This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 4d24d5c9fe8492096c4de3aa90afb9eff9e8ba73
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Jan 26 10:32:16 2026 -0500
Bump actions/checkout from 6.0.1 to 6.0.2 (#2833)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to
6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 4e8ca65117a0d3d87d1a8c9d66053aa7f2a4a3b8)
# Conflicts:
# .github/workflows/pull-request-build.yml
# .github/workflows/scorecards.yml
(cherry picked from commit 5caeeb4d6d5c1a8aebfdf928b2069093323b9c0f)
# Conflicts:
# .github/workflows/pull-request-build.yml
(cherry picked from commit 7e1228e04bd4137c7630917e48aef5d7796883e8)
# Conflicts:
# .github/workflows/codeql-analysis.yml
# .github/workflows/pull-request-build.yml
---
.github/workflows/codeql-analysis.yml | 2 +-
.github/workflows/pull-request-build.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index ad130e659e..8e8a282d97 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -37,7 +37,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v5.0.0
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
# We must fetch at least the immediate parents so that if this is
# a pull request then we can checkout the head.
diff --git a/.github/workflows/pull-request-build.yml
b/.github/workflows/pull-request-build.yml
index d76705dd3a..31dd533e5e 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -18,7 +18,7 @@ jobs:
pull-requests: read
timeout-minutes: 130
steps:
- - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #
v3.6.0
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v3.6.0
- name: Set up JDK 11
uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e #
v5.1.0
with:
