From 75365a0932015b4836bb4cc02ea9020addbb3539 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 18:23:10 +0000 Subject: [PATCH] build(deps): bump actions/checkout from 6 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Signed-off-by: Tobias Wolf On-behalf-of: SAP --- .github/workflows/bandit.yml | 2 +- .github/workflows/black.yml | 2 +- .github/workflows/build.yml | 2 +- .github/workflows/pytests.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml index 92732cfb..e8bf1644 100644 --- a/.github/workflows/bandit.yml +++ b/.github/workflows/bandit.yml @@ -16,7 +16,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # pin@v7.0.0 - uses: ./.github/actions/setup - name: Simple bandit security checks run: make security diff --git a/.github/workflows/black.yml b/.github/workflows/black.yml index 941d609b..feab7210 100644 --- a/.github/workflows/black.yml +++ b/.github/workflows/black.yml @@ -6,6 +6,6 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # pin@v7.0.0 - uses: ./.github/actions/setup - run: make lint diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 4cda80e4..edd15245 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -16,7 +16,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # pin@v7.0.0 - uses: ./.github/actions/setup - name: Simple poetry build no package run: make build diff --git a/.github/workflows/pytests.yml b/.github/workflows/pytests.yml index acfa78b2..112c5864 100644 --- a/.github/workflows/pytests.yml +++ b/.github/workflows/pytests.yml @@ -15,7 +15,7 @@ jobs: python_version: ["3.13", "3.14"] steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # pin@v7.0.0 with: fetch-depth: 2 @@ -39,6 +39,6 @@ jobs: run: test -f coverage.xml - name: Upload results to Codecov - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # pin@v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 55b79093..ea1dcf0b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,7 +11,7 @@ jobs: docs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # pin@v7.0.0 - uses: gardenlinux/python-gardenlinux-lib/.github/actions/setup@main - run: make docs - if: ${{ github.ref_type != 'tag' }} @@ -22,7 +22,7 @@ jobs: path: _build/ - if: ${{ github.ref_type == 'tag' }} name: Deploy to GitHub Pages - uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0 + uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # pin@v4.1.0 with: publish_branch: gh-pages github_token: ${{ secrets.GITHUB_TOKEN }} @@ -40,7 +40,7 @@ jobs: id: get-tag-name run: echo "tag-name=${GITHUB_REF/refs\/tags\//}" | tee -a "$GITHUB_OUTPUT" - name: Checkout commit - uses: actions/checkout@v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # pin@v7.0.0 with: fetch-depth: 0 ref: ${{ steps.get-tag-name.outputs.tag-name }}