Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1

- name: Set up devtools (pull or build)
uses: ./.github/actions/setup-devtools
Expand All @@ -50,7 +50,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1

- name: Set up devtools (pull or build)
uses: ./.github/actions/setup-devtools
Expand All @@ -72,7 +72,7 @@ jobs:
needs: unit
timeout-minutes: 30
steps:
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1

- name: Set up devtools (pull or build)
uses: ./.github/actions/setup-devtools
Expand Down Expand Up @@ -103,7 +103,7 @@ jobs:
# fetch-depth: 0 (full history) — this job's checkout is what
# gitleaks/trufflehog scan (see scripts/security-scan.sh); the default
# shallow (depth-1) clone would only ever see the single latest commit.
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1
with:
fetch-depth: 0

Expand All @@ -124,7 +124,7 @@ jobs:
timeout-minutes: 30
if: "!github.event.pull_request.draft"
steps:
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1

- name: Set up devtools (pull or build)
uses: ./.github/actions/setup-devtools
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/devtools-image.yml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ jobs:
runs-on: ubuntu-24.04
timeout-minutes: 30
steps:
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1

# Two forms of the same hash, and both are load-bearing:
# `hash` — 12 chars, the image TAG (readable, collision-free enough).
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ jobs:
steps:
# fetch-depth: 0 — qa-security's gitleaks/trufflehog scan the checkout,
# and the default shallow clone would only ever show them one commit.
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1
with:
fetch-depth: 0

Expand Down Expand Up @@ -78,7 +78,7 @@ jobs:
contents: write # create the GitHub Release and upload its assets
packages: write # push images and the chart to GHCR
steps:
- uses: actions/checkout@v6 # v4.3.1
- uses: actions/checkout@v7 # v4.3.1

- name: Set up devtools (pull or build)
uses: ./.github/actions/setup-devtools
Expand Down
Loading