From 05b05141f5061552cacb097dd16b6f9c159fba89 Mon Sep 17 00:00:00 2001 From: John Lago <750845+Lagoja@users.noreply.github.com> Date: Fri, 6 Feb 2026 16:32:10 -0800 Subject: [PATCH] Bump actions/checkout from 4 to 6 with pinned SHA Pin to commit 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 for security. Co-Authored-By: Claude Opus 4.5 --- .github/workflows/test.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 358cd3b..2d0c15b 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -28,7 +28,7 @@ jobs: enable-cache: ['true', 'false'] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6 - name: Install devbox uses: ./ with: @@ -42,7 +42,7 @@ jobs: matrix: enable-cache: ['true', 'false'] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6 - name: Install devbox uses: ./ with: @@ -54,7 +54,7 @@ jobs: test-action-with-sha256-checksum: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6 - name: Install devbox uses: ./ with: @@ -67,7 +67,7 @@ jobs: test-action-with-sha256-checksum-failure: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6 - name: Install devbox id: install-devbox uses: ./ @@ -85,7 +85,7 @@ jobs: test-action-with-sha256-checksum-on-mac: runs-on: macos-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6 - name: Install devbox uses: ./ with: @@ -98,7 +98,7 @@ jobs: test-action-with-extra-nix-config: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6 - name: Install devbox with extra nix config "user-agent-suffix = test-suffix" uses: ./ with: