From bdb39b22095c3232a08e3d8fe257dc2cb164c244 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 16 Jul 2026 16:24:38 +0000 Subject: [PATCH] ci: Bump actions/checkout from 6.0.2 to 7.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 22 +++++++++++----------- .github/workflows/gemini-invoke.yml | 2 +- .github/workflows/gemini-plan-execute.yml | 2 +- .github/workflows/gemini-review.yml | 2 +- .github/workflows/lint-app.yml | 2 +- .github/workflows/lint-helm.yml | 4 ++-- .github/workflows/lint-iac.yml | 4 ++-- .github/workflows/lint-precommit.yml | 4 ++-- .github/workflows/secrets-precommit.yml | 4 ++-- .github/workflows/secrets-scan.yml | 4 ++-- 10 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d76cb0e..88e7df9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -31,7 +31,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -50,7 +50,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -70,7 +70,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -101,7 +101,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # full history so the PR diff range can be resolved @@ -121,7 +121,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # full history so the PR commit range can be scanned @@ -143,7 +143,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # full history so the PR commit range can be scanned @@ -163,7 +163,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -185,7 +185,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -209,7 +209,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -231,7 +231,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # terramate --changed requires full git history @@ -252,7 +252,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false diff --git a/.github/workflows/gemini-invoke.yml b/.github/workflows/gemini-invoke.yml index fc3744f..014ded6 100644 --- a/.github/workflows/gemini-invoke.yml +++ b/.github/workflows/gemini-invoke.yml @@ -38,7 +38,7 @@ jobs: permission-pull-requests: 'write' - name: 'Checkout Code' - uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2 + uses: 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' # v7.0.0 with: persist-credentials: false diff --git a/.github/workflows/gemini-plan-execute.yml b/.github/workflows/gemini-plan-execute.yml index ea72b82..6b90251 100644 --- a/.github/workflows/gemini-plan-execute.yml +++ b/.github/workflows/gemini-plan-execute.yml @@ -40,7 +40,7 @@ jobs: permission-pull-requests: 'write' - name: 'Checkout Code' - uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2 + uses: 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' # v7.0.0 with: persist-credentials: false diff --git a/.github/workflows/gemini-review.yml b/.github/workflows/gemini-review.yml index dfe89a0..0ca60f9 100644 --- a/.github/workflows/gemini-review.yml +++ b/.github/workflows/gemini-review.yml @@ -46,7 +46,7 @@ jobs: permission-pull-requests: 'write' - name: 'Checkout repository' - uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2 + uses: 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' # v7.0.0 with: persist-credentials: false diff --git a/.github/workflows/lint-app.yml b/.github/workflows/lint-app.yml index a0d4a47..a2c2fa5 100644 --- a/.github/workflows/lint-app.yml +++ b/.github/workflows/lint-app.yml @@ -41,7 +41,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository under test - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # MegaLinter needs history to diff against the base diff --git a/.github/workflows/lint-helm.yml b/.github/workflows/lint-helm.yml index 307b205..3d44901 100644 --- a/.github/workflows/lint-helm.yml +++ b/.github/workflows/lint-helm.yml @@ -47,7 +47,7 @@ jobs: contents: read steps: - name: Checkout repository under test - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -55,7 +55,7 @@ jobs: # then invoke it locally. Keeps the action reference immutable (no mutable # cross-repo @main) while honouring the repo's SHA-pin policy. - name: Checkout kubeconform composite action - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: sparkgeo/github-actions ref: ${{ inputs.actions-ref }} diff --git a/.github/workflows/lint-iac.yml b/.github/workflows/lint-iac.yml index cb47940..d05fac0 100644 --- a/.github/workflows/lint-iac.yml +++ b/.github/workflows/lint-iac.yml @@ -39,7 +39,7 @@ jobs: contents: read steps: - name: Checkout repository under test - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -58,7 +58,7 @@ jobs: # then invoke it locally. Keeps the action reference immutable (no mutable # cross-repo @main) while honouring the repo's SHA-pin policy. - name: Checkout tflint composite action - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: sparkgeo/github-actions ref: ${{ inputs.actions-ref }} diff --git a/.github/workflows/lint-precommit.yml b/.github/workflows/lint-precommit.yml index 728143d..0dfce02 100644 --- a/.github/workflows/lint-precommit.yml +++ b/.github/workflows/lint-precommit.yml @@ -33,7 +33,7 @@ jobs: contents: read steps: - name: Checkout repository under test - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # full history so the PR diff range can be resolved @@ -42,7 +42,7 @@ jobs: # then invoke it locally. Keeps the action reference immutable (no mutable # cross-repo @main) while honouring the repo's SHA-pin policy. - name: Checkout pre-commit composite action - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: sparkgeo/github-actions ref: ${{ inputs.actions-ref }} diff --git a/.github/workflows/secrets-precommit.yml b/.github/workflows/secrets-precommit.yml index 11058db..a651859 100644 --- a/.github/workflows/secrets-precommit.yml +++ b/.github/workflows/secrets-precommit.yml @@ -37,7 +37,7 @@ jobs: contents: read steps: - name: Checkout repository under test - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # full history so the PR commit range can be scanned @@ -46,7 +46,7 @@ jobs: # then invoke it locally. This keeps the action reference immutable # (no mutable cross-repo @main) while honouring the repo's SHA-pin policy. - name: Checkout gitleaks composite action - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: sparkgeo/github-actions ref: ${{ inputs.actions-ref }} diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml index 9bc95fa..f6dee84 100644 --- a/.github/workflows/secrets-scan.yml +++ b/.github/workflows/secrets-scan.yml @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository under test - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false fetch-depth: 0 # full history so the PR commit range can be scanned @@ -46,7 +46,7 @@ jobs: # then invoke it locally. Keeps the action reference immutable (no mutable # cross-repo @main) while honouring the repo's SHA-pin policy. - name: Checkout trufflehog composite action - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: sparkgeo/github-actions ref: ${{ inputs.actions-ref }}