From f3d529e1659db3616c87cc9be7747a20237344cd Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 11 Aug 2025 16:04:43 +0000 Subject: [PATCH] Update actions/checkout action to v5 --- .github/workflows/chart-values.yaml | 2 +- .github/workflows/create-release-pr.yaml | 4 ++-- .github/workflows/fix-vulnerabilities.yaml | 4 ++-- .github/workflows/gitleaks.yaml | 2 +- .github/workflows/go-coverage.yaml | 2 +- .github/workflows/ossf-scorecard.yaml | 2 +- .github/workflows/publish-techdocs.yaml | 2 +- .github/workflows/validate-changelog.yaml | 2 +- .github/workflows/validate-workflows.yaml | 2 +- 9 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/chart-values.yaml b/.github/workflows/chart-values.yaml index 2818a21..a52672e 100644 --- a/.github/workflows/chart-values.yaml +++ b/.github/workflows/chart-values.yaml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml index 06efda8..f2e8f29 100644 --- a/.github/workflows/create-release-pr.yaml +++ b/.github/workflows/create-release-pr.yaml @@ -128,7 +128,7 @@ jobs: - gather_facts if: ${{ needs.gather_facts.outputs.skip != 'true' && github.repository == 'giantswarm/backstage' }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ needs.gather_facts.outputs.branch }} - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 @@ -179,7 +179,7 @@ jobs: version: v7.0.3 download_url: "https://github.com/giantswarm/architect/releases/download/${version}/architect-${version}-linux-amd64.tar.gz" - name: Checkout code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ needs.gather_facts.outputs.branch }} - name: Prepare release changes diff --git a/.github/workflows/fix-vulnerabilities.yaml b/.github/workflows/fix-vulnerabilities.yaml index 921a9b9..8fa37fd 100644 --- a/.github/workflows/fix-vulnerabilities.yaml +++ b/.github/workflows/fix-vulnerabilities.yaml @@ -24,7 +24,7 @@ jobs: skip : ${{ steps.gather_facts.outputs.skip }} steps: - name: Checkout code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ inputs.branch || github.ref }} - name: Gather facts @@ -64,7 +64,7 @@ jobs: private-key: ${{ secrets.HERALD_APP_KEY }} - name: Checkout code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: token: ${{ steps.generate_token.outputs.token }} persist-credentials: false diff --git a/.github/workflows/gitleaks.yaml b/.github/workflows/gitleaks.yaml index 2c9f995..d6b50a4 100644 --- a/.github/workflows/gitleaks.yaml +++ b/.github/workflows/gitleaks.yaml @@ -9,7 +9,7 @@ jobs: gitleaks: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: '0' - name: gitleaks-action diff --git a/.github/workflows/go-coverage.yaml b/.github/workflows/go-coverage.yaml index 09bbc0c..2b6909c 100644 --- a/.github/workflows/go-coverage.yaml +++ b/.github/workflows/go-coverage.yaml @@ -23,7 +23,7 @@ jobs: contents: write steps: - name: Clone repository - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: # default fetch-depth is insufficent to find previous coverage notes fetch-depth: 10 diff --git a/.github/workflows/ossf-scorecard.yaml b/.github/workflows/ossf-scorecard.yaml index 02dba08..661f51e 100644 --- a/.github/workflows/ossf-scorecard.yaml +++ b/.github/workflows/ossf-scorecard.yaml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false diff --git a/.github/workflows/publish-techdocs.yaml b/.github/workflows/publish-techdocs.yaml index 4d216cf..e27295e 100644 --- a/.github/workflows/publish-techdocs.yaml +++ b/.github/workflows/publish-techdocs.yaml @@ -30,7 +30,7 @@ jobs: node-version: '22' - name: Clone source repository - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Cache dependencies id: cache-npm diff --git a/.github/workflows/validate-changelog.yaml b/.github/workflows/validate-changelog.yaml index ea079ce..0c65b96 100644 --- a/.github/workflows/validate-changelog.yaml +++ b/.github/workflows/validate-changelog.yaml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 0 diff --git a/.github/workflows/validate-workflows.yaml b/.github/workflows/validate-workflows.yaml index 4d3f14b..f5c2351 100644 --- a/.github/workflows/validate-workflows.yaml +++ b/.github/workflows/validate-workflows.yaml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Validate GitHub Actions uses: jazzsequence/github-action-validator@843ac61ce962184aa316e582398e99c744e4215f # v1.0.0