Skip to content

chore(deps): bump the github-actions group across 1 directory with 2 updates#5111

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dedf2883d5
Open

chore(deps): bump the github-actions group across 1 directory with 2 updates#5111
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dedf2883d5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates in the / directory: actions/checkout and apache/skywalking-eyes.

Updates actions/checkout from 6.0.3 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates apache/skywalking-eyes from ab3d1fe50d23f9c82eff489297167e2dde8ba6cb to 8e837beb243c264ffcd5ea3abd3d5d8975cd0077

Changelog

Sourced from apache/skywalking-eyes's changelog.

Check the release notes for detailed change logs.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates CI to actions/checkout@v7 and bumps apache/skywalking-eyes for more reliable and broader license header checks. This hardens PR workflows and keeps our checks current.

  • Dependencies

    • actions/checkout: 6.0.3 → 7.0.0 across all workflows; includes a security change that blocks checking out fork code for pull_request_target and workflow_run.
    • apache/skywalking-eyes/header: updated to latest; adds Ruby/ERB/SLIM support and a new header diff command (we still run in check mode).
  • Migration

    • If any workflow needs to check out fork code with pull_request_target or workflow_run, switch those jobs to pull_request (or refactor) to avoid the new block.

Written for commit 42450bc. Summary will update on new commits.

Review in cubic

…updates

Bumps the github-actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [apache/skywalking-eyes](https://github.com/apache/skywalking-eyes).


Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

Updates `apache/skywalking-eyes` from ab3d1fe50d23f9c82eff489297167e2dde8ba6cb to 8e837beb243c264ffcd5ea3abd3d5d8975cd0077
- [Release notes](https://github.com/apache/skywalking-eyes/releases)
- [Changelog](https://github.com/apache/skywalking-eyes/blob/main/CHANGES.md)
- [Commits](apache/skywalking-eyes@ab3d1fe...8e837be)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: apache/skywalking-eyes
  dependency-version: 8e837beb243c264ffcd5ea3abd3d5d8975cd0077
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 22, 2026
@dependabot dependabot Bot requested review from a team and Tpuljak as code owners June 22, 2026 14:46
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 22, 2026
@nx-cloud

nx-cloud Bot commented Jun 22, 2026

Copy link
Copy Markdown

View your CI Pipeline Execution ↗ for commit 42450bc

Command Status Duration Result
nx run-many --target=test --all --nxBail=true ✅ Succeeded 3s View ↗
nx run-many --target=docs --all ✅ Succeeded 1s View ↗
nx run-many --target=build --all --parallel=6 -... ✅ Succeeded 11s View ↗
nx run-many --target=format --all --parallel=6 ✅ Succeeded 1s View ↗
nx run api:lint ✅ Succeeded <1s View ↗
nx run-many --target=generate:api-client --all ... ✅ Succeeded 2s View ↗

💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗


☁️ Nx Cloud last updated this comment at 2026-06-22 14:49:51 UTC

@vedranjukic vedranjukic force-pushed the main branch 2 times, most recently from 2c15a7f to b40f732 Compare June 23, 2026 14:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants