chore(deps)!: Update GitHub Actions to v7#95
Conversation
|
Warning Review limit reached
More reviews will be available in 37 minutes and 15 seconds. Learn how PR review limits work. Your organization has run out of usage credits. Purchase more credits in the billing tab to continue. ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits. 🚦 How do rate limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan refill rate. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, the refill rate gradually slows as usage increases. The highest same-day bursts are limited more strictly. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Run ID: 📒 Files selected for processing (21)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
Updates the cookiecutter template’s and this repository’s GitHub Actions workflows to use actions/checkout v7 (still pinned by commit SHA), keeping the template’s CI/security automation aligned with upstream fixes and security updates.
Changes:
- Bump
actions/checkoutfrom v6.0.3 to v7 (SHA pin update) across repo workflows. - Apply the same
actions/checkoutv7 pin to generated-project workflows under{{cookiecutter.project_slug}}/. - Keep existing hardening/permissions patterns intact while refreshing the checkout dependency.
Reviewed changes
Copilot reviewed 21 out of 21 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
{{cookiecutter.project_slug}}/.github/workflows/validate-cruft.yml |
Update actions/checkout pin to v7 for cruft validation. |
{{cookiecutter.project_slug}}/.github/workflows/slsa-provenance.yml |
Update actions/checkout pin to v7 for provenance build step. |
{{cookiecutter.project_slug}}/.github/workflows/security-analysis.yml |
Update actions/checkout pin to v7 for security analysis workflow. |
{{cookiecutter.project_slug}}/.github/workflows/scorecard.yml |
Update actions/checkout pin to v7 for Scorecard job checkout. |
{{cookiecutter.project_slug}}/.github/workflows/reuse.yml |
Update actions/checkout pin to v7 for REUSE checks. |
{{cookiecutter.project_slug}}/.github/workflows/release.yml |
Update actions/checkout pin to v7 across release jobs. |
{{cookiecutter.project_slug}}/.github/workflows/python-compatibility.yml |
Update actions/checkout pin to v7 for compatibility checks. |
{{cookiecutter.project_slug}}/.github/workflows/pr-validation.yml |
Update actions/checkout pin to v7 across PR validation jobs. |
{{cookiecutter.project_slug}}/.github/workflows/fips-compatibility.yml |
Update actions/checkout pin to v7 across FIPS jobs. |
{{cookiecutter.project_slug}}/.github/workflows/docs.yml |
Update actions/checkout pin to v7 for docs workflow. |
{{cookiecutter.project_slug}}/.github/workflows/dependency-review.yml |
Update actions/checkout pin to v7 for dependency review. |
{{cookiecutter.project_slug}}/.github/workflows/cifuzzy.yml |
Update actions/checkout pin to v7 for fuzz CI workflow. |
{{cookiecutter.project_slug}}/.github/workflows/ci.yml |
Update actions/checkout pin to v7 across template CI jobs. |
.github/workflows/validate-template.yml |
Update actions/checkout pin to v7 for template validation workflow. |
.github/workflows/test-template.yml |
Update actions/checkout pin to v7 across template test matrix jobs. |
.github/workflows/scheduled-validation.yml |
Update actions/checkout pin to v7 for scheduled validations. |
.github/workflows/reuse.yml |
Update actions/checkout pin to v7 for repo REUSE checks. |
.github/workflows/dependency-review.yml |
Update actions/checkout pin to v7 for repo dependency review. |
.github/workflows/cruft-update.yml |
Update actions/checkout pin to v7 for cruft update automation. |
.github/workflows/codeql.yml |
Update actions/checkout pin to v7 for CodeQL scanning. |
.github/workflows/ci.yml |
Update actions/checkout pin to v7 across repo CI jobs. |
| egress-policy: audit | ||
|
|
||
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 |
|
|
||
| - name: Checkout code | ||
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | ||
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 |
Summary
Why
Scheduled patch update, bug fixes and security patches with no API changes.
Changes
This PR contains the following updates:
v6.0.3→v7Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Impact
Acceptance Criteria
Testing
Notes
Release Notes
actions/checkout (actions/checkout)
v7Compare Source
v7.0.0Compare Source
Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.