Skip to content

ci: bump actions/checkout from 6 to 7 - #1

Merged
pbean merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7
Jun 21, 2026
Merged

ci: bump actions/checkout from 6 to 7#1
pbean merged 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 6 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 21, 2026
@pbean
pbean merged commit 336bb23 into main Jun 21, 2026
6 checks passed
@pbean
pbean deleted the dependabot/github_actions/actions/checkout-7 branch June 21, 2026 20:20
dracic added a commit to dracic/bmad-auto that referenced this pull request Jun 24, 2026
…e-on-drift)

merge_hooks was idempotent on presence only, so a stale pre-port hook entry (old python3 interpreter, or a claude/Windows entry missing shell: powershell) survived re-init. Detect drift against the canonical _hook_entry and rewrite the managed entry in place; stays idempotent when already canonical and never touches foreign entries. Signature/return contract unchanged (probe.py also relies on it).

Refs: _bmad-output/implementation-artifacts/deferred-work.md (deferred-work.md, Adversarial-review deferrals bmad-code-org#1)

Claude-Session: https://claude.ai/code/session_019ohWeC44Mto4upsYNNaVh8
dracic added a commit to dracic/bmad-auto that referenced this pull request Jun 24, 2026
_copy_library shelled out to GNU cp unconditionally, so Unity Library priming failed on a Windows host without Git-for-Windows coreutils on PATH. Add a shutil.copytree deep-copy fallback guarded by shutil.which("cp") is None, sharing the same volatile/lock/pid stripping and success/failure semantics as the cp path. The cp path is kept where available to preserve CoW reflink benefits.

Refs: _bmad-output/implementation-artifacts/deferred-work.md (deferred-work.md, Windows test-suite greening residuals bmad-code-org#1)

Claude-Session: https://claude.ai/code/session_019ohWeC44Mto4upsYNNaVh8
pbean added a commit that referenced this pull request Jul 23, 2026
…findings (#276)

A second-model adversarial review of PR #277 surfaced 7 valid findings. This
lands the fixes for six of them (the 7th, a repo-wide policy-coercion
consistency issue, is deferred to a follow-up):

- #1 (High) M2 transition now outranks the M1 hash gate. A clean review that
  round-trips done->in-review->done back to byte-identical launch bytes while
  omitting its marker no longer false-refuses; the hash gate refuses only when
  no transition was observed. Safe: the dead-window false positive never records
  a transition (status never leaves `done`).
- #2 (High) The stories-mode folder+id read-back now applies the same
  launch-snapshot gate, closing the identical false completion it previously
  bypassed (it accepted on the mtime floor alone). Inert on a dev leg (no
  snapshot).
- #3 (High) The three in-place spec rewriters (append/strip/reset) now write
  atomically (temp + atomic_replace), so an interrupted/disk-full repair leaves
  the original spec intact instead of truncated.
- #4 (Med) Adds engine-level coverage of the synthesized-REVIEW repair path
  (including a follow-up review that rewrites the spec) plus regressions for
  #1/#2/#3/#5/#7 and a _snapshot_verdict truth-table.
- #5 (Low) Snapshot/candidate identity is now by resolved filesystem path
  (_same_spec), not raw string spelling, so a `..`/symlink/case alias can't
  disable M1/M2.
- #7 (Low) A spec ending in a bare `\r` no longer receives an invisible heading
  (completed to CRLF so the scan's `^` regex sees it).

#1 and #2 share a single `_snapshot_verdict` helper so the "M2 outranks M1"
rule can't drift between the two paths. All edits sit on `_DevSynthesisMixin`,
covering both the tmux and OpenCode adapters.
pbean added a commit that referenced this pull request Jul 25, 2026
The psmux fix establishes a cross-backend invariant that lived nowhere a
backend author reads: `list_window_ids` must emit the same id form
`new_window` returns, because `window_alive` is a membership test over it —
qualify one side and not the other and every live window reads as instantly
dead. #254's implementation notes called this trap #1; the ABC and the
authoring guide were both silent on it.

Also corrects a claim the fix invalidated: the guide said the parked-window
return target is "the one value composed by the backend itself", and psmux
now composes two. Notes in the backend why `_qualified_window_id` hand-builds
`session:@N` instead of calling `self.target()` (which must stay a by-name
token), and that the TUI-side mint/list surfaces deliberately stay bare (#291).

Adds the one test the six new ones were missing: #254 is about the `-t` argv,
not the return value, so pin that a minted qualified id reaches `pipe-pane -t`
verbatim through the override that reimplements that verb.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant