From f6622453bcaa0d8fff69c9b956a927e7fe4bfa79 Mon Sep 17 00:00:00 2001 From: "cachekit-renovate-bot[bot]" <287198435+cachekit-renovate-bot[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 08:29:24 +0000 Subject: [PATCH] chore(deps): update actions/checkout digest to d23441a --- .github/workflows/bench.yml | 4 ++-- .github/workflows/ci.yml | 22 +++++++++++----------- .github/workflows/codeql.yml | 2 +- .github/workflows/fuzz-smoke.yml | 2 +- .github/workflows/mutation-smoke.yml | 2 +- .github/workflows/nightly.yml | 6 +++--- .github/workflows/release-please.yml | 8 ++++---- .github/workflows/security-deep.yml | 12 ++++++------ .github/workflows/security-fast.yml | 10 +++++----- .github/workflows/security-medium.yml | 4 ++-- 10 files changed, 36 insertions(+), 36 deletions(-) diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml index 8197956c..0d6eaa5f 100644 --- a/.github/workflows/bench.yml +++ b/.github/workflows/bench.yml @@ -39,7 +39,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: persist-credentials: false @@ -96,7 +96,7 @@ jobs: - name: top pad 64 MiB args: --candidate-env MALLOC_TOP_PAD_=67108864 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: persist-credentials: false diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d89dad35..22d80c76 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: @@ -99,7 +99,7 @@ jobs: python-version: ${{ github.event_name == 'push' && fromJSON('["3.11", "3.12", "3.13", "3.14", "3.15"]') || fromJSON('["3.11", "3.12"]') }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Start Redis (no persistence) run: bash .github/scripts/start-redis.sh @@ -317,7 +317,7 @@ jobs: maturin-args: --features pyo3/abi3t-py315 extension-suffix: .abi3t.so steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Start Redis (no persistence) run: bash .github/scripts/start-redis.sh @@ -369,7 +369,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Start Redis (no persistence) run: bash .github/scripts/start-redis.sh @@ -419,7 +419,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: @@ -459,7 +459,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Start Redis (no persistence) run: bash .github/scripts/start-redis.sh @@ -507,7 +507,7 @@ jobs: sha: ${{ steps.base.outputs.sha }} label: ${{ steps.base.outputs.label }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 2 # the merge commit and its first parent persist-credentials: false @@ -536,7 +536,7 @@ jobs: - name: Start with no verdict run: echo '{}' > "$RUNNER_TEMP/ir-report-${{ matrix.shard }}.json" - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 2 # the merge commit and its first parent @@ -600,7 +600,7 @@ jobs: outputs: body: ${{ steps.render.outputs.body }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 2 # the merge commit the shards measured, and its parents persist-credentials: false @@ -663,7 +663,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: @@ -706,7 +706,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 2 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 # The program stays in this workflow file on purpose: GITHUB_TOKEN cannot # write .github/workflows/, so a `contents: write` job (release-please) or diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ea00e39f..51059f35 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -50,7 +50,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 # Python setup for accurate analysis - name: Set up Python diff --git a/.github/workflows/fuzz-smoke.yml b/.github/workflows/fuzz-smoke.yml index 38e0c5ec..5adb8ebb 100644 --- a/.github/workflows/fuzz-smoke.yml +++ b/.github/workflows/fuzz-smoke.yml @@ -31,7 +31,7 @@ jobs: timeout-minutes: 45 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Validate corpus layout run: | diff --git a/.github/workflows/mutation-smoke.yml b/.github/workflows/mutation-smoke.yml index 025fdf71..023eb796 100644 --- a/.github/workflows/mutation-smoke.yml +++ b/.github/workflows/mutation-smoke.yml @@ -48,7 +48,7 @@ jobs: - zero-config-l1-off - serializer-name-mismatch-accepted steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 # The runner runs pytest serially, so one Redis serves the whole leg: no xdist worker can # flush another's keys mid-test. diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 7f7b4ab8..d4c5c634 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Start Redis (no persistence) run: bash .github/scripts/start-redis.sh @@ -56,7 +56,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Start Redis (no persistence) run: bash .github/scripts/start-redis.sh @@ -94,7 +94,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Start Redis (no persistence) run: bash .github/scripts/start-redis.sh diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 8464a74e..0798695b 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -129,7 +129,7 @@ jobs: # the uv/cargo steps; the final push re-supplies it via env (zizmor artipacked). - name: Checkout release PR branch if: steps.find.outputs.branch != '' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: ref: ${{ steps.find.outputs.branch }} token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }} @@ -259,7 +259,7 @@ jobs: manylinux: "2_28" runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: # Use release-please tag or manual input tag ref: ${{ needs.release-please.outputs.tag_name || needs.validate-inputs.outputs.release_tag }} @@ -305,7 +305,7 @@ jobs: if: ${{ !failure() && !cancelled() && (needs.release-please.outputs.release_created == 'true' || github.event.inputs.force_release == 'true') }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: ref: ${{ needs.release-please.outputs.tag_name || needs.validate-inputs.outputs.release_tag }} @@ -332,7 +332,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: ref: ${{ needs.release-please.outputs.tag_name || needs.validate-inputs.outputs.release_tag }} persist-credentials: false diff --git a/.github/workflows/security-deep.yml b/.github/workflows/security-deep.yml index 56ee18a5..aaee2e4f 100644 --- a/.github/workflows/security-deep.yml +++ b/.github/workflows/security-deep.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install Kani run: | @@ -43,7 +43,7 @@ jobs: # where PR latency matters). timeout-minutes: 240 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install nightly Rust run: | @@ -119,7 +119,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 60 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 # No uv or Rust cache on this nightly job: the cold `uv sync` (maturin # build included) is noise against 30 min of fuzz time, and an unsuffixed @@ -197,7 +197,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install nightly Rust with Miri run: | @@ -218,7 +218,7 @@ jobs: matrix: sanitizer: [address, thread, memory] steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install nightly Rust run: | @@ -263,7 +263,7 @@ jobs: needs: [kani-verification, fuzzing, atheris-fuzzing, miri-full, sanitizers] if: always() steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Generate security report run: | diff --git a/.github/workflows/security-fast.yml b/.github/workflows/security-fast.yml index c75298a0..691c11b7 100644 --- a/.github/workflows/security-fast.yml +++ b/.github/workflows/security-fast.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 # audit-check runs `cargo install cargo-audit` when the binary is absent; # caching ~/.cargo/bin makes that a one-off. @@ -48,7 +48,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 @@ -63,7 +63,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 # Caches target/ and the registry for the clippy build (nothing installed here). - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 @@ -79,7 +79,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install cargo-machete run: cargo install --locked cargo-machete @@ -94,7 +94,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 with: diff --git a/.github/workflows/security-medium.yml b/.github/workflows/security-medium.yml index 3c55dcc0..5112b9cf 100644 --- a/.github/workflows/security-medium.yml +++ b/.github/workflows/security-medium.yml @@ -26,7 +26,7 @@ jobs: # runner, and rust-cache keeps the binary across runs. timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 with: @@ -73,7 +73,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install nightly Rust with Miri run: |