From 20e5cc6e2d127baafa479fb46ad9b4bf57a56021 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 02:22:00 +0000 Subject: [PATCH] chore(deps): update actions/checkout action to v7 --- .github/workflows/_checks.yml | 6 +++--- .github/workflows/_release-github-release.yml | 2 +- .github/workflows/_release-publish.yml | 2 +- .github/workflows/_release-verify.yml | 4 ++-- .github/workflows/ga-evidence.yml | 2 +- .github/workflows/governance-enforce.yml | 2 +- .github/workflows/license-truth.yml | 4 ++-- .github/workflows/public-repo-guard.yml | 2 +- .github/workflows/release-drift.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/smoke-install.yml | 4 ++-- 11 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/_checks.yml b/.github/workflows/_checks.yml index 9dd6ea6..2ed2ccc 100644 --- a/.github/workflows/_checks.yml +++ b/.github/workflows/_checks.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Secret scan (fail-closed, allowlist-aware) @@ -51,7 +51,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 @@ -111,7 +111,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: URL convention gate diff --git a/.github/workflows/_release-github-release.yml b/.github/workflows/_release-github-release.yml index 50e926a..25243f3 100644 --- a/.github/workflows/_release-github-release.yml +++ b/.github/workflows/_release-github-release.yml @@ -30,7 +30,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.sha }} persist-credentials: false diff --git a/.github/workflows/_release-publish.yml b/.github/workflows/_release-publish.yml index e206c03..1c3733c 100644 --- a/.github/workflows/_release-publish.yml +++ b/.github/workflows/_release-publish.yml @@ -52,7 +52,7 @@ jobs: outputs: already_published: ${{ steps.check.outputs.already_published }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.sha }} persist-credentials: false diff --git a/.github/workflows/_release-verify.yml b/.github/workflows/_release-verify.yml index 1fb48ed..e3d4e2d 100644 --- a/.github/workflows/_release-verify.yml +++ b/.github/workflows/_release-verify.yml @@ -33,7 +33,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.sha }} persist-credentials: false @@ -70,7 +70,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.sha }} persist-credentials: false diff --git a/.github/workflows/ga-evidence.yml b/.github/workflows/ga-evidence.yml index b51fc98..c4bbd3d 100644 --- a/.github/workflows/ga-evidence.yml +++ b/.github/workflows/ga-evidence.yml @@ -40,7 +40,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/governance-enforce.yml b/.github/workflows/governance-enforce.yml index 98dee26..91c74fa 100644 --- a/.github/workflows/governance-enforce.yml +++ b/.github/workflows/governance-enforce.yml @@ -43,7 +43,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/license-truth.yml b/.github/workflows/license-truth.yml index 7dc3be6..40d299c 100644 --- a/.github/workflows/license-truth.yml +++ b/.github/workflows/license-truth.yml @@ -33,7 +33,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -58,7 +58,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/public-repo-guard.yml b/.github/workflows/public-repo-guard.yml index 719718a..fab8ae5 100644 --- a/.github/workflows/public-repo-guard.yml +++ b/.github/workflows/public-repo-guard.yml @@ -42,7 +42,7 @@ jobs: name: Secrets + content policy runs-on: ubuntu-latest steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # gitleaks' GitHub Action requires a paid license for organizations; the CLI # itself is MIT-licensed and free. Pin the version AND verify the release diff --git a/.github/workflows/release-drift.yml b/.github/workflows/release-drift.yml index 02e1e81..d165a24 100644 --- a/.github/workflows/release-drift.yml +++ b/.github/workflows/release-drift.yml @@ -39,7 +39,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c723279..8500fb4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -66,7 +66,7 @@ jobs: version: ${{ steps.tag.outputs.version }} sha: ${{ steps.tag.outputs.sha }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/smoke-install.yml b/.github/workflows/smoke-install.yml index d8fca8b..9ea2aae 100644 --- a/.github/workflows/smoke-install.yml +++ b/.github/workflows/smoke-install.yml @@ -42,7 +42,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false @@ -104,7 +104,7 @@ jobs: matrix: node: [20, 22] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false