From d0b1259ba060abf964c07d043771aac855efd6e2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 08:42:14 +0000 Subject: [PATCH] chore(deps): bump actions/checkout from 3.5.3 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3.5.3...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/Semgrep.yml | 2 +- .github/workflows/semgrep-image-pin-drift.yml | 2 +- .github/workflows/spm-smoke-test.yml | 6 +++--- .github/workflows/verify-selfupdate-checksums.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/Semgrep.yml b/.github/workflows/Semgrep.yml index b5e3e66..eccb743 100644 --- a/.github/workflows/Semgrep.yml +++ b/.github/workflows/Semgrep.yml @@ -33,7 +33,7 @@ jobs: steps: # Fetch project source with GitHub Actions Checkout. - - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Run the "semgrep ci" command on the command line of the docker image. - run: semgrep ci --sarif --output=semgrep.sarif env: diff --git a/.github/workflows/semgrep-image-pin-drift.yml b/.github/workflows/semgrep-image-pin-drift.yml index 1b0320c..091a863 100644 --- a/.github/workflows/semgrep-image-pin-drift.yml +++ b/.github/workflows/semgrep-image-pin-drift.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Fail if the pinned Semgrep image digest is stale run: | # NOTE: GitHub runs this as `bash -e {0}`; `set -uo pipefail` does not clear diff --git a/.github/workflows/spm-smoke-test.yml b/.github/workflows/spm-smoke-test.yml index f74267d..f8da348 100644 --- a/.github/workflows/spm-smoke-test.yml +++ b/.github/workflows/spm-smoke-test.yml @@ -43,7 +43,7 @@ jobs: RUN_A11Y_SCAN: "1" steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Swift toolchain run: swift --version @@ -91,7 +91,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Every script under scripts/ — the bash, zsh and fish variants alike — is # a bash script (`#!/usr/bin/env bash -il`); the variants differ only in which @@ -134,7 +134,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Exercise verify_binary_integrity (fail-open / fail-closed matrix) run: | set -uo pipefail diff --git a/.github/workflows/verify-selfupdate-checksums.yml b/.github/workflows/verify-selfupdate-checksums.yml index 1c088cd..ad525ad 100644 --- a/.github/workflows/verify-selfupdate-checksums.yml +++ b/.github/workflows/verify-selfupdate-checksums.yml @@ -24,7 +24,7 @@ jobs: verify-sidecars: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Verify scripts and .sha256 sidecars are in sync run: |