build(deps): update actions/checkout action to v7 (main)

Metadata

Project: craft-application
Number: #1124
Type: pull request
State: merged
Author: renovate[bot]
Labels: PR: Dependencies
Created: 2026-07-11 08:35 AM UTC
Updated: 2026-07-14 05:13 PM UTC
Closed: 2026-07-14 05:13 PM UTC

Current evaluation

Renovate PR canonical/craft-application#1124 merged into main, bumping actions/checkout from v6 to v7 across three workflow files (+4/-4). Approved by 2 reviewers; snap-tests (openstack) and OSV-scanner failures did not block automerge.

Resolution: closed resolved

Reason: The PR itself was merged into main with review approval from 2 reviewers, changing the actions/checkout pin from v6 to v7 in three GitHub workflow files. The failing snap-tests (openstack) and Security scan / OSV-scanner jobs were non-blocking under the branch's automerge configuration.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) ### [`v7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-application).

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-03 02:03 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate PR canonical/craft-application#1124 merged into main, bumping actions/checkout from v6 to v7 across three workflow files (+4/-4). Approved by 2 reviewers; snap-tests (openstack) and OSV-scanner failures did not block automerge.
2026-10-03 02:03 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate's major actions/checkout v6→v7 bump for craft-application was approved and merged into main (+4/-4 across 3 workflow files).
2026-09-25 09:35 AM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate PR canonical/craft-application#1124 merged into main, upgrading actions/checkout from v6 to v7 in three workflow files (+4/-4 lines).
2026-07-23 02:04 PM UTC	qwen/qwen3.6-35b-a3b	—	—	Merged automated dependency update upgrading actions/checkout from v6 to v7. Approved by two reviewers and merged via Renovate automerge after passing required CI checks.
2026-07-13 08:26 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 0 Complexity: 5 Confidence: 95	needs review	Updates the GitHub Actions checkout dependency from v6 to v7. Generated by Renovate with automerge enabled. Currently open and awaiting CI validation.

Update history

No update history recorded yet.

Related work

Related To: canonical/charmcraft#2747 (confidence 70%)
Same Renovate actions/checkout v6 to v7 major bump merged into charmcraft main (commit c559e7ff), with the same non-blocking snap-tests/OSV-scanner failures.
Related To: canonical/craft-parts#1638 (confidence 68%)
Parallel actions/checkout v6 to v7 Renovate PR in the sibling craft-parts repo.
Related To: canonical/craft-cli#460 (confidence 66%)
Same actions/checkout v7 upgrade in craft-cli, merged as commit 20cad57.
Related To: canonical/craft-platforms#240 (confidence 64%)
Same actions/checkout v7 upgrade in craft-platforms, touching three workflow files like this PR.
Related To: canonical/craft-grammar#193 (confidence 62%)
Same actions/checkout v7 upgrade in craft-grammar, merged as commit 4070c51.
Related To: canonical/fetch-service#623 (confidence 58%)
Same actions/checkout v6 to v7 Renovate upgrade across three workflow files, merged as 821e199.

Related issues

Issue	Project	State	Summary	Similarity
#2747 build(deps): update actions/checkout action to v7 (main)	charmcraft	merged	Renovate PR #2747 bumping actions/checkout from v6 to v7.0.0 across 9 workflow files (+17/-17) was approved and merged into main as commit c559e7ff; some snap-tests and OSV-scanner jobs failed but did not block the merge.	92%
#1638 build(deps): update actions/checkout action to v7 (main)	craft-parts	merged	Renovate PR #1638 bumped actions/checkout from v6 to v7 in two GitHub workflow files (+2/-2) and was approved and merged into main as commit 6ce6e7c7.	89%
#240 build(deps): update actions/checkout action to v7 (main)	craft-platforms	merged	Renovate PR #240 merged into main, updating actions/checkout from v6 to v7 across three workflow files in commit f97a8a4.	88%
#460 build(deps): update actions/checkout action to v7 (main)	craft-cli	merged	Renovate PR #460 bumped actions/checkout from v6 to v7 in the two workflows using it; merged into main as commit 20cad57 with all CI checks green.	88%
#193 build(deps): update actions/checkout action to v7 (main)	craft-grammar	merged	Renovate PR #193 merged as commit 4070c51, updating actions/checkout from v6 to v7 in two workflow files.	87%
#6323 build(deps): update github actions (main) (major)	snapcraft	merged	Renovate PR #6323 merged into snapcraft main, bumping actions/checkout v5/v6→v7 and actions/download-artifact v5→v8 across 7 workflow files (+20/-20); approved by 2 reviewers.	86%
#196 build(deps): update actions/checkout action to v7 (main)	starflow	merged	Merged #196: Renovate PR updating actions/checkout from v6.0.3 to v7.0.1.	86%
#963 build(deps): update actions/checkout action to v6 (main)	craft-application	merged	Renovate PR merged: actions/checkout bumped v5 -> v6 in check-renovate, release-publish and spread workflows (+4/-4). Merged via commit 66a0ad04; later superseded by #1124 upgrading to v7.	85%
#986 build(deps): update actions/checkout action to v7 (main)	craft-providers	merged	Renovate's actions/checkout v6→v7 major bump was approved and merged into main via commit 6939f1a; workflows check-renovate, release-publish and tests-weekly now pin actions/checkout@v7 (+4/-4).	85%
#6371 build(deps): update actions/setup-node action to v7 (main)	snapcraft	merged	Renovate PR #6371 was approved and merged into snapcraft main, bumping actions/setup-node from v6 to v7 in two CI workflow files (+2/-2). CI passed except integration-spread-tests-store and OSV-scanner (unrelated).	85%