From 8101346faa63f0fc963dfdbd8c501d5dcdd9dd32 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 20:46:33 +0000 Subject: [PATCH] chore(deps): bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/dco.yml | 2 +- .github/workflows/release-artifacts.yml | 10 +++++----- .github/workflows/release-candidate.yml | 4 ++-- .github/workflows/release-republish.yml | 8 ++++---- .github/workflows/release.yml | 12 ++++++------ 5 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml index 2fd0facef..04ddfcf2e 100644 --- a/.github/workflows/dco.yml +++ b/.github/workflows/dco.yml @@ -12,7 +12,7 @@ jobs: name: Check Signed-off-by runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: repository: ${{ github.event.pull_request.head.repo.full_name }} ref: ${{ github.event.pull_request.head.sha }} diff --git a/.github/workflows/release-artifacts.yml b/.github/workflows/release-artifacts.yml index 3d92bc92f..109ff856e 100644 --- a/.github/workflows/release-artifacts.yml +++ b/.github/workflows/release-artifacts.yml @@ -121,7 +121,7 @@ jobs: steps: # No ref: — GITHUB_SHA only. CodeQL treats workflow_call checkout-with-ref # and any ref named *sha* as an untrusted checkout (cache-poisoning). - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master 2026-07-18 with: toolchain: stable @@ -285,7 +285,7 @@ jobs: if: ${{ !cancelled() && needs.build.result == 'success' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: path: artifacts @@ -320,7 +320,7 @@ jobs: if: ${{ !cancelled() && needs.build.result == 'success' }} runs-on: windows-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: path: artifacts @@ -361,7 +361,7 @@ jobs: if: ${{ !cancelled() && needs.bundle.result == 'success' && needs.windows-installer.result == 'success' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 @@ -387,7 +387,7 @@ jobs: if: ${{ !cancelled() && needs.assemble.result == 'success' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml index 3340f44eb..96985f346 100644 --- a/.github/workflows/release-candidate.yml +++ b/.github/workflows/release-candidate.yml @@ -26,7 +26,7 @@ jobs: sha: ${{ steps.source.outputs.sha }} version: ${{ steps.source.outputs.version }} steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 @@ -87,7 +87,7 @@ jobs: steps: # resolve already proved expected_sha equals GITHUB_SHA. Do not # interpolate that SHA into checkout or the npm cache key. - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 diff --git a/.github/workflows/release-republish.yml b/.github/workflows/release-republish.yml index 7c76e70ab..e19253480 100644 --- a/.github/workflows/release-republish.yml +++ b/.github/workflows/release-republish.yml @@ -46,7 +46,7 @@ jobs: sha: ${{ steps.release.outputs.sha }} version: ${{ steps.release.outputs.version }} steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 - name: Resolve released tag @@ -110,12 +110,12 @@ jobs: packages: write steps: - name: Checkout release source - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ needs.resolve.outputs.sha }} path: source - name: Checkout release infrastructure - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ needs.resolve.outputs.sha }} path: infra @@ -191,7 +191,7 @@ jobs: # The released bytes remain pinned by the tag and checksum manifest; # checking out the old tag here would also restore the bug being repaired. - name: Checkout release infrastructure - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event.repository.default_branch }} - name: Download checksum manifest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 601260f25..71d8326ae 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -31,7 +31,7 @@ jobs: sha: ${{ steps.release.outputs.sha }} version: ${{ steps.release.outputs.version }} steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 - name: Resolve release source @@ -122,7 +122,7 @@ jobs: # interpolate needs.resolve.outputs.sha into checkout or cache keys — # CodeQL treats a *sha* ref as an untrusted checkout on workflow_dispatch # (default-branch cache write). - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master 2026-07-18 with: toolchain: stable @@ -218,7 +218,7 @@ jobs: packages: write steps: - name: Checkout release infrastructure - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ needs.resolve.outputs.sha }} path: infra @@ -328,7 +328,7 @@ jobs: packages: write steps: - name: Checkout release infrastructure - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ needs.resolve.outputs.sha }} path: infra @@ -431,7 +431,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ needs.resolve.outputs.sha }} path: repo @@ -499,7 +499,7 @@ jobs: else echo "available=true" >> "${GITHUB_OUTPUT}" fi - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 if: steps.homebrew-token.outputs.available == 'true' with: ref: ${{ needs.resolve.outputs.sha }}