chore(deps): update all major dependencies (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v6 → v7
actions/checkout	action	major	v6.0.3 → v7.0.0

---

Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Summary

This PR bumps actions/checkout from v6 (pinned SHA df4cb1c) to v7 (pinned SHA 9c091bb) across all five uses in the three GitHub Actions workflow files. No other changes are included.

• check-attribution.yml: Updated the single checkout step used by the bot-attribution check on PRs targeting main.
• ci.yml: Updated both checkout steps — one in lint-and-check and one in test — which run on push and pull_request events.
• release.yml: Updated both checkout steps — one in the version-bump check job and one in the release job — which run on push to main when pyproject.toml changes.

Confidence Score: 5/5

Safe to merge — a mechanical SHA bump with no logic changes.

All five checkout steps are updated from the pinned v6 SHA to the pinned v7 SHA. The only notable change in v7 is blocking checkout of fork PRs in pull_request_target and workflow_run workflows, but none of these three workflows use either trigger — they use pull_request and push exclusively. No workflow behavior changes.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/check-attribution.yml	Single checkout step updated from v6 to v7 SHA; workflow uses pull_request trigger, unaffected by the v7 fork-PR blocking change.
.github/workflows/ci.yml	Two checkout steps updated from v6 to v7 SHA; both lint-and-check and test jobs use push/pull_request triggers, unaffected by the v7 fork-PR blocking change.
.github/workflows/release.yml	Two checkout steps updated from v6 to v7 SHA; release workflow only triggers on push to main, unaffected by the v7 fork-PR blocking change.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Renovate Bot] -->|Opens PR| B[Update actions/checkout v6 → v7]
    B --> C[check-attribution.yml\n1 step updated]
    B --> D[ci.yml\n2 steps updated]
    B --> E[release.yml\n2 steps updated]
    C --> F{Trigger: pull_request}
    D --> G{Trigger: push / pull_request}
    E --> H{Trigger: push to main}
    F --> I[✅ Not affected by v7 fork-PR block]
    G --> I
    H --> I

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[Renovate Bot] -->|Opens PR| B[Update actions/checkout v6 → v7]
    B --> C[check-attribution.yml\n1 step updated]
    B --> D[ci.yml\n2 steps updated]
    B --> E[release.yml\n2 steps updated]
    C --> F{Trigger: pull_request}
    D --> G{Trigger: push / pull_request}
    E --> H{Trigger: push to main}
    F --> I[✅ Not affected by v7 fork-PR block]
    G --> I
    H --> I

Loading

_{Reviews (6): Last reviewed commit: "chore(deps): update all major dependenci..." | Re-trigger Greptile}