Skip to content

build: bump actions/checkout from 5.1.0 to 7.0.1 in the github-actions group #30

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kyle-sexton merged 4 commits into from
Sep 7, 2026
Merged

build: bump actions/checkout from 5.1.0 to 7.0.1 in the github-actions group #30

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
5bd185d
build: bump actions/checkout in the github-actions group
dependabot[bot] Sep 5, 2026
cbbcbf1
Merge branch 'main' into dependabot/github_actions/github-actions-7a5…
cursoragent Sep 7, 2026
db4299d
ci: retitle checkout pin comments to v7.0.1
cursoragent Sep 7, 2026
407b028
ci: drop missing github_actions label from dependabot.yml
cursoragent Sep 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,12 +9,12 @@ updates:
schedule:
interval: weekly
# An explicit labels: list replaces (not adds to) Dependabot's automatic
# labels, so the ecosystem-derived default is restated alongside
# dependencies.
# labels. Only `dependencies` is listed: the ecosystem default
# `github_actions` is not in this org's github-iac label roster, and
# Dependabot fails the apply with "label could not be found".
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#labels
labels:
- dependencies
- github_actions
# `ci-status` fails a pull request whose title is not Conventional Commits,
# and Dependabot's default title carries no type, so the prefix is
# required rather than cosmetic.
Expand Down
16 changes: 8 additions & 8 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -91,9 +91,9 @@ jobs:
if: ${{ !(github.event.pull_request.head.repo.full_name == github.repository && (contains(fromJSON('["labeled","unlabeled"]'), github.event.action) || (github.event.action == 'edited' && !github.event.changes.base))) }}
runs-on: ubuntu-latest
steps:
# actions/checkout v5.1.0 — pinned to a full-length commit SHA because this
# actions/checkout v7.0.1 — pinned to a full-length commit SHA because this
# org requires it; a tag or short SHA is rejected at "Set up job".
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Install shellcheck
run: sudo apt-get update && sudo apt-get install -y shellcheck
Expand All @@ -115,9 +115,9 @@ jobs:
if: ${{ !(github.event.pull_request.head.repo.full_name == github.repository && (contains(fromJSON('["labeled","unlabeled"]'), github.event.action) || (github.event.action == 'edited' && !github.event.changes.base))) }}
runs-on: ubuntu-latest
steps:
# actions/checkout v5.1.0 — pinned to a full-length commit SHA because this
# actions/checkout v7.0.1 — pinned to a full-length commit SHA because this
# org requires it; a tag or short SHA is rejected at "Set up job".
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Install PSScriptAnalyzer
shell: pwsh
Expand Down Expand Up @@ -149,9 +149,9 @@ jobs:
if: ${{ !(github.event.pull_request.head.repo.full_name == github.repository && (contains(fromJSON('["labeled","unlabeled"]'), github.event.action) || (github.event.action == 'edited' && !github.event.changes.base))) }}
runs-on: ubuntu-latest
steps:
# actions/checkout v5.1.0 — pinned to a full-length commit SHA because this
# actions/checkout v7.0.1 — pinned to a full-length commit SHA because this
# org requires it; a tag or short SHA is rejected at "Set up job".
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: jq — manifests are well-formed JSON
run: |
Expand Down Expand Up @@ -195,9 +195,9 @@ jobs:
if: ${{ !(github.event.pull_request.head.repo.full_name == github.repository && (contains(fromJSON('["labeled","unlabeled"]'), github.event.action) || (github.event.action == 'edited' && !github.event.changes.base))) }}
runs-on: ubuntu-latest
steps:
# actions/checkout v5.1.0 — pinned to a full-length commit SHA because this
# actions/checkout v7.0.1 — pinned to a full-length commit SHA because this
# org requires it; a tag or short SHA is rejected at "Set up job".
- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

# Relative links only. External URLs are deliberately NOT checked here:
# GitHub and cursor.directory return 403/429 to CI runners, which would
Expand Down