From 64caf9824cc27a8a07460f22e47230a92f4f21ce Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 21:54:25 +0000 Subject: [PATCH] build(deps): bump actions/checkout from 7.0.0 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/deploy-azure-static-web-app.yml | 2 +- .github/workflows/scan-container.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy-azure-static-web-app.yml b/.github/workflows/deploy-azure-static-web-app.yml index d167198..69e45ed 100644 --- a/.github/workflows/deploy-azure-static-web-app.yml +++ b/.github/workflows/deploy-azure-static-web-app.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out repository - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 - name: Set up Node.js uses: actions/setup-node@v6 diff --git a/.github/workflows/scan-container.yml b/.github/workflows/scan-container.yml index 8d640f4..05cce0f 100644 --- a/.github/workflows/scan-container.yml +++ b/.github/workflows/scan-container.yml @@ -16,7 +16,7 @@ jobs: steps: # Pin first-party actions by commit SHA to guard against mutable-tag abuse. # actions/checkout v6 — https://github.com/actions/checkout/commits/v6 - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # Check if API code changed; skip scan if not (optimization for frontend-only PRs). # Scan still always reports a status so it can be a required check.