@latest tag in Github actions

Tooling
,
1

I just learned about the @latest tag in Github Actions, as in

      - uses: julia-actions/setup-julia@latest

I am wondering if it would make sense to use this in my YML files for all actions, eg actions/checkout@latest, etc.

Yes, I understand that theoretically this may break stuff. But updating these manually, even with Dependabot, is a chore.

What are your best practices?

1 Like
2

Poll:

  • first I ever heard of @latest
  • I am using @latest in my actions
  • I am aware of it but I am not using it because I like to do manual updates
  • I am not using it because I have serious concerns (specify in comment)
0 voters
3

I use dependeabot to create a pull request if there are updates. And Kodiak to auto-merge the PR if CI passed.

1 Like
4

I found your configuration, and since it narrows to dependabot it should be a solution.

OTOH I am a bit reluctant to weave a tangle of various bots (until bot-that-writes-code-and-Tamas-goes-hiking emerges).

2 Likes