Skip to content

build(deps): bump actions/checkout from 6.1.0 to 7.0.1 - #2197

Merged
carlos-alm merged 2 commits into
mainfrom
dependabot/github_actions/actions/checkout-7.0.1
Aug 2, 2026
Merged

build(deps): bump actions/checkout from 6.1.0 to 7.0.1#2197
carlos-alm merged 2 commits into
mainfrom
dependabot/github_actions/actions/checkout-7.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 6.1.0 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 1, 2026
@carlos-alm

Copy link
Copy Markdown
Contributor

@greptileai

@greptile-apps

greptile-apps Bot commented Aug 2, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

The PR standardizes checkout usage on actions/checkout v7.0.1 across eleven workflow files.

  • Replaces existing actions/checkout@v7 references with actions/checkout@v7.0.1.
  • Updates the security-sensitive recall-floor workflow from a v6 commit SHA to the v7.0.1 commit SHA while preserving immutable pinning.

Confidence Score: 5/5

The PR appears safe to merge because the checkout update preserves existing workflow behavior and compatible runner targets.

The affected workflows use GitHub-hosted runners compatible with checkout v7, and the security-sensitive write-enabled recall-floor workflow remains pinned to the correct full release commit.

Important Files Changed

Filename Overview
.github/workflows/update-recall-floors.yml Updates the checkout release SHA from v6 to v7.0.1 while preserving the workflow's explicit immutable-pinning requirement.
.github/workflows/benchmark.yml Narrows two existing floating v7 checkout references to the v7.0.1 patch tag without changing checkout configuration.
.github/workflows/ci.yml Consistently changes all CI checkout references from v7 to v7.0.1 with no behavioral configuration changes.
.github/workflows/publish.yml Updates checkout references throughout release jobs from v7 to v7.0.1 while leaving permissions, tokens, and fetch behavior unchanged.

Reviews (1): Last reviewed commit: "build(deps): bump actions/checkout from ..." | Re-trigger Greptile

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.1.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v6.1.0...v7.0.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7.0.1 branch from ad52c61 to 00cf88d Compare August 2, 2026 03:22
@carlos-alm
carlos-alm merged commit 1c15fc8 into main Aug 2, 2026
12 checks passed
@carlos-alm
carlos-alm deleted the dependabot/github_actions/actions/checkout-7.0.1 branch August 2, 2026 18:33
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 2, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant