Skip to content

ci(deps): bump actions/checkout from 6 to 7 - #33

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/checkout-7
Open

ci(deps): bump actions/checkout from 6 to 7#33
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 6 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits


Note

Low Risk
CI-only third-party action bump with no application or auth logic changes; workflows here use standard pull_request/push triggers, not pull_request_target.

Overview
Upgrades every GitHub Actions checkout step from actions/checkout@v6 to @v7 across ci.yml, generate-and-publish.yml, and publish-release.yml (lint, typecheck, codegen, test matrix, build, Bun/Deno jobs, SDK generation, and npm publish).

Checkout inputs are unchanged (same tokens, fetch-depth, etc.); only the action major version moves forward for dependency maintenance and upstream fixes.

Reviewed by Cursor Bugbot for commit f05c175. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added the automated Opened by github-actions label Aug 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@codecov

codecov Bot commented Aug 31, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #33   +/-   ##
=======================================
  Coverage   90.75%   90.75%           
=======================================
  Files           1        1           
  Lines         119      119           
  Branches       30       30           
=======================================
  Hits          108      108           
  Misses         11       11           
🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch 2 times, most recently from 33640d6 to 421789d Compare September 1, 2026 09:08
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch 2 times, most recently from 421789d to f05c175 Compare September 1, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Opened by github-actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants