build(deps): update actions/checkout action to v7 (main)

Metadata

Project: craft-cli
Number: #460
Type: pull request
State: merged
Author: renovate[bot]
Labels: PR: Dependencies
Created: 2026-07-11 02:50 AM UTC
Updated: 2026-07-13 03:10 PM UTC
Closed: 2026-07-13 03:09 PM UTC

Current evaluation

Renovate PR #460 bumped actions/checkout from v6 to v7 in the two workflows using it; merged into main as commit 20cad57 with all CI checks green.

Resolution: closed resolved

Reason: The PR was merged into main via commit 20cad57 ("build(deps): update actions/checkout action to v7 (main) (#460)"), which updates .github/workflows/check-renovate.yaml and release-publish.yaml to actions/checkout@v7.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) ### [`v7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-cli).

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-03 02:02 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate PR #460 bumped actions/checkout from v6 to v7 in the two workflows using it; merged into main as commit 20cad57 with all CI checks green.
2026-09-25 09:34 AM UTC	stealth/space-bunny-alpha	—	closed resolved	Renovate PR canonical/craft-cli#460 merged into main, upgrading actions/checkout from v6 to v7 across two workflow files; all CI checks passed.
2026-07-23 02:04 PM UTC	qwen/qwen3.6-35b-a3b	—	—	Merged automated dependency update upgrading actions/checkout from v6 to v7. All CI checks passed, and the change was automatically merged to the main branch by Renovate.
2026-07-13 07:57 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 5 Complexity: 5 Confidence: 90	keep open	Updates actions/checkout GitHub Action from v6 to v7. Generated by Renovate with automerge enabled. Currently open and awaiting CI validation.

Update history

No update history recorded yet.

Related work

Related To: canonical/craft-cli#442 (confidence 70%)
Earlier renovate bulk bump of github actions in the same workflow files
Related To: canonical/craft-cli#474 (confidence 60%)
Follow-up renovate bump of actions/setup-node to v7 touching the same workflows

Related issues

Issue	Project	State	Summary	Similarity
#240 build(deps): update actions/checkout action to v7 (main)	craft-platforms	merged	Renovate PR #240 merged into main, updating actions/checkout from v6 to v7 across three workflow files in commit f97a8a4.	98%
#1638 build(deps): update actions/checkout action to v7 (main)	craft-parts	merged	Renovate PR #1638 bumped actions/checkout from v6 to v7 in two GitHub workflow files (+2/-2) and was approved and merged into main as commit 6ce6e7c7.	97%
#193 build(deps): update actions/checkout action to v7 (main)	craft-grammar	merged	Renovate PR #193 merged as commit 4070c51, updating actions/checkout from v6 to v7 in two workflow files.	97%
#196 build(deps): update actions/checkout action to v7 (main)	starflow	merged	Merged #196: Renovate PR updating actions/checkout from v6.0.3 to v7.0.1.	94%
#2747 build(deps): update actions/checkout action to v7 (main)	charmcraft	merged	Renovate PR #2747 bumping actions/checkout from v6 to v7.0.0 across 9 workflow files (+17/-17) was approved and merged into main as commit c559e7ff; some snap-tests and OSV-scanner jobs failed but did not block the merge.	93%
#963 build(deps): update actions/checkout action to v6 (main)	craft-application	merged	Renovate PR merged: actions/checkout bumped v5 -> v6 in check-renovate, release-publish and spread workflows (+4/-4). Merged via commit 66a0ad04; later superseded by #1124 upgrading to v7.	91%
#986 build(deps): update actions/checkout action to v7 (main)	craft-providers	merged	Renovate's actions/checkout v6→v7 major bump was approved and merged into main via commit 6939f1a; workflows check-renovate, release-publish and tests-weekly now pin actions/checkout@v7 (+4/-4).	91%
#1403 build(deps): update actions/checkout action to v6 (main)	craft-parts	merged	Renovate PR #1403 upgraded actions/checkout from v5 to v6 in two workflow files and merged into main as 773156a8.	90%
#568 build(deps): update github actions to v7 (main)	starbase	merged	Renovate PR #568 was merged via commit 7c9407b, upgrading actions/checkout from v6 to v7 in three GitHub Actions workflow files after approval and with all CI checks passing.	89%
#1124 build(deps): update actions/checkout action to v7 (main)	craft-application	merged	Renovate PR canonical/craft-application#1124 merged into main, bumping actions/checkout from v6 to v7 across three workflow files (+4/-4). Approved by 2 reviewers; snap-tests (openstack) and OSV-scanner failures did not block automerge.	88%