From 38b15ef57ead97c584c46525e7fede1348571db6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Jul 2026 13:34:17 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 2 updates Bumps the actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-go](https://github.com/actions/setup-go). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/setup-go` from 6 to 7 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 26 +++++++++++++------------- .github/workflows/release.yml | 16 ++++++++-------- 2 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 684f62a..01f55e9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,9 +14,9 @@ jobs: working-directory: src steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: src/go.mod cache-dependency-path: src/go.sum @@ -45,9 +45,9 @@ jobs: build-and-test-windows: runs-on: windows-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: src/go.mod cache-dependency-path: src/go.sum @@ -73,7 +73,7 @@ jobs: lint-shell: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: shellcheck hooks and wrappers run: | @@ -83,7 +83,7 @@ jobs: lint-actions: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 # Run the tool author's image directly rather than a third-party # wrapper action — one less link in the supply chain. @@ -93,14 +93,14 @@ jobs: hook-smoke-tests: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 # The devkit-guard shell wrappers exec the Go engine binary. # Provide Go so hooks_test.sh can build it on first run (the # script auto-builds if $CLAUDE_PLUGIN_ROOT/bin/devkit-engine is # missing) — without this, every "expected exit 2" fixture would # silently fall through the no-binary path and fail. - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: src/go.mod cache-dependency-path: src/go.sum @@ -116,7 +116,7 @@ jobs: fresh-install-smoke: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Bootstrap wrapper must exist and be executable run: | @@ -204,9 +204,9 @@ jobs: run: working-directory: mcpb/launcher steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: mcpb/launcher/go.mod @@ -239,7 +239,7 @@ jobs: mcpb-bundle-integrity: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Sources sidecar must exist run: | @@ -300,7 +300,7 @@ jobs: validate-counts: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Validate README and ROADMAP counts run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f8131a4..2f9c26f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,7 +28,7 @@ jobs: merge_sha: ${{ steps.resolve.outputs.merge_sha }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 @@ -99,7 +99,7 @@ jobs: outputs: release_created: ${{ steps.create_release.outputs.release_created }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 ref: ${{ needs.version.outputs.merge_sha }} @@ -164,11 +164,11 @@ jobs: os: [linux, darwin, windows] arch: [amd64, arm64] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ needs.version.outputs.merge_sha }} - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: src/go.mod cache-dependency-path: src/go.sum @@ -197,7 +197,7 @@ jobs: if: needs.create-release.outputs.release_created == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Download all release assets and generate checksums env: @@ -234,13 +234,13 @@ jobs: needs.version.outputs.bumped == 'auto' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ssh-key: ${{ secrets.VERSION_BUMP_KEY }} fetch-depth: 0 ref: main - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: src/go.mod cache-dependency-path: src/go.sum @@ -294,7 +294,7 @@ jobs: needs.publish.result == 'failure' || needs.publish.result == 'cancelled') runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Delete draft release on failure env: