# @latest tag in Github actions

**URL:** https://discourse.julialang.org/t/latest-tag-in-github-actions/125328
**Category:** Tooling
**Tags:** question, github-actions
**Created:** [January 29, 2025, 7:03am UTC](https://discourse.julialang.org/t/latest-tag-in-github-actions/125328 "2025-01-29T07:03:46Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Tamas\_Papp](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/tamas_papp/32/25949_2.png) [@Tamas\_Papp](https://discourse.julialang.org/u/Tamas_Papp)
#### Post date: [January 29, 2025, 7:03am UTC](https://discourse.julialang.org/t/latest-tag-in-github-actions/125328/1 "2025-01-29T07:03:46Z")

</div>

I just learned about the [`@latest`](https://github.com/marketplace/actions/latest-tag) tag in Github Actions, as in

```yaml
      - uses: julia-actions/setup-julia@latest

```

I am wondering if it would make sense to use this in my YML files for _all_ actions, eg `actions/checkout@latest`, etc.

Yes, I understand that theoretically this may break stuff. But updating these manually, even with Dependabot, is a chore.

What are your best practices?

---

<div class="post-metadata">

### Author: ![Tamas\_Papp](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/tamas_papp/32/25949_2.png) [@Tamas\_Papp](https://discourse.julialang.org/u/Tamas_Papp)
#### Post date: [January 29, 2025, 12:54pm UTC](https://discourse.julialang.org/t/latest-tag-in-github-actions/125328/2 "2025-01-29T12:54:45Z")

</div>

Poll:

_Poll ([view on site](https://discourse.julialang.org/t/latest-tag-in-github-actions/125328/2))_

---

<div class="post-metadata">

### Author: ![Wen-Wei\_Tseng](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/wen-wei_tseng/32/28839_2.png) [@Wen-Wei\_Tseng](https://discourse.julialang.org/u/Wen-Wei_Tseng)
#### Post date: [January 29, 2025, 1:18pm UTC](https://discourse.julialang.org/t/latest-tag-in-github-actions/125328/3 "2025-01-29T13:18:01Z")

</div>

I use [dependeabot](https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide) to create a pull request if there are updates. And [Kodiak](https://kodiakhq.com/) to auto-merge the PR if CI passed.

---

<div class="post-metadata">

### Author: ![Tamas\_Papp](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/tamas_papp/32/25949_2.png) [@Tamas\_Papp](https://discourse.julialang.org/u/Tamas_Papp)
#### Post date: [January 29, 2025, 1:30pm UTC](https://discourse.julialang.org/t/latest-tag-in-github-actions/125328/4 "2025-01-29T13:30:28Z")

</div>

I found [your configuration](https://github.com/sosiristseng/template-juliabook/blob/main/.github/.kodiak.toml), and since it narrows to `dependabot` it should be a solution.

OTOH I am a bit reluctant to weave a tangle of various bots (until `bot-that-writes-code-and-Tamas-goes-hiking` emerges).