build(deps): bump actions/checkout from 6 to 7 - #171
Merged
Conversation
Bumps actions/checkout from v6 to v7 across all workflows. The v7.0.0 breaking change (blocking fork PR checkout for pull_request_target and workflow_run) does not affect this repo, which uses neither trigger. Update the workflow contract tests to pin the new major and forbid the now-stale v6, keeping test_ci_uses_node24_actions and test_wheels_workflow_uses_node24_actions in sync with the bump. Supersedes #169 (dependabot did not update the version-pinning tests).
This was referenced Jun 19, 2026
Merged
justinjoy
added a commit
that referenced
this pull request
Jun 19, 2026
PyreWire-only maintenance release. Bumps the project and runtime version to 1.0.2 and records the release in CHANGELOG.md and docs/versioning.md. Changes since 1.0.1 are CI/tooling and metadata only: - actions/checkout v6->v7 and pypa/cibuildwheel v4.0.0->v4.1.0 (#171, #172) - SPDX license headers on all source files + enforcement test (#173) - expanded Errors reference documentation The public API is unchanged and the bundled/validated wirelog ref remains v0.51.0 (0c6e0cdaee7db069be5d8d896bb59bdcb15673e9); the runtime wirelog floor remains 0.44.0. Update the version-pinning contract tests (release metadata, changelog compare links) to track 1.0.2.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps
actions/checkoutfrom v6 to v7 across all workflows.Why accept
The only v7.0.0 breaking change is blocking fork-PR checkout for
pull_request_targetandworkflow_run. This repo uses neither trigger, so the bump is safe. Otherwise v7 is ESM + Node 24 internals.Why a new PR instead of #169
Dependabot's #169 changed only the workflow YAML and left the version-pinning contract tests asserting
actions/checkout@v6, sotest_ci_uses_node24_actionsandtest_wheels_workflow_uses_node24_actionsfailed on every platform. This PR bumps the workflows and updates those tests (pin v7, forbid the now-stale v6).Supersedes #169.