Bump actions/checkout to v7 and hadolint-action to v3.5.0 - #202
Merged
Conversation
DL3064 flags placeholder ENV secrets never baked into the image, DL3025 flags HEALTHCHECK's intentional shell-form var substitution, and DL3066 is an info-level UID style note out of scope here.
xeol-action@v1.1.1 pins xeol CLI v0.9.13, whose default max-allowed DB age is 5 days; v0.10.8 raised that default to 90 days, matching the EOL feed's actual publish cadence.
labkey-jony
approved these changes
Sep 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rationale
actions/checkout was pinned to v3/v4 and hadolint-action to v3.1.0 across the workflows in this repo; bump both to their current latest release so CI stays on a supported, non-deprecated action version. The version bumps surfaced two side issues in CI, fixed here as well: a newer hadolint binary and a newer xeol CLI default.
Related Pull Requests
Changes