build(deps): bump actions/checkout from 7.0.0 to 7.0.1 - #1187
Closed
chrisferry wants to merge 2 commits into
Closed
Conversation
Supersedes #1165. With sha_pinning_required enabled on this repo, GitHub Actions silently creates no runs for dependabot-authored PRs that modify workflow files, so the required scan check can never report there. Identical diff, human-authored so workflows trigger. SHA verified: 3d3c42e5 = v7.0.1 tag. Assisted-by: Claude <noreply@anthropic.com>
|
Deployment failed for project midnight-wiki with the following error: View Documentation: https://vercel.com/docs/two-factor-authentication |
This was referenced Aug 6, 2026
Assisted-by: Claude <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Supersedes #1165 (dependabot). That PR can never go green: this repo has the new
sha_pinning_requiredActions policy, and with it enabled GitHub creates no workflow runs at all for dependabot-authored PRs that modify.github/workflows/**— the requiredscancheck never reports. Verified across every event type (dependabot recreate, web-flow update-branch, human close/reopen all silent; human workflow-PRs and non-workflow dependabot PRs run fine; midnight-iac with the policy off runs its dependabot workflow bumps normally).Identical diff to #1165, human-authored so workflows trigger.
3d3c42e5verified as the realactions/checkoutv7.0.1 tag commit.🤖 Generated with Claude Code