Bump actions/checkout from 4 to 7 by dependabot[bot] · Pull Request #114 · ThousandBirdsInc/chidori

dependabot · 2026-07-14T23:47:20Z

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464

update error wording by @aiqiaoy in actions/checkout#2467

New Contributors

@aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in actions/checkout#2500

backport fixes to releases-v6 by @aiqiaoy in actions/checkout#2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

Update changelog by @ericsciple in actions/checkout#2357

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

Update changelog for v6.0.3 by @yaananth in actions/checkout#2446

New Contributors

@yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

Clarify v6 README by @ericsciple in actions/checkout#2328

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518

Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521

Escape values passed to --unset by @aiqiaoy in actions/checkout#2530

Various dependency updates

v7.0.0

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Various dependency updates

v6.0.3

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

... (truncated)

Commits

3d3c42e prep v7.0.1 release (#2531)
2880268 escape values passed to --unset (#2530)
12cd223 trim only ascii whitespace for branch (#2521)
62661c4 skip running unsafe pr check if input is default (#2518)
e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
631c942 eslint 9 (#2474)
4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
ba09753 Bump actions/checkout from 6 to 7 (#2488)
b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
Additional commits viewable in compare view

github-actions · 2026-07-14T23:51:56Z

chidori-js cross-runtime benchmarks

Same workloads run under chidori-js, Node.js, Bun, CPython (5 timed run(s) + 1 warmup each, median reported; CPython runs each workload's hand-ported .py twin). All workloads cross-checked to produce identical results.

Startup baselines: chidori 3.0ms · node 25.4ms · bun 12.7ms · cpython 12.0ms

Execution-only time (startup baseline subtracted)

workload	chidori	node	bun	cpython	fastest
arith_loop	26.2ms (7.3×)	7.0ms (1.9×)	3.6ms	142.0ms (39.5×)	bun
array_hof	39.9ms (3.3×)	28.4ms (2.3×)	12.1ms	58.5ms (4.8×)	bun
array_push_sum	21.4ms (1.8×)	17.4ms (1.4×)	12.1ms	91.8ms (7.6×)	bun
array_sum	114.9ms (2.6×)	44.3ms	68.3ms (1.5×)	467.9ms (10.6×)	node
closures	25.6ms (8.8×)	3.2ms (1.1×)	2.9ms	126.1ms (43.1×)	bun
fib_recursive	57.4ms (7.8×)	11.5ms (1.6×)	7.4ms	112.4ms (15.2×)	bun
json_roundtrip	127.6ms (5.4×)	51.9ms (2.2×)	23.7ms	184.1ms (7.8×)	bun
mixed_helpers	217.3ms (10.0×)	21.8ms	22.0ms (1.0×)	131.0ms (6.0×)	node
mutual_recursion	78.9ms (14.0×)	10.7ms (1.9×)	5.7ms	234.5ms (41.5×)	bun
property_access	16.6ms (7.7×)	4.7ms (2.2×)	2.2ms	150.6ms (69.5×)	bun
sort	120.9ms (1.7×)	107.9ms (1.6×)	69.1ms	149.5ms (2.2×)	bun
string_build	9.6ms (3.6×)	8.5ms (3.2×)	2.7ms	316.0ms (118.0×)	bun
string_scan	16.0ms (4.1×)	8.8ms (2.2×)	3.9ms	22.0ms (5.6×)	bun
typed_array	33.4ms (3.5×)	25.5ms (2.7×)	9.4ms	139.4ms (14.8×)	bun

Total time including startup (raw wall-clock)

workload	chidori	node	bun	cpython
arith_loop	29.1ms	32.3ms	16.3ms	154.0ms
array_hof	42.9ms	53.7ms	24.8ms	70.5ms
array_push_sum	24.4ms	42.7ms	24.8ms	103.9ms
array_sum	117.8ms	69.7ms	80.9ms	479.9ms
closures	28.6ms	28.5ms	15.6ms	138.1ms
fib_recursive	60.4ms	36.8ms	20.1ms	124.4ms
json_roundtrip	130.6ms	77.3ms	36.4ms	196.2ms
mixed_helpers	220.3ms	47.1ms	34.7ms	143.1ms
mutual_recursion	81.9ms	36.0ms	18.3ms	246.5ms
property_access	19.6ms	30.0ms	14.8ms	162.6ms
sort	123.9ms	133.3ms	81.8ms	161.5ms
string_build	12.5ms	33.9ms	15.3ms	328.0ms
string_scan	19.0ms	34.1ms	16.6ms	34.0ms
typed_array	36.3ms	50.8ms	22.1ms	151.4ms

Peak memory (subprocess max RSS, median of 3 dedicated run(s))

workload	chidori	node	bun	cpython	smallest
(startup)	7.2MiB	39.4MiB (5.5×)	31.2MiB (4.3×)	9.1MiB (1.3×)	chidori
arith_loop	7.3MiB	44.3MiB (6.1×)	40.0MiB (5.5×)	9.3MiB (1.3×)	chidori
array_hof	18.9MiB	59.4MiB (3.1×)	51.0MiB (2.7×)	25.8MiB (1.4×)	chidori
array_push_sum	18.8MiB	57.3MiB (3.0×)	55.3MiB (2.9×)	28.4MiB (1.5×)	chidori
array_sum	16.4MiB	57.9MiB (3.5×)	40.7MiB (2.5×)	24.1MiB (1.5×)	chidori
closures	7.4MiB	43.3MiB (5.9×)	40.5MiB (5.5×)	9.3MiB (1.3×)	chidori
fib_recursive	7.3MiB	43.3MiB (5.9×)	39.3MiB (5.4×)	9.3MiB (1.3×)	chidori
json_roundtrip	8.1MiB	45.2MiB (5.6×)	46.3MiB (5.7×)	10.6MiB (1.3×)	chidori
mixed_helpers	7.9MiB	49.1MiB (6.2×)	62.1MiB (7.8×)	9.5MiB (1.2×)	chidori
mutual_recursion	7.2MiB	44.5MiB (6.1×)	41.8MiB (5.8×)	9.3MiB (1.3×)	chidori
property_access	7.3MiB	43.3MiB (5.9×)	40.5MiB (5.5×)	9.3MiB (1.3×)	chidori
sort	10.2MiB	57.4MiB (5.7×)	43.6MiB (4.3×)	11.6MiB (1.1×)	chidori
string_build	11.3MiB (1.2×)	47.1MiB (4.9×)	38.5MiB (4.0×)	9.7MiB	cpython
string_scan	8.4MiB	45.8MiB (5.5×)	36.5MiB (4.4×)	9.3MiB (1.1×)	chidori
typed_array	8.0MiB	46.7MiB (5.9×)	38.5MiB (4.8×)	10.5MiB (1.3×)	chidori

_{Numbers are machine- and load-dependent (shared CI runner) — read them as ratios, not absolutes. chidori-js is an interpreter, so it trails the V8/JSC JITs on compute but starts far faster and in far less memory; CPython (also an interpreter) is the like-for-like reference point. A ⚠️ marks a workload whose result disagreed across runtimes.}

In-process heap utilization (exact bytes, tracking allocator)

chidori-js heap utilization (exact, via tracking global allocator)

== realm: Engine::new() footprint ==
  retained  706.8 KiB   construction peak  707.1 KiB   churn  722.0 KiB in 8314 allocs   825 live objects

== compile: bytecode footprint (parse + lower, no execution) ==
  workload           retained       peak      churn   allocs
  arith_loop          6.3 KiB   42.0 KiB   63.1 KiB      275
  fib_recursive       8.0 KiB   43.5 KiB   60.6 KiB      301
  property_access     8.0 KiB   44.5 KiB   77.9 KiB      356
  array_push_sum      8.3 KiB   44.3 KiB   82.5 KiB      391
  array_hof          12.5 KiB   49.4 KiB   81.0 KiB      518
  string_build        6.0 KiB   41.5 KiB   56.8 KiB      196
  closures           11.4 KiB   47.5 KiB   80.1 KiB      450
  string_scan        10.3 KiB   47.5 KiB   94.4 KiB      426
  json_roundtrip     14.2 KiB   52.9 KiB   87.7 KiB      310
  object_literals     7.7 KiB   43.9 KiB   63.9 KiB      262
  typed_array        15.8 KiB   54.8 KiB  186.5 KiB      922
  mutual_recursion   17.4 KiB   55.1 KiB  108.0 KiB      743
  mixed_helpers      35.0 KiB   78.7 KiB  163.7 KiB      762

== eval: full run on a fresh engine (peak/retained over the realm baseline) ==
  workload               peak      churn   allocs   retained   after gc
  arith_loop         42.0 KiB   66.7 KiB      305    9.8 KiB    1.5 KiB
  fib_recursive      43.5 KiB   75.5 KiB      370   22.9 KiB   16.3 KiB
  property_access    44.5 KiB   83.4 KiB      402   13.2 KiB    2.7 KiB
  array_push_sum    205.0 KiB  279.4 KiB      441   13.0 KiB    2.6 KiB
  array_hof         137.3 KiB  207.2 KiB      605   18.2 KiB    2.7 KiB
  string_build      359.2 KiB  625.1 KiB    12.2k   10.3 KiB    2.3 KiB
  closures           47.5 KiB   88.2 KiB      520   19.4 KiB    4.4 KiB
  string_scan        72.0 KiB  188.6 KiB     2522   15.2 KiB    2.9 KiB
  json_roundtrip    585.2 KiB  11.59 MiB   125.4k   28.9 KiB   28.2 KiB
  object_literals   572.7 KiB   6.59 MiB    41.3k   26.6 KiB   25.9 KiB
  typed_array       146.2 KiB  317.2 KiB      974   21.2 KiB    2.8 KiB
  mutual_recursion  118.7 KiB  433.6 KiB    30.1k  118.7 KiB  100.9 KiB
  mixed_helpers     605.6 KiB   4.81 MiB    85.8k   29.7 KiB   28.1 KiB

== steady_state: 10 repeat runs on one engine (leak check; growth/run should be ~0) ==
  workload           growth/run     peak/run  churn/run
  arith_loop              605 B      2.1 KiB   11.8 KiB
  fib_recursive         1.4 KiB      4.1 KiB   13.3 KiB
  property_access         605 B      2.5 KiB   12.2 KiB
  array_push_sum          605 B    194.3 KiB  203.9 KiB
  array_hof               614 B    122.3 KiB  133.2 KiB
  string_build            605 B    351.0 KiB  575.6 KiB
  closures              1.2 KiB      4.2 KiB   15.8 KiB
  string_scan             614 B     59.4 KiB  101.1 KiB
  json_roundtrip          614 B    540.8 KiB  11.39 MiB
  object_literals         605 B    537.6 KiB   6.42 MiB
  typed_array             605 B    127.8 KiB  137.6 KiB
  mutual_recursion      1.9 KiB      5.9 KiB  241.2 KiB
  mixed_helpers         1.5 KiB    539.2 KiB   4.54 MiB

github-actions · 2026-07-14T23:54:42Z

Test262 conformance coverage

45449 / 48070 executed pass (94.55%) · 2621 fail · 2540 skip · 50610 total

Area	Pass	Fail	Skip	Pass-rate
`intl402`	1725	1540	54	52.83%
`built-ins`	20939	933	1771	95.73%
`language`	22785	148	715	99.35%
Total	45449	2621	2540	94.55%

Per-subdirectory breakdown (66 areas with failures)

Area	Pass	Fail	Skip	Pass-rate
`built-ins/Temporal`	3886	717	0	84.42%
`intl402/Temporal`	1367	662	0	67.37%
`intl402/DateTimeFormat`	3	240	1	1.23%
`intl402/NumberFormat`	135	113	1	54.44%
`intl402/DurationFormat`	0	110	0	0.00%
`intl402/ListFormat`	1	79	1	1.25%
`intl402/RelativeTimeFormat`	0	79	1	0.00%
`language/expressions`	10508	76	454	99.28%
`intl402/Segmenter`	2	75	2	2.60%
`intl402/Collator`	1	63	1	1.56%
`built-ins/RegExp`	1466	60	353	96.07%
`intl402/DisplayNames`	4	52	1	7.14%
`intl402/Intl`	33	33	0	50.00%
`language/statements`	9278	26	33	99.72%
`language/module-code`	563	19	17	96.74%
`built-ins/Array`	2956	14	111	99.53%
`built-ins/Object`	3392	12	7	99.65%
`built-ins/TypedArray`	1427	11	8	99.24%
`intl402/String`	8	11	0	42.11%
`built-ins/AsyncFromSyncIteratorPrototype`	28	10	0	73.68%
`built-ins/Function`	466	9	34	98.11%
`built-ins/Promise`	630	9	64	98.59%
`built-ins/TypedArrayConstructors`	705	9	24	98.74%
`language/global-code`	33	9	0	78.57%
`built-ins/Date`	583	8	3	98.65%
`language/eval-code`	338	8	1	97.69%
`built-ins/encodeURI`	24	7	0	77.42%
`built-ins/encodeURIComponent`	24	7	0	77.42%
`built-ins/NativeErrors`	82	6	6	93.18%
`built-ins/RegExpStringIteratorPrototype`	11	6	0	64.71%
`intl402/Locale`	101	6	45	94.39%
`intl402/BigInt`	6	5	0	54.55%
`built-ins/AsyncDisposableStack`	99	4	1	96.12%
`built-ins/DisposableStack`	88	4	1	95.65%
`built-ins/Number`	335	4	1	98.82%
`built-ins/Proxy`	270	4	37	98.54%
`intl402/PluralRules`	48	4	1	92.31%
`built-ins/AsyncGeneratorPrototype`	45	3	0	93.75%
`built-ins/DataView`	545	3	13	99.45%
`built-ins/String`	1210	3	10	99.75%
`built-ins/Symbol`	76	3	19	96.20%
`intl402/Date`	9	3	0	75.00%
`language/arguments-object`	258	3	2	98.85%
`built-ins/Error`	53	2	38	96.36%
`built-ins/Math`	325	2	0	99.39%
`built-ins/Reflect`	151	2	0	98.69%
`built-ins/Set`	379	2	2	99.48%
`built-ins/parseInt`	53	2	0	96.36%
`intl402/FallbackSymbol`	0	2	0	0.00%
`intl402/Number`	5	2	0	71.43%
`language/literals`	449	2	83	99.56%
`language/types`	109	2	2	98.20%
`built-ins/ArrayBuffer`	190	1	30	99.48%
`built-ins/BigInt`	75	1	1	98.68%
`built-ins/JSON`	141	1	23	99.30%
`built-ins/Map`	168	1	35	99.41%
`built-ins/SharedArrayBuffer`	102	1	1	99.03%
`built-ins/StringIteratorPrototype`	6	1	0	85.71%
`built-ins/WeakMap`	100	1	40	99.01%
`built-ins/WeakSet`	83	1	1	98.81%
`built-ins/decodeURI`	54	1	0	98.18%
`built-ins/decodeURIComponent`	55	1	0	98.21%
`intl402/Array`	1	1	0	50.00%
`language/destructuring`	18	1	0	94.74%
`language/function-code`	216	1	0	99.54%
`language/identifier-resolution`	13	1	0	92.86%

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 14, 2026

dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-7 branch from 66338a6 to 59544e5 Compare July 29, 2026 06:41

Navigation Menu

Uh oh!

Bump actions/checkout from 4 to 7 - #114

Bump actions/checkout from 4 to 7#114
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-7

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.0

What's Changed

New Contributors

v6.1.0

What's Changed

v6.0.3

What's Changed

New Contributors

v6.0.2

What's Changed

v6.0.1

What's Changed

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

Uh oh!

github-actions Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

chidori-js cross-runtime benchmarks

Execution-only time (startup baseline subtracted)

Total time including startup (raw wall-clock)

Peak memory (subprocess max RSS, median of 3 dedicated run(s))

In-process heap utilization (exact bytes, tracking allocator)

Uh oh!

github-actions Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test262 conformance coverage

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading

github-actions Bot commented Jul 14, 2026 •

edited

Loading

github-actions Bot commented Jul 14, 2026 •

edited

Loading