Skip to content

Bump actions/checkout to v7.0.1 in GitHub CI workflows - #3779

Closed
Lai Wei (weilai-irl) wants to merge 1 commit into
MOODLE_500_STABLEfrom
wip-140456-m500
Closed

Lai Wei (weilai-irl) wants to merge 1 commit into
MOODLE_500_STABLEfrom
wip-140456-m500

Conversation

@weilai-irl

Copy link
Copy Markdown
Collaborator

No description provided.

Copilot AI balanced review requested due to automatic review settings October 12, 2026 14:09
@weilai-irl Lai Wei (weilai-irl) self-assigned this Oct 12, 2026
@weilai-irl Lai Wei (weilai-irl) added this to the 2026-04 milestone Oct 12, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The checkout SHA was verified to correctly match v7.0.1 and is applied consistently across all 11 workflow files with no stragglers remaining on the old version.

0 open findings

What changed in this PR

This PR bumps the pinned actions/checkout GitHub Action from v6.1.0 to v7.0.1 across all CI workflows in the repository. Each plugin in this mono-repo maintains its own .github/workflows/ci.yml, plus the top-level aggregate workflow, so the change is applied uniformly to 11 files. The action remains pinned by commit SHA with a version comment, consistent with the existing security practice.

Changes:

  • Updated the actions/checkout pin from d23441a... (v6.1.0) to 3d3c42e5aac5ba805825da76410c181273ba90b1 (v7.0.1) in each per-plugin and the root CI workflow.
  • SHA pinning with a # v7.0.1 comment is preserved across all files.
File Description
.github/​workflows/​ci.yml Bumps checkout SHA for the "Check out sub repository code" step.
auth/​oidc/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
blocks/​microsoft/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
lib/​editor/​tiny/​plugins/​teamsmeeting/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
local/​o365/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
local/​office365/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
local/​onenote/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
mod/​assign/​feedback/​onenote/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
mod/​assign/​submission/​onenote/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
repository/​office365/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.
theme/​boost_o365teams/​.github/​workflows/​ci.yml Bumps checkout SHA in the plugin CI workflow.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@weilai-irl
Lai Wei (weilai-irl) deleted the wip-140456-m500 branch October 12, 2026 14:12
@weilai-irl Lai Wei (weilai-irl) removed this from the 2026-04 milestone Oct 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants