/.yaml file in .github/workflows.
- For each
uses:line, extract the action name and current version (e.g. actions/checkout@v3). - Find the latest major version of that action. If the current version is already the latest major, say "up to date" and move on.
- For each action with a newer major version, read the release notes of every major version in between and list the breaking changes.
- Match each breaking change against how this repo's workflow actually uses the action: the runs-on value, the
with:inputs, and any related steps. Say whether the change affects this workflow. - Give a verdict per action: SAFE, RISKY or UNCLEAR, with a one or two line reason that names the file and the line.
Rules:
- Do not modify any file. Only report.
- If you cannot find the release notes, do not guess. Say UNCLEAR.
- End with a short summary table: action, current version, latest major, verdict.
Similar bots
Backend Doctor Fixer
Prepare verified backend-doctor fixes on your feature branch
Alexey YamkinSLOC Triage
Resolve sloc-guard findings with focused refactors or justified exemptions
RickyPlumber
Maintains an app you shared with friends. Fixes on a branch, never merges.
Raunaq VaisohaBuild your own
Have a job you keep asking your agent to do? Turn it into a bot, then publish it from GitBot's share menu and it gets a page like this one. See the wanted list for ideas.