Skip to content

Bump actions/checkout from 6 to 7 - #820

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.0
Open

Bump actions/checkout from 6 to 7#820
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 6 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits


Note

Low Risk
CI-only version pin updates with no product code changes; workflows here use push/pull_request, not pull_request_target, so v7’s stricter fork-checkout behavior should not apply.

Overview
Updates every GitHub Actions workflow that checks out the repo to use actions/checkout@v7 instead of @v6.

Touched workflows include security audit, benchmarks, wheel builds (ARM64, M1, multi-OS), crate build/publish, tests/fuzz/coverage, CodeQL, dependency review, generated-test checks, and Prettier. Step options such as fetch-depth are unchanged.

This is a routine Dependabot-style dependency bump; application and library code are not modified.

Reviewed by Cursor Bugbot for commit a13ccec. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jul 21, 2026
@coveralls-official

coveralls-official Bot commented Jul 21, 2026

Copy link
Copy Markdown

Coverage Report for CI Build 31016145563

Coverage remained the same at 87.816%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 9783
Covered Lines: 8591
Line Coverage: 87.82%
Coverage Strength: 20987421.06 hits per line

💛 - Coveralls

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump actions/checkout from 6 to 7.0.0 Bump actions/checkout from 6 to 7 Aug 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7.0.0 branch from 19c79d2 to a13ccec Compare August 5, 2026 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants