Skip to content

build(deps): bump actions/checkout from 5 to 7 - #1

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7
Closed

build(deps): bump actions/checkout from 5 to 7#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown

Bumps actions/checkout from 5 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch from 0a57c5e to fdd69a2 Compare July 26, 2026 23:07
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch from fdd69a2 to ae37577 Compare July 27, 2026 16:40
AaronDJohnson added a commit that referenced this pull request Jul 27, 2026
Three pre-release changes that all had to land before the first tag, since
each is free now and costs a deprecation cycle afterwards.

**Block.** The unit of work is now a block: `Block`, `NoiseBlock`,
`EchoBlock`, `check_block`, `turntable.block`. That is the word blocked
Gibbs already uses for a jointly-updated group of parameters, so the
protocol name states what the sampler is doing rather than borrowing a term
("segment") that suggests a slice of the data. Several docstrings had
already drifted into saying "block" informally; they are now consistent.

**Turn.** One pass over every block is a full turn of the wheel:
`run(full_turns=...)`, `on_turn=...`, `check_block(n_turns=...)`. The Monte
Carlo literature calls this a sweep, and `run`'s docstring says so -- but a
block's own sampler *steps* many times inside a single `step()` call, and
turntable needs those two scales to be unmistakable. GLASS, the reference
LISA global fit, offers no incumbent term to defer to: its main loop is an
unnamed do/while, and its only nearby word, `cycle`, means per-module
repeats. "Iteration" is retired entirely -- it was the one word that could
plausibly mean either scale.

`examples/gb_model.py` shows the payoff: `steps_per_sweep * n_sweeps` became
`steps_per_turn * full_turns`, where before you had to know which "sweep"
was Eryn's and which was the Wheel's.

519 substitutions across 19 files; both module renames done with git mv so
history follows.

**tests/test_docs.py.** The README was the only substantial code in the repo
under no test, and it is the first thing a new user copies. Three levels:
every fenced block must parse; every call into a turntable API must use
keyword arguments that exist in the live signature (this catches exactly the
rename above, even in fragments that cannot be executed); and blocks tagged
`<!-- runnable -->` must run to completion in a fresh interpreter. The tag is
an HTML comment, so it is invisible on GitHub and stripped by PyPI's
renderer. Mutation-checked: a stale class name, a stale method name, a typo
in the quickstart, and `n_iterations=` in place of `full_turns=` are all
caught.

**Pins.** actions/checkout v5->v7, upload-artifact v4->v7,
download-artifact v4->v8 (tags verified to exist), and the uv_build floor to
>=0.11.32,<0.12.0 -- what Dependabot #1-#4 proposed, applied to both
workflows at once so ci.yml and release.yml cannot drift apart.
setup-uv stays pinned at the exact v9.0.0: there is still no floating v9 tag.

Verified beyond the suite: demo.ipynb executed cell by cell, demo.py and
toy_fit.py run (the toy fit still converges -- RMS 0.4990, sigma draw
0.4919), gb_model imports against the real LISA stack, and the sdist builds
with the new backend floor and runs all 182 tests from the unpacked tree.
100% branch coverage; ruff and mypy clean.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Author

Looks like actions/checkout is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 27, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/checkout-7 branch July 27, 2026 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants