Bump the github-actions group with 3 updates

.github/workflows/abi-report.yml

@@ -44,7 +44,7 @@ jobs:
           FILE_DOTS=$(echo "${{ inputs.file_ref }}" | sed -r "s/([0-9]+)\_([0-9]+)\_([0-9]+)\-([0-9]+).*/\1\.\2\.\3\-\4/")
           echo "HDF4R_DOTS=$FILE_DOTS" >> $GITHUB_OUTPUT
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Get published binary (Linux)
         uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0

.github/workflows/aocc-cmake.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Get Sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Install Dependencies
         shell: bash

.github/workflows/clang-format-check.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     if: "!contains(github.event.head_commit.message, 'skip-ci')"
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
 
     - name: Run clang-format style check for C and Java code
       uses: DoozyX/clang-format-lint-action@v0.20

.github/workflows/clang-format-fix.yml

@@ -23,7 +23,7 @@ jobs:
     permissions:
         contents: write # In order to allow EndBug/add-and-commit to commit changes
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
 
     - name: Fix C and Java formatting issues detected by clang-format
       uses: DoozyX/clang-format-lint-action@v0.20

.github/workflows/cmake-analysis.yml

@@ -127,7 +127,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.8
+        uses: KyleMayes/install-llvm-action@v2.0.9
         id: setup-clang
         with:
           env: true
@@ -225,7 +225,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.8
+        uses: KyleMayes/install-llvm-action@v2.0.9
         id: setup-clang
         with:
           env: true
@@ -323,7 +323,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.8
+        uses: KyleMayes/install-llvm-action@v2.0.9
         id: setup-clang
         with:
           env: true

.github/workflows/cmake-ctest.yml

@@ -149,7 +149,7 @@ jobs:
         shell: bash
 
       - name: Sign files with Trusted Signing
-        uses: azure/trusted-signing-action@v0.5.11
+        uses: azure/trusted-signing-action@v1.0.0
         with:
           azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -620,7 +620,7 @@ jobs:
         shell: pwsh
 
       - name: Sign files with Trusted Signing (Windows_intel)
-        uses: azure/trusted-signing-action@v0.5.11
+        uses: azure/trusted-signing-action@v1.0.0
         with:
           azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}

.github/workflows/cmake-script.yml

@@ -533,7 +533,7 @@ jobs:
         run: choco install ninja
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.8
+        uses: KyleMayes/install-llvm-action@v2.0.9
         id: setup-clang
         with:
           env: true
@@ -636,7 +636,7 @@ jobs:
           sudo apt-get install ninja-build doxygen graphviz curl libtinfo5
 
       - name: add clang to env
-        uses: KyleMayes/install-llvm-action@v2.0.8
+        uses: KyleMayes/install-llvm-action@v2.0.9
         id: setup-clang
         with:
           env: true

.github/workflows/codespell.yml

@@ -10,7 +10,7 @@ jobs:
     name: Check for spelling errors
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: codespell-project/actions-codespell@master
         with:
           skip: ./config/sanitizer/sanitizers.cmake,./hdf/util/testfiles/*.raw,./hdf/util/testfiles/head.r8,./mfhdf/ncdump/*,./mfhdf/ncgen/*,./mfhdf/nctest/*,./mfhdf/README,./mfhdf/THANKS,./mfhdf/FAQ

.github/workflows/cygwin-cmake.yml

@@ -33,7 +33,7 @@ jobs:
           git config --global core.autocrlf input
 
       - name: Get Sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Install Cygwin
         uses: cygwin/cygwin-install-action@master

.github/workflows/daily-build.yml

@@ -29,7 +29,7 @@ jobs:
       run-ignore: ${{ steps.getinputs.outputs.INPUTS_IGNORE }}
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
 
     - name: Get hdf4 release base name
       uses: dsaltares/fetch-gh-release-asset@master

.github/workflows/intel-cmake.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get Sources (Linux)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Install Dependencies (Linux)
         shell: bash
@@ -76,7 +76,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Get Sources (Windows)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Install Dependencies (Windows)
         run: choco install ninja

.github/workflows/main-cmake.yml

@@ -134,7 +134,7 @@ jobs:
 
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       # CMAKE CONFIGURE
       - name: CMake Configure

.github/workflows/mingw-cmake.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get Sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Install Dependencies
         shell: bash

.github/workflows/msys2-cmake.yml

@@ -52,7 +52,7 @@ jobs:
           git config --global core.autocrlf input
 
       - name: Get Sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: CMake Configure
         run: |

.github/workflows/netcdf-cmake.yml

@@ -34,7 +34,7 @@ jobs:
         sudo apt install -y bzip2 m4 flex bison cmake libzip-dev doxygen openssl libtool libtool-bin
 
     - name: Checkout HDF4
-      uses: actions/checkout@v6
+      uses: actions/checkout@v6.0.2
 
     - name: CMake Configure HDF4
       run: |
@@ -66,7 +66,7 @@ jobs:
       working-directory: ${{ runner.workspace }}/build
 
     - name: Checkout HDF5
-      uses: actions/checkout@v6
+      uses: actions/checkout@v6.0.2
       with:
         repository: HDFGroup/hdf5
         path: hdf5
@@ -100,7 +100,7 @@ jobs:
       working-directory: ${{ runner.workspace }}/build5
 
     - name: Checkout netCDF
-      uses: actions/checkout@v6
+      uses: actions/checkout@v6.0.2
       with:
         repository: unidata/netcdf-c
         path: netcdf-c

.github/workflows/nvhpc-cmake.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get Sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Install Dependencies
         shell: bash

.github/workflows/ppc64.yml

@@ -19,7 +19,7 @@ jobs:
     name: Ubuntu PowerPC CMake
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - uses: uraimo/run-on-arch-action@v3
         name: Run commands

.github/workflows/publish-branch.yml

@@ -22,7 +22,7 @@ jobs:
     steps:
         # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
         - name: Get Sources
-          uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.1.7
+          uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.1.7
           with:
             fetch-depth: 0
             ref: '${{ github.head_ref || github.ref_name }}'

.github/workflows/publish-release.yml

@@ -22,7 +22,7 @@ jobs:
     steps:
         # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
         - name: Get Sources
-          uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.1.7
+          uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.1.7
           with:
             fetch-depth: 0
             ref: '${{ github.head_ref || github.ref_name }}'

.github/workflows/release-files.yml

@@ -40,7 +40,7 @@ jobs:
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.1.7
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.1.7
         with:
           fetch-depth: 0
           ref: '${{ github.head_ref || github.ref_name }}'

.github/workflows/tarball.yml

@@ -48,7 +48,7 @@ jobs:
       branch_ref: ${{ steps.get-branch-name.outputs.BRANCH_REF }}
       branch_sha: ${{ steps.get-branch-sha.outputs.BRANCH_SHA }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
 
     - name: Get branch name
       id: get-branch-name
@@ -92,7 +92,7 @@ jobs:
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
       - name: Get Sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           path: hdfsrc
           ref: '${{needs.check_commits.outputs.branch_ref }}'