Skip to content

chore(deps): update actions/checkout action to v7.0.1 - #89

Open
scality-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/actions-checkout-7.x
Open

chore(deps): update actions/checkout action to v7.0.1#89
scality-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/actions-checkout-7.x

Conversation

@scality-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v7.0.0v7.0.1

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Bump Evaluation

Version change: v7.0.0v7.0.1 (patch)
Breaking changes: None
Security concerns: None — changes are security-positive (escape values passed to --unset, trim only ASCII whitespace for branch names)

Changes (v7.0.1):

  • Skip running unsafe PR check if input is default (reduces false positives from v7.0.0 security feature)
  • Trim only ASCII whitespace for branch names (more precise sanitization)
  • Escape values passed to --unset (security hardening against injection)
  • Various dependency updates

Impact on codebase: All 5 checkout steps across pre-merge.yaml and release.yaml use default settings (no custom ref, path, or persist-credentials inputs). The behavioral refinements in v7.0.1 only affect non-default or edge-case configurations. No affected patterns found.

CI status: detect-modules, build-e2e, renovate/stability-days passed. golangci-lint and tests are still running but only validate Go code which is unchanged in this PR.

Recommendation: SAFE TO MERGE

— Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants