From c32ebfdee24b56e04fb2aeb5af624bbac4564637 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 12 Apr 2026 21:47:37 +0000 Subject: [PATCH] chore(deps): bump actions/checkout from 4.2.2 to 6.0.2 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...de0fac2e4500dabe0009e67214ff5f5447ce83dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-release.yml | 6 +++--- .github/workflows/ci.yml | 4 ++-- .github/workflows/release.yml | 14 +++++++------- .github/workflows/self-release.yml | 6 +++--- 4 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml index 3039689..66b4591 100644 --- a/.github/workflows/auto-release.yml +++ b/.github/workflows/auto-release.yml @@ -105,13 +105,13 @@ jobs: should_release: ${{ steps.decide.outputs.should_release }} steps: - name: Checkout consumer repo - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 # full history for tag resolution persist-credentials: false - name: Checkout anvil at pinned SHA - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: repository: forgesworn/anvil ref: ${{ github.job_workflow_sha }} @@ -148,7 +148,7 @@ jobs: tag: ${{ steps.tag.outputs.tag }} steps: - name: Checkout consumer repo - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0641d04..9786606 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Run shellcheck on step scripts @@ -30,7 +30,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7430750..0a0f6a1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -173,7 +173,7 @@ jobs: filename: ${{ steps.record.outputs.filename }} steps: - name: Checkout consumer repo - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: # On chained calls github.ref is the outer run's ref (usually # refs/heads/main). Explicitly check out the tag that was just @@ -182,7 +182,7 @@ jobs: persist-credentials: false - name: Checkout anvil at pinned SHA - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: repository: forgesworn/anvil ref: ${{ github.job_workflow_sha }} @@ -273,14 +273,14 @@ jobs: sha256: ${{ steps.record.outputs.sha256 }} steps: - name: Checkout consumer repo - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: # Match build-a's ref so both runners pack the same tree. ref: ${{ inputs.tag != '' && inputs.tag || github.ref }} persist-credentials: false - name: Checkout anvil at pinned SHA - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: repository: forgesworn/anvil ref: ${{ github.job_workflow_sha }} @@ -327,7 +327,7 @@ jobs: reproducible: ${{ steps.compare.outputs.reproducible }} steps: - name: Checkout anvil at pinned SHA - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: repository: forgesworn/anvil ref: ${{ github.job_workflow_sha }} @@ -369,7 +369,7 @@ jobs: DRY_RUN: ${{ inputs.dry-run == 'true' && '1' || '0' }} steps: - name: Checkout consumer repo - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: # update-release.sh calls `git rev-parse HEAD` to supply # --target when creating a Release; that resolves to the @@ -378,7 +378,7 @@ jobs: persist-credentials: false - name: Checkout anvil at pinned SHA - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: repository: forgesworn/anvil ref: ${{ github.job_workflow_sha }} diff --git a/.github/workflows/self-release.yml b/.github/workflows/self-release.yml index e3f1778..19b4610 100644 --- a/.github/workflows/self-release.yml +++ b/.github/workflows/self-release.yml @@ -23,7 +23,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false @@ -42,7 +42,7 @@ jobs: changelog: ${{ steps.parse.outputs.changelog }} should_release: ${{ steps.decide.outputs.should_release }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 persist-credentials: false @@ -72,7 +72,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0