From 8bcc95999dbd7fc11d290c228f5981593b93c820 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 08:54:15 +0000 Subject: [PATCH] =?UTF-8?q?=E2=AC=86=20Bump=20actions/checkout=20from=207.?= =?UTF-8?q?0.0=20to=207.0.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/benchmarks.yml | 2 +- .github/workflows/ci.yaml | 4 ++-- .github/workflows/codeql.yml | 2 +- .github/workflows/docs-backfill.yaml | 2 +- .github/workflows/documentation.yaml | 8 ++++---- .github/workflows/framework-resolution-check.yml | 2 +- .github/workflows/native-core-build.yml | 2 +- .github/workflows/native-pin-consistency.yml | 2 +- .github/workflows/quickstart-tabs-check.yml | 2 +- .github/workflows/readme-version-check.yml | 2 +- .../workflows/release-python-conversion-test.yml | 2 +- .github/workflows/release-python.yml | 16 ++++++++-------- .../workflows/rw_run_all_test_and_record.yaml | 2 +- .github/workflows/type-check.yml | 4 ++-- .github/workflows/wheel-python-matrix.yml | 2 +- 15 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index 9c5431c9..a8f6d7e8 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -29,7 +29,7 @@ jobs: if: contains(github.event.pull_request.labels.*.name, 'benchmark') runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Install uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index b1b84689..e1dd26c9 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -87,7 +87,7 @@ jobs: name: Dependency advisory audit (pip-audit) runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" @@ -119,7 +119,7 @@ jobs: name: LangChain-installed __getattr__ contract test runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.13" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 86ae06e7..b293a8f9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,7 +31,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive diff --git a/.github/workflows/docs-backfill.yaml b/.github/workflows/docs-backfill.yaml index 5d0103fe..f2959ca7 100644 --- a/.github/workflows/docs-backfill.yaml +++ b/.github/workflows/docs-backfill.yaml @@ -64,7 +64,7 @@ jobs: echo "Backfilling docs for release tag: ${RELEASE_TAG}" - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 ref: master diff --git a/.github/workflows/documentation.yaml b/.github/workflows/documentation.yaml index de7215bd..865a5843 100644 --- a/.github/workflows/documentation.yaml +++ b/.github/workflows/documentation.yaml @@ -88,7 +88,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 @@ -125,7 +125,7 @@ jobs: pages: write steps: - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 @@ -177,7 +177,7 @@ jobs: pages: write steps: - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 ref: master @@ -273,7 +273,7 @@ jobs: echo "Manual republish: target=${TARGET}, release_tag=${RELEASE_TAG_INPUT:-(n/a)}" - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 ref: master diff --git a/.github/workflows/framework-resolution-check.yml b/.github/workflows/framework-resolution-check.yml index a74e5be8..c5dda08b 100644 --- a/.github/workflows/framework-resolution-check.yml +++ b/.github/workflows/framework-resolution-check.yml @@ -32,7 +32,7 @@ jobs: name: Dependency floors co-resolve with supported frameworks runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v7 - name: Resolve agent-assembly floors against the framework matrix run: python scripts/ci/check_framework_resolution.py --python-version 3.12 diff --git a/.github/workflows/native-core-build.yml b/.github/workflows/native-core-build.yml index c1d5edc0..e141a0ee 100644 --- a/.github/workflows/native-core-build.yml +++ b/.github/workflows/native-core-build.yml @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Python uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 diff --git a/.github/workflows/native-pin-consistency.yml b/.github/workflows/native-pin-consistency.yml index f9fe02ff..842c8588 100644 --- a/.github/workflows/native-pin-consistency.yml +++ b/.github/workflows/native-pin-consistency.yml @@ -20,7 +20,7 @@ jobs: name: aa-* crates share one git rev runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Assert all agent-assembly git deps share one rev run: | manifest="native/aa-ffi-python/Cargo.toml" diff --git a/.github/workflows/quickstart-tabs-check.yml b/.github/workflows/quickstart-tabs-check.yml index 8ba44bbd..72376bfd 100644 --- a/.github/workflows/quickstart-tabs-check.yml +++ b/.github/workflows/quickstart-tabs-check.yml @@ -29,7 +29,7 @@ jobs: name: quick-start tabs drift runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: diff --git a/.github/workflows/readme-version-check.yml b/.github/workflows/readme-version-check.yml index c7d3f379..ad3c34bc 100644 --- a/.github/workflows/readme-version-check.yml +++ b/.github/workflows/readme-version-check.yml @@ -28,7 +28,7 @@ jobs: name: README version drift runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: diff --git a/.github/workflows/release-python-conversion-test.yml b/.github/workflows/release-python-conversion-test.yml index b301fcae..6b9b5d37 100644 --- a/.github/workflows/release-python-conversion-test.yml +++ b/.github/workflows/release-python-conversion-test.yml @@ -42,7 +42,7 @@ jobs: name: Run tag → PEP 440 fixture suite runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Lint conversion + test scripts run: | shellcheck .github/scripts/tag-to-pep440.sh diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml index 42f15ad1..633aff0e 100644 --- a/.github/workflows/release-python.yml +++ b/.github/workflows/release-python.yml @@ -76,7 +76,7 @@ jobs: # and its inverse (.github/scripts/pep440-to-tag.sh). Those scripts # are the single source of truth for the conversion, shared with the # AAASM-2863 / AAASM-2956 unit tests. - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - id: r env: EVENT_NAME: ${{ github.event_name }} @@ -168,7 +168,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -194,7 +194,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -227,7 +227,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -328,7 +328,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -415,7 +415,7 @@ jobs: needs: resolve runs-on: macos-14 # Apple silicon runner steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Expand interpreter list for setup-python id: pythons # macOS runners have no manylinux image bundling every CPython, so each @@ -502,7 +502,7 @@ jobs: needs: resolve runs-on: macos-15-intel # Intel runner (macos-13 sunset 2025-09-19) steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Expand interpreter list for setup-python id: pythons # macOS runners have no manylinux image bundling every CPython, so each @@ -642,7 +642,7 @@ jobs: permissions: contents: write # create the git tag + GitHub Release steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Download CycloneDX SBOM # AAASM-3615: pull the SBOM built by the `sbom` job so it can be # attached to the Release below. diff --git a/.github/workflows/rw_run_all_test_and_record.yaml b/.github/workflows/rw_run_all_test_and_record.yaml index 0dddfdc5..c2ae3a7c 100644 --- a/.github/workflows/rw_run_all_test_and_record.yaml +++ b/.github/workflows/rw_run_all_test_and_record.yaml @@ -166,7 +166,7 @@ jobs: needs: build-and-test runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: # Required by SonarCloud to correctly compute PR/new-code deltas. fetch-depth: 0 diff --git a/.github/workflows/type-check.yml b/.github/workflows/type-check.yml index 2c2cadae..3b54d030 100644 --- a/.github/workflows/type-check.yml +++ b/.github/workflows/type-check.yml @@ -49,7 +49,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Install uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 @@ -133,7 +133,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Install uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 diff --git a/.github/workflows/wheel-python-matrix.yml b/.github/workflows/wheel-python-matrix.yml index 6b69edea..bec69106 100644 --- a/.github/workflows/wheel-python-matrix.yml +++ b/.github/workflows/wheel-python-matrix.yml @@ -44,7 +44,7 @@ jobs: name: Check wheel matrix matches declared Python support runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Lint guard + test scripts run: | shellcheck .github/scripts/check-wheel-python-matrix.sh