Update actions/checkout to v7 - #31
Merged
Merged
Conversation
GitHub Action upgrade from v6 to v7. Split from Renovate PR #26.
EricWittmann
commented
Jul 2, 2026
EricWittmann
left a comment
Collaborator
Author
There was a problem hiding this comment.
Review Summary
This PR updates actions/checkout from v6 (df4cb1c0...) to v7 (9c091bb2...) across all four GitHub Actions workflow files, as split out from Renovate PR #26.
Analysis
Changes reviewed:
.github/workflows/npm-publish.yaml— 1 checkout reference updated.github/workflows/publish-docs.yml— 2 checkout references updated.github/workflows/release.yaml— 2 checkout references updated.github/workflows/verify.yaml— 1 checkout reference updated
All changes are consistent: every occurrence of the old v6 commit SHA is replaced with the new v7 commit SHA, and the version comments are updated accordingly (# v6 → # v7).
Good practices observed:
- ✅ Actions are pinned to full commit SHAs (not mutable tags), which is a supply-chain security best practice
- ✅ Human-readable version comments (
# v7) are maintained alongside the SHA pins - ✅ No workflow logic changes — purely a dependency version bump
- ✅ All instances across the repo are updated (no stale references left behind)
Findings
No issues found. This is a clean, minimal dependency upgrade with no functional or security concerns.
Overall Assessment
✅ Looks good to merge. Straightforward version bump applied consistently across all workflow files.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Context
This dependency upgrade was split from Renovate PR #26 for easier review and testing.
Test Plan