Skip to content

build(deps): bump actions/checkout from 4.4.0 to 7.0.1 - #2

Merged
konih merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7
Jul 22, 2026
Merged

build(deps): bump actions/checkout from 4.4.0 to 7.0.1#2
konih merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 4.4.0 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11d5960...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump actions/checkout from 4 to 7 build(deps): bump actions/checkout from 4.4.0 to 7.0.1 Jul 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch from 7a80a82 to dd6697a Compare July 21, 2026 18:40
@sonarqubecloud

Copy link
Copy Markdown

@konih
konih merged commit 8eca4aa into main Jul 22, 2026
2 checks passed
@konih
konih deleted the dependabot/github_actions/actions/checkout-7 branch July 22, 2026 18:03
konih added a commit that referenced this pull request Aug 3, 2026
…e (P5-E2-S06)

Implement the ADR-0007 aggregation tail (decision order #4, the last check):
author-declared rule.points accrue PER FIRING (per matched-and-failed change,
Amendment 2 bulk-change guard), summed across the firing set, and compared to
the binding risk.threshold: sum <= threshold => APPROVE, over => REVIEW, only
after block (#1), challenge (#2), and uncovered/unproven obligations (#3).

- coverSubject now returns the firing count K; Cover accrues K*points per
  (rule,subject). The finding still carries the authored per-firing weight
  (finding shows w, sum counts K*w) -- intentional asymmetry, documented.
- comment is the decision-NEUTRAL soft points channel (ADR-0007: does not
  block), escalated to REVIEW only via the threshold -- but ONLY for a
  NON-required obligation. A REQUIRED obligation is satisfied-to-arm (ADR-0017
  §2): an unproven one lowers the decision regardless of effect, closing a
  live-reachable comment-onFailure fail-open (guarded by
  TestRequiredObligationCommentFiringNeverApproves). Decision logged as D-046.
- No engine effect->points default: a rule authoring no points contributes 0.
- D-016 golden byte-identical (block dominates; threshold never gates it).

REQ-E2-S06-01..05.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant