Skip to content

chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 - #3

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 4.4.0 to 7.0.1.

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 23, 2026
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11d5960...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump actions/checkout from 4 to 7 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch from 3b1dc59 to 9683969 Compare July 24, 2026 09:21
@oll4com

oll4com commented Jul 24, 2026

Copy link
Copy Markdown
Owner

Superseded by #11, which includes actions/checkout 7.0.1 with persisted credentials disabled and the complete verified SpaceApp 0.1.5 release set.

@oll4com oll4com closed this Jul 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/checkout-7 branch July 24, 2026 13:20
oll4com pushed a commit that referenced this pull request Oct 22, 2026
…t leaves the files untouched when the database fails (external review 2026-10-16 #3)

- spaceapp backup pauses core, CLI, browser and Temporal (frozen, not stopped: CLI sessions
  survive), dumps in a one-off core container and always resumes; factory-reset and restore
  use the same path. Compose skips services that are not running.
- The backup also dumps the temporal and temporal_visibility databases when they exist
  (manifest schemaVersion 2; version 1 backups still restore).
- Restore extracts into staging on each root's filesystem, restores every database with
  pg_restore --single-transaction, then swaps the files in; Temporal is stopped for it.
Tests: scripts/tests/portable-backup-restore.test.mjs (Temporal dumps, v2 manifest, restore
order with a failing pg_restore), run-spaceapp backup/restore command contracts.

(cherry picked from commit 56ceb06c27a32778f08f2374330e069ddf0f6ee2)
(cherry picked from commit 73a02d81a150d29c0c35d33710d22f75cbadfbe2)
oll4com pushed a commit that referenced this pull request Oct 22, 2026
…tabase fails; Docker key file must hold only Docker's published key (internal review 1.1.7, Codex #2 and #3)

Restore: one pg_restore --single-transaction per database let the app database commit before a Temporal restore failed. Restore now copies the current databases aside (pg_dump into .spaceapp-restore-rollback on the data volume), restores each backup database, swaps the files in with a reversible move (.spaceapp-restore-previous), and on any database or swap failure restores the copies and moves the files back; if that fails too it keeps the copies, names each database left at the backup's state and prints the pg_restore command per database (or: run the same restore again). Backups leave the restore's own folders out. Docker keys: openPgpPrimaryFingerprints reads every packet of the one armored block; a file with another primary key, a second block or a malformed packet is refused before APT or RPM sees it. CHANGELOG lines for both and for the desktop sign-in fix (arrives with the source re-export). Tests: restore order, rollback after a later database fails, rollback failure prints the commands, backup excludes the restore folders; key file with an extra primary key or a second block is refused; run-spaceapp 193 + restore 7 = 200 pass.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant