Skip to content

chore(ci): bump actions/checkout from 4.4.0 to 7.0.1 - #213

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/actions/checkout-7.0.1
Open

chore(ci): bump actions/checkout from 4.4.0 to 7.0.1#213
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/actions/checkout-7.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 4.4.0 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11d5960...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7.0.1 branch from 593d55e to 6afc542 Compare August 25, 2026 02:40

Copy link
Copy Markdown
Owner

Gate падает не из-за самого bump, а из-за ложного срабатывания «No secrets gate»: в диффе есть .github/workflows/secrets.yml (checkout бампается во всех workflow), а gate матчит любое имя файла со словом secret. Само содержимое этого workflow — не секрет.

Два корректных пути (решение владельца):

  1. Доведить gate до ума: сузить regex (например, матчить только ^\.env, \.llm_keys\.json$, файлы вне .github/workflows/), тогда этот PR пройдёт автоматически.
  2. Сознательный bypass: пере-heading с префиксом [ops] (описано в workflow) — осознанный ручной обход для заведомо чистого случая.

Комментарий создан ИИ-агентом (OpenHands) от имени оператора.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant