From ac2e0b63d35a96316e7525521ca568c1ec36c5f0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 18:40:16 +0000 Subject: [PATCH] chore(deps): Bump actions/checkout from 6.0.1 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/airgapped.yaml | 10 +++++----- .github/workflows/bench.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/component-go.yaml | 4 ++-- .github/workflows/component-wit.yaml | 2 +- .github/workflows/release-tag.yaml | 2 +- .github/workflows/release-train.yaml | 2 +- .github/workflows/renovate.yaml | 2 +- .github/workflows/templates-go.yaml | 2 +- 9 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/airgapped.yaml b/.github/workflows/airgapped.yaml index 6a63e98a..2d10330b 100644 --- a/.github/workflows/airgapped.yaml +++ b/.github/workflows/airgapped.yaml @@ -51,7 +51,7 @@ jobs: runs-on: ubuntu-latest needs: release-state steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # check-versions.sh resolves the SDK version from the newest # component/* tag, so a shallow clone without tags would report drift. @@ -84,7 +84,7 @@ jobs: outputs: pending: ${{ steps.state.outputs.pending }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # The PR merge commit's first parent, for the changed-files check. fetch-depth: 2 @@ -137,7 +137,7 @@ jobs: outputs: modules: ${{ steps.modules.outputs.modules }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Discover modules id: modules @@ -192,7 +192,7 @@ jobs: matrix: module: ${{ fromJSON(needs.image.outputs.modules) }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: @@ -229,7 +229,7 @@ jobs: contents: read packages: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Resolve image name and tag id: img diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml index ea70e79d..ead247cd 100644 --- a/.github/workflows/bench.yml +++ b/.github/workflows/bench.yml @@ -141,7 +141,7 @@ jobs: WASMCLOUD_BENCH_REF: ${{ needs.matrix.outputs.ref }} BENCH_OUTPUT_DIR: ${{ github.workspace }}/bench-run-output steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ needs.matrix.outputs.checkout_ref }} fetch-depth: 0 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 01415b34..d459ea4d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,7 +19,7 @@ jobs: contents: read security-events: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0 diff --git a/.github/workflows/component-go.yaml b/.github/workflows/component-go.yaml index 0315174a..6fd3de14 100644 --- a/.github/workflows/component-go.yaml +++ b/.github/workflows/component-go.yaml @@ -45,7 +45,7 @@ jobs: if: github.event_name == 'push' || needs.changes.outputs.go == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0 with: go-version: ${{ env.GO_VERSION }} @@ -155,7 +155,7 @@ jobs: skip-dev-test: true test-command: "true" steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0 with: go-version: ${{ env.GO_VERSION }} diff --git a/.github/workflows/component-wit.yaml b/.github/workflows/component-wit.yaml index 947f7bc2..f8948633 100644 --- a/.github/workflows/component-wit.yaml +++ b/.github/workflows/component-wit.yaml @@ -15,7 +15,7 @@ jobs: contents: write # for softprops/action-gh-release packages: write # for publishing the wit to ghcr.io steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Extract tag context id: ctx run: | diff --git a/.github/workflows/release-tag.yaml b/.github/workflows/release-tag.yaml index 01145717..2f30e370 100644 --- a/.github/workflows/release-tag.yaml +++ b/.github/workflows/release-tag.yaml @@ -60,7 +60,7 @@ jobs: app-id: ${{ secrets.BOT_APP_ID }} private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }} - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.sha || github.sha }} fetch-depth: 0 diff --git a/.github/workflows/release-train.yaml b/.github/workflows/release-train.yaml index b5aedefa..14c19beb 100644 --- a/.github/workflows/release-train.yaml +++ b/.github/workflows/release-train.yaml @@ -56,7 +56,7 @@ jobs: private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }} # Full history for the tags, which are the source of the current version. - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml index af07454a..acabdb89 100644 --- a/.github/workflows/renovate.yaml +++ b/.github/workflows/renovate.yaml @@ -19,7 +19,7 @@ jobs: app-id: ${{ secrets.BOT_APP_ID }} private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }} - name: Checkout - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run Renovate uses: renovatebot/github-action@66387ab8c2464d575b933fa44e9e5a86b2822809 # v44.2.4 with: diff --git a/.github/workflows/templates-go.yaml b/.github/workflows/templates-go.yaml index c5a768c4..9ab75501 100644 --- a/.github/workflows/templates-go.yaml +++ b/.github/workflows/templates-go.yaml @@ -44,7 +44,7 @@ jobs: - http-hello-world runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # Full history so Go can resolve the SDK from this checkout below. fetch-depth: 0