diff --git a/.github/workflows/android-protocol-publish.yml b/.github/workflows/android-protocol-publish.yml index e2a56212..515a2869 100644 --- a/.github/workflows/android-protocol-publish.yml +++ b/.github/workflows/android-protocol-publish.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true diff --git a/.github/workflows/android-publish.yml b/.github/workflows/android-publish.yml index ffd49613..1f32dfc6 100644 --- a/.github/workflows/android-publish.yml +++ b/.github/workflows/android-publish.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true diff --git a/.github/workflows/android-test.yml b/.github/workflows/android-test.yml index b33916e8..906aa0ae 100644 --- a/.github/workflows/android-test.yml +++ b/.github/workflows/android-test.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true @@ -35,7 +35,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true @@ -64,7 +64,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true diff --git a/.github/workflows/breaking-changes.yml b/.github/workflows/breaking-changes.yml index a82903e9..98b00075 100644 --- a/.github/workflows/breaking-changes.yml +++ b/.github/workflows/breaking-changes.yml @@ -40,7 +40,7 @@ jobs: working-directory: platforms/swift steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Switch to Xcode 26.2 run: sudo xcode-select --switch /Applications/Xcode_26.2.app @@ -57,7 +57,7 @@ jobs: working-directory: platforms/android steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true @@ -84,7 +84,7 @@ jobs: working-directory: platforms/react-native steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8a30a666..bad2e414 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,7 +35,7 @@ jobs: reactNativeAndroid: ${{ steps.platform.outputs.reactNative == 'true' || steps.platform.outputs.android == 'true' || steps.platform.outputs.protocol == 'true' || steps.infra.outputs.reactNativeCommon == 'true' || steps.infra.outputs.reactNativeAndroid == 'true' }} web: ${{ steps.platform.outputs.web == 'true' || steps.infra.outputs.web == 'true' }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1 id: platform @@ -126,7 +126,7 @@ jobs: if: needs.changes.outputs.swift == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - run: platforms/swift/Scripts/check_sample_package_paths rn-test: diff --git a/.github/workflows/package-size.yml b/.github/workflows/package-size.yml index 3a2ae5ac..1d536311 100644 --- a/.github/workflows/package-size.yml +++ b/.github/workflows/package-size.yml @@ -22,7 +22,7 @@ jobs: reactNative: ${{ steps.package.outputs.reactNative == 'true' || steps.package.outputs.protocolTypescript == 'true' || steps.infra.outputs.reactNative == 'true' }} web: ${{ steps.package.outputs.web == 'true' || steps.infra.outputs.web == 'true' }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1 id: package @@ -59,12 +59,12 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true - name: Checkout PR base - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: ref: ${{ github.event.pull_request.base.sha }} path: .package-size-base diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 42952dc5..adb56492 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -42,7 +42,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 diff --git a/.github/workflows/rn-build-android.yml b/.github/workflows/rn-build-android.yml index 1b23ec23..6d640245 100644 --- a/.github/workflows/rn-build-android.yml +++ b/.github/workflows/rn-build-android.yml @@ -19,7 +19,7 @@ jobs: run: working-directory: platforms/react-native steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup diff --git a/.github/workflows/rn-build-ios.yml b/.github/workflows/rn-build-ios.yml index 31772963..2623781a 100644 --- a/.github/workflows/rn-build-ios.yml +++ b/.github/workflows/rn-build-ios.yml @@ -16,7 +16,7 @@ jobs: run: working-directory: platforms/react-native steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Switch to Xcode 26.2 run: sudo xcode-select --switch /Applications/Xcode_26.2.app diff --git a/.github/workflows/rn-check-packed-files.yml b/.github/workflows/rn-check-packed-files.yml index b64342a3..48e4677d 100644 --- a/.github/workflows/rn-check-packed-files.yml +++ b/.github/workflows/rn-check-packed-files.yml @@ -18,7 +18,7 @@ jobs: run: working-directory: platforms/react-native steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup diff --git a/.github/workflows/rn-lint.yml b/.github/workflows/rn-lint.yml index 07f9fa32..e3a00fbe 100644 --- a/.github/workflows/rn-lint.yml +++ b/.github/workflows/rn-lint.yml @@ -12,7 +12,7 @@ jobs: name: SwiftLint runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: norio-nomura/action-swiftlint@9f4dcd7fd46b4e75d7935cf2f4df406d5cae3684 # 3.2.1 env: WORKING_DIRECTORY: platforms/react-native @@ -26,7 +26,7 @@ jobs: MINT_PATH: ${{ github.workspace }}/.mint/lib MINT_LINK_PATH: ${{ github.workspace }}/.mint/bin steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Cache Mint packages id: mint-cache @@ -60,7 +60,7 @@ jobs: run: working-directory: platforms/react-native steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup diff --git a/.github/workflows/rn-publish.yml b/.github/workflows/rn-publish.yml index fe3a703b..d87d645a 100644 --- a/.github/workflows/rn-publish.yml +++ b/.github/workflows/rn-publish.yml @@ -31,7 +31,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Validate release tag matches package.json version id: release diff --git a/.github/workflows/rn-test-android.yml b/.github/workflows/rn-test-android.yml index d19849b1..ff13f83b 100644 --- a/.github/workflows/rn-test-android.yml +++ b/.github/workflows/rn-test-android.yml @@ -19,7 +19,7 @@ jobs: run: working-directory: platforms/react-native steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup diff --git a/.github/workflows/rn-test-ios.yml b/.github/workflows/rn-test-ios.yml index 6cdee553..c9b13d7d 100644 --- a/.github/workflows/rn-test-ios.yml +++ b/.github/workflows/rn-test-ios.yml @@ -19,7 +19,7 @@ jobs: MINT_PATH: ${{ github.workspace }}/.mint/lib MINT_LINK_PATH: ${{ github.workspace }}/.mint/bin steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Switch to Xcode 26.2 run: sudo xcode-select --switch /Applications/Xcode_26.2.app diff --git a/.github/workflows/rn-test.yml b/.github/workflows/rn-test.yml index 172995d3..7641bffc 100644 --- a/.github/workflows/rn-test.yml +++ b/.github/workflows/rn-test.yml @@ -16,7 +16,7 @@ jobs: run: working-directory: platforms/react-native steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup diff --git a/.github/workflows/swift-lint.yml b/.github/workflows/swift-lint.yml index c411ec48..f1b89a5e 100644 --- a/.github/workflows/swift-lint.yml +++ b/.github/workflows/swift-lint.yml @@ -13,7 +13,7 @@ jobs: name: SwiftLint runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: norio-nomura/action-swiftlint@9f4dcd7fd46b4e75d7935cf2f4df406d5cae3684 # 3.2.1 with: args: --strict @@ -28,7 +28,7 @@ jobs: run: working-directory: platforms/swift steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Cache Mint packages id: mint-cache @@ -57,7 +57,7 @@ jobs: env: BUNDLE_GEMFILE: ${{ github.workspace }}/platforms/swift/Gemfile steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0 with: bundler-cache: true diff --git a/.github/workflows/swift-publish.yml b/.github/workflows/swift-publish.yml index f70afd27..96472e1d 100644 --- a/.github/workflows/swift-publish.yml +++ b/.github/workflows/swift-publish.yml @@ -21,7 +21,7 @@ jobs: BUNDLE_GEMFILE: ${{ github.workspace }}/platforms/swift/Gemfile steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Validate release tag matches Swift versions working-directory: ${{ github.workspace }} diff --git a/.github/workflows/swift-test-workflow.yml b/.github/workflows/swift-test-workflow.yml index f324a313..9ab5c367 100644 --- a/.github/workflows/swift-test-workflow.yml +++ b/.github/workflows/swift-test-workflow.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Switch to Xcode 26.2 run: | diff --git a/.github/workflows/swift-update-linters.yml b/.github/workflows/swift-update-linters.yml index 47df7e9e..32d0e0ef 100644 --- a/.github/workflows/swift-update-linters.yml +++ b/.github/workflows/swift-update-linters.yml @@ -16,7 +16,7 @@ jobs: MINT_PATH: ${{ github.workspace }}/.mint/lib MINT_LINK_PATH: ${{ github.workspace }}/.mint/bin steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Read current versions from Mintfile id: current diff --git a/.github/workflows/web-publish-bootstrap.yml b/.github/workflows/web-publish-bootstrap.yml index 2f6ce238..76584a57 100644 --- a/.github/workflows/web-publish-bootstrap.yml +++ b/.github/workflows/web-publish-bootstrap.yml @@ -40,7 +40,7 @@ jobs: working-directory: platforms/web steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup diff --git a/.github/workflows/web-publish.yml b/.github/workflows/web-publish.yml index 94c10270..61d68081 100644 --- a/.github/workflows/web-publish.yml +++ b/.github/workflows/web-publish.yml @@ -46,7 +46,7 @@ jobs: working-directory: platforms/web steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 # `ignore-scripts` prevents dep postinstall scripts from running in this # privileged job — primary mitigation against credential exfiltration diff --git a/.github/workflows/web.yml b/.github/workflows/web.yml index 48f98cdb..21e1d72f 100644 --- a/.github/workflows/web.yml +++ b/.github/workflows/web.yml @@ -16,7 +16,7 @@ jobs: run: working-directory: platforms/web steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Node.js, pnpm, and install dependencies uses: ./.github/actions/setup