From 610637aa137451c8698aa3aea0e703d85aeede0a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 12 Jun 2026 00:37:52 +0000 Subject: [PATCH] build(deps): bump actions/checkout from 4 to 6 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 14 +++++++------- .github/workflows/codeowners-lint.yml | 2 +- .github/workflows/container.yml | 8 ++++---- .github/workflows/dast.yml | 2 +- .github/workflows/fuzz.yml | 2 +- .github/workflows/llm-redteam.yml | 2 +- .github/workflows/provenance.yml | 8 ++++---- .github/workflows/sast.yml | 10 +++++----- .github/workflows/sbom.yml | 16 ++++++++-------- .github/workflows/sca.yml | 18 +++++++++--------- .github/workflows/scorecard.yml | 2 +- .github/workflows/secrets.yml | 4 ++-- 12 files changed, 44 insertions(+), 44 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c386efc..54d3ad5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -47,7 +47,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -65,7 +65,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -84,7 +84,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -103,7 +103,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -125,7 +125,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 @@ -155,7 +155,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 @@ -188,7 +188,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - name: Tauri CSP must be present and strict diff --git a/.github/workflows/codeowners-lint.yml b/.github/workflows/codeowners-lint.yml index 5631505..05eb898 100644 --- a/.github/workflows/codeowners-lint.yml +++ b/.github/workflows/codeowners-lint.yml @@ -29,7 +29,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: mszostok/codeowners-validator@7f3f5e28c6d7b8dfae5731e54ce2272ca384592f # v0.7.4 diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml index 773fa95..12050d6 100644 --- a/.github/workflows/container.yml +++ b/.github/workflows/container.yml @@ -43,7 +43,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 @@ -68,7 +68,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 @@ -116,7 +116,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 @@ -155,7 +155,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 diff --git a/.github/workflows/dast.yml b/.github/workflows/dast.yml index 2dd7112..604454e 100644 --- a/.github/workflows/dast.yml +++ b/.github/workflows/dast.yml @@ -25,7 +25,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index 912d873..c1f3f07 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -46,7 +46,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@nightly diff --git a/.github/workflows/llm-redteam.yml b/.github/workflows/llm-redteam.yml index cbac467..ed82f5d 100644 --- a/.github/workflows/llm-redteam.yml +++ b/.github/workflows/llm-redteam.yml @@ -35,7 +35,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable diff --git a/.github/workflows/provenance.yml b/.github/workflows/provenance.yml index e8a2908..8277475 100644 --- a/.github/workflows/provenance.yml +++ b/.github/workflows/provenance.yml @@ -38,7 +38,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -90,7 +90,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -160,7 +160,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3 @@ -199,7 +199,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: actions/download-artifact@v4 diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml index 8ad9bc6..62b8842 100644 --- a/.github/workflows/sast.yml +++ b/.github/workflows/sast.yml @@ -34,7 +34,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: github/codeql-action/init@v3 @@ -63,7 +63,7 @@ jobs: # (zizmor unpinned-images). Tag kept for human readability. image: semgrep/semgrep:1.165.0@sha256:f4791a54c891eabe1188248135574e6e03dfc31dfd3f3b747c7bec7079bfed1b steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false # `semgrep ci` is the org-policy mode and rejects --config/--error/ @@ -98,7 +98,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: raven-actions/actionlint@205b530c5d9fa8f44ae9ed59f341a0db994aa6f8 # v2 @@ -114,7 +114,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false # zizmor moved orgs: woodruffw/zizmor-action -> zizmorcore/zizmor-action. @@ -150,7 +150,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0 diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 438a965..f7ea5f4 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -30,7 +30,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -71,7 +71,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -97,7 +97,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 @@ -142,7 +142,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: actions/setup-python@v5 @@ -171,7 +171,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - name: Validate ML-BOM JSON @@ -201,7 +201,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - name: Validate CBOM JSON @@ -234,7 +234,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0 @@ -261,7 +261,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: actions/download-artifact@v4 diff --git a/.github/workflows/sca.yml b/.github/workflows/sca.yml index 6291a48..8ef9138 100644 --- a/.github/workflows/sca.yml +++ b/.github/workflows/sca.yml @@ -35,7 +35,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2 @@ -52,7 +52,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2 @@ -69,7 +69,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -90,7 +90,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -115,7 +115,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 @@ -141,7 +141,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: actions/setup-python@v5 @@ -198,7 +198,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable @@ -260,7 +260,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - name: Scan pnpm-lock.yaml against known-bad list @@ -296,7 +296,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: dtolnay/rust-toolchain@stable diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 97176d0..fdaa02b 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -31,7 +31,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: persist-credentials: false - uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0 diff --git a/.github/workflows/secrets.yml b/.github/workflows/secrets.yml index 52b0c3c..9d79ccb 100644 --- a/.github/workflows/secrets.yml +++ b/.github/workflows/secrets.yml @@ -24,7 +24,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: # Full history required to catch secrets reintroduced in older commits. fetch-depth: 0 @@ -57,7 +57,7 @@ jobs: - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 with: egress-policy: audit - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 persist-credentials: false