From 6e09bea72591e07cf722d627381ddb3ed34c928a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 15:19:27 +0000 Subject: [PATCH] build: bump actions/checkout from 7.0.0 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/auto_updates.yml | 2 +- .github/workflows/docker.yml | 2 +- .github/workflows/phylum_analyze_pr.yml | 2 +- .github/workflows/preview.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- .github/workflows/test.yml | 6 +++--- 6 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/auto_updates.yml b/.github/workflows/auto_updates.yml index 3e013cd..680a640 100644 --- a/.github/workflows/auto_updates.yml +++ b/.github/workflows/auto_updates.yml @@ -23,7 +23,7 @@ jobs: shell: bash steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # This GPG key is for the `phylum-bot` account and used in order to ensure commits are signed/verified - name: Import GPG key for bot account diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index d6637f6..8779afe 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -68,7 +68,7 @@ jobs: echo "REL_VER_WITHOUT_v=${REL_VER_WITHOUT_v}" >> "${GITHUB_OUTPUT}" - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # This will ensure the checkout matches the tag for the latest release ref: ${{ steps.get_vers.outputs.REL_VER_WITH_v }} diff --git a/.github/workflows/phylum_analyze_pr.yml b/.github/workflows/phylum_analyze_pr.yml index f191d6a..0a392cc 100644 --- a/.github/workflows/phylum_analyze_pr.yml +++ b/.github/workflows/phylum_analyze_pr.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Analyze poetry.lock file diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml index fcdb5a2..ca5cfc4 100644 --- a/.github/workflows/preview.yml +++ b/.github/workflows/preview.yml @@ -39,7 +39,7 @@ jobs: next_ver: ${{ steps.dev_ver.outputs.next_ver }} steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # `python-semantic-release` needs full history to properly determine the next release version fetch-depth: 0 @@ -121,7 +121,7 @@ jobs: artifact: ./build/phylum-ci.exe steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Nuitka needs the packaged form and not the editable install Poetry provides # Ref: https://github.com/Nuitka/Nuitka/issues/2965 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3990dda..ce9ba4f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -41,7 +41,7 @@ jobs: psr_expected_next_ver: ${{ steps.get_vers.outputs.psr_expected_next_ver }} steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # `python-semantic-release` needs full history to properly determine the next release version fetch-depth: 0 @@ -165,7 +165,7 @@ jobs: artifact: ./build/phylum-ci.exe steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Nuitka needs the packaged form and not the editable install Poetry provides # Ref: https://github.com/Nuitka/Nuitka/issues/2965 @@ -276,7 +276,7 @@ jobs: PHYLUM_TOKEN: ${{ secrets.PHYLUM_TOKEN }} steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # `python-semantic-release` needs full history to properly determine the next release version fetch-depth: 0 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3880054..5c9e51c 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install poetry run: | @@ -72,7 +72,7 @@ jobs: python-version: ["3.10", "3.11", "3.12", "3.13"] steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install poetry run: | @@ -117,7 +117,7 @@ jobs: PHYLUM_TOKEN: ${{ secrets.PHYLUM_TOKEN }} steps: - name: Checkout the repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install poetry if: ${{ matrix.build == 'wheel' }}