ci(github-action): update action https://github.com/actions/checkout (v7.0.0 ➔ v7.0.1) #117

Merged

todd merged 1 commit from renovate/https-github.com-actions-checkout-7.x into main

2026-07-20 20:25:01 -04:00

renovate-bot commented

2026-07-20 12:01:44 -04:00

Owner

This PR contains the following updates:

Package	Type	Update	Change
https://github.com/actions/checkout	action	patch	`v7.0.0` → `v7.0.1`

Release Notes

actions/checkout (https://github.com/actions/checkout)

`v7.0.1`

Compare Source

Skip running unsafe pr check if input is default by @aiqiaoy in #2518
Trim only ascii whitespace for branch by @aiqiaoy in #2521
Escape values passed to --unset by @aiqiaoy in #2530
Various dependency updates

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (https://github.com/actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://github.com/actions/checkout/compare/v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](https://github.com/actions/checkout/pull/2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](https://github.com/actions/checkout/pull/2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](https://github.com/actions/checkout/pull/2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (in timezone America/New_York) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-20 12:01:44 -04:00

ci(github-action): update action https://github.com/actions/checkout (v7.0.0 ➔ v7.0.1)

Labeler / Labeler (pull_request) Successful in 3s

Details

Validate Images / Filter changes (pull_request) Successful in 2s

Details

Lint / actionlint (pull_request) Successful in 8s

Details

Validate Images / Extract Images (pull_request) Has been skipped

Details

Lint / yamllint (pull_request) Successful in 11s

Details

Validate Images / Validation Result (pull_request) Successful in 2s

Details

AI PR Review / AI PR Review (pull_request) Successful in 31s

Details

f0fad7e4cb

| datasource  | package          | from   | to     |
| ----------- | ---------------- | ------ | ------ |
| github-tags | actions/checkout | v7.0.0 | v7.0.1 |

forgejo-actions commented

2026-07-20 12:02:19 -04:00

✅ Automated recommendation: APPROVE

Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)

Approve — Renovate PR bumping actions/checkout from v7.0.0 to v7.0.1 in .forgejo/workflows/pr-reviewer.yaml.

Changed file: .forgejo/workflows/pr-reviewer.yaml — SHA-pinned action reference updated from 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 to 3d3c42e5aac5ba805825da76410c181273ba90b1.

Caveats: OCI release labels (revision, source) are absent on the action reference, which is non-standard for container images but customary for GitHub Actions where SHA pinning provides equivalent integrity guarantees. This is a non-blocking caveat given the SHA pin is present.

Konflate render: clean, no cautions or failures.

✅ **Automated recommendation: APPROVE** _Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)_ **Approve** — Renovate PR bumping `actions/checkout` from v7.0.0 to v7.0.1 in `.forgejo/workflows/pr-reviewer.yaml`. **Changed file:** `.forgejo/workflows/pr-reviewer.yaml` — SHA-pinned action reference updated from `9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` to `3d3c42e5aac5ba805825da76410c181273ba90b1`. **Caveats:** OCI release labels (`revision`, `source`) are absent on the action reference, which is non-standard for container images but customary for GitHub Actions where SHA pinning provides equivalent integrity guarantees. This is a non-blocking caveat given the SHA pin is present. Konflate render: clean, no cautions or failures.