Skip to content

chore(deps): update actions/checkout action to v7#5170

Merged
traefiker merged 1 commit into
masterfrom
renovate/major-gh-actions
Jul 8, 2026
Merged

chore(deps): update actions/checkout action to v7#5170
traefiker merged 1 commit into
masterfrom
renovate/major-gh-actions

Conversation

@renovate-with-github-actions

@renovate-with-github-actions renovate-with-github-actions Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v6.0.3v7.0.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

v7

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@renovate-with-github-actions renovate-with-github-actions Bot added area/infrastructure Pull requests that update infra/dependencies status/2-needs-review labels Jun 22, 2026
@renovate-with-github-actions renovate-with-github-actions Bot changed the title chore(deps): update github actions (major) chore(deps): update actions/checkout action to v7 Jun 29, 2026

@mdeliatf mdeliatf left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. ⚠️ Heads up that v7.0.0 does carry a breaking change: it now blocks checking out fork PR code on pull_request_target and workflow_run triggers unless you explicitly set allow-unsafe-pr-checkout: true (a "pwn request" hardening). However, it doesn't affect any of our workflows: all five use pull_request, push, workflow_dispatch, or schedule, none of which are impacted.

@traefiker
traefiker merged commit b7687f3 into master Jul 8, 2026
7 checks passed
@traefiker
traefiker deleted the renovate/major-gh-actions branch July 8, 2026 08:40
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 12.3.8 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/infrastructure Pull requests that update infra/dependencies released

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants