Skip to content

chore(deps): update actions/checkout to v7 - #48

Merged
Boulea7 merged 11 commits into
mainfrom
dependabot/github_actions/actions/checkout-7
Oct 2, 2026
Merged

Boulea7 merged 11 commits into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 24, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Updates the five actions/checkout references to v7 across CI and release workflows, integrated with current main.

What changed

  • Four checkout references in CI and one in the release workflow.
  • Existing checkout inputs and the merged setup-node/toolchain updates are preserved.

Product impact

This is CI dependency maintenance. Current checkout v6.1.0 and v7.0.1 both use Node 24; v6.1.0 already includes the fork safety backport. This update does not add a new product or security behavior.

Validation

  • Exact native Git comparison confirms only these five reference substitutions; all 180 other source files, including package and lockfile, match current main.
  • The unchanged product source and dependency lock passed current-main CI with seven successful jobs.
  • New-head pnpm lint
  • New-head pnpm test
  • New-head pnpm build, platform smoke and tarball install smoke

New-head CI passed all seven jobs, including full Node 20 verification and Linux/macOS/Windows and tarball install smoke. The June run on the original bot head is historical context only.

Docs

No onboarding or product contract changes.

Risks

Node 24 actions require runner v2.327.1 or later, as already required by the current checkout runtime. The workflows use GitHub-hosted latest runners with default checkout inputs. The release workflow was checked statically; publishing is not exercised by this update.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the enhancement New feature or request label Jun 24, 2026
@dependabot
dependabot Bot requested a review from Boulea7 as a code owner June 24, 2026 03:04
@dependabot dependabot Bot added the enhancement New feature or request label Jun 24, 2026
dependabot Bot and others added 10 commits July 15, 2026 03:04
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…ectory with 5 updates

Bumps the development-dependencies group with 2 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [typescript](https://github.com/microsoft/TypeScript).


Updates `@types/node` from 24.12.0 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.4 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `tsx` from 4.21.0 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.1)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vitest` from 4.1.4 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Read metadata and evidence with a shared UTF-8 line iterator so a
multiline rollout can exceed the JavaScript string limit without a
whole-file allocation. Preserve parsing and file-error behavior.

Refs #44

Signed-off-by: boulea7 <zln1905391059@163.com>
Avoid combining a representable line with following lines in a temporary
string or rescanning the growing prefix on every chunk. Add a regression
at the actual V8 string limit through the public metadata reader.

Refs #44

Signed-off-by: boulea7 <zln1905391059@163.com>
fix: stream rollout JSONL instead of reading the whole file
…/setup-node-7

chore(deps): bump actions/setup-node from 6 to 7
…nt-dependencies-80659a7bc6

chore(deps): update the TypeScript toolchain and locked runtime dependencies
Signed-off-by: boulea7 <zln1905391059@163.com>
@coderabbitai

coderabbitai Bot commented Oct 2, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: a882a02b-9a4f-4830-bf59-6396273c2399

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@Boulea7 Boulea7 changed the title chore(deps): bump actions/checkout from 6 to 7 chore(deps): update actions/checkout to v7 Oct 2, 2026

@Boulea7 Boulea7 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Only the five checkout references change; the existing inputs, setup-node v7 and package/lock updates are preserved. Current-head CI passes Node 20 verification and the Linux, macOS, Windows and install smoke jobs. The release workflow was checked statically; no release was run.

@Boulea7
Boulea7 merged commit cd2d9a4 into main Oct 2, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/checkout-7 branch October 2, 2026 21:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant