Skip to content

Update actions/stale action to v10#19

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-stale-10.x
Open

Update actions/stale action to v10#19
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-stale-10.x

Conversation

@renovate
Copy link

@renovate renovate bot commented Sep 4, 2025

This PR contains the following updates:

Package Type Update Change
actions/stale action major v9v10

Release Notes

actions/stale (actions/stale)

v10

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Sep 4, 2025
@renovate renovate bot requested a review from a team as a code owner September 4, 2025 08:02
@renovate renovate bot force-pushed the renovate/actions-stale-10.x branch from c65551d to 80424aa Compare October 4, 2025 10:55
@renovate renovate bot force-pushed the renovate/actions-stale-10.x branch from 80424aa to 2e5bd7d Compare December 3, 2025 22:37
@renovate renovate bot force-pushed the renovate/actions-stale-10.x branch 2 times, most recently from 618e8c9 to 98e4b74 Compare January 22, 2026 18:18
@renovate renovate bot force-pushed the renovate/actions-stale-10.x branch from 98e4b74 to dd0d1c5 Compare February 19, 2026 03:29
Comment on lines 10 to 16
stale:
runs-on: ubuntu-latest
steps:
- uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
- uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
with:
operations-per-run: 200
delete-branch: true
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: The stale workflow enables delete-branch: true but lacks the necessary permissions: contents: write, which will cause branch deletion to fail under modern repository security settings.
Severity: MEDIUM

Suggested Fix

Add a permissions: block to the job in .github/workflows/stale.yml to explicitly grant contents: write permission, ensuring the action can delete branches as intended.

Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: .github/workflows/stale.yml#L10-L16

Potential issue: The `stale.yml` workflow uses `actions/stale@v10` with the
`delete-branch: true` option. This option requires `contents: write` permission, but the
workflow file does not define a `permissions:` block to grant it. If the repository's
default workflow permissions are set to be restrictive (read-only), the action will
silently fail to delete branches when closing stale pull requests. This will cause
unused branches to accumulate in the repository, even though the rest of the action
(like closing the PR) will succeed.

Did we get this right? 👍 / 👎 to inform future reviews.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants