Update Renovatebot GHA Updates - #789
Closed
ci-protocols-renovate[bot] wants to merge 1 commit into
Closed
ci-protocols-renovate[bot] wants to merge 1 commit into
ci-protocols-renovate[bot] wants to merge 1 commit into
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
I have read the CLA Document and I hereby sign the CLA You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v6.0.2→v6.1.0de0fac2→d23441a036f295→568ec8dWarning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
actions/checkout (actions/checkout)
v6.1.0Compare Source
What's Changed
allow-unsafe-pr-checkoutto v6 by @aiqiaoy in #2500https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change
Full Changelog: actions/checkout@v6.0.3...v6.1.0
v6.0.3Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.
Note
Low Risk
CI-only pin updates with no application or runtime changes; v6.1.0’s checkout behavior change mainly affects
pull_request_targetflows, and the touched workflows use standardpull_requestcheckout.Overview
Renovate bumps pinned GitHub Actions across the CI workflows under
.github/workflows/.actions/checkoutmoves from v6.0.2 to v6.1.0 (new commit SHA) in build, case, links, lint, nightly, renovatebot, spelling, and both Trivy workflows.umbrelladocs/action-linkspectoris repinned to a new digest only in the nightly link-check job.No workflow triggers, job structure, or Consensys wrapper action versions change—only third-party action references.
Reviewed by Cursor Bugbot for commit 55e5faa. Bugbot is set up for automated code reviews on this repo. Configure here.