From 8189d96ba60139af481ee0c57f2d8749ca706e1c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 09:26:51 +0000 Subject: [PATCH] chore(deps)(deps): bump actions/checkout from 4.2.2 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4.2.2...v7.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/checklist-score.yml | 4 ++-- .github/workflows/codeql.yml | 2 +- .github/workflows/create-initial-issues.yml | 2 +- .github/workflows/danger.yml | 2 +- .github/workflows/docker-publish.yml | 2 +- .github/workflows/gitleaks-scanning.yml | 2 +- .github/workflows/release-goreleaser.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/template-sync.yml | 2 +- .github/workflows/version-release.yml | 2 +- 10 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/checklist-score.yml b/.github/workflows/checklist-score.yml index a4c1223..7f56c6d 100644 --- a/.github/workflows/checklist-score.yml +++ b/.github/workflows/checklist-score.yml @@ -17,7 +17,7 @@ jobs: contents: write if: github.event_name == 'push' || github.event_name == 'workflow_dispatch' steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 with: token: ${{ secrets.GITHUB_TOKEN }} @@ -166,7 +166,7 @@ jobs: github.repository == 'AOSSIE-Org/Template-Repo' && (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Fetch upstream OpenSSF criteria run: | diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 453c941..cd3fc05 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -71,7 +71,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 diff --git a/.github/workflows/create-initial-issues.yml b/.github/workflows/create-initial-issues.yml index a09e306..db8fc6d 100644 --- a/.github/workflows/create-initial-issues.yml +++ b/.github/workflows/create-initial-issues.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 - name: Check if issues file exists id: check_file diff --git a/.github/workflows/danger.yml b/.github/workflows/danger.yml index 293a697..53487f1 100644 --- a/.github/workflows/danger.yml +++ b/.github/workflows/danger.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout base branch - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 - name: Setup Node.js uses: actions/setup-node@v6 diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 1845ee0..e404325 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -44,7 +44,7 @@ jobs: steps: # ── Checkout ────────────────────────────────────────────────────── - name: Checkout repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/gitleaks-scanning.yml b/.github/workflows/gitleaks-scanning.yml index 1aa5e0d..60a9507 100644 --- a/.github/workflows/gitleaks-scanning.yml +++ b/.github/workflows/gitleaks-scanning.yml @@ -9,7 +9,7 @@ jobs: name: gitleaks runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 with: fetch-depth: 0 - uses: gitleaks/gitleaks-action@v3 diff --git a/.github/workflows/release-goreleaser.yml b/.github/workflows/release-goreleaser.yml index 3369e78..89f3595 100644 --- a/.github/workflows/release-goreleaser.yml +++ b/.github/workflows/release-goreleaser.yml @@ -14,7 +14,7 @@ jobs: packages: write # [DOCKER] Required for ghcr.io push id-token: write # [SIGNING] Required for cosign keyless signing steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 # Full history needed for changelog persist-credentials: false # Avoid exposing token to submodules diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 5b54af5..f7a36fd 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -63,7 +63,7 @@ jobs: api.scorecard.dev:443 - name: "Checkout code" - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/template-sync.yml b/.github/workflows/template-sync.yml index 19784b8..986ceb0 100644 --- a/.github/workflows/template-sync.yml +++ b/.github/workflows/template-sync.yml @@ -17,7 +17,7 @@ jobs: steps: # Check out the repository - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 # https://github.com/actions/checkout#usage # uncomment if you use submodules within the repository # with: diff --git a/.github/workflows/version-release.yml b/.github/workflows/version-release.yml index c58a429..b81074b 100644 --- a/.github/workflows/version-release.yml +++ b/.github/workflows/version-release.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0