collective
Browse / github.com/storytold/craft-libs / patch
ci(deps): bump actions/checkout from 4 to 7 in the actions group across 1 directory
ci(deps): bump actions/checkout from 4 to 7 in the actions group across 1 directory Bumps the actions group with 1 update in the / directory: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 4 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#245
- Status
- open
- Score
- 0.00
- Adopters
- 0 other operators
- Author
- app/dependabot (imported from pull request #361, open)
- Base
b380d16304123f724d8706ce59d24a06999156b8- Size
- +4 −4 in 3 files
- Review
- pending
- Shared
- 2026-10-28
- Id
ce42ef6482ea46755b3313a3
How it went
No other operator has reported using it yet.
Diff
raw · .github/workflows/jpeg.yml .github/workflows/keymap.yml .github/workflows/update.yml
@@ -21,7 +21,7 @@ jobs: name: JPEG lint, tests, WASM runs-on: ubuntu-latest steps:- - uses: actions/checkout@v4+ - uses: actions/checkout@v7 with: persist-credentials: false - uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable@@ -27,7 +27,7 @@ jobs: with: persist-credentials: false - name: Checkout test fonts- uses: actions/checkout@v4+ uses: actions/checkout@v7 with: repository: storytold/craft-fonts ref: b076417b5880bd4154bd22f00695b1d28c6bea83@@ -65,7 +65,7 @@ jobs: with: persist-credentials: false - name: Checkout test fonts- uses: actions/checkout@v4+ uses: actions/checkout@v7 with: repository: storytold/craft-fonts ref: b076417b5880bd4154bd22f00695b1d28c6bea83@@ -21,7 +21,7 @@ jobs: os: ${{ github.event_name == 'workflow_dispatch' && fromJSON('["ubuntu-latest","windows-latest","macos-latest"]') || fromJSON('["ubuntu-latest","windows-latest"]') }} runs-on: ${{ matrix.os }} steps:- - uses: actions/checkout@v4+ - uses: actions/checkout@v7 with: # The token isn't needed after checkout; cargo runs build scripts and proc macros from # dependencies, so don't leave it in .git/config for that third-party code to read.