From c9525d9e41a092e2bcf50ab461c9eff70e562f06 Mon Sep 17 00:00:00 2001 From: "enix-renovate[bot]" <280654036+enix-renovate[bot]@users.noreply.github.com> Date: Tue, 30 Jun 2026 16:38:56 +0000 Subject: [PATCH] chore: update actions/checkout action to v7 --- .github/workflows/chart-readme.yaml | 4 ++-- .github/workflows/codeql.yaml | 2 +- .github/workflows/lint.yaml | 10 +++++----- .github/workflows/release-pr.yaml | 2 +- .github/workflows/release.yaml | 4 ++-- .github/workflows/renovate.yaml | 2 +- .github/workflows/scorecard.yaml | 2 +- .github/workflows/security.yaml | 10 +++++----- .github/workflows/test.yaml | 10 +++++----- 9 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/chart-readme.yaml b/.github/workflows/chart-readme.yaml index 4b93206..0e713e5 100644 --- a/.github/workflows/chart-readme.yaml +++ b/.github/workflows/chart-readme.yaml @@ -42,7 +42,7 @@ jobs: if: github.event_name != 'push' runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -76,7 +76,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index 113c4d3..a03a7e1 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -40,7 +40,7 @@ jobs: matrix: language: [actions, go] steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 if: matrix.language == 'go' with: diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 3d0a9c5..e2b2938 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -53,7 +53,7 @@ jobs: renovate: ${{ steps.filter.outputs.renovate }} markdown: ${{ steps.filter.outputs.markdown }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4 @@ -100,7 +100,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.go == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -119,7 +119,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.helm == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -138,7 +138,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.renovate == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -157,7 +157,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.markdown == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 diff --git a/.github/workflows/release-pr.yaml b/.github/workflows/release-pr.yaml index bd7b6dc..7f888e9 100644 --- a/.github/workflows/release-pr.yaml +++ b/.github/workflows/release-pr.yaml @@ -65,7 +65,7 @@ jobs: # Checkout with the App token — `actions/checkout` persists the # token in `.git/config` so later `git push` operations from the # post-process step authenticate as the App. - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: token: ${{ steps.app-token.outputs.token }} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 2e10988..632f378 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -136,7 +136,7 @@ jobs: exit 1 } - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: # GoReleaser inspects git history for the changelog. Full clone # avoids "shallow clone" warnings on large repos. @@ -284,7 +284,7 @@ jobs: echo "::error::Set them at Settings → Environments → release → Variables" exit 1 fi - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5 with: version: "4.2.2" diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml index 7ad5141..c58d1d3 100644 --- a/.github/workflows/renovate.yaml +++ b/.github/workflows/renovate.yaml @@ -105,7 +105,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 60 steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 # Mint a short-lived installation token for the App. This is the # identity Renovate uses to push branches and open PRs. The token diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index b927e5e..e61f2e1 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -35,7 +35,7 @@ jobs: actions: read steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: # Don't persist GITHUB_TOKEN in .git/config — Scorecard re-reads # the repo via API and any persisted token broadens our exposure. diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml index ce2958a..5f8c449 100644 --- a/.github/workflows/security.yaml +++ b/.github/workflows/security.yaml @@ -32,7 +32,7 @@ jobs: deps: ${{ steps.filter.outputs.deps }} chart: ${{ steps.filter.outputs.chart }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: persist-credentials: false - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4 @@ -59,7 +59,7 @@ jobs: name: Secret leaks (Gitleaks) runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: # gitleaks scans the working tree, not git history — shallow. fetch-depth: 1 @@ -83,7 +83,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.go == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 persist-credentials: false @@ -106,7 +106,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.deps == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: persist-credentials: false - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -125,7 +125,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.chart == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: persist-credentials: false - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 57ec9e4..583b982 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -34,7 +34,7 @@ jobs: helm_examples: ${{ steps.filter.outputs.helm_examples }} helm_fixtures: ${{ steps.filter.outputs.helm_fixtures }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4 @@ -82,7 +82,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -100,7 +100,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.helm_examples == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -118,7 +118,7 @@ jobs: (github.event_name != 'pull_request' || needs.changes.outputs.helm_fixtures == 'true') runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8 @@ -138,7 +138,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 with: fetch-depth: 1 # Bring up the same toolset as the local dev shell — k3d, helm,