Update actions/checkout action to v7 by renovate[bot] · Pull Request #9 · PeterDaveHello/nrd-list-downloader

renovate · 2026-06-18T21:43:20Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v6` → `v7`

Release Notes

actions/checkout (actions/checkout)

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

PeterDaveHello · 2026-06-18T21:44:14Z

@codex review

kilo-code-bot · 2026-06-18T21:44:30Z

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 files)

.github/workflows/ci.yml

_{Reviewed by nex-n2-pro:free · 204,158 tokens}

Copilot

Pull request overview

Updates the GitHub Actions CI workflow to use the latest major version of actions/checkout, keeping the repository’s CI dependencies current.

Changes:

Bump actions/checkout in CI from v6 to v7.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

coderabbitai · 2026-06-18T21:45:01Z

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai · 2026-06-18T21:45:07Z

📝 Walkthrough

Summary by CodeRabbit

Chores
- Updated CI workflow dependencies.

Walkthrough

The CI workflow file is updated to use actions/checkout@v7 instead of actions/checkout@v6 in the "Checkout repository" step. No other workflow logic, jobs, or steps are changed.

Changes

CI Checkout Action Version Bump

Layer / File(s)	Summary
Bump actions/checkout from v6 to v7 `.github/workflows/ci.yml`	The checkout step version is incremented from `actions/checkout@v6` to `actions/checkout@v7`.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

PeterDaveHello/nrd-list-downloader#8: Modifies the same actions/checkout step in .github/workflows/ci.yml, bumping to a different major version (v6).

Suggested reviewers

PeterDaveHello

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately and concisely describes the main change: updating the actions/checkout action from v6 to v7.
Description check	✅ Passed	The description is directly related to the changeset, providing detailed release notes and context for the actions/checkout v7 upgrade.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch renovate/actions-checkout-7.x

✨ Simplify code

Create PR with simplified code
Commit simplified code in branch renovate/actions-checkout-7.x

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

qodo-code-review · 2026-06-18T21:45:34Z

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

chatgpt-codex-connector · 2026-06-18T21:46:02Z

Codex Review: Didn't find any major issues. Bravo.

Reviewed commit: 3f0c9dde86

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/ci.yml:
- Line 27: The `actions/checkout@v7` action is using a mutable version tag which
creates a supply-chain integrity risk. Replace the `@v7` tag with a pinned
full-length commit SHA to ensure consistent and secure action execution. You can
optionally add an inline comment after the commit SHA to indicate which version
it corresponds to for human readability.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 9aa4615b-afff-43a5-9dff-eeca86aba813

📥 Commits

Reviewing files that changed from the base of the PR and between f5a0087 and 3f0c9dd.

📒 Files selected for processing (1)

.github/workflows/ci.yml

📜 Review details

🧰 Additional context used

📓 Path-based instructions (1)

.github/workflows/ci.yml

📄 CodeRabbit inference engine (AGENTS.md)

CI runs via GitHub Actions in .github/workflows/ci.yml

Files:

.github/workflows/ci.yml

🪛 zizmor (1.25.2)

.github/workflows/ci.yml

[error] 27-27: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy)

(unpinned-uses)

Update actions/checkout action to v7

3f0c9dd

PeterDaveHello requested a review from Copilot June 18, 2026 21:43

Copilot started reviewing on behalf of PeterDaveHello June 18, 2026 21:44 View session

Copilot AI reviewed Jun 18, 2026

View reviewed changes

coderabbitai Bot requested a review from PeterDaveHello June 18, 2026 21:45

coderabbitai Bot requested changes Jun 18, 2026

View reviewed changes

Comment thread .github/workflows/ci.yml

coderabbitai Bot approved these changes Jun 19, 2026

View reviewed changes

PeterDaveHello approved these changes Jun 19, 2026

View reviewed changes

PeterDaveHello merged commit 2cea12c into master Jun 19, 2026
6 checks passed

PeterDaveHello deleted the renovate/actions-checkout-7.x branch June 19, 2026 10:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update actions/checkout action to v7#9

Update actions/checkout action to v7#9
PeterDaveHello merged 1 commit into
masterfrom
renovate/actions-checkout-7.x

renovate Bot commented Jun 18, 2026

Uh oh!

PeterDaveHello commented Jun 18, 2026

Uh oh!

kilo-code-bot Bot commented Jun 18, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

coderabbitai Bot commented Jun 18, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jun 18, 2026 •

edited

Loading

Summary by CodeRabbit

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Uh oh!

qodo-code-review Bot commented Jun 18, 2026

Uh oh!

chatgpt-codex-connector Bot commented Jun 18, 2026

Uh oh!

coderabbitai Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Jun 18, 2026

Release Notes

v7.0.0

v7

Configuration

Uh oh!

PeterDaveHello commented Jun 18, 2026

Uh oh!

kilo-code-bot Bot commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Summary

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

coderabbitai Bot commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Uh oh!

qodo-code-review Bot commented Jun 18, 2026

Code Review by Qodo

Great, no issues found!

Uh oh!

chatgpt-codex-connector Bot commented Jun 18, 2026

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v7.0.0`

`v7`

kilo-code-bot Bot commented Jun 18, 2026 •

edited

Loading

coderabbitai Bot commented Jun 18, 2026 •

edited

Loading

coderabbitai Bot commented Jun 18, 2026 •

edited

Loading