Repository navigation

actions: bump actions/checkout from 4.3.1 to 7.0.0 - #12

Closed

dependabot[bot] wants to merge 35 commits into

mainfrom

dependabot/github_actions/actions/checkout-7

Commits on Apr 9, 2026
- Initial commit
  nodeselector
  committed
  8a116df
- Update README.md
  nodeselector
  authored
  0cb38ad
Commits on Jun 7, 2026
- ci(go): scaffold workflow for PR triggers
  
  nodeselector
  and
  Copilot
  committed
  080b0df
- feat(lockfile): migrate parser package from gh-actions-pin
  
  nodeselector
  and
  Copilot
  committed
  e22ea5f
- fix(ci): point cache at go/go.sum
  
  nodeselector
  and
  Copilot
  committed
  ec2bd2e
Commits on Jun 8, 2026
- fix: address Copilot review — tighten pin regex, validate paths, add tests
  
  nodeselector
  and
  Copilot
  committed
  52bfe41
- Harden uses: parser boundary and rename File.Actions -> File.Dependencies
  
  nodeselector
  and
  Copilot
  committed
  7972734
- Add ParseReusableWorkflowRef for the reusable-workflow uses: shape
  
  nodeselector
  and
  Copilot
  committed
  6c4b154
- docs: tighten README + RELEASING, lead with format authority
  
  nodeselector
  and
  Copilot
  committed
  93d05ff
- ci: add paved-path release workflow + script/release
  
  nodeselector
  and
  Copilot
  committed
  ba591b0
- Merge pull request #1 from github/nodeselector/migrate-lockfile
  nodeselector
  authored
  6174943
- Reject zero-value branch, owner_id, and repo_id in lockfile
  
  nodeselector
  and
  Copilot
  committed
  4dc2826
Commits on Jun 12, 2026
- Parse: scope per-dependency validation to requested workflow paths
  nodeselector
  committed
  8930c62
- Merge pull request #3 from github/nodeselector/strict-field-validation
  nodeselector
  authored
  cecd264
Commits on Jun 14, 2026
- rename gh-actions-pin references to gh-actions-lock
  nodeselector
  committed
  53eb5c2
- Merge pull request #4 from github/nodeselector/rename-actions-pin-to-lockfile
  nodeselector
  authored
  997d2e0
Commits on Jun 19, 2026
- Reject empty commit SHA in lockfile dependency entries
  nodeselector
  committed
  29db3dd
- Validate commit field as algo-hex digest
  nodeselector
  committed
  5b9599b
- Reject commit field that disagrees with pin key digest
  nodeselector
  committed
  df9a049
- Validate ref component in ParsePin via isValidRef
  nodeselector
  committed
  f1bde12
- Reject path traversal and absolute paths in workflow map keys
  nodeselector
  committed
  772ab0a
- Validate branch and tag fields against injection denylist
  nodeselector
  committed
  1875e94
- Add MaxParseSize input size limit (1 MiB) to Parse
  nodeselector
  committed
  da9f42b
- Detect and reject cycles in the action uses graph
  nodeselector
  committed
  5eaa668
- Cap uses list length per action at MaxUsesPerAction (500)
  nodeselector
  committed
  365b997
- ParseActionMeta: add MaxActionMetaSize and MaxNestedUses limits
  nodeselector
  committed
  3701b46
Commits on Jun 22, 2026
Commits on Jun 23, 2026
- lockfile: v0.0.2 schema - drop branch, ref required, multi-version parsing (#7)
  nodeselector
  authored
  c03d8db
Commits on Jul 8, 2026
- Add community health files and fix LICENSE copyright (#8)
  nodeselector
  authored
  e6c2993
- Add Dependabot configuration (#10)
  nodeselector
  authored
  04538f9
- Onboard workflows to Actions lockfile (#11)
  nodeselector
  authored
  908143b
- actions: bump actions/checkout from 4.3.1 to 7.0.0
  dependabot[bot]
  authored
  57563e7

Commits

Commits on Apr 9, 2026

Commits on Jun 7, 2026

Commits on Jun 8, 2026

Commits on Jun 12, 2026

Commits on Jun 14, 2026

Commits on Jun 19, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jul 8, 2026