From 4ade00f92495d4f81ef510b47b457ae27eca584e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Jun 2024 14:49:44 +0000 Subject: [PATCH] build: bump actions/checkout from 4.1.6 to 4.1.7 (#439) --- .github/workflows/auto_updates.yml | 2 +- .github/workflows/docker.yml | 2 +- .github/workflows/phylum_analyze_pr.yml | 2 +- .github/workflows/preview.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/test.yml | 6 +++--- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/auto_updates.yml b/.github/workflows/auto_updates.yml index f4034d3..bfd8555 100644 --- a/.github/workflows/auto_updates.yml +++ b/.github/workflows/auto_updates.yml @@ -23,7 +23,7 @@ jobs: shell: bash steps: - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 # This GPG key is for the `phylum-bot` account and used in order to ensure commits are signed/verified - name: Import GPG key for bot account diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index fd5a0e6..f08c501 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -66,7 +66,7 @@ jobs: echo "REL_VER_WITHOUT_v=${REL_VER_WITHOUT_v}" >> "${GITHUB_ENV}" - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: # This will ensure the checkout matches the tag for the latest release ref: ${{ env.REL_VER_WITH_v }} diff --git a/.github/workflows/phylum_analyze_pr.yml b/.github/workflows/phylum_analyze_pr.yml index 7bf6a23..38e9a26 100644 --- a/.github/workflows/phylum_analyze_pr.yml +++ b/.github/workflows/phylum_analyze_pr.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 - name: Analyze poetry.lock file diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml index 9d58745..41f85b0 100644 --- a/.github/workflows/preview.yml +++ b/.github/workflows/preview.yml @@ -31,7 +31,7 @@ jobs: shell: bash steps: - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: # `python-semantic-release` needs full history to properly determine the next release version fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f9fc711..6c7d4ab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -46,7 +46,7 @@ jobs: DOCKER_BUILDKIT: 1 steps: - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: # `python-semantic-release` needs full history to properly determine the next release version fetch-depth: 0 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index f6012be..b645771 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -24,7 +24,7 @@ jobs: python-version: ["3.12"] steps: - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Install poetry run: pipx install poetry==1.8.3 @@ -67,7 +67,7 @@ jobs: python-version: ["3.9", "3.10", "3.11", "3.12"] steps: - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Install poetry run: pipx install poetry==1.8.3 @@ -108,7 +108,7 @@ jobs: DOCKER_BUILDKIT: 1 steps: - name: Checkout the repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Install poetry if: ${{ matrix.build == 'wheel' }}