build(deps): update github actions (main) (major)

Metadata

Project: craft-store
Number: #389
Type: pull request
State: merged
Author: renovate[bot]
Labels: PR: Dependencies
Created: 2026-06-20 11:43 AM UTC
Updated: 2026-06-22 08:56 PM UTC
Closed: 2026-06-22 08:56 PM UTC

Current evaluation

Merged PR #389 in commit 4741edc, upgrading actions/checkout from v6 to v7 across three GitHub Actions workflow files.

Resolution: closed resolved

Reason: PR #389 was merged as commit 4741edc after approval and with all reported CI checks passing. The workflows now use actions/checkout@v7.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v6` → `v7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/93) for more information. --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) ### [`v7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-store).

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-03 01:50 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Merged PR #389 in commit 4741edc, upgrading actions/checkout from v6 to v7 across three GitHub Actions workflow files.
2026-09-25 09:24 AM UTC	stealth/space-bunny-alpha	—	closed resolved	Merged canonical/craft-store#568 via 7c9407b, upgrading actions/checkout from v6 to v7 in three workflow files after CI and review approval.
2026-07-23 01:56 PM UTC	qwen/qwen3.6-35b-a3b	—	—	Merged automated dependency update upgrading actions/checkout from v6 to v7. Approved by one reviewer, passed all CI checks, and integrated into the main branch.
2026-07-04 08:12 PM UTC	qwen3.6-35b-a3b-mtp-q6	—	—	Merged automated dependency update upgrading actions/checkout from v6 to v7 on the main branch. Applied via Renovate bot with automerge enabled, incorporating major release v7.0.0 changes and internal dependency bumps.

Update history

No update history recorded yet.

Related issues

Issue	Project	State	Summary	Similarity
#568 build(deps): update github actions to v7 (main)	starbase	merged	Renovate PR #568 was merged via commit 7c9407b, upgrading actions/checkout from v6 to v7 in three GitHub Actions workflow files after approval and with all CI checks passing.	95%
#479 build(deps): update github actions (main) (major)	starbase	merged	Merged PR #479 upgraded actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 in commit 6910a9b.	92%
#161 build(deps): update github actions (main) (major)	craft-grammar	merged	Merged into main as df24140, upgrading actions/download-artifact from v6 to v7 and actions/upload-artifact from v5 to v6; all reported CI checks passed.	92%
#442 build(deps): update github actions (main) (major)	craft-cli	merged	Merged #442 in commit 34ac01a, upgrading checkout to v6, artifact actions to v8/v7, Node to 24, and action-gh-release to v3.	91%
#361 build(deps): update github actions (main) (major)	craft-store	merged	Merged as commit 417e2be, upgrading six GitHub Actions dependencies to their latest major versions.	91%
#91 build(deps): update github actions (main) (major)	debcraft	merged	Renovate PR #91 merged into main, upgrading actions/download-artifact v7→v8 and actions/upload-artifact v6→v7.	90%
#407 build(deps): update github actions to v7 (main)	craft-store	merged	Merged PR #407 via commit 5b6e8f7, upgrading actions/setup-node and actions/setup-python from v6 to v7 in CI workflows.	90%
#497 build(deps): update github actions (main) (major)	starbase	merged	Renovate PR #497 merged via commit 01a6030, bumping actions/download-artifact v7 to v8 and actions/upload-artifact v6 to v7 in CI workflows. Approved by 2 reviewers with all CI checks passing.	90%
#1561 build(deps): update github actions (main) (major)	craft-parts	merged	Merged #1561 as 38ab5715, updating download-artifact v6→v8, upload-artifact v5→v7, and action-gh-release v2→v3.	89%
#218 build(deps): update github actions (main) (major)	craft-platforms	merged	Renovate PR #218 merged in commit ebf4332, updating actions/upload-artifact v6→v7 and softprops/action-gh-release v2→v3.	89%