Skip to content

Bump actions/checkout from 6 to 7 #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump actions/checkout from 6 to 7 #1

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/hugo.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ jobs:
pages: write
id-token: write
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7
with:
submodules: true
fetch-depth: 0
Comment on lines +15 to 18

@llamapreview llamapreview Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 | Confidence: High

The PR updates actions/checkout from v6 to v7. According to the upstream changelog, the primary behavioral change in v7 is blocking checkout of fork PRs for pull_request_target and workflow_run triggers. The workflow in this repository triggers only on push to main, so that change does not affect this workflow. No other breaking changes are evident from the release notes. Therefore, the update is safe and keeps the workflow aligned with the latest upstream fixes and hardening. As a major version bump, a manual verification that no other workflows in the repository use affected trigger events is recommended, but with the provided context none are present.

Expand Down