Skip to content

chore(deps): bump actions/checkout from 6.0.3 to 7.0.0#524

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.0
Open

chore(deps): bump actions/checkout from 6.0.3 to 7.0.0#524
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 6.0.3 to 7.0.0.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

View with Codesmith Autofix with Codesmith
Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 22, 2026
@zeabur-review-agent

Copy link
Copy Markdown

Note

Currently processing new changes in this PR, please wait...

📦 Commits (1)

Reviewed via multi-agent panel

📂 Files selected for processing (4)

Details available in the full review

@zeabur-review-agent

Copy link
Copy Markdown

🧙 Gandalf — Aggregated Review Synthesis

PR: #524 — Bump actions/checkout from v6.0.3 to v7.0.0
Commit: c0bd03c10b8acf419e2f51e2e8bb68b1df3fc287
Quorum: 5/7 reviewers responded
Consensus verdict:APPROVE


Summary

This is a Dependabot major-version bump of actions/checkout (v6.0.3 → v7.0.0) across all four CI workflow files (e2e-test.yml, lint.yml, release.yml, test.yml). The pinned SHA is updated from df4cb1c… to 9c091bb….

Key Findings (all INFO-level, no blockers)

# Finding Reviewers
1 SHA verified authentic9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 resolves to the official actions/checkout v7.0.0 tag. Aragorn, Legolas, Sam, Merry, Frodo
2 Breaking change is inert — v7's new fork-PR checkout block (#2454) only applies to pull_request_target/workflow_run triggers. This repo uses push/pull_request/workflow_dispatch/tag-push only. Aragorn, Legolas, Sam, Merry
3 Existing config preservedpersist-credentials: false and submodules: 'true' remain intact. Aragorn, Legolas, Frodo
4 Node 24 runtime — v7 moves to Node 24/ESM; GitHub-hosted ubuntu-latest runners support this. Aragorn, Sam, Merry

Verdict Breakdown

Reviewer Verdict
Aragorn ✅ Approve
Legolas ✅ Approve
Sam ✅ Approve
Merry ✅ Approve
Frodo ✅ Approve

Recommendation

Merge when CI is green. No code changes, no compatibility risk for the triggers used in this repository.

@zeabur-review-agent zeabur-review-agent Bot added the approve Council approved label Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approve Council approved dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants