From 13cfc5cd3b6c2ab4106584b47bbcc54914c54679 Mon Sep 17 00:00:00 2001 From: Ning Shang Date: Tue, 26 May 2026 12:54:38 -0700 Subject: [PATCH] GHA: update checkout action to v6.0.2 Upgrade the checkout action in Github workflows to v6.0.2. Pin to a commit instead of a tag, for a Git commit SHA is less mutable. --- .github/workflows/canary.yml | 3 ++- .github/workflows/release.yml | 3 ++- .github/workflows/sanity.yml | 9 ++++++--- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml index 0cfcb64..98aca48 100644 --- a/.github/workflows/canary.yml +++ b/.github/workflows/canary.yml @@ -9,7 +9,8 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout code" - uses: actions/checkout@v4.2.2 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd with: # Fetch all history for all tags and branches fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5888c19..a488c65 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,7 +12,8 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout code" - uses: actions/checkout@v4.2.2 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd with: # Fetch all history for all tags and branches fetch-depth: 0 diff --git a/.github/workflows/sanity.yml b/.github/workflows/sanity.yml index f63d442..fa606a9 100644 --- a/.github/workflows/sanity.yml +++ b/.github/workflows/sanity.yml @@ -23,7 +23,8 @@ jobs: go-version: ${{ matrix.go-version }} cache: false - name: "checkout code" - uses: actions/checkout@v4.2.2 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd with: # Fetch all history for all tags and branches fetch-depth: 0 @@ -105,7 +106,8 @@ jobs: go-version: ${{ matrix.go-version }} cache: false - name: "checkout code" - uses: actions/checkout@v4.2.2 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - name: "test JSON config files" run: | set -euxo pipefail @@ -127,7 +129,8 @@ jobs: go-version: ${{ matrix.go-version }} cache: false - name: "Checkout repository" - uses: actions/checkout@v4.2.2 + # v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - if: ${{ matrix.os == 'ubuntu-latest' }} name: Install shellcheck on Ubuntu run: |