diff --git a/.github/workflows/bats.yaml b/.github/workflows/bats.yaml index d24b24e67c3..b67eb85c1fc 100644 --- a/.github/workflows/bats.yaml +++ b/.github/workflows/bats.yaml @@ -56,7 +56,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Fetch install script - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false sparse-checkout-cone-mode: false @@ -110,7 +110,7 @@ jobs: runs-on: ${{ matrix.host }} steps: - name: Fetch install script - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false sparse-checkout-cone-mode: false @@ -327,7 +327,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Fetch summarizer script - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false sparse-checkout-cone-mode: false diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index 0f90765faa8..9237371629a 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -47,7 +47,7 @@ jobs: # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages steps: - name: Checkout repository - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/docker-cli-monitor.yaml b/.github/workflows/docker-cli-monitor.yaml index 703e50284eb..1088064949e 100644 --- a/.github/workflows/docker-cli-monitor.yaml +++ b/.github/workflows/docker-cli-monitor.yaml @@ -23,7 +23,7 @@ jobs: issues: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/go-work-sync.yaml b/.github/workflows/go-work-sync.yaml index 63b69ba6343..1f292291f7f 100644 --- a/.github/workflows/go-work-sync.yaml +++ b/.github/workflows/go-work-sync.yaml @@ -25,7 +25,7 @@ jobs: id-token: write # Required for ./.github/actions/get-token runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.base_ref }} - id: get-token @@ -33,7 +33,7 @@ jobs: with: token-secret: ${{ secrets.RUN_WORKFLOW_FROM_WORKFLOW }} - name: Checkout - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: true ref: ${{ github.head_ref }} diff --git a/.github/workflows/k3s-versions.yaml b/.github/workflows/k3s-versions.yaml index 08f809ff615..a389e515250 100644 --- a/.github/workflows/k3s-versions.yaml +++ b/.github/workflows/k3s-versions.yaml @@ -24,7 +24,7 @@ jobs: if: needs.check-for-token.outputs.has-token == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: # we may need to checkout an existing branch, so need the full history fetch-depth: 0 diff --git a/.github/workflows/linux-e2e.yaml b/.github/workflows/linux-e2e.yaml index f3b2e759cdc..1f8fd036639 100644 --- a/.github/workflows/linux-e2e.yaml +++ b/.github/workflows/linux-e2e.yaml @@ -16,7 +16,7 @@ jobs: timeout-minutes: 150 runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/yarn-install diff --git a/.github/workflows/linux-release.yaml b/.github/workflows/linux-release.yaml index 5b057cf3a3f..92761e08ea4 100644 --- a/.github/workflows/linux-release.yaml +++ b/.github/workflows/linux-release.yaml @@ -13,7 +13,7 @@ jobs: linux-release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false fetch-depth: 0 diff --git a/.github/workflows/macM1-e2e.yaml b/.github/workflows/macM1-e2e.yaml index 94a9b68a6c2..04690931a1d 100644 --- a/.github/workflows/macM1-e2e.yaml +++ b/.github/workflows/macM1-e2e.yaml @@ -13,7 +13,7 @@ jobs: env: M1: 1 steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false ref: main diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml index 9e79aa70b8f..7478ce3f0c9 100644 --- a/.github/workflows/package.yaml +++ b/.github/workflows/package.yaml @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-22.04 runs-on: ${{ matrix.runs-on }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false # Needed to run `git describe` to get full version info @@ -142,7 +142,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/yarn-install @@ -195,7 +195,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/yarn-install diff --git a/.github/workflows/paths-ignore.yaml b/.github/workflows/paths-ignore.yaml index 04e34d5b45f..bca0514d4e4 100644 --- a/.github/workflows/paths-ignore.yaml +++ b/.github/workflows/paths-ignore.yaml @@ -54,7 +54,7 @@ jobs: echo "$PATHS_IGNORE" >> "$GITHUB_ENV" env: INPUT: ${{ inputs.paths-ignore-globs }} - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 if: github.event_name == 'pull_request' with: fetch-depth: 0 diff --git a/.github/workflows/rddepman.yaml b/.github/workflows/rddepman.yaml index 5a900372136..f86ee9a5ec5 100644 --- a/.github/workflows/rddepman.yaml +++ b/.github/workflows/rddepman.yaml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/rdx-host-api-tests.yaml b/.github/workflows/rdx-host-api-tests.yaml index 55ebeae36cd..dc87ec310c7 100644 --- a/.github/workflows/rdx-host-api-tests.yaml +++ b/.github/workflows/rdx-host-api-tests.yaml @@ -13,7 +13,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0 diff --git a/.github/workflows/release-merge-to-main.yaml b/.github/workflows/release-merge-to-main.yaml index d3f70a34bb1..1381c978e31 100644 --- a/.github/workflows/release-merge-to-main.yaml +++ b/.github/workflows/release-merge-to-main.yaml @@ -31,7 +31,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./.github/actions/yarn-install - run: node scripts/ts-wrapper.js scripts/release-merge-to-main.ts env: diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index d7813f5f679..53697f81160 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -27,7 +27,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false diff --git a/.github/workflows/screenshot.yaml b/.github/workflows/screenshot.yaml index ccbc9be9279..e1e0c8b5cbf 100644 --- a/.github/workflows/screenshot.yaml +++ b/.github/workflows/screenshot.yaml @@ -67,7 +67,7 @@ jobs: env: EXEC_COMMAND: # On Windows, we don't need any commands. - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/yarn-install diff --git a/.github/workflows/smoke-test.yaml b/.github/workflows/smoke-test.yaml index e30b8318b9c..4de2096fae5 100644 --- a/.github/workflows/smoke-test.yaml +++ b/.github/workflows/smoke-test.yaml @@ -124,7 +124,7 @@ jobs: - { platform: linux, runs-on: ubuntu-latest } runs-on: ${{ matrix.runs-on }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false @@ -181,7 +181,7 @@ jobs: run: >- zypper --non-interactive install git-core tar - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Set up user @@ -261,7 +261,7 @@ jobs: image: ${{ matrix.image }} options: --privileged steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Set up user diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml index 5faf6f00086..d0d3e9a9e58 100644 --- a/.github/workflows/spelling.yml +++ b/.github/workflows/spelling.yml @@ -91,7 +91,7 @@ jobs: env: UPLOAD_SARIF_LIMITED: '' # Set by `yarn lint:spelling`. steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 9b60e75e825..09752bdd2dd 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -10,7 +10,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/yarn-install @@ -32,7 +32,7 @@ jobs: run: | git config --global core.autocrlf false git config --global core.eol lf - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/yarn-install diff --git a/.github/workflows/ucmonitor.yaml b/.github/workflows/ucmonitor.yaml index 71a7a5e0220..988f94579e9 100644 --- a/.github/workflows/ucmonitor.yaml +++ b/.github/workflows/ucmonitor.yaml @@ -23,7 +23,7 @@ jobs: if: needs.check-for-token.outputs.has-token == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/upgrade-generate.yaml b/.github/workflows/upgrade-generate.yaml index ad540b24795..f97977e6626 100644 --- a/.github/workflows/upgrade-generate.yaml +++ b/.github/workflows/upgrade-generate.yaml @@ -18,7 +18,7 @@ jobs: runs-on: windows-latest runs-on: ${{ matrix.runs-on }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false # Needed to run `git describe` to get full version info @@ -55,11 +55,11 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/yarn-install - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: gh-pages path: pages diff --git a/.github/workflows/windows-e2e.yaml b/.github/workflows/windows-e2e.yaml index 30eb477d47f..5cbdd327524 100644 --- a/.github/workflows/windows-e2e.yaml +++ b/.github/workflows/windows-e2e.yaml @@ -19,7 +19,7 @@ jobs: timeout-minutes: 90 runs-on: windows-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: ./.github/actions/setup-environment