Skip to content

Update checkout action runtime pin - #4

Merged
mberman84 merged 1 commit into
mainfrom
codex/deploybot-v020-checkout-v7
Jun 21, 2026
Merged

mberman84 merged 1 commit into
mainfrom
codex/deploybot-v020-checkout-v7

Conversation

@mberman84

Copy link
Copy Markdown
Contributor

Summary

  • pin checkout v7.0.0 by immutable commit in CI and the consumer example
  • add a drift test for both privileged workflow surfaces

This removes the Node 20 deprecation warning and includes checkout v7 protection against fork-head checkout in privileged pull_request_target and workflow_run jobs.

Verification

  • 76 tests + 11 subtests
  • Ruff

@mberman84
mberman84 merged commit 484c12d into main Jun 21, 2026
3 checks passed
@mberman84
mberman84 deleted the codex/deploybot-v020-checkout-v7 branch June 21, 2026 00:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant