## Dependabot Update

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454


• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458


• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460


• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461


• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459


• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463


• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462


• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464


• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: https://github.com/actions/checkout/compare/v6.0.3...v7.0.0

v6.0.3

What's Changed

• Update changelog by @​ericsciple in actions/checkout#2357


• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414


• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439


• Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

• @​yaananth made their first contribution in actions/checkout#2414

Full Changelog: https://github.com/actions/checkout/compare/v6...v6.0.3

v6.0.2

What's Changed

• Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355


• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

Full Changelog: https://github.com/actions/checkout/compare/v6.0.1...v6.0.2

v6.0.1

What's Changed

• Update all references from v5 and v4 to v6 by @​ericsciple in actions/checkout#2314


• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327


• Clarify v6 README by @​ericsciple in actions/checkout#2328

Full Changelog: https://github.com/actions/checkout/compare/v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454


• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458


• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460


• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461


• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459


• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463


• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462

v6.0.3

• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439


• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286


• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971


• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977


• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043


• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044


• Update README.md by @​nebuk89 in actions/checkout#2194


• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224


• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941


• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

... (truncated)

Commits

• 9c091bb update error wording (#2467)


• 1044a6d getting ready for checkout v7 release (#2464)


• f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)


• d914b26 upgrade module to esm and update dependencies (#2463)


• 537c7ef Bump @​actions/core and @​actions/tool-cache and Remove uuid (#2459)


• 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)


• 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)


• 0f9f3aa Bump actions/publish-immutable-action (#2458)


• f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)


• See full diff in compare view

[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

## Pull Request

- PR: #13
- Author: @dependabot[bot]
- URL: https://github.com/aRustyDev/pre-commit-hooks-js/pull/13

---
This issue was automatically created to track the Dependabot update.

在仓库的 GitHub Actions 工作流文件中搜索 actions/checkout@v6，并查看 issue 中链接的 actions/checkout v7 发布说明。将 checkout 引用更新为 v7，然后运行受影响的 CI 工作流或仓库检查，并确认它们成功完成。

由索引模型根据 Issue 内容生成。