From 5aa389c5158ca3cfa292acae1b4ef62f04882d84 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Sep 2026 22:03:28 +0000 Subject: [PATCH] chore(deps): bump actions/checkout from 4.3.1 to 4.4.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 4.4.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...11d5960a326750d5838078e36cf38b85af677262) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/codex-pr-review.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/deploy-website.yml | 2 +- .github/workflows/issue-auto-response.yml | 2 +- .github/workflows/packaging-smoke.yml | 2 +- .../release-macos-x64-native-check.yml | 2 +- .github/workflows/release.yml | 22 +++++++++---------- .../repository-activity-snapshot.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 11 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ae4ac1f51..2cf9a380c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,7 +20,7 @@ jobs: name: Lint, typecheck, test runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Setup pnpm uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index fdf59e114..1bed4a8bb 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: matrix: language: [javascript-typescript] steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - uses: github/codeql-action/init@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3 with: languages: ${{ matrix.language }} diff --git a/.github/workflows/codex-pr-review.yml b/.github/workflows/codex-pr-review.yml index 5d8b7c281..4578b669c 100644 --- a/.github/workflows/codex-pr-review.yml +++ b/.github/workflows/codex-pr-review.yml @@ -72,7 +72,7 @@ jobs: - name: Checkout repository if: steps.check_bot.outputs.has_review_for_current_head != 'true' - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ github.event.pull_request.base.sha }} fetch-depth: 0 diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 05d050b5d..2ce119470 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -15,7 +15,7 @@ jobs: if: github.event.repository.visibility == 'public' runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4 with: fail-on-severity: moderate diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml index 1708514d9..148724ab9 100644 --- a/.github/workflows/deploy-website.yml +++ b/.github/workflows/deploy-website.yml @@ -17,7 +17,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: fetch-depth: 0 diff --git a/.github/workflows/issue-auto-response.yml b/.github/workflows/issue-auto-response.yml index a02abd5a4..9b9898547 100644 --- a/.github/workflows/issue-auto-response.yml +++ b/.github/workflows/issue-auto-response.yml @@ -102,7 +102,7 @@ jobs: - name: Checkout repository if: steps.check_bot.outputs.should_respond == 'true' - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: fetch-depth: 0 diff --git a/.github/workflows/packaging-smoke.yml b/.github/workflows/packaging-smoke.yml index f98287c0d..9a8199c65 100644 --- a/.github/workflows/packaging-smoke.yml +++ b/.github/workflows/packaging-smoke.yml @@ -55,7 +55,7 @@ jobs: # and got killed with no useful diagnostic. timeout-minutes: 30 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Setup pnpm uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 diff --git a/.github/workflows/release-macos-x64-native-check.yml b/.github/workflows/release-macos-x64-native-check.yml index 974effcbf..47a599d5d 100644 --- a/.github/workflows/release-macos-x64-native-check.yml +++ b/.github/workflows/release-macos-x64-native-check.yml @@ -28,7 +28,7 @@ jobs: env: CHECK_REF: ${{ github.event_name == 'push' && github.ref || inputs.ref }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ env.CHECK_REF }} fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6929bd094..00de4e5eb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -35,7 +35,7 @@ jobs: env: RELEASE_REF: ${{ github.event_name == 'push' && github.ref || format('refs/tags/{0}', inputs.tag) }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ env.RELEASE_REF }} fetch-depth: 0 @@ -95,7 +95,7 @@ jobs: outputs: changelog: ${{ steps.build.outputs.changelog }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ env.RELEASE_REF }} fetch-depth: 0 @@ -170,7 +170,7 @@ jobs: env: RELEASE_REF: ${{ github.event_name == 'push' && github.ref || format('refs/tags/{0}', inputs.tag) }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ env.RELEASE_REF }} fetch-depth: 0 @@ -290,7 +290,7 @@ jobs: env: RELEASE_REF: ${{ github.event_name == 'push' && github.ref || format('refs/tags/{0}', inputs.tag) }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ env.RELEASE_REF }} fetch-depth: 0 @@ -370,7 +370,7 @@ jobs: env: RELEASE_REF: ${{ github.event_name == 'push' && github.ref || format('refs/tags/{0}', inputs.tag) }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ env.RELEASE_REF }} fetch-depth: 0 @@ -436,7 +436,7 @@ jobs: env: RELEASE_REF: ${{ github.event_name == 'push' && github.ref || format('refs/tags/{0}', inputs.tag) }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ env.RELEASE_REF }} fetch-depth: 0 @@ -490,7 +490,7 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: # Check out the default branch (not the tag) so the commit lands # on main. We pass the version explicitly to the script. @@ -581,7 +581,7 @@ jobs: echo "skip=false" >> "$GITHUB_OUTPUT" fi - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 if: steps.guard.outputs.skip == 'false' - name: Derive version from tag @@ -601,7 +601,7 @@ jobs: - name: Checkout Scoop bucket if: steps.guard.outputs.skip == 'false' - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: repository: OpenCoworkAI/scoop-bucket path: scoop-bucket @@ -646,7 +646,7 @@ jobs: - name: Checkout source if: steps.guard.outputs.skip == 'false' - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: path: source ref: ${{ github.event_name == 'push' && github.ref || 'main' }} @@ -660,7 +660,7 @@ jobs: - name: Checkout Homebrew tap if: steps.guard.outputs.skip == 'false' - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: repository: OpenCoworkAI/homebrew-tap path: homebrew-tap diff --git a/.github/workflows/repository-activity-snapshot.yml b/.github/workflows/repository-activity-snapshot.yml index c44da55ae..cf901f4f9 100644 --- a/.github/workflows/repository-activity-snapshot.yml +++ b/.github/workflows/repository-activity-snapshot.yml @@ -15,7 +15,7 @@ jobs: env: ACTIVITY_SNAPSHOT_TOKEN: ${{ secrets.ACTIVITY_SNAPSHOT_TOKEN }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index f7ba04233..9c4391d89 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -20,7 +20,7 @@ jobs: security-events: write id-token: write steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: persist-credentials: false - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3