chore(deps): bump actions/checkout from 6 to 7 #3848
ccantynzcommented Jun 18, 2026
Originally written by @dependabot[bot] on GitHub.
Labels
The following labels could not be found: automated, ci. Please create them before Dependabot can add them to a pull request.
Please fix the above issues or remove invalid values from dependabot.yml.
gluecron[bot]🤖 botcommented 25d ago
This PR has gone quiet
No activity for 7+ days. Is this still in progress?
- Author: keep working / mark draft / close.
- Reviewers: review or unassign yourself.
- Maintainers: close if no longer relevant.
gluecron[bot]🤖 botcommented 18d ago
This PR has gone quiet
No activity for 7+ days. Is this still in progress?
- Author: keep working / mark draft / close.
- Reviewers: review or unassign yourself.
- Maintainers: close if no longer relevant.
gluecron[bot]🤖 botcommented 11d ago
This PR has gone quiet
No activity for 7+ days. Is this still in progress?
- Author: keep working / mark draft / close.
- Reviewers: review or unassign yourself.
- Maintainers: close if no longer relevant.
gluecron[bot]🤖 botcommented 4d ago
This PR has gone quiet
No activity for 7+ days. Is this still in progress?
- Author: keep working / mark draft / close.
- Reviewers: review or unassign yourself.
- Maintainers: close if no longer relevant.
Files changed
Side-by-side diff for dependabot/github_actions/actions/checkout-7 → main.
Cross-repo impact
See what breaks downstream if this PR merges.
Risk score: LOW (2/10)5a28b36
Touches 3 file(s) with 5 added and 5 removed across 0 owner(s). Includes a new dependency. No tests were added for the new code.
See full signal breakdown
- files changed: 3
- lines added/removed: 5 / 5
- distinct owners touched: 0
- schema migration touched: no
- locked / sensitive path touched: no
- adds new dependency: yes
- bumps major dependency: no
- tests added for new code: no
- diff-minus-test ratio: 1.00
How is this calculated? The score is a transparent sum of weighted signals — see
src/lib/pr-risk.ts computePrRiskScore.Gate checks
All 6 checks passedGateTestDisabled in settingsSkipped
Secret scanFound 4 secrets (0 critical)Passed
Security scanStatic rules ran (8 checks, no AI required) — no static findings. AI review unavailable: The platform's AI balance is exhausted, so AI generation is temporarily unavailable. Nothing was lost. You can queue this as a repair for the internal agent from the repository's Health page, or try again once the balance is restored.Skipped
Merge checkFast-forward merge possiblePassed
CINo CI workflows are configured for this repositorySkipped
AI ReviewAIAI review approvedPassed
c comment · e edit title · m merge · a approve · r request changes · ? shortcuts
Originally written by @dependabot[bot] on GitHub.
Imported from https://github.com/ccantynz-alt/MarcoReid.com/pull/95
Bumps actions/checkout from 6 to 7.
Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)