From 1377ff44bef9d6803a37b260265b813bdf480fc5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Nov 2025 21:47:30 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v5.0.1...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/python-ci.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/super-linter.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml index 3621cbd..c12dfd0 100644 --- a/.github/workflows/python-ci.yml +++ b/.github/workflows/python-ci.yml @@ -20,7 +20,7 @@ jobs: matrix: python-version: [3.11, 3.12] steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # v5.0.1 with: persist-credentials: false - name: Set up Python ${{ matrix.python-version }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 1904174..1217a4a 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -25,7 +25,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd + uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 with: persist-credentials: false diff --git a/.github/workflows/super-linter.yaml b/.github/workflows/super-linter.yaml index 6432cbd..447f1b9 100644 --- a/.github/workflows/super-linter.yaml +++ b/.github/workflows/super-linter.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # v5.0.1 with: fetch-depth: 0 persist-credentials: false From 84164e71d8293cadc56760fd3c0a8bec0df3fd89 Mon Sep 17 00:00:00 2001 From: jmeridth Date: Mon, 24 Nov 2025 15:55:01 -0600 Subject: [PATCH 2/2] fix: use semver for actions/checkout since it is immutable Signed-off-by: jmeridth --- .github/workflows/python-ci.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/super-linter.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml index c12dfd0..7ff14e8 100644 --- a/.github/workflows/python-ci.yml +++ b/.github/workflows/python-ci.yml @@ -20,7 +20,7 @@ jobs: matrix: python-version: [3.11, 3.12] steps: - - uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # v5.0.1 + - uses: actions/checkout@v6.0.0 with: persist-credentials: false - name: Set up Python ${{ matrix.python-version }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 1217a4a..9b9506a 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -25,7 +25,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 + uses: actions/checkout@v6.0.0 with: persist-credentials: false diff --git a/.github/workflows/super-linter.yaml b/.github/workflows/super-linter.yaml index 447f1b9..f6c5ed6 100644 --- a/.github/workflows/super-linter.yaml +++ b/.github/workflows/super-linter.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # v5.0.1 + uses: actions/checkout@v6.0.0 with: fetch-depth: 0 persist-credentials: false