From ece97087690e04846f8a5cd71467bd2a2534fc88 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 31 Jul 2026 19:30:17 +0000 Subject: [PATCH] ci(actions): bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/bundle-analysis.yml | 2 +- .github/workflows/cdn-deploy.yml | 8 ++++---- .github/workflows/chaos.yml | 2 +- .github/workflows/ci.yml | 14 +++++++------- .github/workflows/contract-build.yml | 12 ++++++------ .github/workflows/db-migration.yml | 10 +++++----- .github/workflows/deploy.yml | 6 +++--- .github/workflows/e2e-detox.yml | 4 ++-- .github/workflows/fuzz-test.yml | 2 +- .github/workflows/i18n.yml | 4 ++-- .github/workflows/invariant-tests.yml | 4 ++-- .github/workflows/lighthouse.yml | 4 ++-- .github/workflows/notification-service.yml | 2 +- .github/workflows/performance-ci.yml | 8 ++++---- .github/workflows/release.yml | 6 +++--- .github/workflows/sdk-generate.yml | 4 ++-- .github/workflows/sdk-publish.yml | 2 +- .github/workflows/security-scan.yml | 10 +++++----- .github/workflows/test-actions.yml | 2 +- 19 files changed, 53 insertions(+), 53 deletions(-) diff --git a/.github/workflows/bundle-analysis.yml b/.github/workflows/bundle-analysis.yml index c7cd793e..f6dbaaae 100644 --- a/.github/workflows/bundle-analysis.yml +++ b/.github/workflows/bundle-analysis.yml @@ -9,7 +9,7 @@ jobs: analyze: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Install web dependencies run: npm install react-dom@19.0.0 react-native-web@0.20.0 @expo/metro-runtime@5.0.5 --no-save --legacy-peer-deps diff --git a/.github/workflows/cdn-deploy.yml b/.github/workflows/cdn-deploy.yml index 7344138b..f052a17c 100644 --- a/.github/workflows/cdn-deploy.yml +++ b/.github/workflows/cdn-deploy.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Check VCL syntax (basic) run: | @@ -31,7 +31,7 @@ jobs: environment: production steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Deploy VCL snippet to Fastly env: @@ -53,7 +53,7 @@ jobs: environment: production steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Verify Cloudflare cache tag support env: @@ -73,7 +73,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v7 diff --git a/.github/workflows/chaos.yml b/.github/workflows/chaos.yml index 76c28933..d6b904fc 100644 --- a/.github/workflows/chaos.yml +++ b/.github/workflows/chaos.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v7 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 52c0ccb1..1b2a8f6e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ jobs: name: Lint & Format runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - run: npm run format:check - run: npm run lint @@ -23,7 +23,7 @@ jobs: name: Type Check runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - run: npx tsc --noEmit @@ -31,7 +31,7 @@ jobs: name: Tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - run: npm test @@ -39,7 +39,7 @@ jobs: name: NPM Audit runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - run: npx audit-ci --config audit-ci.json @@ -47,7 +47,7 @@ jobs: name: Mutation Tests (Frontend) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Run frontend mutation tests run: npx --yes @stryker-mutator/core@9.0.0 run --configFile stryker.conf.json @@ -65,7 +65,7 @@ jobs: name: Mutation Tests (Backend) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Run backend mutation tests run: npx --yes @stryker-mutator/core@9.0.0 run --configFile stryker.backend.conf.json @@ -85,7 +85,7 @@ jobs: runs-on: ubuntu-latest if: always() steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Download frontend report uses: actions/download-artifact@v4 diff --git a/.github/workflows/contract-build.yml b/.github/workflows/contract-build.yml index 633ddba6..c334b27d 100644 --- a/.github/workflows/contract-build.yml +++ b/.github/workflows/contract-build.yml @@ -26,7 +26,7 @@ jobs: name: Build Core Contracts runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Build core contracts (no optional features) uses: ./.github/actions/build-contracts @@ -41,7 +41,7 @@ jobs: name: Build Subscription (All Features) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Build subscription with all features uses: ./.github/actions/build-contracts @@ -69,7 +69,7 @@ jobs: - 'full' # all features combined steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust stable uses: actions-rust-lang/setup-rust-toolchain@v1 @@ -109,7 +109,7 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'pull_request' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust stable uses: actions-rust-lang/setup-rust-toolchain@v1 @@ -192,7 +192,7 @@ jobs: runs-on: ubuntu-latest if: github.ref == 'refs/heads/main' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust stable uses: actions-rust-lang/setup-rust-toolchain@v1 @@ -226,7 +226,7 @@ jobs: name: Module Dependency Analysis runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust stable uses: actions-rust-lang/setup-rust-toolchain@v1 diff --git a/.github/workflows/db-migration.yml b/.github/workflows/db-migration.yml index 72c87b47..565b930a 100644 --- a/.github/workflows/db-migration.yml +++ b/.github/workflows/db-migration.yml @@ -12,7 +12,7 @@ jobs: name: Migration Lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Lint migrations @@ -22,7 +22,7 @@ jobs: name: Migration Dry-Run runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Dry-run migrations (no DB changes) @@ -52,7 +52,7 @@ jobs: env: DATABASE_URL: postgresql://subtrackr:testpassword@localhost:5432/subtrackr_test steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Apply migrations (up) @@ -71,7 +71,7 @@ jobs: name: Schema Drift Detection runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Detect schema drift @@ -81,7 +81,7 @@ jobs: name: Expand-Migrate-Contract Validation runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Validate EMC state file exists (if migrations present) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index d217303d..43df2ae8 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -9,7 +9,7 @@ jobs: environment: name: development steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Deploy run: echo "Deploying to development environment..." @@ -21,7 +21,7 @@ jobs: name: staging url: https://staging.subtrackr.app steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Deploy run: echo "Deploying to staging environment with manual approval gate..." @@ -33,6 +33,6 @@ jobs: name: production url: https://subtrackr.app steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Deploy run: echo "Deploying to production environment with strict manual approval gate..." diff --git a/.github/workflows/e2e-detox.yml b/.github/workflows/e2e-detox.yml index dc94ba60..b38a14a0 100644 --- a/.github/workflows/e2e-detox.yml +++ b/.github/workflows/e2e-detox.yml @@ -7,7 +7,7 @@ jobs: name: Detox iOS runs-on: macos-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Expo Prebuild run: npx expo prebuild -p ios @@ -59,7 +59,7 @@ jobs: name: Detox Android runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Setup Java uses: actions/setup-java@v3 diff --git a/.github/workflows/fuzz-test.yml b/.github/workflows/fuzz-test.yml index f3017155..940c366d 100644 --- a/.github/workflows/fuzz-test.yml +++ b/.github/workflows/fuzz-test.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Install nightly toolchain (cargo-fuzz) uses: actions-rust-lang/setup-rust-toolchain@v1 diff --git a/.github/workflows/i18n.yml b/.github/workflows/i18n.yml index e9db3db8..ae501964 100644 --- a/.github/workflows/i18n.yml +++ b/.github/workflows/i18n.yml @@ -21,7 +21,7 @@ jobs: name: Detect missing / unused translation keys runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Extract translation keys and check coverage @@ -32,7 +32,7 @@ jobs: name: Lint locale files (placeholders, plurals, stubs) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Lint locale files diff --git a/.github/workflows/invariant-tests.yml b/.github/workflows/invariant-tests.yml index fb94180d..9cd32375 100644 --- a/.github/workflows/invariant-tests.yml +++ b/.github/workflows/invariant-tests.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Install Rust toolchain uses: dtolnay/rust-toolchain@master @@ -66,7 +66,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Install Rust toolchain uses: dtolnay/rust-toolchain@master diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml index c1bd3d51..df473406 100644 --- a/.github/workflows/lighthouse.yml +++ b/.github/workflows/lighthouse.yml @@ -10,7 +10,7 @@ jobs: name: Lighthouse Audit (developer portal) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node # Install Lighthouse CI CLI @@ -76,7 +76,7 @@ jobs: name: Lighthouse Audit (mobile WebView) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Install @lhci/cli diff --git a/.github/workflows/notification-service.yml b/.github/workflows/notification-service.yml index f88d0d2a..bf01d0ca 100644 --- a/.github/workflows/notification-service.yml +++ b/.github/workflows/notification-service.yml @@ -10,7 +10,7 @@ jobs: working-directory: services/notification steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v7 diff --git a/.github/workflows/performance-ci.yml b/.github/workflows/performance-ci.yml index 0df862a4..4647e01b 100644 --- a/.github/workflows/performance-ci.yml +++ b/.github/workflows/performance-ci.yml @@ -15,7 +15,7 @@ jobs: name: Frontend Performance Budget runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Run performance budget check @@ -38,7 +38,7 @@ jobs: name: Bundle Size Analysis runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-node - name: Run bundle size check @@ -96,7 +96,7 @@ jobs: name: Gas Benchmarks (Soroban) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust stable toolchain uses: actions-rust-lang/setup-rust-toolchain@v1 @@ -206,7 +206,7 @@ jobs: name: Contracts (Clippy + Test) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust stable toolchain uses: actions-rust-lang/setup-rust-toolchain@v1 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1b2b9246..901ff414 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -45,7 +45,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v7 @@ -70,7 +70,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v7 diff --git a/.github/workflows/sdk-generate.yml b/.github/workflows/sdk-generate.yml index e3876894..88ca00a4 100644 --- a/.github/workflows/sdk-generate.yml +++ b/.github/workflows/sdk-generate.yml @@ -6,7 +6,7 @@ jobs: validate-spec: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Validate OpenAPI spec uses: mbowman100/swagger-validator-action@v1 with: @@ -24,7 +24,7 @@ jobs: matrix: language: [javascript, python, go] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-node@v7 with: node-version: '20' diff --git a/.github/workflows/sdk-publish.yml b/.github/workflows/sdk-publish.yml index 7ba7f207..aaeab32d 100644 --- a/.github/workflows/sdk-publish.yml +++ b/.github/workflows/sdk-publish.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Validate OpenAPI 3.1 Spec run: | diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index 96d15460..e04e9e11 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Python for Semgrep uses: actions/setup-python@v5 @@ -84,7 +84,7 @@ jobs: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v7 @@ -142,7 +142,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Build API security image run: docker build -f Dockerfile -t subtrackr-api:${{ github.sha }} . @@ -187,7 +187,7 @@ jobs: ZAP_TARGET_URL: ${{ vars.DAST_TARGET_URL }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js for local sandbox fallback if: env.ZAP_TARGET_URL == '' @@ -241,7 +241,7 @@ jobs: environment: security-review steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Download security artifacts uses: actions/download-artifact@v4 diff --git a/.github/workflows/test-actions.yml b/.github/workflows/test-actions.yml index 0f9d30da..11abd989 100644 --- a/.github/workflows/test-actions.yml +++ b/.github/workflows/test-actions.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: # Edge case: to pin to a semantic version tag use: Smartdevs17/SubTrackr/.github/actions/setup-node@v1.2.3 - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Test setup-node uses: ./.github/actions/setup-node - name: Test build-contracts