From c818128c1c694aa394c1cc281771189644ab7abd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Jul 2026 06:14:26 +0000 Subject: [PATCH] chore(deps): bump actions/checkout from 4.3.1 to 7.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4.3.1...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build-guides-freshness.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/copy-docs-freshness.yml | 2 +- .github/workflows/dco.yml | 2 +- .github/workflows/deploy-docs.yml | 2 +- .github/workflows/pr.yml | 24 +++++++++---------- .../workflows/reconcile-tracking-issues.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/secrets-defense.yml | 6 ++--- 9 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/build-guides-freshness.yml b/.github/workflows/build-guides-freshness.yml index 94183687..ca4b8b0a 100644 --- a/.github/workflows/build-guides-freshness.yml +++ b/.github/workflows/build-guides-freshness.yml @@ -51,7 +51,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: # Enough history for the diagnostic `git status` to resolve cleanly. fetch-depth: 50 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 19dcd5a8..66f97c3d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -52,7 +52,7 @@ jobs: build-mode: none steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Initialize CodeQL uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 diff --git a/.github/workflows/copy-docs-freshness.yml b/.github/workflows/copy-docs-freshness.yml index 59e903fd..e21ed87f 100644 --- a/.github/workflows/copy-docs-freshness.yml +++ b/.github/workflows/copy-docs-freshness.yml @@ -42,7 +42,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: # Enough history for the diagnostic `git status` to resolve cleanly. fetch-depth: 50 diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml index 16b90e3a..bcd0ba9d 100644 --- a/.github/workflows/dco.yml +++ b/.github/workflows/dco.yml @@ -16,7 +16,7 @@ jobs: name: DCO sign-off check runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: # Fetch full history so `git log ..HEAD` resolves. fetch-depth: 0 diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml index 7c47b154..613d7c9c 100644 --- a/.github/workflows/deploy-docs.yml +++ b/.github/workflows/deploy-docs.yml @@ -40,7 +40,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 # full history for any git-revision-date plugin diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 8eba2b34..f855eb1b 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -135,7 +135,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 @@ -190,7 +190,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 with: @@ -219,7 +219,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 with: @@ -263,7 +263,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 with: @@ -335,7 +335,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 with: @@ -401,7 +401,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6 with: version: 9 @@ -494,7 +494,7 @@ jobs: --health-timeout 5s --health-retries 12 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 @@ -633,7 +633,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 @@ -701,7 +701,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6 with: @@ -783,7 +783,7 @@ jobs: # job-level. See infra_solr_smoke_stability spec FR-2 + AC-2. COMPOSE_PROJECT_NAME: "relyloop" steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 # Python + uv so `uv run pytest` works on the smoke runner (parallel to # the backend job; doesn't share its venv). @@ -1065,7 +1065,7 @@ jobs: # with the other jobs removes ~65s from the critical path. timeout-minutes: 15 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 @@ -1154,7 +1154,7 @@ jobs: # the smoke job + `RELYLOOP_SKIP_BUILD=1` to bypass install.sh's build step. timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 diff --git a/.github/workflows/reconcile-tracking-issues.yml b/.github/workflows/reconcile-tracking-issues.yml index 14cb1012..b4b8f3ad 100644 --- a/.github/workflows/reconcile-tracking-issues.yml +++ b/.github/workflows/reconcile-tracking-issues.yml @@ -50,7 +50,7 @@ jobs: reconcile: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Reconcile planned_features/ ↔ tracking issues env: GH_TOKEN: ${{ github.token }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 37cafb9c..108e93fa 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -26,7 +26,7 @@ jobs: id-token: write # publish results to the public API (badge) steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false diff --git a/.github/workflows/secrets-defense.yml b/.github/workflows/secrets-defense.yml index e877ed46..9087e6f7 100644 --- a/.github/workflows/secrets-defense.yml +++ b/.github/workflows/secrets-defense.yml @@ -44,7 +44,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 2 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: # Need enough history for `git diff origin/...HEAD` and # `git diff HEAD~1 HEAD` to resolve. @@ -79,7 +79,7 @@ jobs: # digest before extracting/executing. Bump alongside GITLEAKS_VERSION. GITLEAKS_SHA256: 5bc41815076e6ed6ef8fbecc9d9b75bcae31f39029ceb55da08086315316e3ba steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: # Scan the full PR diff against origin/; need history to resolve. fetch-depth: 50 @@ -124,7 +124,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 2 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Set up Python uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 with: