From 6e25fa364bebb5bd0d71f4550bfcce2aae683b36 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 Aug 2025 03:36:07 +0000 Subject: [PATCH] build(deps): bump actions/checkout from 4.2.2 to 5.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08c6903cd8c0fde910a37f88322edcfb5dd907a8) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/closeVote.yml | 2 +- .github/workflows/initiateNewVote.yml | 4 ++-- .github/workflows/watchVote.yml | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1d92c969..63d8435b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Clone repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Install npm dependencies run: npm ci diff --git a/.github/workflows/closeVote.yml b/.github/workflows/closeVote.yml index a8923812..1d6b4955 100644 --- a/.github/workflows/closeVote.yml +++ b/.github/workflows/closeVote.yml @@ -35,7 +35,7 @@ jobs: env: GH_TOKEN: ${{ github.token }} PR_REF: ${{ github.event.inputs.pr || github.event.issue.number }} - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: # Loading the default branch so we use the last version of the mailmap # rather than getting stuck to when the vote PR was open. diff --git a/.github/workflows/initiateNewVote.yml b/.github/workflows/initiateNewVote.yml index 6a3288ed..92e28f7b 100644 --- a/.github/workflows/initiateNewVote.yml +++ b/.github/workflows/initiateNewVote.yml @@ -25,7 +25,7 @@ jobs: repository-projects: read runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # If the subject is still REPLACEME, that would mean it's a PR to modify # the sample file, not a PR initializing a vote. - run: '! grep -q "subject: REPLACEME" votes/initiateNewVote.yml' @@ -54,7 +54,7 @@ jobs: repository-projects: read runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 2 - name: Extract info from the pushed file diff --git a/.github/workflows/watchVote.yml b/.github/workflows/watchVote.yml index dad69d49..718878cb 100644 --- a/.github/workflows/watchVote.yml +++ b/.github/workflows/watchVote.yml @@ -21,7 +21,7 @@ jobs: run: | echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }} persist-credentials: false