chore(deps): bump actions/checkout from 6 to 7 - #76
Conversation
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
feurer98
left a comment
feurer98
left a comment
There was a problem hiding this comment.
Gatekeeper-Review
Autor: dependabot[bot] — Vertrauensvorschuss: ja (volle Prüfung dennoch durchgeführt).
Sinnhaftigkeit: sinnvoll. Hält die CI-Actions aktuell. Der Major-Bump v6→v7 ist gerechtfertigt: der einzige Breaking Change in v7.0.0 ("block checking out fork PR for pull_request_target and workflow_run") betrifft dieses Repo nicht — es existieren keine pull_request_target- oder workflow_run-Trigger in .github/workflows/. Die übrigen v7-Änderungen (ESM-Upgrade, interne Dependency-Bumps) haben keine API-Auswirkung auf die Nutzung actions/checkout@v7.
Kontrolle des Diffs: Rein die Versionsumstellung @v6 → @v7 in 6 Workflow-Dateien (ci, docker-image, docs, release, security), konsistent über alle 11 Vorkommen. Kein Scope Creep, keine fremden Änderungen. PR-Beschreibung deckt sich mit dem tatsächlichen Diff.
Befundliste:
| ID | Stelle | Problem | Schwere | Status |
|---|---|---|---|---|
| 1 | .github/workflows/*.yml | Breaking Change v7 (fork-PR-Block) | – | nicht zutreffend (kein passender Trigger) |
Checks: Alle 8 Check-Runs grün (Test ubuntu/windows, Build Release, Clippy, Rustfmt, Code Coverage, Benchmarks).
Entscheidung: MERGE.
Generated by Claude Code
1 participant
Bumps actions/checkout from 6 to 7.
Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)