From b711f4339720c2759e36ea54a375d9a606c2d4bb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Oct 2024 06:20:14 +0000 Subject: [PATCH] Bump actions/checkout from 3.6.0 to 4.2.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 4.2.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3.6.0...d632683dd7b4114ad314bca15554477dd762a938) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/release.yaml | 4 ++-- .github/workflows/scorecards.yml | 2 +- .github/workflows/update-bootstrap-tools.yml | 2 +- .github/workflows/update-syft-release.yml | 2 +- .github/workflows/validations.yaml | 14 +++++++------- 7 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 906323c8..1e8965b2 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -44,7 +44,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.1.0 + uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v3.1.0 - name: Utilize Go Module Cache uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0 diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 13b921e7..e2579d2a 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -22,6 +22,6 @@ jobs: egress-policy: audit - name: 'Checkout Repository' - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 - name: 'Dependency Review' uses: actions/dependency-review-action@6c5ccdad469c9f8a2996bfecaec55a631a347034 # v3.1.0 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a6ad096f..d9b42f66 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -12,7 +12,7 @@ jobs: environment: release runs-on: ubuntu-latest steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v2.5.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v2.5.0 - name: Check static analysis results uses: fountainhead/action-wait-for-check@297be350cf8393728ea4d4b39435c7d7ae167c93 # v1.1.0 @@ -81,7 +81,7 @@ jobs: outputs: hashes: ${{ steps.binary.outputs.hashes }} steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v2.5.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v2.5.0 with: fetch-depth: 0 diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 3fb20953..f7b18e0f 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -20,7 +20,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # tag=v3.6.0 + uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # tag=v4.2.0 with: persist-credentials: false diff --git a/.github/workflows/update-bootstrap-tools.yml b/.github/workflows/update-bootstrap-tools.yml index 03b82ae1..2f97ea48 100644 --- a/.github/workflows/update-bootstrap-tools.yml +++ b/.github/workflows/update-bootstrap-tools.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: github.repository == 'xeol-io/xeol' # only run for main repo steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v2.5.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v2.5.0 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: diff --git a/.github/workflows/update-syft-release.yml b/.github/workflows/update-syft-release.yml index e2442e2f..2deb8ec0 100644 --- a/.github/workflows/update-syft-release.yml +++ b/.github/workflows/update-syft-release.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: github.repository == 'xeol-io/xeol' # only run for main repo steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v2.5.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v2.5.0 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: diff --git a/.github/workflows/validations.yaml b/.github/workflows/validations.yaml index 1c175bec..2e988773 100644 --- a/.github/workflows/validations.yaml +++ b/.github/workflows/validations.yaml @@ -15,7 +15,7 @@ jobs: name: "Static analysis" runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.0.0 - name: Bootstrap environment uses: ./.github/actions/bootstrap @@ -28,7 +28,7 @@ jobs: name: "Unit tests" runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 - name: Bootstrap environment uses: ./.github/actions/bootstrap @@ -41,7 +41,7 @@ jobs: name: "Integration tests" runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.0.0 - name: Bootstrap environment uses: ./.github/actions/bootstrap @@ -59,7 +59,7 @@ jobs: name: "Build snapshot artifacts" runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.0.0 - name: Bootstrap environment uses: ./.github/actions/bootstrap @@ -89,7 +89,7 @@ jobs: needs: [Build-Snapshot-Artifacts] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 #v4.0.0 - name: Download snapshot build uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2 #v4.0.0 @@ -121,7 +121,7 @@ jobs: needs: [Build-Snapshot-Artifacts] runs-on: macos-latest steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 #v4.0.0 - name: Download snapshot build uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2 #v4.0.0 @@ -145,7 +145,7 @@ jobs: needs: [Build-Snapshot-Artifacts] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 #v4.0.0 - name: Bootstrap environment uses: ./.github/actions/bootstrap