From 2b6d4ccaf733725ce5d6eef61bdb282b55ce0001 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 11:56:57 +0000 Subject: [PATCH] build(deps): bump actions/checkout in /.github/workflows Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6.0.2...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/bump-go-toolchain.yml | 2 +- .github/workflows/bump-vuln-deps.yml | 2 +- .github/workflows/changelog-preview.yml | 2 +- .github/workflows/check.yml | 2 +- .github/workflows/conftest.yml | 2 +- .github/workflows/external-message.yml | 2 +- .github/workflows/maintainer-approval.yml | 2 +- .github/workflows/push.yml | 14 +++++++------- .github/workflows/python_push.yml | 6 +++--- .github/workflows/release-build.yml | 8 ++++---- .github/workflows/release-docker.yml | 2 +- .github/workflows/test-owners-scripts.yml | 2 +- .github/workflows/update-schema-docs.yml | 2 +- 13 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/bump-go-toolchain.yml b/.github/workflows/bump-go-toolchain.yml index 0c7cec7ba82..d75a96a5dd4 100644 --- a/.github/workflows/bump-go-toolchain.yml +++ b/.github/workflows/bump-go-toolchain.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Determine current toolchain version id: current diff --git a/.github/workflows/bump-vuln-deps.yml b/.github/workflows/bump-vuln-deps.yml index 80386961e37..49118554333 100644 --- a/.github/workflows/bump-vuln-deps.yml +++ b/.github/workflows/bump-vuln-deps.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup JFrog uses: ./.github/actions/setup-jfrog diff --git a/.github/workflows/changelog-preview.yml b/.github/workflows/changelog-preview.yml index ebe37e52dd3..0aab113989b 100644 --- a/.github/workflows/changelog-preview.yml +++ b/.github/workflows/changelog-preview.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install uv uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index f394537b9b7..c51c6f744f1 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: diff --git a/.github/workflows/conftest.yml b/.github/workflows/conftest.yml index 1fc410e0790..89959b5d2fd 100644 --- a/.github/workflows/conftest.yml +++ b/.github/workflows/conftest.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install conftest run: |- diff --git a/.github/workflows/external-message.yml b/.github/workflows/external-message.yml index e9ef0ce13d5..fe674b6a7ce 100644 --- a/.github/workflows/external-message.yml +++ b/.github/workflows/external-message.yml @@ -25,7 +25,7 @@ jobs: if: "${{ github.event.pull_request.head.repo.fork }}" steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Delete old comments env: diff --git a/.github/workflows/maintainer-approval.yml b/.github/workflows/maintainer-approval.yml index 9af75f2e288..6bf1dad74ee 100644 --- a/.github/workflows/maintainer-approval.yml +++ b/.github/workflows/maintainer-approval.yml @@ -56,7 +56,7 @@ jobs: checks: write contents: read steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.pull_request.base.sha }} persist-credentials: false diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 4f39093beb3..ec890479824 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -37,7 +37,7 @@ jobs: targets: ${{ steps.mask1.outputs.targets || steps.mask2.outputs.targets || steps.mask3.outputs.targets }} steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 @@ -130,7 +130,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup build environment uses: ./.github/actions/setup-build-environment @@ -234,7 +234,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup build environment uses: ./.github/actions/setup-build-environment @@ -286,7 +286,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup build environment uses: ./.github/actions/setup-build-environment @@ -345,7 +345,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup build environment uses: ./.github/actions/setup-build-environment @@ -397,7 +397,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup build environment uses: ./.github/actions/setup-build-environment @@ -448,7 +448,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Dedicated cache-key so this job's Go cache doesn't evict the primary # test caches from the 10 GB GHA quota. diff --git a/.github/workflows/python_push.yml b/.github/workflows/python_push.yml index bc3c6cd163a..9829935f1c1 100644 --- a/.github/workflows/python_push.yml +++ b/.github/workflows/python_push.yml @@ -30,7 +30,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Go uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 @@ -52,7 +52,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Go uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 @@ -73,7 +73,7 @@ jobs: steps: - name: Checkout repository and submodules - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Go uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml index fc47bd6081c..d29ae4abee5 100644 --- a/.github/workflows/release-build.yml +++ b/.github/workflows/release-build.yml @@ -35,7 +35,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 fetch-tags: true @@ -45,7 +45,7 @@ jobs: # composite actions (e.g. setup-jfrog) and the goreleaser config are # available even when the built ref is an older tag that predates them. - name: Checkout workflow ref for local actions - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.sha }} path: .workflow-actions @@ -148,7 +148,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 fetch-tags: true @@ -158,7 +158,7 @@ jobs: # composite actions (e.g. setup-jfrog) and the goreleaser config are # available even when the built ref is an older tag that predates them. - name: Checkout workflow ref for local actions - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.sha }} path: .workflow-actions diff --git a/.github/workflows/release-docker.yml b/.github/workflows/release-docker.yml index 61de450e821..5757f516a5c 100644 --- a/.github/workflows/release-docker.yml +++ b/.github/workflows/release-docker.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Checkout repository at release tag - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.tag }} diff --git a/.github/workflows/test-owners-scripts.yml b/.github/workflows/test-owners-scripts.yml index b80c6fdc26b..cbb56c56783 100644 --- a/.github/workflows/test-owners-scripts.yml +++ b/.github/workflows/test-owners-scripts.yml @@ -19,7 +19,7 @@ jobs: steps: # Full checkout (no sparse-checkout): `owners.js validate` verifies that # every OWNERS path exists in the tree, so it needs the whole repo. - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run OWNERS script tests run: node --test .github/scripts/owners.test.js .github/workflows/maintainer-approval.test.js - name: Validate OWNERS and OWNERTEAMS diff --git a/.github/workflows/update-schema-docs.yml b/.github/workflows/update-schema-docs.yml index 89d77c66db9..bca6643ecdb 100644 --- a/.github/workflows/update-schema-docs.yml +++ b/.github/workflows/update-schema-docs.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout main - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # Regen runs against `main`. fetch-depth: 0 + fetch-tags: true ensure # since_version.go can resolve `git show :bundle/schema/jsonschema.json`