Skip to content

chore(deps): update actions/checkout action to v7.0.1 - #6453

Merged
thomhurst merged 1 commit into
mainfrom
renovate/actions-checkout-7.x
Jul 20, 2026
Merged

chore(deps): update actions/checkout action to v7.0.1#6453
thomhurst merged 1 commit into
mainfrom
renovate/actions-checkout-7.x

Conversation

@thomhurst

Copy link
Copy Markdown
Owner

This PR contains the following updates:

PackageTypeUpdateChange
actions/checkoutactionpatchv7.0.0v7.0.1

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@thomhurstthomhurst added dependencies Pull requests that update a dependency file PATCH renovate-bot labels Jul 20, 2026
@thomhurst
thomhurst enabled auto-merge (squash) July 20, 2026 15:18
@greptile-apps

Copy link
Copy Markdown

Greptile Summary

This PR bumps actions/checkout from v7.0.0 to v7.0.1 across all 11 GitHub Actions workflow files. The patch release includes internal dependency updates and security-relevant fixes (escaping values passed to --unset, trimming only ASCII whitespace for branch names, and skipping unsafe PR checks when input is default).

  • All 11 workflow files receive the same mechanical version-string change (v7.0.0v7.0.1).
  • The upstream patch contains a fix for potential command injection via unescaped --unset arguments, making this update worth applying promptly.

Confidence Score: 5/5

Safe to merge — purely a patch version bump with no workflow logic changes.

Every change is a mechanical string replacement of the action version tag. The upstream patch brings security-relevant hardening (escaping values passed to --unset, ASCII-only whitespace trimming for branch names, skipping the unsafe-PR check when input is default) with no breaking changes. All 11 files are updated consistently.

No files require special attention.

Important Files Changed

FilenameOverview
.github/workflows/dotnet.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/speed-comparison.ymlBumps actions/checkout in 4 job steps from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/mock-benchmarks.ymlBumps actions/checkout in 2 job steps from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/codeql.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/claude-code-review.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/claude.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/cloudshop-example.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/deploy-pages-test.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/deploy-pages.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/dotnet-build-different-locale.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.
.github/workflows/link-check.ymlBumps actions/checkout from v7.0.0 to v7.0.1 — no functional change.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[Renovate Bot] --> B[Detect actions/checkout\nv7.0.0 to v7.0.1]
B --> C{Update 11 workflow files}
C --> D[claude-code-review.yml]
C --> E[claude.yml]
C --> F[cloudshop-example.yml]
C --> G[codeql.yml]
C --> H[deploy-pages-test.yml]
C --> I[deploy-pages.yml]
C --> J[dotnet-build-different-locale.yml]
C --> K[dotnet.yml]
C --> L[link-check.yml]
C --> M[mock-benchmarks.yml]
C --> N[speed-comparison.yml]
D --> O[actions/checkout at v7.0.1]
E --> O
F --> O
G --> O
H --> O
I --> O
J --> O
K --> O
L --> O
M --> O
N --> O
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
A[Renovate Bot] --> B[Detect actions/checkout\nv7.0.0 to v7.0.1]
B --> C{Update 11 workflow files}
C --> D[claude-code-review.yml]
C --> E[claude.yml]
C --> F[cloudshop-example.yml]
C --> G[codeql.yml]
C --> H[deploy-pages-test.yml]
C --> I[deploy-pages.yml]
C --> J[dotnet-build-different-locale.yml]
C --> K[dotnet.yml]
C --> L[link-check.yml]
C --> M[mock-benchmarks.yml]
C --> N[speed-comparison.yml]
D --> O[actions/checkout at v7.0.1]
E --> O
F --> O
G --> O
H --> O
I --> O
J --> O
K --> O
L --> O
M --> O
N --> O
Loading

Reviews (1): Last reviewed commit: "chore(deps): update actions/checkout act..." | Re-trigger Greptile

@thomhurst
thomhurst merged commit 50752dd into mainJul 20, 2026
14 of 15 checks passed
@thomhurst
thomhurst deleted the renovate/actions-checkout-7.x branch July 20, 2026 15:46
This was referenced Aug 28, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filePATCHrenovate-bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@thomhurst@renovate-bot