chore(deps): weekly safe github-actions updates · 1 package

[mendral-app]

Packages bumped

Package	Old	New	Released
actions/checkout	v4.2.2	v7.0.1	2026-07-20

actions/checkout — changelog highlights & impact

v5.0.0 — Updated to Node 24 runtime.

• Impact: GitHub-hosted macOS runners support Node 24; no action needed.

v6.0.0 — Credential persistence moved to a separate file (internal change).

• Impact: Transparent to consumers; no workflow changes required.

v7.0.0 — Blocks checkout of fork PRs on pull_request_target/workflow_run events by default (new allow-unsafe-pr-checkout input).

• Impact: This repo triggers only on [push, pull_request] — the breaking change does not apply.

v7.0.1 — Bug fixes: skip unsafe PR check when input is default, trim only ASCII whitespace for branch, escape values passed to --unset.

• Impact: Defensive fixes; no behavior change for this repo.

Files modified

• .github/workflows/CI.yml

Skipped this ecosystem

Package	Reason
(none)	—

---

Supersedes #3 (targets v7.0.0; this PR targets v7.0.1).

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session

[mendral-app]

CI Status

✅ macos-15 — passed
❌ macos-14 — failed (pre-existing, unrelated to this change)
⊘ macos-13 — cancelled (due to fail-fast: true)

Failure Analysis

The macos-14 job fails during ./test.sh when mumbrew runs brew upgrade and encounters:

xcodes: no bottle available!

This is a Homebrew ecosystem issue — the xcodes formula doesn't have a bottle for arm64_sonoma (macos-14 runner). It's unrelated to the actions/checkout version bump.

Evidence: PR #3 (targeting v7.0.0, opened 2026-07-06) shows the same CI failure pattern on this workflow — the issue predates this PR.

The macos-15 job passing confirms the checkout action works correctly at v7.0.1.

Note

Tag @mendral-app with feedback or questions.