Skip to content

chore(deps): bump actions/checkout from 4 to 7 in the github-actions group - #780

Merged
Tieske merged 2 commits into
masterfrom
dependabot/github_actions/github-actions-640176b5ab
Jul 30, 2026
Merged

chore(deps): bump actions/checkout from 4 to 7 in the github-actions group#780
Tieske merged 2 commits into
masterfrom
dependabot/github_actions/github-actions-640176b5ab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 1 update: actions/checkout.

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 30, 2026
@Tieske

Tieske commented Jul 30, 2026

Copy link
Copy Markdown
Member

@copilot can you update this PR to use commit SHA's followed by a comment to indicate the version the SHA is pointing to (comment on the same line such that dependabot can keep those in sync in the future)

Copilot AI commented Jul 30, 2026

Copy link
Copy Markdown

@copilot can you update this PR to use commit SHA's followed by a comment to indicate the version the SHA is pointing to (comment on the same line such that dependabot can keep those in sync in the fu...

Done. Updated all three workflow files to use the commit SHA 3d3c42e5aac5ba805825da76410c181273ba90b1 with a # v7 comment on the same line (commit chore(deps): use commit SHA for actions/checkout v7 with version comment).

Copilot AI requested a review from Tieske July 30, 2026 12:44
@Tieske
Tieske merged commit 5ec5d92 into master Jul 30, 2026
@Tieske
Tieske deleted the dependabot/github_actions/github-actions-640176b5ab branch July 30, 2026 12:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

2 participants