From 532cccf74ba1e96a7694a4d7da57f19a15fd3b32 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 May 2026 07:39:55 +0000 Subject: [PATCH] Bump actions/checkout from 4.3.1 to 6.0.2 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4.3.1...v6.0.2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/check-changelog.yml | 2 +- .github/workflows/ci.yml | 12 ++++++------ .github/workflows/claude-code-review.yml | 2 +- .github/workflows/claude.yml | 2 +- .github/workflows/nightly-notebook-check.yml | 2 +- .github/workflows/release-create-pr.yml | 2 +- .github/workflows/release-publish.yml | 4 ++-- .github/workflows/release-tag-on-merge.yml | 2 +- 8 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/check-changelog.yml b/.github/workflows/check-changelog.yml index 10a46fc1d..8c2051c6b 100644 --- a/.github/workflows/check-changelog.yml +++ b/.github/workflows/check-changelog.yml @@ -14,7 +14,7 @@ jobs: !startsWith(github.head_ref, 'release/v') runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b6fdb69f7..900de5e4b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1 + - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.3.1 - uses: astral-sh/ruff-action@0ce1b0bf8b818ef400413f810f8a11cdbda0034b # v4.0.0 with: version-file: pyproject.toml @@ -62,7 +62,7 @@ jobs: TABPFN_TOKEN: ${{ secrets.TABPFN_TOKEN }} steps: - - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1 + - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.3.1 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 @@ -149,7 +149,7 @@ jobs: TABPFN_TOKEN: ${{ secrets.TABPFN_TOKEN }} steps: - - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1 + - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.3.1 - name: Set up Python 3.14 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 @@ -207,12 +207,12 @@ jobs: steps: - name: Checkout TabPFN at current ref - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1 + uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.3.1 with: path: TabPFN - name: Checkout ${{ matrix.repo-name }} - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1 + uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.3.1 with: repository: PriorLabs/${{ matrix.repo-name }} path: ${{ matrix.repo-name }} @@ -286,7 +286,7 @@ jobs: steps: - - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1 + - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.3.1 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 6f3e8052b..5f007392e 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -34,7 +34,7 @@ jobs: steps: - name: Checkout repository # Pinned to v4 commit SHA to mitigate moving-tag supply-chain risk. - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 1 persist-credentials: false diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 9586d673e..a6171c878 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -38,7 +38,7 @@ jobs: steps: - name: Checkout repository # Pinned to v4 commit SHA to mitigate moving-tag supply-chain risk. - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 1 persist-credentials: false diff --git a/.github/workflows/nightly-notebook-check.yml b/.github/workflows/nightly-notebook-check.yml index d2da8379c..c5f58d036 100644 --- a/.github/workflows/nightly-notebook-check.yml +++ b/.github/workflows/nightly-notebook-check.yml @@ -28,7 +28,7 @@ jobs: python-version: ["3.11", "3.12", "3.13"] steps: - - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1 + - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.3.1 - name: Set up Python uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 diff --git a/.github/workflows/release-create-pr.yml b/.github/workflows/release-create-pr.yml index 051558b3e..842243dac 100644 --- a/.github/workflows/release-create-pr.yml +++ b/.github/workflows/release-create-pr.yml @@ -31,7 +31,7 @@ jobs: } - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml index 883b83140..c2df68bac 100644 --- a/.github/workflows/release-publish.yml +++ b/.github/workflows/release-publish.yml @@ -17,7 +17,7 @@ jobs: version: ${{ steps.ver.outputs.version }} steps: - name: Checkout code - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 - name: Extract version from tag id: ver @@ -172,7 +172,7 @@ jobs: skip-existing: true - name: Checkout code - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 - name: Download release notes uses: actions/download-artifact@v8 diff --git a/.github/workflows/release-tag-on-merge.yml b/.github/workflows/release-tag-on-merge.yml index 9f31fe54b..cf71f6455 100644 --- a/.github/workflows/release-tag-on-merge.yml +++ b/.github/workflows/release-tag-on-merge.yml @@ -16,7 +16,7 @@ jobs: environment: release steps: - name: Checkout merge commit - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ github.event.pull_request.merge_commit_sha }} fetch-depth: 0