Skip to content

Update actions/checkout action to v7#246

Merged
chrishayuk merged 1 commit into
mainfrom
renovate/actions-checkout-7.x
Jul 22, 2026
Merged

Update actions/checkout action to v7#246
chrishayuk merged 1 commit into
mainfrom
renovate/actions-checkout-7.x

Conversation

@renovate

@renovate renovate Bot commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v6v7

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

v7.0.0

Compare Source

v7

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/actions-checkout-7.x branch from e41f5e6 to 97c9e2f Compare July 22, 2026 09:11
@chrishayuk
chrishayuk merged commit a525f1f into main Jul 22, 2026
19 checks passed
@chrishayuk
chrishayuk deleted the renovate/actions-checkout-7.x branch July 22, 2026 09:40
chrishayuk added a commit that referenced this pull request Jul 22, 2026
#250)

Renovate's config:recommended preset covers github-actions, which
overlapped with dependabot.yml's github-actions ecosystem entry and
produced duplicate/conflicting PRs for the same actions (e.g. #246 vs
#243 for actions/checkout, #223 vs #240/#238 for the artifact
actions). It also raised its own vulnerability-fix PRs (e.g. #239) on
top of GitHub's native Dependabot security alerts.

Dependabot stays the sole authority for github-actions version bumps
and security alerts; Renovate keeps handling pyproject.toml and
pyenv currency, where Dependabot has no equivalent config.

Signed-off-by: chris hay <chris.hay@uk.ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant