This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit c4cfb200ae6777cc35ec8890224c441f2a5e9344
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Dec 7 22:34:09 2025 -0500
Bump actions/checkout from 6.0.0 to 6.0.1 (#2771)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.0 to
6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...8e8c483db84b4bee98b60c0593521ed34d9990e8)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit d5697f5065f2cde0859276999066c5e81f39246b)
# Conflicts:
# .github/workflows/pull-request-build.yml
# .github/workflows/scorecards.yml
(cherry picked from commit a3401db78e2ca0eb210b42cd87aed5efe13592c7)
# Conflicts:
# .github/workflows/pull-request-build.yml
(cherry picked from commit 081651f698641a2af63fc2d363e7ab76c9e46447)
# Conflicts:
# .github/workflows/codeql-analysis.yml
# .github/workflows/pull-request-build.yml
---
.github/workflows/codeql-analysis.yml | 2 +-
.github/workflows/pull-request-build.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index d30ac08f6b..ff86785892 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -37,7 +37,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v5.0.0
+ uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v5.0.0
with:
# We must fetch at least the immediate parents so that if this is
# a pull request then we can checkout the head.
diff --git a/.github/workflows/pull-request-build.yml
b/.github/workflows/pull-request-build.yml
index 7a4a870b48..da9b22aa01 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -18,7 +18,7 @@ jobs:
pull-requests: read
timeout-minutes: 130
steps:
- - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #
v3.6.0
+ - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #
v3.6.0
- name: Set up JDK 11
uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 #
v5.0.0
with:
