GitHub Actions Version Updater

Update GitHub Actions in workflow files to their latest released versions. Replaces Dependabot's package-ecosystem: "github-actions".

Step 1: Check for updates

Run the bundled script to parse all uses: lines and query each action's latest release:

uv run actions-updater/scripts/check_updates.py            # scans .github/workflows/
uv run actions-updater/scripts/check_updates.py path.yaml  # specific file(s)

The script parses workflow YAML, recursively extracts all uses: owner/repo@version entries (handles composite actions and matrix jobs), queries gh release view --repo owner/repo for each, and prints a comparison table. Skips local actions (./...) and Docker actions (docker://...). Requires authenticated gh CLI — unauthenticated calls hit a 60 req/hr GitHub limit and the script will fail noisily on rate-limited repos.

Step 2: Update workflow files

For each action with an available update, edit the workflow file. Pin policy, in priority order: