chore(deps): bump actions/checkout from 5 to 7 - #64
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
ttnn-ops-coverage | 0ec7c71 | Commit Preview URL Branch Preview URL |
Aug 18 2026, 09:32 AM |
Aswinmcw
left a comment
Aswinmcw
left a comment
There was a problem hiding this comment.
Verified safe for this repo's usage:
ci.ymlpins all inputs (python-version: "3.12",node-version: "22",cache: npm) anddaily-support-matrix.ymluses only the long-stablefetch-depth/persist-credentialsinputs — no reliance on any default that these majors changed.- checkout v7's breaking change (blocking fork-PR checkout under
pull_request_target/workflow_run) does not apply:ci.ymlruns onpull_request,auto-approve.ymlispull_request_targetbut delegates to an org reusable workflow and performs no checkout of its own, and dependabot branches are in-repo rather than forks. - setup-python v7 only drops the
pip-installinput, which is unused here; setup-node v7's npm caching is unaffected by an explicitcache: npm. - This PR's own CI ran the new major (verified
actions/checkout@v7in the job log) and passed all gates.
Touches no package-lock.json, so it cannot contend with the in-flight dependency PRs.
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
78be642 to
0ec7c71
Compare
Aswinmcw
left a comment
Aswinmcw
left a comment
There was a problem hiding this comment.
Re-approving after dependabot's rebase (head 0ec7c712), which dismissed the prior approval once #61/#63 landed ahead of it.
Verified on the rebased head: the diff is still only actions/checkout@v5 -> @v7 (4x in ci.yml, 1x in daily-support-matrix.yml), the rebase correctly preserved the Notify Slack on data change step from #88, and all gates pass on the new head.
Safety rationale unchanged: v7's breaking change blocks fork-PR checkout under pull_request_target/workflow_run, neither of which applies here — ci.yml runs on pull_request, auto-approve.yml performs no checkout of its own, and daily-support-matrix.yml checks out this repo on schedule/workflow_dispatch using only fetch-depth/persist-credentials.
1 participant
Bumps actions/checkout from 5 to 7.
Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)