Skip to content

chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 - #13

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026 •

Copy link
Copy Markdown

Bumps actions/checkout from 4.4.0 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 20, 2026
@dependabot dependabot Bot changed the title chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 chore(deps): bump actions/checkout from 4 to 7 Aug 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7.0.1 branch from 662a675 to e4a3631 Compare August 20, 2026 11:29
@dependabot dependabot Bot changed the title chore(deps): bump actions/checkout from 4 to 7 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 Aug 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7.0.1 branch from e4a3631 to 2bd5f98 Compare August 20, 2026 13:18
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11d5960...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7.0.1 branch from 2bd5f98 to e9ccd9f Compare September 18, 2026 12:04
TimG1804 added a commit that referenced this pull request Sep 18, 2026
…#27)

Supersedes the three separate Dependabot PRs (#13, #15, #20). Doing them
in one commit avoids each rebasing onto the others, since all three touch
the same workflow file.

- actions/checkout 4.4.0 -> 7.0.1
- actions/setup-node 4.4.0 -> 7.0.0
- mikepenz/release-changelog-builder-action 4.2.2 -> 6.3.0

The majors are runtime bumps (node24) plus, for checkout v7, a guard
against checking out fork PRs on pull_request_target and workflow_run —
triggers this repo does not use. setup-node v6 narrowed automatic caching
to npm, which ci.yml already requests explicitly.

The changelog builder's v5 breaking changes are in regex transformers,
which this configuration does not set. commitMode is deprecated there in
favour of mode: COMMIT but still supported, so the config is left alone.

Each SHA was verified against the upstream tag rather than taken from the
Dependabot diff.

Refs #13, #15, #20

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Author

Looks like actions/checkout is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 18, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/checkout-7.0.1 branch September 18, 2026 12:16
TimG1804 added a commit that referenced this pull request Sep 18, 2026
…#27)

Supersedes the three separate Dependabot PRs (#13, #15, #20). Doing them
in one commit avoids each rebasing onto the others, since all three touch
the same workflow file.

- actions/checkout 4.4.0 -> 7.0.1
- actions/setup-node 4.4.0 -> 7.0.0
- mikepenz/release-changelog-builder-action 4.2.2 -> 6.3.0

The majors are runtime bumps (node24) plus, for checkout v7, a guard
against checking out fork PRs on pull_request_target and workflow_run —
triggers this repo does not use. setup-node v6 narrowed automatic caching
to npm, which ci.yml already requests explicitly.

The changelog builder's v5 breaking changes are in regex transformers,
which this configuration does not set. commitMode is deprecated there in
favour of mode: COMMIT but still supported, so the config is left alone.

Each SHA was verified against the upstream tag rather than taken from the
Dependabot diff.

Refs #13, #15, #20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants