From e7303ad9f624f0ac1bfe011cff84e7d9aba698b3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 4 Aug 2026 18:18:20 +0000 Subject: [PATCH] ci(deps): bump actions/checkout from 6.0.2 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/deploy-docs.yml | 2 +- .github/workflows/deploy-prod.yml | 4 ++-- .github/workflows/docker-e2e.yml | 4 ++-- .github/workflows/lock-check.yml | 2 +- .github/workflows/mobile-e2e.yml | 2 +- .github/workflows/regen-snapshots.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/staging.yml | 2 +- .github/workflows/validate-prod.yml | 2 +- .github/workflows/validate-staging.yml | 2 +- 12 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8dba182fb4b..eb678d27f7b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,7 +28,7 @@ jobs: ci: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 with: node-version: 20 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 52d8cd8bad8..ace838043af 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,7 +33,7 @@ jobs: language: [javascript-typescript] steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - name: Initialize CodeQL uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3 diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml index 0959f7bd1f3..178ae1b66b4 100644 --- a/.github/workflows/deploy-docs.yml +++ b/.github/workflows/deploy-docs.yml @@ -46,7 +46,7 @@ jobs: # Manual triggers always proceed. if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: # Deploy the exact SHA that passed CI (not the latest of main, # which may have moved on while CI ran). diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml index 2cef6874e5c..11426131169 100644 --- a/.github/workflows/deploy-prod.yml +++ b/.github/workflows/deploy-prod.yml @@ -102,7 +102,7 @@ jobs: echo "skip=false" >> "$GITHUB_OUTPUT" fi - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 if: steps.preflight.outputs.skip != 'true' with: fetch-depth: 1 @@ -467,7 +467,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 1 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 diff --git a/.github/workflows/docker-e2e.yml b/.github/workflows/docker-e2e.yml index 320a5676a98..98e5900ad44 100644 --- a/.github/workflows/docker-e2e.yml +++ b/.github/workflows/docker-e2e.yml @@ -151,7 +151,7 @@ jobs: # raising this again. timeout-minutes: 60 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: # When triggered via workflow_run, pin to the exact SHA that # passed CI — not the latest of main (which may have moved on @@ -316,7 +316,7 @@ jobs: digest-amd64: ${{ steps.export.outputs.digest-amd64 }} digest-arm64: ${{ steps.export.outputs.digest-arm64 }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - name: Set up Docker Buildx uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 diff --git a/.github/workflows/lock-check.yml b/.github/workflows/lock-check.yml index 4915088dc29..0327b855204 100644 --- a/.github/workflows/lock-check.yml +++ b/.github/workflows/lock-check.yml @@ -27,7 +27,7 @@ jobs: lock-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 with: node-version: 20 diff --git a/.github/workflows/mobile-e2e.yml b/.github/workflows/mobile-e2e.yml index b5f15b90617..344a54854d6 100644 --- a/.github/workflows/mobile-e2e.yml +++ b/.github/workflows/mobile-e2e.yml @@ -41,7 +41,7 @@ jobs: }} timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: # On workflow_run, pin to the exact SHA that passed CI (main may have # moved on). Manual dispatch falls through to the ref default. diff --git a/.github/workflows/regen-snapshots.yml b/.github/workflows/regen-snapshots.yml index 184522b042b..4301095f19f 100644 --- a/.github/workflows/regen-snapshots.yml +++ b/.github/workflows/regen-snapshots.yml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: # Use the PAT for fetch so the subsequent push reuses the # same credentials — see .github/workflows/refresh-launches.yml diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4a73fef76c1..a263fb0ff6a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -44,7 +44,7 @@ jobs: publish-release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: # The tagged commit, not main HEAD — if main has moved on # after the tag was pushed we still publish the right SHA. diff --git a/.github/workflows/staging.yml b/.github/workflows/staging.yml index 096393e7f79..114b9943e1e 100644 --- a/.github/workflows/staging.yml +++ b/.github/workflows/staging.yml @@ -57,7 +57,7 @@ jobs: # Manual + cron triggers always proceed. if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: # Deploy the exact SHA that passed docker-e2e (not the latest # of main, which may have moved on). For manual + cron diff --git a/.github/workflows/validate-prod.yml b/.github/workflows/validate-prod.yml index 74c91daa6d8..735520f2991 100644 --- a/.github/workflows/validate-prod.yml +++ b/.github/workflows/validate-prod.yml @@ -39,7 +39,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 1 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 diff --git a/.github/workflows/validate-staging.yml b/.github/workflows/validate-staging.yml index 7bf8c57401c..32455acfb8f 100644 --- a/.github/workflows/validate-staging.yml +++ b/.github/workflows/validate-staging.yml @@ -38,7 +38,7 @@ jobs: env: STAGING_URL: ${{ vars.STAGING_URL || 'https://chipi.github.io/orrery' }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 1 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6