Bump step-security/changed-files to v47

[kevalmorabia97]

What does this PR do?

Type of change: CI/CD maintenance

Last of the Node 20 actions: step-security/changed-files v46.0.5 → v47.0.5, in _pr_gate.yml, example_tests.yml and unit_tests.yml.

Deliberately separate from #2102. Every gate in the repo runs through this action, and the example lanes depend on its files_yaml per-group outputs plus any_modified semantics. v47 has no release notes describing output behavior, and the upstream v47 notes are dependency bumps only — so this is the one bump I could not clear from a changelog. On its own, any gating regression is unambiguous.

What I did verify at v47.0.5:

• micromatch is still ^4.0.5 — the matcher the lane patterns were validated against
• files, files_ignore, files_yaml, files_ignore_yaml are all still inputs
• any_modified, any_changed, changed_keys are all still documented outputs

Testing

Static checks above. The behavior that matters cannot be proven from this PR: it changes workflow files, which are in the common group, so every lane runs regardless of whether gating still works. I plan to confirm with a throwaway probe PR against this branch — a docs-only change must run nothing, and a single-example change must run exactly one lane — the same method that caught the two ignore bugs fixed in #2101.

Before your PR is "Ready for review"

• Is this change backward compatible?: ✅
• If you copied code from any other sources or added a new PIP dependency, did you follow guidance in CONTRIBUTING.md: N/A
• Did you write any new necessary tests?: N/A — CI configuration
• Did you update Changelog?: N/A
• Did you get Claude approval on this PR?: ❌ — not yet run

Summary by CodeRabbit

• Chores
  • Updated pull-request file-change checks to use the latest available file-detection action.
  • Applied the update consistently across example-test and unit-test workflows.
  • Improved consistency and reliability across automated pull-request validation checks without changing application behavior.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 6b5e977d-a005-4c86-a6fd-92bf697f8bb3

📥 Commits

Reviewing files that changed from the base of the PR and between b39a6d4 and 140ab2e.

📒 Files selected for processing (2)

• .github/workflows/_pr_gate.yml
• .github/workflows/example_tests.yml

🚧 Files skipped from review as they are similar to previous changes (2)

• .github/workflows/_pr_gate.yml
• .github/workflows/example_tests.yml

---

📝 Walkthrough

Walkthrough

The pull-request, example-test, and unit-test workflows update step-security/changed-files from v46.0.5 to v47.0.5.

Changes

Workflow action updates

Layer / File(s)	Summary
Update changed-files action version .github/workflows/_pr_gate.yml, .github/workflows/example_tests.yml, .github/workflows/unit_tests.yml	The change-detection steps now use step-security/changed-files@v47.0.5.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

• NVIDIA/Model-Optimizer#2090: Updates the changed-files gating logic in the same workflows.

🚥 Pre-merge checks | ✅ 6

✅ Passed checks (6 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: updating step-security/changed-files to v47.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Security Anti-Patterns	✅ Passed	The PR changes only three workflow action versions; it adds no modelopt/examples Python code or dependencies and no listed security anti-patterns.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch kmorabia/bump-changed-files-v47

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.08%. Comparing base (3d4d924) to head (140ab2e).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2103      +/-   ##
==========================================
- Coverage   78.60%   78.08%   -0.52%     
==========================================
  Files         522      522              
  Lines       60167    60167              
==========================================
- Hits        47294    46982     -312     
- Misses      12873    13185     +312     

Flag	Coverage Δ
examples	42.93% <ø> (+1.06%)	⬆️
gpu	58.65% <ø> (-0.62%)	⬇️
regression	14.90% <ø> (+0.04%)	⬆️
unit	55.38% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-08-07 11:43 UTC