This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a commit to branch
dependabot/github_actions/actions/checkout-7
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit 7f36665f97b81535358095522c2c439041c22072
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Aug 21 07:09:58 2026 +0000
build(deps): bump actions/checkout from 6 to 7
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]>
---
.github/workflows/benchmark.yml | 4 +--
.github/workflows/codeanalysis.yml | 4 +--
.github/workflows/codeql.yml | 2 +-
.github/workflows/codestyle.yml | 6 ++--
.github/workflows/coverage.yml | 6 ++--
.github/workflows/end-to-end.yml | 2 +-
.github/workflows/forge-deploy-next.yml | 4 +--
.github/workflows/forge-deploy-prev-snapshot.yml | 4 +--
.github/workflows/forge-deploy-prev.yml | 4 +--
.github/workflows/forge-deploy-release.yml | 4 +--
.github/workflows/forge-deploy-snapshot.yml | 4 +--
.github/workflows/gradle.yml | 40 ++++++++++++------------
.github/workflows/groovy-joint-workflow.yml | 4 +--
.github/workflows/rat.yml | 2 +-
.github/workflows/release-close.yml | 2 +-
.github/workflows/release-publish-docs.yml | 2 +-
.github/workflows/release-verify.yml | 2 +-
.github/workflows/release.yml | 14 ++++-----
.github/workflows/sitemesh2.yml | 4 +--
.github/workflows/validate-actions.yml | 2 +-
.github/workflows/vulnerability-scan.yml | 2 +-
21 files changed, 59 insertions(+), 59 deletions(-)
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 3d1cd75675..bc0d7ef3b4 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -59,7 +59,7 @@ jobs:
SHARD: ${{ matrix.shard }}
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
fetch-depth: 0
- name: "☕️ Setup JDK"
@@ -287,7 +287,7 @@ jobs:
# read-only and commenting would fail with 403, so they receive the
per-shard job summary
# and the uploaded artifacts instead.
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/codeanalysis.yml
b/.github/workflows/codeanalysis.yml
index cff9c5faf2..0b5f3f1fde 100644
--- a/.github/workflows/codeanalysis.yml
+++ b/.github/workflows/codeanalysis.yml
@@ -33,7 +33,7 @@ jobs:
- name: "🌐 Output Agent IP" # in the event RAO blocks this agent, this
can be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -67,7 +67,7 @@ jobs:
- name: "🌐 Output Agent IP" # in the event RAO blocks this agent, this
can be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8fc297a210..2726da405a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -58,7 +58,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/codestyle.yml b/.github/workflows/codestyle.yml
index 28fa643859..040f3fa84d 100644
--- a/.github/workflows/codestyle.yml
+++ b/.github/workflows/codestyle.yml
@@ -33,7 +33,7 @@ jobs:
- name: "🌐 Output Agent IP" # in the event RAO blocks this agent, this
can be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -67,7 +67,7 @@ jobs:
- name: "🌐 Output Agent IP" # in the event RAO blocks this agent, this
can be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -106,7 +106,7 @@ jobs:
- name: "🌐 Output Agent IP" # in the event RAO blocks this agent, this
can be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 7e0d308404..c6c6851556 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -38,7 +38,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -72,7 +72,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -105,7 +105,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "📥 Download all coverage artifacts"
uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
diff --git a/.github/workflows/end-to-end.yml b/.github/workflows/end-to-end.yml
index 0fef0447ba..48edec8ff1 100644
--- a/.github/workflows/end-to-end.yml
+++ b/.github/workflows/end-to-end.yml
@@ -49,7 +49,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Determine JDKs from .sdkmanrc"
# Read both pins out of the files that already declare them. Only the
major is kept:
# `sdk env` gives a developer the exact Liberica patch, but the
fixture and the suite are
diff --git a/.github/workflows/forge-deploy-next.yml
b/.github/workflows/forge-deploy-next.yml
index 051f000cdb..83239f4114 100644
--- a/.github/workflows/forge-deploy-next.yml
+++ b/.github/workflows/forge-deploy-next.yml
@@ -27,7 +27,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}:next
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -79,7 +79,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}-analytics:next
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/forge-deploy-prev-snapshot.yml
b/.github/workflows/forge-deploy-prev-snapshot.yml
index b0a07b1892..9908aaf380 100644
--- a/.github/workflows/forge-deploy-prev-snapshot.yml
+++ b/.github/workflows/forge-deploy-prev-snapshot.yml
@@ -27,7 +27,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}:prev-snapshot
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -79,7 +79,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}-analytics:prev-snapshot
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/forge-deploy-prev.yml
b/.github/workflows/forge-deploy-prev.yml
index 84818e5870..5a492b1854 100644
--- a/.github/workflows/forge-deploy-prev.yml
+++ b/.github/workflows/forge-deploy-prev.yml
@@ -27,7 +27,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}:prev
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -79,7 +79,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}-analytics:prev
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/forge-deploy-release.yml
b/.github/workflows/forge-deploy-release.yml
index 55e9aa6f42..5ef0fd4a41 100644
--- a/.github/workflows/forge-deploy-release.yml
+++ b/.github/workflows/forge-deploy-release.yml
@@ -29,7 +29,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -78,7 +78,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/forge-deploy-snapshot.yml
b/.github/workflows/forge-deploy-snapshot.yml
index e2e36e3e28..42b240fd2f 100644
--- a/.github/workflows/forge-deploy-snapshot.yml
+++ b/.github/workflows/forge-deploy-snapshot.yml
@@ -27,7 +27,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}:snapshot
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -77,7 +77,7 @@ jobs:
IMAGE_NAME: us-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{
secrets.GCP_APP_NAME }}/${{ secrets.GCP_APP_NAME }}-analytics:snapshot
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 58e3b976da..819b77f200 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -30,7 +30,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -79,7 +79,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -166,7 +166,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -248,7 +248,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -307,7 +307,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -426,7 +426,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -507,7 +507,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -546,7 +546,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -587,7 +587,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -622,7 +622,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -662,7 +662,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout the repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -714,7 +714,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout the repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -796,7 +796,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout the repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -835,7 +835,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout the repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -865,7 +865,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -932,7 +932,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -1017,7 +1017,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -1050,7 +1050,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -1106,7 +1106,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -1155,7 +1155,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout the repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
fetch-tags: true
- name: "🔀 Store current branch name"
diff --git a/.github/workflows/groovy-joint-workflow.yml
b/.github/workflows/groovy-joint-workflow.yml
index 57c7660918..d8b8600b7e 100644
--- a/.github/workflows/groovy-joint-workflow.yml
+++ b/.github/workflows/groovy-joint-workflow.yml
@@ -49,7 +49,7 @@ jobs:
# the joint build reuses our Develocity / build-cache settings.
# Both paths must be listed here; otherwise the init-script step fails
# with "The specified initialization script ... does not exist."
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
sparse-checkout-cone-mode: false
sparse-checkout: |
@@ -139,7 +139,7 @@ jobs:
df -h
- name: "📥 Checkout project"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/rat.yml b/.github/workflows/rat.yml
index c4ab66a771..48692be1aa 100644
--- a/.github/workflows/rat.yml
+++ b/.github/workflows/rat.yml
@@ -33,7 +33,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/release-close.yml
b/.github/workflows/release-close.yml
index 70e3223f31..76937c9c90 100644
--- a/.github/workflows/release-close.yml
+++ b/.github/workflows/release-close.yml
@@ -40,7 +40,7 @@ jobs:
actions: write # in case there are pending changes to release.yml in the
target branch
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
ref: ${{ env.TAG }}
token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release-publish-docs.yml
b/.github/workflows/release-publish-docs.yml
index 73f1ae939d..05d5e1a6d6 100644
--- a/.github/workflows/release-publish-docs.yml
+++ b/.github/workflows/release-publish-docs.yml
@@ -49,7 +49,7 @@ jobs:
- name: "📝 Store release version"
run: echo "VERSION=${VERSION}" >> "$GITHUB_ENV"
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
fetch-depth: 0 # needed for docs release dropdown, (fetch-tags: true
with fetch-depth: 1 does not work;
https://github.com/actions/checkout/issues/1471)
filter: tree:0 # limit size, keeping tags for docs release dropdown
diff --git a/.github/workflows/release-verify.yml
b/.github/workflows/release-verify.yml
index 34027e88b4..e63463af5d 100644
--- a/.github/workflows/release-verify.yml
+++ b/.github/workflows/release-verify.yml
@@ -42,7 +42,7 @@ jobs:
# the source is checked out at 'project' and verification runs from a
# sibling 'grails-verify' scratch directory
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
path: project
- name: "☕️ Determine Java version from .sdkmanrc"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0110a4c29f..7bce2fd70e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -60,7 +60,7 @@ jobs:
current_limit=$(gh api rate_limit --jq '.resources.graphql')
echo "Current Rate Limit: $current_limit"
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
fetch-depth: 0 # needed for docs release dropdown, (fetch-tags: true
with fetch-depth: 1 does not work;
https://github.com/actions/checkout/issues/1471)
filter: tree:0 # limit size, keeping tags for docs release dropdown
@@ -329,7 +329,7 @@ jobs:
current_limit=$(gh api rate_limit --jq '.resources.graphql')
echo "Current Rate Limit: $current_limit"
- name: "📥 Checkout Grails Core repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
path: grails
ref: ${{ env.TAG }}
@@ -530,7 +530,7 @@ jobs:
tag_name: ${{ env.TAG }}
files: dev-repo/DIST_SVN_REVISION.txt
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
path: ${{ env.REPO_NAME }}
ref: ${{ env.TAG }}
@@ -581,7 +581,7 @@ jobs:
current_limit=$(gh api rate_limit --jq '.resources.graphql')
echo "Current Rate Limit: $current_limit"
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
ref: ${{ env.TAG }}
- name: "🛠️️ Install tools"
@@ -674,7 +674,7 @@ jobs:
df -h
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
fetch-depth: 0 # needed for docs release dropdown, (fetch-tags: true
with fetch-depth: 1 does not work;
https://github.com/actions/checkout/issues/1471)
filter: tree:0 # limit size, keeping tags for docs release dropdown
@@ -719,7 +719,7 @@ jobs:
current_limit=$(gh api rate_limit --jq '.resources.graphql')
echo "Current Rate Limit: $current_limit"
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
ref: ${{ env.TAG }}
- name: "☕️ Setup JDK"
@@ -766,7 +766,7 @@ jobs:
current_limit=$(gh api rate_limit --jq '.resources.graphql')
echo "Current Rate Limit: $current_limit"
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
ref: ${{ env.TAG }}
token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/sitemesh2.yml b/.github/workflows/sitemesh2.yml
index edf88c7376..51e4d41851 100644
--- a/.github/workflows/sitemesh2.yml
+++ b/.github/workflows/sitemesh2.yml
@@ -59,7 +59,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
@@ -97,7 +97,7 @@ jobs:
- name: "Output Agent IP" # in the event RAO blocks this agent, this can
be used to debug it
run: curl -s https://api.ipify.org
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/validate-actions.yml
b/.github/workflows/validate-actions.yml
index 23f74b37f3..34ca475186 100644
--- a/.github/workflows/validate-actions.yml
+++ b/.github/workflows/validate-actions.yml
@@ -43,7 +43,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
- name: "☕️ Setup JDK"
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 #
v5.2.0
with:
diff --git a/.github/workflows/vulnerability-scan.yml
b/.github/workflows/vulnerability-scan.yml
index 6edf523095..cfca2d3e50 100644
--- a/.github/workflows/vulnerability-scan.yml
+++ b/.github/workflows/vulnerability-scan.yml
@@ -31,7 +31,7 @@ jobs:
contents: read
steps:
- name: "📥 Checkout repository"
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
- name: "☕️ Setup JDK"
uses: actions/setup-java@v4
with:
