Skip to content

chore(ci): bump actions/checkout from 6 to 7 - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 6 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependabot Dependabot: dependabot dependencies Dependabot: dependencies github-actions Dependabot: github-actions labels Jun 21, 2026
@dependabot
dependabot Bot requested a review from karlspace as a code owner June 21, 2026 06:32
@dependabot dependabot Bot added dependabot Dependabot: dependabot dependencies Dependabot: dependencies github-actions Dependabot: github-actions labels Jun 21, 2026
@github-actions

Copy link
Copy Markdown
Contributor

AI Analysis

Technical Summary

This pull request updates the GitHub Actions dependency actions/checkout from version 6 to version 7. The update incorporates multiple improvements, dependency bumps, and security and functionality fixes introduced in v7.0.0 along with incremental patches from late v6 releases (6.0.1, 6.0.2, and 6.0.3).


Key Technical Details

  • Dependency Upgrade:

    • Bumps actions/checkout from v6 (specifically 6.0.3+) to v7.0.0.
    • Updated various internal dependencies (@actions/core, @actions/tool-cache, flatted, js-yaml) as part of the new version.
    • Migrated module to ECMAScript modules (ESM).
    • Removed the uuid package dependency.
  • Security and Functional Improvements:

    • Prevents checking out forked pull requests for

This summary was automatically generated by AI to help with triage and may not be 100% accurate.

Suggested Labels: security

@karlspace

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot Dependabot: dependabot dependencies Dependabot: dependencies github-actions Dependabot: github-actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant