From 6855324ea4140df78494a5e7719be6ab2a877049 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 06:07:15 +0000 Subject: [PATCH 1/3] chore(deps): bump actions/checkout from 6 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 10 +++++----- .github/workflows/codeql.yml | 2 +- .github/workflows/gov-security-gates.yml | 2 +- .github/workflows/publish-astudio.yml | 2 +- .github/workflows/release-guidance.yml | 4 ++-- .github/workflows/release.yml | 2 +- 6 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9d2837b53..e5514fab6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: fetch-depth: 0 ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }} @@ -202,7 +202,7 @@ jobs: storybook_changed: ${{ steps.storybook_changes.outputs.changed || 'false' }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: fetch-depth: 0 @@ -294,7 +294,7 @@ jobs: needs: build steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Setup Node uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 @@ -400,7 +400,7 @@ jobs: needs: build steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Setup Node uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 @@ -480,7 +480,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 - name: Download Storybook static output uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 10cafadf7..804d9b81c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,7 +24,7 @@ jobs: language: ["javascript"] steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v4 with: diff --git a/.github/workflows/gov-security-gates.yml b/.github/workflows/gov-security-gates.yml index fe3bebd91..c0b559bef 100644 --- a/.github/workflows/gov-security-gates.yml +++ b/.github/workflows/gov-security-gates.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repo - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/publish-astudio.yml b/.github/workflows/publish-astudio.yml index 8d3b1fe19..3e3fddcec 100644 --- a/.github/workflows/publish-astudio.yml +++ b/.github/workflows/publish-astudio.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Setup Node uses: actions/setup-node@v6 diff --git a/.github/workflows/release-guidance.yml b/.github/workflows/release-guidance.yml index 8f5436d48..7c962380a 100644 --- a/.github/workflows/release-guidance.yml +++ b/.github/workflows/release-guidance.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Setup Node uses: actions/setup-node@v6 @@ -62,7 +62,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Setup Node uses: actions/setup-node@v6 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ff0d5e333..a54883eae 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Setup Node uses: actions/setup-node@v6 From 926bcc52fdf37ab3b606a84791cf4b848bf05507 Mon Sep 17 00:00:00 2001 From: jscraik <154467285+jscraik@users.noreply.github.com> Date: Sat, 11 Jul 2026 18:45:36 +0100 Subject: [PATCH 2/3] docs: record checkout v7 refresh --- FORJAMIE.md | 1 + 1 file changed, 1 insertion(+) diff --git a/FORJAMIE.md b/FORJAMIE.md index a356c001b..10687c47b 100644 --- a/FORJAMIE.md +++ b/FORJAMIE.md @@ -219,6 +219,7 @@ See also: `~/.codex/instructions/Learnings.md` ### 2026-07-11 +- **GitHub Actions checkout v7 refresh**: updated the pinned checkout action used by CI to v7. This is a tooling-only Dependabot maintenance change; repository checkout behavior and CI stages remain unchanged. - **GitHub Actions cache pin refresh**: updated the pinned `actions/cache` v5 commit used by the Ubuntu and macOS CI cache steps. This is a tooling-only Dependabot maintenance change; workflow behavior and cache keys remain unchanged. ### 2026-06-20 From 82e041a14d8566bbe715f3c9fef810ebb3ae475b Mon Sep 17 00:00:00 2001 From: jscraik <154467285+jscraik@users.noreply.github.com> Date: Sat, 11 Jul 2026 18:46:35 +0100 Subject: [PATCH 3/3] chore: refresh checkout dependency PR validation