From 02df9e9d5a5ac70084ed2149d7927ea8bc670cf3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 16 Aug 2026 09:05:51 +0000 Subject: [PATCH] Bump actions/checkout from 4.4.0 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/11d5960a326750d5838078e36cf38b85af677262...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/chaos.yml | 4 ++-- .github/workflows/ci.yml | 18 +++++++++--------- .github/workflows/deploy-azure.yml | 4 ++-- .github/workflows/performance.yml | 16 ++++++++-------- .github/workflows/quality.yml | 10 +++++----- .github/workflows/security.yml | 14 +++++++------- 6 files changed, 33 insertions(+), 33 deletions(-) diff --git a/.github/workflows/chaos.yml b/.github/workflows/chaos.yml index 9bea0b2e..ab5b5dc3 100644 --- a/.github/workflows/chaos.yml +++ b/.github/workflows/chaos.yml @@ -87,7 +87,7 @@ jobs: name: The QR2 verdict can fail, and does not gate the latency runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: The rig's opt-in is three-way, and the middle case is a failure # `scripts/run-chaos-qr2.sh` skips with a reason when FLOWX_CHAOS is unset and FAILS @@ -260,7 +260,7 @@ jobs: --health-retries 20 steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8e4b30a4..b7c19e58 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -88,7 +88,7 @@ jobs: - 1433:1433 steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: @@ -299,7 +299,7 @@ jobs: working-directory: samples/crm-web steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: @@ -411,7 +411,7 @@ jobs: --health-retries 20 steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: @@ -573,7 +573,7 @@ jobs: name: dotnet new flowx runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -600,7 +600,7 @@ jobs: name: NativeAOT smoke test runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -772,7 +772,7 @@ jobs: name: Manifest compatibility runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -816,7 +816,7 @@ jobs: name: Documentation gates runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: @@ -1022,7 +1022,7 @@ jobs: name: Attribution guard runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 @@ -1105,7 +1105,7 @@ jobs: # reaches a named person's notifications. issues: write steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Open, update or close the tracking issue env: diff --git a/.github/workflows/deploy-azure.yml b/.github/workflows/deploy-azure.yml index 1c34224b..6f4c4cc9 100644 --- a/.github/workflows/deploy-azure.yml +++ b/.github/workflows/deploy-azure.yml @@ -45,7 +45,7 @@ jobs: name: The template compiles runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Build the Bicep # Runs before anything is deployed and before anything is built, because a template @@ -63,7 +63,7 @@ jobs: runs-on: ubuntu-latest environment: azure steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: azure/login@a65d910e8af852a8061c627c456678983e180302 # v2 with: diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml index 82f07435..04f897f2 100644 --- a/.github/workflows/performance.yml +++ b/.github/workflows/performance.yml @@ -38,7 +38,7 @@ jobs: name: Allocation budget (B2, and B6's allocation half) runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -60,7 +60,7 @@ jobs: name: Benchmark budgets (B1, B3, B12 isolated) runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -99,7 +99,7 @@ jobs: name: Budget B12 — build overhead runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -158,7 +158,7 @@ jobs: # is a wall-clock question, `scale-overhead` is the instrument for it, and it fails. # The checker reprints that criterion on every run, including passing ones. steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -245,7 +245,7 @@ jobs: name: The generator-cost gate can fail runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: A regression under the threshold must fail the gate # A gate nobody has seen fail is an assumption, not a gate — the same argument @@ -347,7 +347,7 @@ jobs: # esac continue-on-error: true steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -381,7 +381,7 @@ jobs: name: The gate can fail runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Injecting a regression must fail the gate # A gate nobody has seen fail is an assumption, not a gate. This builds a @@ -488,7 +488,7 @@ jobs: # — correct, because the queue is then the finding — and widening that by one # condition would switch the gate off silently. steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Nine verdicts, and only two of them green run: python3 scripts/selftest-durability-verdict.py diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 94c5fd3e..8a33d5bc 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -72,7 +72,7 @@ jobs: ports: - 1433:1433 steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -250,7 +250,7 @@ jobs: working-directory: samples/crm-web steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: @@ -287,7 +287,7 @@ jobs: # missing secret would just teach contributors that red is normal. if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name == 'push' steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 # Sonar needs history for new-code detection @@ -375,7 +375,7 @@ jobs: # threshold — the moment a run reports a non-zero score. continue-on-error: true steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -438,7 +438,7 @@ jobs: # a rule that already has one — to be kept in step by hand, forever, with no # test that they agree. steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: No unaccountable TODOs # Every tree that ships or is read as an example, not just src and tests. A diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index a67fc247..ed330245 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -27,7 +27,7 @@ jobs: security-events: write contents: read steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -56,7 +56,7 @@ jobs: container: image: semgrep/semgrep steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Scan # OWASP + C# rulesets. --error makes any ERROR-severity finding fail the job; # a security scanner that only warns is a scanner nobody reads. @@ -95,7 +95,7 @@ jobs: name: Secret scanning runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 # gitleaks scans history, not just the diff - uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7 # v2 @@ -106,7 +106,7 @@ jobs: name: "SCA: vulnerable packages" runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: global-json-file: global.json @@ -211,7 +211,7 @@ jobs: name: IaC scan runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Checkov # Skipped cleanly while there are no manifests yet, rather than failing # on an empty directory and training everyone to ignore this job. @@ -235,7 +235,7 @@ jobs: contents: read issues: write steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Skip until a sample exists id: guard @@ -312,7 +312,7 @@ jobs: contents: read security-events: read steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: The backlog has not grown # WHAT THIS EXISTS FOR. `github/codeql-action/analyze` uploads every alert the