build(deps): update github actions (main) (major)
Metadata
Current evaluation
Renovate's major actions/checkout v6→v7 bump was approved and merged into main via commit 62207a8, updating four workflow files (check-renovate, qa, release-publish, schema).
Resolution: closed resolved
Reason: The PR was merged into main as commit 62207a8 ('build(deps): update github actions (main) (major) (#168)'). The tree now pins actions/checkout@v7 across .github/workflows/check-renovate.yaml, qa.yaml, release-publish.yaml and schema.yaml, matching the PR's +5/-5 diff.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v6` → `v7` |
---
### Release Notes
<details>
<summary>actions/checkout (actions/checkout)</summary>
### [`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)
[Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.0)
- Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in [#​2454](https://redirect.github.com/actions/checkout/pull/2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2458](https://redirect.github.com/actions/checkout/pull/2458)
- Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2460](https://redirect.github.com/actions/checkout/pull/2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2461](https://redirect.github.com/actions/checkout/pull/2461)
- Bump [@​actions/core](https://redirect.github.com/actions/core) and [@​actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2459](https://redirect.github.com/actions/checkout/pull/2459)
- upgrade module to esm and update dependencies by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in [#​2463](https://redirect.github.com/actions/checkout/pull/2463)
- Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2462](https://redirect.github.com/actions/checkout/pull/2462)
### [`v7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)
[Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v7.0.0)
- Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in [#​2454](https://redirect.github.com/actions/checkout/pull/2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2458](https://redirect.github.com/actions/checkout/pull/2458)
- Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2460](https://redirect.github.com/actions/checkout/pull/2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2461](https://redirect.github.com/actions/checkout/pull/2461)
- Bump [@​actions/core](https://redirect.github.com/actions/core) and [@​actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2459](https://redirect.github.com/actions/checkout/pull/2459)
- upgrade module to esm and update dependencies by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in [#​2463](https://redirect.github.com/actions/checkout/pull/2463)
- Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2462](https://redirect.github.com/actions/checkout/pull/2462)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/debcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIzNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJQUjogRGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate's major actions/checkout v6→v7 bump was approved and merged into main via commit 62207a8, updating four workflow files (check-renovate, qa, release-publish, schema). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #168 in commit 62207a8, upgrading actions/checkout from v6 to v7 across four GitHub Actions workflow files. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #168 merged via commit 62207a8, bumping actions/checkout from v6 to v7 across 4 workflow files (check-renovate, qa, release-publish, schema; +5/-5). | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR merged as commit 62207a8: actions/checkout bumped v6 → v7 across .github/workflows/{check-renovate,qa,release-publish,schema}.yaml. All CI checks passed except OSV-scanner. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR merged as commit 62207a8, bumping actions/checkout from v6 to v7 in 4 workflow files (+5/-5); workflows now pin actions/checkout@v7. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #168 (actions/checkout v6 → v7, the only change) was merged into main as commit 62207a8, updating 4 workflow files (+5/-5). All test/lint checks passed; only Security scan / OSV-scanner was red. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/debcraft#168 as commit 62207a8, upgrading actions/checkout from v6 to v7 in four workflow files. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged an automated dependency update that upgraded the actions/checkout GitHub Action from v6 to v7. The Renovate-generated PR passed all required CI checks and was successfully integrated into the main branch. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency update upgrading actions/checkout from v6 to v7. Applied via Renovate bot with automerge enabled, integrating major release v7.0.0 into the main branch. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #986 build(deps): update actions/checkout action to v7 (main) | craft-providers | merged | Renovate's actions/checkout v6→v7 major bump was approved and merged into main via commit 6939f1a; workflows check-renovate, release-publish and tests-weekly now pin actions/checkout@v7 (+4/-4). | |
| #54 build(deps): update actions/checkout action to v6 (main) | craft-artifacts | merged | Renovate's automated major bump of actions/checkout v5 to v6 merged into main via commit ab36720, updating three workflow files (check-renovate, experimental, release-publish). | |
| #58 build(deps): update github actions (main) (major) | craft-artifacts | merged | Merged Renovate PR #58 into main, updating actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 in commit 464bf02. | |
| #474 build(deps): update actions/setup-node action to v7 (main) | craft-cli | merged | Renovate's actions/setup-node v6→v7 major bump merged into main via commit bb83cd8 (PR #474), updating .github/workflows/check-renovate.yaml with all CI checks green. | |
| #48 build(deps): update github actions (main) (major) | craft-artifacts | merged | Renovate's major GitHub Actions bump PR was approved and merged as commit b045f91, moving download-artifact v5→v6, setup-node v5→v6 and upload-artifact v4→v5 in the CI workflows. | |
| #1057 build(deps): update github actions (main) (major) | craft-application | merged | Merged Renovate PR #1057 in commit 33607e21, updating actions/download-artifact v6→v8 and actions/upload-artifact v5→v7. | |
| #393 build(deps): update github actions (main) (major) | imagecraft | merged | Merged Renovate PR #393, upgrading six GitHub Actions across five workflows; all reported CI checks passed. | |
| #963 build(deps): update actions/checkout action to v6 (main) | craft-application | merged | Renovate PR merged: actions/checkout bumped v5 -> v6 in check-renovate, release-publish and spread workflows (+4/-4). Merged via commit 66a0ad04; later superseded by #1124 upgrading to v7. | |
| #196 build(deps): update github actions (main) (major) | craft-platforms | merged | Merged Renovate PR #196 into main, upgrading checkout, download-artifact, and setup-node to v6, upload-artifact to v5, and CI Node.js from 22 to 24. | |
| #91 build(deps): update github actions (main) (major) | debcraft | merged | Renovate PR #91 merged into main, upgrading actions/download-artifact v7→v8 and actions/upload-artifact v6→v7. |