From fcdf29f8c58761ac2baab29d051603df1f4acb78 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 19 Jun 2026 17:39:59 -0300 Subject: [PATCH] chore(deps): bump actions/checkout from 4 to 7 (#4297) Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/build-fork.yml | 2 +- .github/workflows/ci.yml | 44 +++++++++++----------- .github/workflows/claude.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/dast-smoke.yml | 2 +- .github/workflows/docker-publish.yml | 6 +-- .github/workflows/electron-release.yml | 6 +-- .github/workflows/nightly-llm-security.yml | 4 +- .github/workflows/nightly-mutation.yml | 2 +- .github/workflows/nightly-property.yml | 2 +- .github/workflows/nightly-resilience.yml | 6 +-- .github/workflows/nightly-schemathesis.yml | 2 +- .github/workflows/npm-publish.yml | 4 +- .github/workflows/opencode-plugin-ci.yml | 4 +- .github/workflows/opencode-provider-ci.yml | 4 +- .github/workflows/quality.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/semgrep.yml | 2 +- .github/workflows/wiki-sync.yml | 2 +- 19 files changed, 50 insertions(+), 50 deletions(-) diff --git a/.github/workflows/build-fork.yml b/.github/workflows/build-fork.yml index 185d29524c..5520cf746b 100644 --- a/.github/workflows/build-fork.yml +++ b/.github/workflows/build-fork.yml @@ -25,7 +25,7 @@ jobs: packages: write steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 50a318a0da..2c50acb61f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -31,7 +31,7 @@ jobs: API_KEY_SECRET: ci-lint-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -79,7 +79,7 @@ jobs: contents: read security-events: read steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -161,7 +161,7 @@ jobs: # fetch-depth: 0 — the OpenAPI breaking-change gate (oasdiff) reads the base # spec via `git show :docs/reference/openapi.yaml`; a shallow clone # would lack the base ref and the gate would self-skip (base-unresolved). - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false fetch-depth: 0 @@ -265,7 +265,7 @@ jobs: name: Docs Sync (Strict) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -297,7 +297,7 @@ jobs: # existing doc corpus is brought up to style. Promote to blocking once it converges. continue-on-error: true steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -320,7 +320,7 @@ jobs: name: i18n UI Coverage runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -336,7 +336,7 @@ jobs: outputs: langs: ${{ steps.langs.outputs.langs }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - id: langs @@ -355,7 +355,7 @@ jobs: lang: ${{ fromJson(needs.i18n-matrix.outputs.langs) }} needs: i18n-matrix steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-python@v6 @@ -384,7 +384,7 @@ jobs: if: ${{ github.event_name == 'pull_request' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false fetch-depth: 0 @@ -414,7 +414,7 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -447,7 +447,7 @@ jobs: env: JWT_SECRET: ci-build-secret-with-sufficient-length-for-validation steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -472,7 +472,7 @@ jobs: JWT_SECRET: ci-build-secret-with-sufficient-length-for-validation CSC_IDENTITY_AUTO_DISCOVERY: "false" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -507,7 +507,7 @@ jobs: API_KEY_SECRET: ci-test-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -528,7 +528,7 @@ jobs: API_KEY_SECRET: ci-test-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -559,7 +559,7 @@ jobs: API_KEY_SECRET: ci-test-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -585,7 +585,7 @@ jobs: API_KEY_SECRET: ci-test-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -611,7 +611,7 @@ jobs: API_KEY_SECRET: ci-test-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -655,7 +655,7 @@ jobs: JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation API_KEY_SECRET: ci-test-api-key-secret-long steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -733,7 +733,7 @@ jobs: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false fetch-depth: 0 @@ -853,7 +853,7 @@ jobs: DISABLE_SQLITE_AUTO_BACKUP: "true" OMNIROUTE_PLAYWRIGHT_SKIP_BUILD: "1" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -896,7 +896,7 @@ jobs: DATA_DIR: /tmp/omniroute-ci-${{ matrix.shard }} DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -916,7 +916,7 @@ jobs: API_KEY_SECRET: ci-test-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 01380d824f..903eedd613 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -30,7 +30,7 @@ jobs: actions: read # Required for Claude to read CI results on PRs steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false fetch-depth: 1 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 72616d5f9b..89fa78523f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,7 +19,7 @@ jobs: actions: read contents: read steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 diff --git a/.github/workflows/dast-smoke.yml b/.github/workflows/dast-smoke.yml index 4c1548aad3..e06968cf61 100644 --- a/.github/workflows/dast-smoke.yml +++ b/.github/workflows/dast-smoke.yml @@ -15,7 +15,7 @@ jobs: JWT_SECRET: ci-build-secret-with-sufficient-length-for-validation API_KEY_SECRET: ci-api-key-secret-with-sufficient-length-aaaa steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index e5e1fc757d..ec91e0c229 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -42,7 +42,7 @@ jobs: IMAGE_NAME: diegosouzapw/omniroute steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/v{0}', inputs.version) || '' }} @@ -143,7 +143,7 @@ jobs: GHCR_IMAGE_NAME: ghcr.io/diegosouzapw/omniroute steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/v{0}', inputs.version) || '' }} @@ -243,7 +243,7 @@ jobs: PROMOTE_LATEST: ${{ needs.prepare.outputs.promote_latest }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/v{0}', inputs.version) || '' }} diff --git a/.github/workflows/electron-release.yml b/.github/workflows/electron-release.yml index 42344dfa4f..2b4839153e 100644 --- a/.github/workflows/electron-release.yml +++ b/.github/workflows/electron-release.yml @@ -27,7 +27,7 @@ jobs: version: ${{ steps.validate.outputs.version }} steps: - name: Checkout code - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false fetch-depth: 0 @@ -84,7 +84,7 @@ jobs: deb_ext: .deb steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - name: Setup Node @@ -216,7 +216,7 @@ jobs: contents: write # softprops/action-gh-release creates the GitHub Release steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false fetch-depth: 0 diff --git a/.github/workflows/nightly-llm-security.yml b/.github/workflows/nightly-llm-security.yml index 60e3541332..f039690235 100644 --- a/.github/workflows/nightly-llm-security.yml +++ b/.github/workflows/nightly-llm-security.yml @@ -12,7 +12,7 @@ jobs: name: promptfoo — injection guard (block mode, no secret) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -61,7 +61,7 @@ jobs: echo "run=false" >> "$GITHUB_OUTPUT" echo "::notice::PROMPTFOO_PROVIDER_KEY not set — skipping garak probes (advisory)." fi - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false if: steps.gate.outputs.run == 'true' diff --git a/.github/workflows/nightly-mutation.yml b/.github/workflows/nightly-mutation.yml index 53d4bd5b69..898d244860 100644 --- a/.github/workflows/nightly-mutation.yml +++ b/.github/workflows/nightly-mutation.yml @@ -104,7 +104,7 @@ jobs: # scripts/quality/mutation-radiography.mjs both merge per file). timeout-minutes: ${{ matrix.batch.timeout || 180 }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/nightly-property.yml b/.github/workflows/nightly-property.yml index 70492fb6d2..776426573d 100644 --- a/.github/workflows/nightly-property.yml +++ b/.github/workflows/nightly-property.yml @@ -10,7 +10,7 @@ jobs: property-random-seed: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/nightly-resilience.yml b/.github/workflows/nightly-resilience.yml index 7a9d2d6f88..669dd32c30 100644 --- a/.github/workflows/nightly-resilience.yml +++ b/.github/workflows/nightly-resilience.yml @@ -12,7 +12,7 @@ jobs: name: Heap-growth gate runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -26,7 +26,7 @@ jobs: name: Resilience chaos (fault injection) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -40,7 +40,7 @@ jobs: name: k6 load/soak runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/nightly-schemathesis.yml b/.github/workflows/nightly-schemathesis.yml index c249c158a1..0ee4149c8e 100644 --- a/.github/workflows/nightly-schemathesis.yml +++ b/.github/workflows/nightly-schemathesis.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index d2659584f6..354381d4fe 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -55,7 +55,7 @@ jobs: packages: write # publish to npm.pkg.github.com steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false # Need full tag history to compare against highest semver when @@ -202,7 +202,7 @@ jobs: id-token: write # npm provenance steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false diff --git a/.github/workflows/opencode-plugin-ci.yml b/.github/workflows/opencode-plugin-ci.yml index 97fd143815..0925d4c7f8 100644 --- a/.github/workflows/opencode-plugin-ci.yml +++ b/.github/workflows/opencode-plugin-ci.yml @@ -32,7 +32,7 @@ jobs: matrix: node: ["22", "24"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -49,7 +49,7 @@ jobs: runs-on: ubuntu-latest needs: test steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/opencode-provider-ci.yml b/.github/workflows/opencode-provider-ci.yml index 0d7f93d184..52a206dd37 100644 --- a/.github/workflows/opencode-provider-ci.yml +++ b/.github/workflows/opencode-provider-ci.yml @@ -32,7 +32,7 @@ jobs: matrix: node: ["20", "22", "24"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 @@ -48,7 +48,7 @@ jobs: runs-on: ubuntu-latest needs: test steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 61015b27fd..b6cfcb2e8e 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -27,7 +27,7 @@ jobs: API_KEY_SECRET: ci-lint-api-key-secret-long DISABLE_SQLITE_AUTO_BACKUP: "true" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 17dbc07239..bb3a482722 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -21,7 +21,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index ab3fc6e7e5..c26ee334f2 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -12,7 +12,7 @@ jobs: container: image: semgrep/semgrep steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: Run semgrep (advisory) diff --git a/.github/workflows/wiki-sync.yml b/.github/workflows/wiki-sync.yml index 4de2789a35..c3b095f751 100644 --- a/.github/workflows/wiki-sync.yml +++ b/.github/workflows/wiki-sync.yml @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node uses: actions/setup-node@v6