From 6f764b3bc2c43d44799f4cce1c86e5582a4af125 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 08:11:09 +0000 Subject: [PATCH] build(deps): bump actions/checkout from 7.0.0 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/build-image.yml | 2 +- .github/workflows/csp-inline-check.yml | 2 +- .github/workflows/docker-publish.yml | 2 +- .github/workflows/product-heartbeat.yml | 4 ++-- .github/workflows/sign-e2e.yml | 2 +- .github/workflows/test.yml | 14 +++++++------- 6 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/build-image.yml b/.github/workflows/build-image.yml index 40465af0..2d45e07d 100644 --- a/.github/workflows/build-image.yml +++ b/.github/workflows/build-image.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Docker Buildx uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 diff --git a/.github/workflows/csp-inline-check.yml b/.github/workflows/csp-inline-check.yml index 25f61fdb..de45ac5d 100644 --- a/.github/workflows/csp-inline-check.yml +++ b/.github/workflows/csp-inline-check.yml @@ -12,6 +12,6 @@ jobs: csp-inline: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Geen inline JS onder script-src 'self' run: ./scripts/check-csp-inline.sh diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index b4cd6072..34f16a11 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up QEMU (for ARM64 cross-build) uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 diff --git a/.github/workflows/product-heartbeat.yml b/.github/workflows/product-heartbeat.yml index ad31327f..c720a6de 100644 --- a/.github/workflows/product-heartbeat.yml +++ b/.github/workflows/product-heartbeat.yml @@ -34,7 +34,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/setup-node@v4 with: node-version: '20' @@ -56,7 +56,7 @@ jobs: contents: read issues: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/setup-node@v4 with: node-version: '20' diff --git a/.github/workflows/sign-e2e.yml b/.github/workflows/sign-e2e.yml index e37caf96..e81a7a19 100644 --- a/.github/workflows/sign-e2e.yml +++ b/.github/workflows/sign-e2e.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/setup-node@v4 with: node-version: '20' diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index b89238b5..cd182e8a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -15,7 +15,7 @@ jobs: name: shell — bash -n runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Bash syntax check on all .sh files run: | set -e @@ -33,7 +33,7 @@ jobs: name: static — every name must exist runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '20' @@ -48,7 +48,7 @@ jobs: name: frontend — cache-bust guard runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: All local css/js links must carry a single ?v= cache-bust run: scripts/check-cache-bust.sh @@ -56,7 +56,7 @@ jobs: name: relay - crypto suite (@paramant/core) runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '20' @@ -100,7 +100,7 @@ jobs: name: relay - unit suite (no native deps) runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '20' @@ -133,7 +133,7 @@ jobs: name: admin - unit suite runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '20' @@ -145,7 +145,7 @@ jobs: name: secrets - gitleaks runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 # Full-history secret scan. The repo-root .gitleaksignore (documented