Skip to content

Bump actions/checkout from 4 to 7 - #119

Merged
asmello merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7
Jul 26, 2026
Merged

Bump actions/checkout from 4 to 7#119
asmello merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 4 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 18, 2026
asmello added a commit that referenced this pull request Jul 26, 2026
Two checks (`semver` and `ubuntu / stable / coverage`) have been failing on
every PR, including the Dependabot Action bumps (#118, #119), for reasons
unrelated to those PRs:

- semver: `main` is still versioned 0.7.1 (the last published release) but has
  accumulated breaking changes since that tag — the `Diagnose` trait was sealed
  (#107) and methods were removed from `InvalidCharacterError` (#108).
  `cargo-semver-checks` correctly demands a version bump. Bump to 0.8.0 (a minor
  bump, which permits breaking changes for a 0.x crate) and roll the CHANGELOG's
  Unreleased section into a 0.8.0 entry.

- coverage: `CODECOV_TOKEN` is not available to Dependabot or fork PRs (secrets
  are withheld from untrusted contexts), so codecov can't create a commit on the
  protected branch and the upload errors out. Make `fail_ci_if_error` conditional
  so the error is only fatal for trusted PRs and pushes to main, where the token
  is present.

Claude-Session: https://claude.ai/code/session_01XGvHsB4a2dxDVUQDGBScnW
@asmello

asmello commented Jul 26, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch from c2a9b96 to f1b781a Compare July 26, 2026 09:17
@asmello
asmello merged commit 555bb54 into main Jul 26, 2026
19 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/checkout-7 branch July 26, 2026 09:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant