From 834e39aabfc67d326ec1d451477d582e39bb318b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Jan 2026 09:04:13 +0000 Subject: [PATCH 1/2] :arrow_up: Bump actions/checkout from 6.0.1 to 6.0.2 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/build-and-test.yml | 2 +- .github/workflows/ci.yml | 4 ++-- .github/workflows/dependabot.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- .github/workflows/update-client.yml | 10 +++++----- 6 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml index f5d84fe..7bfc280 100644 --- a/.github/workflows/build-and-test.yml +++ b/.github/workflows/build-and-test.yml @@ -31,7 +31,7 @@ jobs: steps: # we want the head of the branch that triggered this, not the reference of the commit, this is so we get updated go versions etc. - name: Check out [${{ inputs.branch || github.ref }}] - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.branch || github.ref }} - name: Update Go env version diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index bfaaa65..cc393d4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: runs-on: ubuntu-latest steps: # Checkout with full history for to allow compare with base branch - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 with: fetch-depth: 0 - uses: actions/setup-python@v6 @@ -52,7 +52,7 @@ jobs: - uses: actions/setup-python@v6 - name: Install tools run: pip install detect-secrets[gibberish]==1.5.0 && pip list - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 with: fetch-depth: 0 # FIXME: GitLeaks requires a licence now diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index 123ad03..a4f4685 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -21,7 +21,7 @@ jobs: needs: update-client steps: # Checkout with full history for to allow compare with base branch - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 with: fetch-depth: 0 - uses: actions/setup-python@v6 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e237e58..a2729f6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,7 +19,7 @@ jobs: outputs: changes: ${{ steps.check.outputs.changes }} steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 - name: Check if changes directory contains files id: check run: | @@ -33,7 +33,7 @@ jobs: needs: [ check-for-changes ] if: needs.check-for-changes.outputs.changes steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 with: # Get the full history as this is required by goreleaser fetch-depth: 0 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index c2fb7d4..387e6e4 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,7 +32,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.1.1 + uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.1.1 with: persist-credentials: false diff --git a/.github/workflows/update-client.yml b/.github/workflows/update-client.yml index 7c318ce..1f7da29 100644 --- a/.github/workflows/update-client.yml +++ b/.github/workflows/update-client.yml @@ -27,7 +27,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout API-Uniform-Contract repo - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v6.0.2 with: token: ${{ secrets.GIT_SECRET }} repository: Arm-Debug/API-Uniform-Contract @@ -44,13 +44,13 @@ jobs: runs-on: ubuntu-latest needs: update-client steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 with: # So that we have correct GIT_TOKEN to push back to branch as we need workflow permissions token: ${{ secrets.GIT_SECRET }} ref: ${{ inputs.branch || github.head_ref || github.ref }} - name: Checkout Update Go action - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v6.0.2 with: repository: Arm-Debug/update-go-action ref: refs/tags/latest @@ -75,7 +75,7 @@ jobs: - name: Install continuous-delivery-scripts run: | pip install continuous-delivery-scripts - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.branch || github.head_ref || github.ref }} - name: Download all-service-flat artefact @@ -155,7 +155,7 @@ jobs: needs: - build-and-test steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v6.0.2 - name: Trigger release if: contains(${{ inputs.branch || github.head_ref || github.ref }} , 'main') run: gh workflow run release.yml -f release_type=release From 8d2f3b3166557bfde263d88e88b36338562d1663 Mon Sep 17 00:00:00 2001 From: Monty Bot Date: Fri, 23 Jan 2026 09:04:45 +0000 Subject: [PATCH 2/2] =?UTF-8?q?=F0=9F=93=B0=20Automatic=20changes=20?= =?UTF-8?q?=E2=9A=99=20Adding=20news=20file?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- changes/20260123090445.bugfix | 1 + 1 file changed, 1 insertion(+) create mode 100644 changes/20260123090445.bugfix diff --git a/changes/20260123090445.bugfix b/changes/20260123090445.bugfix new file mode 100644 index 0000000..a2b8946 --- /dev/null +++ b/changes/20260123090445.bugfix @@ -0,0 +1 @@ +Dependency upgrade: checkout-6.0.2