From 84e7efd09593a16b5b0ca4823167b4e86f291fd6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 07:03:28 +0000 Subject: [PATCH] chore(actions): update github actions --- .github/workflows/audit.yml | 2 +- .github/workflows/calibration-advisory.yml | 4 ++-- .github/workflows/ci-duration-report.yml | 2 +- .github/workflows/ci.yml | 6 +++--- .github/workflows/gittensor-impact.yml | 2 +- .github/workflows/mcp-release-candidate.yml | 2 +- .github/workflows/mcp-release-please.yml | 4 ++-- .github/workflows/mcp-release-watch.yml | 2 +- .github/workflows/mcp-ui-version-sync.yml | 2 +- .github/workflows/orb-beta-release.yml | 2 +- .github/workflows/orb-stable-release-pr.yml | 2 +- .github/workflows/orb-stable-release-tag.yml | 2 +- .github/workflows/package-release-watch.yml | 2 +- .github/workflows/publish-engine.yml | 4 ++-- .github/workflows/publish-mcp.yml | 6 +++--- .github/workflows/publish-miner.yml | 4 ++-- .github/workflows/publish-ui-kit.yml | 4 ++-- .github/workflows/release-selfhost.yml | 4 ++-- .github/workflows/selfhost.yml | 2 +- .github/workflows/stuck-check-watchdog.yml | 2 +- .github/workflows/ui-deploy.yml | 2 +- .github/workflows/ui-preview-deploy.yml | 2 +- .github/workflows/ui-preview.yml | 4 ++-- .github/workflows/ui-sentry-release.yml | 2 +- .github/workflows/upstream-contract.yml | 2 +- .github/workflows/visual-capture-fallback.yml | 2 +- 26 files changed, 37 insertions(+), 37 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index d3d6e3614b..fb1bc3b5cc 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -25,7 +25,7 @@ jobs: timeout-minutes: 10 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Node uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: diff --git a/.github/workflows/calibration-advisory.yml b/.github/workflows/calibration-advisory.yml index ba9b6cc06a..6f2b9ac649 100644 --- a/.github/workflows/calibration-advisory.yml +++ b/.github/workflows/calibration-advisory.yml @@ -63,14 +63,14 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false # The PR's base commit, checked out INSIDE the head workspace: the dynamically imported base modules # resolve bare npm specifiers by walking up from their own directory into the head checkout's # node_modules, so one `npm ci` serves both sides of every comparison (#8139). - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event.pull_request.base.sha }} path: .advisory-base diff --git a/.github/workflows/ci-duration-report.yml b/.github/workflows/ci-duration-report.yml index 2c379b3335..cb98c2f6ab 100644 --- a/.github/workflows/ci-duration-report.yml +++ b/.github/workflows/ci-duration-report.yml @@ -25,7 +25,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Node uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cc50e0d68e..fb5d5e1606 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,7 +65,7 @@ jobs: if: ${{ github.event_name == 'pull_request' }} run: sleep 45 - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }} # `git diff --check` with no args compares the working tree against the index -- on this checkout's @@ -269,7 +269,7 @@ jobs: # Shallow (default depth): this job no longer uploads to Codecov -- that moved to validate-tests # (#ci-shard-coverage) -- so it has no reason to fetch full history anymore. - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }} # See .github/actions/setup-workspace for what this covers (npmrc, Node, node_modules cache) -- @@ -855,7 +855,7 @@ jobs: VITE_LOOPOVER_API_ORIGIN: https://api.loopover.ai steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: # Full history so Codecov can resolve the merge base for patch coverage. fetch-depth: 0 diff --git a/.github/workflows/gittensor-impact.yml b/.github/workflows/gittensor-impact.yml index e3f4ba2ff6..faa68b4669 100644 --- a/.github/workflows/gittensor-impact.yml +++ b/.github/workflows/gittensor-impact.yml @@ -29,7 +29,7 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false diff --git a/.github/workflows/mcp-release-candidate.yml b/.github/workflows/mcp-release-candidate.yml index d7a3fbf787..bb8d6f77fd 100644 --- a/.github/workflows/mcp-release-candidate.yml +++ b/.github/workflows/mcp-release-candidate.yml @@ -25,7 +25,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false diff --git a/.github/workflows/mcp-release-please.yml b/.github/workflows/mcp-release-please.yml index 25dfec4afc..79b8ee76c0 100644 --- a/.github/workflows/mcp-release-please.yml +++ b/.github/workflows/mcp-release-please.yml @@ -76,7 +76,7 @@ jobs: actions: write # dispatch publish-mcp.yml / publish-engine.yml / publish-miner.yml / publish-ui-kit.yml after a release steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false @@ -230,7 +230,7 @@ jobs: pull-requests: write steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - name: Setup Node diff --git a/.github/workflows/mcp-release-watch.yml b/.github/workflows/mcp-release-watch.yml index 7bc031c553..0faec23989 100644 --- a/.github/workflows/mcp-release-watch.yml +++ b/.github/workflows/mcp-release-watch.yml @@ -19,7 +19,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/mcp-ui-version-sync.yml b/.github/workflows/mcp-ui-version-sync.yml index 34484d2add..4d27ebb567 100644 --- a/.github/workflows/mcp-ui-version-sync.yml +++ b/.github/workflows/mcp-ui-version-sync.yml @@ -26,7 +26,7 @@ jobs: timeout-minutes: 10 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/orb-beta-release.yml b/.github/workflows/orb-beta-release.yml index 94bceb8cdf..1f6ec4a525 100644 --- a/.github/workflows/orb-beta-release.yml +++ b/.github/workflows/orb-beta-release.yml @@ -30,7 +30,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/orb-stable-release-pr.yml b/.github/workflows/orb-stable-release-pr.yml index 2cb21dc53d..cdbe49fa2a 100644 --- a/.github/workflows/orb-stable-release-pr.yml +++ b/.github/workflows/orb-stable-release-pr.yml @@ -29,7 +29,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/orb-stable-release-tag.yml b/.github/workflows/orb-stable-release-tag.yml index 6478706729..3394279440 100644 --- a/.github/workflows/orb-stable-release-tag.yml +++ b/.github/workflows/orb-stable-release-tag.yml @@ -28,7 +28,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout the merged release PR commit - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event.pull_request.merge_commit_sha }} fetch-depth: 0 diff --git a/.github/workflows/package-release-watch.yml b/.github/workflows/package-release-watch.yml index 71ac10b2dc..ddca3aea1b 100644 --- a/.github/workflows/package-release-watch.yml +++ b/.github/workflows/package-release-watch.yml @@ -26,7 +26,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/publish-engine.yml b/.github/workflows/publish-engine.yml index 90a6e963da..49c6e00f53 100644 --- a/.github/workflows/publish-engine.yml +++ b/.github/workflows/publish-engine.yml @@ -41,7 +41,7 @@ jobs: release_sha: ${{ steps.version.outputs.release_sha }} steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false @@ -164,7 +164,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/publish-mcp.yml b/.github/workflows/publish-mcp.yml index 42e7c281e4..fd580da1d9 100644 --- a/.github/workflows/publish-mcp.yml +++ b/.github/workflows/publish-mcp.yml @@ -36,7 +36,7 @@ jobs: release_sha: ${{ steps.version.outputs.release_sha }} steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false @@ -181,7 +181,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false @@ -261,7 +261,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - name: Setup Node diff --git a/.github/workflows/publish-miner.yml b/.github/workflows/publish-miner.yml index 58b17ef773..7fcf9ba036 100644 --- a/.github/workflows/publish-miner.yml +++ b/.github/workflows/publish-miner.yml @@ -42,7 +42,7 @@ jobs: release_sha: ${{ steps.version.outputs.release_sha }} steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false @@ -173,7 +173,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/publish-ui-kit.yml b/.github/workflows/publish-ui-kit.yml index 15804c7ecb..3d71b3cbcb 100644 --- a/.github/workflows/publish-ui-kit.yml +++ b/.github/workflows/publish-ui-kit.yml @@ -41,7 +41,7 @@ jobs: release_sha: ${{ steps.version.outputs.release_sha }} steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false @@ -163,7 +163,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/release-selfhost.yml b/.github/workflows/release-selfhost.yml index 714a525dd5..0e47034cee 100644 --- a/.github/workflows/release-selfhost.yml +++ b/.github/workflows/release-selfhost.yml @@ -52,7 +52,7 @@ jobs: env: POSTHOG_CLI_PACKAGE: "@posthog/cli@0.9.1" steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 persist-credentials: false @@ -186,7 +186,7 @@ jobs: - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 - name: Log in to GHCR - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4 + uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/selfhost.yml b/.github/workflows/selfhost.yml index 774485acd8..15fcffc01b 100644 --- a/.github/workflows/selfhost.yml +++ b/.github/workflows/selfhost.yml @@ -59,7 +59,7 @@ jobs: options: >- --health-cmd "pg_isready -U postgres" --health-interval 5s --health-timeout 5s --health-retries 10 steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false diff --git a/.github/workflows/stuck-check-watchdog.yml b/.github/workflows/stuck-check-watchdog.yml index f9bc222757..cfcbfd3732 100644 --- a/.github/workflows/stuck-check-watchdog.yml +++ b/.github/workflows/stuck-check-watchdog.yml @@ -36,7 +36,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Node uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: diff --git a/.github/workflows/ui-deploy.yml b/.github/workflows/ui-deploy.yml index b89b7a1a4e..64258e69c4 100644 --- a/.github/workflows/ui-deploy.yml +++ b/.github/workflows/ui-deploy.yml @@ -17,7 +17,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false diff --git a/.github/workflows/ui-preview-deploy.yml b/.github/workflows/ui-preview-deploy.yml index 6b4c3f00fe..92a6c66990 100644 --- a/.github/workflows/ui-preview-deploy.yml +++ b/.github/workflows/ui-preview-deploy.yml @@ -68,7 +68,7 @@ jobs: # below can find its action.yml. Never the fork's code. - name: Checkout default branch if: steps.cfg.outputs.ready == 'true' - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false diff --git a/.github/workflows/ui-preview.yml b/.github/workflows/ui-preview.yml index d93814e4f2..a763163d72 100644 --- a/.github/workflows/ui-preview.yml +++ b/.github/workflows/ui-preview.yml @@ -59,7 +59,7 @@ jobs: url: ${{ steps.deploy.outputs.preview_url }} steps: - name: Checkout PR head - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false @@ -158,7 +158,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout PR head - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false diff --git a/.github/workflows/ui-sentry-release.yml b/.github/workflows/ui-sentry-release.yml index 9c4f893fe1..255f30fa43 100644 --- a/.github/workflows/ui-sentry-release.yml +++ b/.github/workflows/ui-sentry-release.yml @@ -39,7 +39,7 @@ jobs: SENTRY_UI_PROJECT: loopover-ui SENTRY_CLI_PACKAGE: "@sentry/cli@3.6.0" steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false diff --git a/.github/workflows/upstream-contract.yml b/.github/workflows/upstream-contract.yml index cb0d536722..2212573a19 100644 --- a/.github/workflows/upstream-contract.yml +++ b/.github/workflows/upstream-contract.yml @@ -18,7 +18,7 @@ jobs: timeout-minutes: 10 steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 diff --git a/.github/workflows/visual-capture-fallback.yml b/.github/workflows/visual-capture-fallback.yml index 2996d296d7..43057ebf9d 100644 --- a/.github/workflows/visual-capture-fallback.yml +++ b/.github/workflows/visual-capture-fallback.yml @@ -90,7 +90,7 @@ jobs: LOOPOVER_ROUTES_JSON: ${{ inputs.routes }} steps: - name: Checkout PR head - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ inputs.head_sha }} persist-credentials: false