From 01a98ff2d6cf244e51679f0fba023431dda08b60 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 20 Jun 2026 10:02:23 +0000 Subject: [PATCH 1/2] Bump actions/checkout from 6 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build-java-17.yml | 2 +- .github/workflows/codeql-java-17.yml | 2 +- .github/workflows/release-maven-central-java-17.yml | 2 +- .github/workflows/zizmor.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-java-17.yml b/.github/workflows/build-java-17.yml index ae8773a..41dccbc 100644 --- a/.github/workflows/build-java-17.yml +++ b/.github/workflows/build-java-17.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false - name: Set up JDK 17 diff --git a/.github/workflows/codeql-java-17.yml b/.github/workflows/codeql-java-17.yml index 0d764be..e841097 100644 --- a/.github/workflows/codeql-java-17.yml +++ b/.github/workflows/codeql-java-17.yml @@ -48,7 +48,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false diff --git a/.github/workflows/release-maven-central-java-17.yml b/.github/workflows/release-maven-central-java-17.yml index 9881c5f..fa907e2 100644 --- a/.github/workflows/release-maven-central-java-17.yml +++ b/.github/workflows/release-maven-central-java-17.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: persist-credentials: false diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index e922181..607c75e 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -23,7 +23,7 @@ jobs: actions: read steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false From bc1bd4472534b00e7236fdeaf7e328794779060f Mon Sep 17 00:00:00 2001 From: Jared Hatfield Date: Sat, 20 Jun 2026 15:06:40 +0000 Subject: [PATCH 2/2] Pin actions/checkout to SHA for v7.0.0 --- .github/workflows/build-java-17.yml | 2 +- .github/workflows/codeql-java-17.yml | 2 +- .github/workflows/release-maven-central-java-17.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build-java-17.yml b/.github/workflows/build-java-17.yml index 41dccbc..e479c62 100644 --- a/.github/workflows/build-java-17.yml +++ b/.github/workflows/build-java-17.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: Set up JDK 17 diff --git a/.github/workflows/codeql-java-17.yml b/.github/workflows/codeql-java-17.yml index e841097..1e612a3 100644 --- a/.github/workflows/codeql-java-17.yml +++ b/.github/workflows/codeql-java-17.yml @@ -48,7 +48,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false diff --git a/.github/workflows/release-maven-central-java-17.yml b/.github/workflows/release-maven-central-java-17.yml index fa907e2..fbcdf94 100644 --- a/.github/workflows/release-maven-central-java-17.yml +++ b/.github/workflows/release-maven-central-java-17.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v7 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false