From 604f3a432802a9ee2e6b48daddbba3069fe32660 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 21 Jun 2026 15:32:33 +0000 Subject: [PATCH] build(deps): Bump actions/checkout from 4.2.2 to 7.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4.2.2...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/hetzner-runner.yml | 2 +- .github/workflows/oss-checks.yml | 4 ++-- .github/workflows/release-java-central.yml | 6 +++--- .github/workflows/release-java-ghpackages.yml | 10 +++++----- .github/workflows/release-python-pypi.yml | 4 ++-- .github/workflows/release-ts-npm.yml | 6 +++--- .github/workflows/test.yml | 8 ++++---- 7 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/hetzner-runner.yml b/.github/workflows/hetzner-runner.yml index 23782cd..c0cd905 100644 --- a/.github/workflows/hetzner-runner.yml +++ b/.github/workflows/hetzner-runner.yml @@ -109,7 +109,7 @@ jobs: runs-on: ${{ needs.provision.outputs.label }} timeout-minutes: ${{ inputs.timeout-minutes }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: ref: ${{ inputs.checkout-ref }} - name: Run acceptance command diff --git a/.github/workflows/oss-checks.yml b/.github/workflows/oss-checks.yml index fa0a2e5..842f7e6 100644 --- a/.github/workflows/oss-checks.yml +++ b/.github/workflows/oss-checks.yml @@ -64,7 +64,7 @@ jobs: GITLEAKS_VERSION: ${{ inputs.gitleaks-version }} steps: - name: Checkout - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 @@ -97,7 +97,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Check license headers uses: apache/skywalking-eyes/header@61275cc80d0798a405cb070f7d3a8aaf7cf2c2c1 # v0.8.0 diff --git a/.github/workflows/release-java-central.yml b/.github/workflows/release-java-central.yml index 7c8c675..1d6807f 100644 --- a/.github/workflows/release-java-central.yml +++ b/.github/workflows/release-java-central.yml @@ -95,7 +95,7 @@ jobs: needs: validate-inputs runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin @@ -108,7 +108,7 @@ jobs: needs: verify runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin @@ -152,7 +152,7 @@ jobs: outputs: deployment_id: ${{ steps.mvn-deploy.outputs.deployment_id }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 with: distribution: temurin diff --git a/.github/workflows/release-java-ghpackages.yml b/.github/workflows/release-java-ghpackages.yml index 0666a4c..83aad39 100644 --- a/.github/workflows/release-java-ghpackages.yml +++ b/.github/workflows/release-java-ghpackages.yml @@ -161,7 +161,7 @@ jobs: # 'Vendor network error' before recording any Execution. OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 @@ -208,7 +208,7 @@ jobs: include: ${{ fromJSON(inputs.native-targets) }} runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up GraalVM uses: graalvm/setup-graalvm@v1 @@ -272,7 +272,7 @@ jobs: # 'Vendor network error' before recording any Execution. OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up GraalVM uses: graalvm/setup-graalvm@v1 @@ -324,7 +324,7 @@ jobs: GITHUB_ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up JDK uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 @@ -379,7 +379,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Prep dirs run: mkdir -p target/jars target/native diff --git a/.github/workflows/release-python-pypi.yml b/.github/workflows/release-python-pypi.yml index 9269039..882eaf6 100644 --- a/.github/workflows/release-python-pypi.yml +++ b/.github/workflows/release-python-pypi.yml @@ -89,7 +89,7 @@ jobs: run: working-directory: ${{ inputs.package-dir }} steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 - uses: astral-sh/setup-uv@v7 with: python-version: ${{ inputs.python-version }} @@ -102,7 +102,7 @@ jobs: needs: verify runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 - uses: astral-sh/setup-uv@v7 with: python-version: ${{ inputs.python-version }} diff --git a/.github/workflows/release-ts-npm.yml b/.github/workflows/release-ts-npm.yml index 897beac..849e69d 100644 --- a/.github/workflows/release-ts-npm.yml +++ b/.github/workflows/release-ts-npm.yml @@ -86,7 +86,7 @@ jobs: run: working-directory: ${{ inputs.package-dir }} steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 - uses: actions/setup-node@v6 with: node-version: ${{ inputs.node-version }} @@ -104,7 +104,7 @@ jobs: run: working-directory: ${{ inputs.package-dir }} steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 - uses: actions/setup-node@v6 with: node-version: ${{ inputs.node-version }} @@ -129,7 +129,7 @@ jobs: run: working-directory: ${{ inputs.package-dir }} steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 - uses: actions/setup-node@v6 with: node-version: ${{ inputs.node-version }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 88016f4..44d9988 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -27,7 +27,7 @@ jobs: audit-passes-on-pinned-fixture: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/audit-action-pins with: workflows-path: tests/fixtures/pinned-workflow/workflows @@ -35,7 +35,7 @@ jobs: audit-fails-on-unpinned-fixture: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - id: audit continue-on-error: true uses: ./.github/actions/audit-action-pins @@ -53,7 +53,7 @@ jobs: pin-rewrites-and-is-idempotent: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Stage fixture in a writable path run: | mkdir -p /tmp/under-test @@ -215,7 +215,7 @@ jobs: checks-json: '[{"name":"build","status":"completed","conclusion":"failure"},{"name":"build","status":"completed","conclusion":"success"}]' expected: 'proceed:dry-run' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - id: decide uses: ./.github/actions/auto-merge-deps with: