From 7a52668f1f6c01de5a4cfd99b7d21f12629aa800 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 18 Sep 2026 18:31:54 +0000 Subject: [PATCH] chore(ci)(deps): bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-version.yml | 12 ++++++------ .github/workflows/benchmark.yml | 4 ++-- .github/workflows/ci.yml | 12 ++++++------ .github/workflows/demo-pages.yml | 4 ++-- .github/workflows/dependabot-review.yml | 10 +++++----- .github/workflows/docs-impact.yml | 4 ++-- .github/workflows/e2e-lxc.yml | 2 +- .github/workflows/pullfrog.yml | 2 +- 8 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/auto-version.yml b/.github/workflows/auto-version.yml index 2a8f68374..3eef29c68 100644 --- a/.github/workflows/auto-version.yml +++ b/.github/workflows/auto-version.yml @@ -44,7 +44,7 @@ jobs: new_version: ${{ steps.version.outputs.new_version }} steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} @@ -360,7 +360,7 @@ jobs: artifact_name: catalyst-agent-aarch64-linux-musl steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: v${{ needs.version.outputs.new_version }} @@ -496,7 +496,7 @@ jobs: attestations: write # SLSA provenance via attest-build-provenance steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: v${{ needs.version.outputs.new_version }} @@ -535,7 +535,7 @@ jobs: attestations: write # SLSA provenance via attest-build-provenance steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: v${{ needs.version.outputs.new_version }} @@ -607,7 +607,7 @@ jobs: file: catalyst-frontend/Dockerfile steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: v${{ needs.version.outputs.new_version }} @@ -615,7 +615,7 @@ jobs: # frontends) — the plugins live in their own repo, not in this checkout. - name: Checkout plugins repository if: matrix.image == 'frontend' - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: catalystctl/catalyst-plugins ref: e3d2e3ee786e19bb40ecf5a565638e3f6db7c186 # pinned main 2026-09-18 (discord-oauth 1.0.1) diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index d21cf6de4..076df0815 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -58,7 +58,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 @@ -118,7 +118,7 @@ jobs: if: github.event_name == 'workflow_dispatch' || github.event_name == 'schedule' timeout-minutes: 45 steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index eeb01588a..1c7018453 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,13 +65,13 @@ jobs: timeout-minutes: 25 steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Plugin frontends under catalyst-plugins/ compile into the panel build # (build-time discovery via import.meta.glob). The plugins live in their # own repo: catalystctl/catalyst-plugins. - name: Checkout plugins repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: catalystctl/catalyst-plugins ref: e3d2e3ee786e19bb40ecf5a565638e3f6db7c186 # pinned main 2026-09-18 (discord-oauth 1.0.1) @@ -269,10 +269,10 @@ jobs: BETTER_AUTH_SECRET: ci-test-better-auth-secret-do-not-use-in-production steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Checkout plugins repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: catalystctl/catalyst-plugins ref: e3d2e3ee786e19bb40ecf5a565638e3f6db7c186 # pinned main 2026-09-18 (discord-oauth 1.0.1) @@ -403,10 +403,10 @@ jobs: timeout-minutes: 25 steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Checkout plugins repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: catalystctl/catalyst-plugins ref: e3d2e3ee786e19bb40ecf5a565638e3f6db7c186 # pinned main 2026-09-18 (discord-oauth 1.0.1) diff --git a/.github/workflows/demo-pages.yml b/.github/workflows/demo-pages.yml index 2f33d5b59..fa518a400 100644 --- a/.github/workflows/demo-pages.yml +++ b/.github/workflows/demo-pages.yml @@ -31,10 +31,10 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Checkout plugins repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: catalystctl/catalyst-plugins ref: 4e735b0411a67e54a38e9fdf5fb85e4ec55ff569 # pinned main 2026-09-10 diff --git a/.github/workflows/dependabot-review.yml b/.github/workflows/dependabot-review.yml index e9be8fc0d..7229e5249 100644 --- a/.github/workflows/dependabot-review.yml +++ b/.github/workflows/dependabot-review.yml @@ -41,7 +41,7 @@ jobs: runs-on: ubuntu-latest if: startsWith(github.head_ref, 'dependabot/') steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 @@ -73,7 +73,7 @@ jobs: runs-on: ubuntu-latest if: startsWith(github.head_ref, 'dependabot/') steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 @@ -150,7 +150,7 @@ jobs: runs-on: ubuntu-latest if: startsWith(github.head_ref, 'dependabot/') steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 @@ -223,7 +223,7 @@ jobs: runs-on: ubuntu-latest if: startsWith(github.head_ref, 'dependabot/') steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run Scorecard uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 @@ -245,7 +245,7 @@ jobs: runs-on: ubuntu-latest if: startsWith(github.head_ref, 'dependabot/') && always() steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Post review comment uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 diff --git a/.github/workflows/docs-impact.yml b/.github/workflows/docs-impact.yml index 2d0765ad7..8c1de09da 100644 --- a/.github/workflows/docs-impact.yml +++ b/.github/workflows/docs-impact.yml @@ -14,11 +14,11 @@ jobs: docs-impact: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 - name: Checkout docs repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: repository: catalystctl/catalyst-doc path: catalyst-doc diff --git a/.github/workflows/e2e-lxc.yml b/.github/workflows/e2e-lxc.yml index e370fe130..fb4535b99 100644 --- a/.github/workflows/e2e-lxc.yml +++ b/.github/workflows/e2e-lxc.yml @@ -32,7 +32,7 @@ jobs: E2E_USE_LOCAL: ${{ inputs.use_local || '0' }} E2E_MC_VERSION: ${{ inputs.mc_version || 'latest' }} steps: - - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Host pre-flight (lxc, curl, jq) run: | diff --git a/.github/workflows/pullfrog.yml b/.github/workflows/pullfrog.yml index 77f1f3f9c..ff23e5def 100644 --- a/.github/workflows/pullfrog.yml +++ b/.github/workflows/pullfrog.yml @@ -22,7 +22,7 @@ jobs: contents: read steps: - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 - name: Run agent