Skip to content

build(deps): bump actions/checkout from 4 to 7 - #1

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7
Open

build(deps): bump actions/checkout from 4 to 7#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown

Bumps actions/checkout from 4 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 13, 2026
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch from cc84914 to e83fd3e Compare August 13, 2026 21:28
arielagor added a commit to arielagor/dream-machine that referenced this pull request Aug 28, 2026
It pointed at PR ruvnet#1, which does not exist on this fork, so `gh pr view` failed
before the panel was ever convened. The job asserted only "exit code non-zero"
and got one — from the wrong cause. It would have kept passing with the
fail-closed invariant completely broken, which is worse than not having the job:
a green check that proves nothing reads as proof.

Caught by reading the job's own log rather than its status.

Now it resolves a PR that actually exists (this repo, else upstream), fails
loudly if it cannot find one instead of passing having tested nothing, and
asserts the REASON — the transcript must show a degraded-panel verdict, meaning
the panel really was convened and every family really was unreachable.

Verified both directions locally: with credentials stripped and the claude CLI
off PATH the run reaches "Degraded panel" and the job passes; against a
non-existent PR the exit is still non-zero but the new guard fails the job.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XjrDYrXYLVbhfjeTEAzTYU
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants