Skip to content

Bump actions/checkout from 6 to 7 - #170

Merged
emlowe merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.0
Sep 11, 2026
Merged

emlowe merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 6 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits


Note

Low Risk
CI-only version pin updates with no application or runtime code changes; workflows here do not use pull_request_target or workflow_run where v7’s fork-PR checkout restrictions matter most.

Overview
Updates the checkout step in three CI workflows (nightly-against-main, pre-commit, and run-test-suite) from actions/checkout@v6 to @v7. Step inputs (e.g. fetch-depth: 0) are unchanged.

This is a routine Actions dependency bump; behavior for these triggers (push, pull_request, schedule, workflow_dispatch) should stay the same unless checkout v7’s stricter defaults affect a workflow you add later that uses pull_request_target or workflow_run.

Reviewed by Cursor Bugbot for commit bc58ba8. Bugbot is set up for automated code reviews on this repo. Configure here.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jul 21, 2026
@emlowe

emlowe commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump actions/checkout from 6 to 7.0.0 Bump actions/checkout from 6 to 7 Sep 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7.0.0 branch from 886a957 to bc58ba8 Compare September 11, 2026 19:06
@emlowe
emlowe merged commit 3aa42fd into main Sep 11, 2026
20 checks passed
@emlowe
emlowe deleted the dependabot/github_actions/actions/checkout-7.0.0 branch September 11, 2026 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant