chore(deps): bump actions/checkout from 6 to 7 - #73
Conversation
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Deploying agent-render with
|
| Latest commit: |
d78d451
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://0eb20069.agent-render.pages.dev |
| Branch Preview URL: | https://dependabot-github-actions-ac-heyu.agent-render.pages.dev |
|
| Filename | Overview |
|---|---|
| .github/workflows/ci.yml | Bumps actions/checkout from v6 to v7 — straightforward one-line change with no other modifications. |
| .github/workflows/claude-code-review.yml | Bumps actions/checkout from v6 to v7 — one-line change, no other modifications. |
| .github/workflows/claude.yml | Bumps actions/checkout from v6 to v7 — one-line change, no other modifications. |
| .github/workflows/codeql.yml | Bumps actions/checkout from v6 to v7 — one-line change, no other modifications. |
| .github/workflows/test.yml | Bumps actions/checkout from v6 to v7 — one-line change, no other modifications. |
Flowchart
%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[Workflow triggered] --> B[checkout v7]
B --> C{Trigger type?}
C -->|push / pull_request / schedule| D[Checkout proceeds normally]
C -->|pull_request_target or workflow_run from fork| E[Blocked by v7 security guard]
D --> F[Rest of workflow runs]
E --> G[Workflow errors safely]
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
A[Workflow triggered] --> B[checkout v7]
B --> C{Trigger type?}
C -->|push / pull_request / schedule| D[Checkout proceeds normally]
C -->|pull_request_target or workflow_run from fork| E[Blocked by v7 security guard]
D --> F[Rest of workflow runs]
E --> G[Workflow errors safely]
Reviews (1): Last reviewed commit: "chore(deps): bump actions/checkout from ..." | Re-trigger Greptile
Code Review SummaryStatus: No Issues Found | Recommendation: Merge Files Reviewed (5 files)
This Dependabot PR bumps The notable v7.0.0 breaking change — blocking checkout of fork PRs for Reviewed by GLM-5.2 · Input: 111.4K · Output: 1.8K · Cached: 86.1K |
1 participant
Bumps actions/checkout from 6 to 7.
Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)