From 2460327891a25b4247585e7b48dab4e4ad71e324 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 12:46:48 +0000 Subject: [PATCH] Bump actions/checkout from 5.0.0 to 7.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/baremetal.yml | 4 ++-- .github/workflows/base.yml | 26 ++++++++++++------------ .github/workflows/bench.yml | 2 +- .github/workflows/bench_ec2_reusable.yml | 6 +++--- .github/workflows/ci.yml | 22 ++++++++++---------- .github/workflows/ci_ec2_container.yml | 2 +- .github/workflows/ci_ec2_reusable.yml | 4 ++-- .github/workflows/ct-tests.yml | 2 +- .github/workflows/hol_light.yml | 12 +++++------ .github/workflows/integration-awslc.yml | 6 +++--- .github/workflows/integration-liboqs.yml | 2 +- .github/workflows/integration-pavona.yml | 4 ++-- .github/workflows/isabelle.yml | 6 +++--- .github/workflows/legacy-compilers.yml | 8 ++++---- .github/workflows/lint_markdown.yml | 2 +- .github/workflows/nix.yml | 4 ++-- .github/workflows/riscv.yml | 2 +- .github/workflows/scorecard.yaml | 2 +- 18 files changed, 58 insertions(+), 58 deletions(-) diff --git a/.github/workflows/baremetal.yml b/.github/workflows/baremetal.yml index 70a967c0b..bd2461548 100644 --- a/.github/workflows/baremetal.yml +++ b/.github/workflows/baremetal.yml @@ -57,7 +57,7 @@ jobs: opt: no_opt runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: baremetal build + test uses: ./.github/actions/functest env: @@ -101,7 +101,7 @@ jobs: - x4_v8a_v84a_scalar runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: baremetal build + test uses: ./.github/actions/functest env: diff --git a/.github/workflows/base.yml b/.github/workflows/base.yml index caf5eccf7..af67fa334 100644 --- a/.github/workflows/base.yml +++ b/.github/workflows/base.yml @@ -18,7 +18,7 @@ jobs: name: Linting runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/lint with: gh_token: ${{ secrets.GITHUB_TOKEN }} @@ -47,7 +47,7 @@ jobs: name: Quickcheck (${{ matrix.target.name }}) runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: make quickcheck run: | OPT=0 make quickcheck @@ -78,7 +78,7 @@ jobs: name: Quickcheck ACVP (${{ matrix.target.name }}, ${{ matrix.acvp-version }}) runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Run ACVP test run: | ./scripts/tests acvp --version ${{ matrix.acvp-version }} @@ -106,7 +106,7 @@ jobs: name: Quickcheck bench (${{ matrix.target.name }}) runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: "tests bench (cycles: NO)" run: | ./scripts/tests bench -c NO @@ -149,7 +149,7 @@ jobs: name: Quickcheck C90 (${{ matrix.target.name }}) runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: make quickcheck run: | OPT=0 CFLAGS=-std=c90 make quickcheck @@ -173,7 +173,7 @@ jobs: name: Quickcheck ${{ matrix.system }} runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - name: Build test shell: powershell @@ -190,7 +190,7 @@ jobs: name: Quickcheck (Mingw-w64 ${{ matrix.mingw-version }}) runs-on: windows-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Install MinGW-w64 run: choco install mingw --version=${{ matrix.mingw-version }} -y shell: cmd @@ -212,7 +212,7 @@ jobs: system: [macos-latest, macos-15-intel, ubuntu-latest, ubuntu-24.04-arm] runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: make lib run: | make lib @@ -223,7 +223,7 @@ jobs: system: [macos-latest, macos-15-intel, ubuntu-latest, ubuntu-24.04-arm] runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: basic run: | CFLAGS="-O0" make run -C examples/basic @@ -277,7 +277,7 @@ jobs: runs-on: ubuntu-24.04-arm name: AArch64 dev backend (${{ matrix.backend.name }}, ${{ matrix.simplify.name }}) steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Reinstate and test backend uses: ./.github/actions/setup-shell with: @@ -291,7 +291,7 @@ jobs: name: x86_64 Intel syntax runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Generate with Intel syntax and test uses: ./.github/actions/setup-shell with: @@ -315,7 +315,7 @@ jobs: name: scan-build (${{ matrix.target.name }}) runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-apt with: packages: clang-tools clang @@ -327,5 +327,5 @@ jobs: symlink-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: donatj/symlink-check-action@b3c737d0fd4e52752f0b8c71a03f3f775fa015cb diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml index af3177dfe..3ba9d960f 100644 --- a/.github/workflows/bench.yml +++ b/.github/workflows/bench.yml @@ -79,7 +79,7 @@ jobs: if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork && (github.event.label.name == 'benchmark' || github.ref == 'refs/heads/main') runs-on: self-hosted-${{ matrix.target.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/bench if: ${{ !matrix.target.only_no_opt }} with: diff --git a/.github/workflows/bench_ec2_reusable.yml b/.github/workflows/bench_ec2_reusable.yml index af30ed823..d7a7f6999 100644 --- a/.github/workflows/bench_ec2_reusable.yml +++ b/.github/workflows/bench_ec2_reusable.yml @@ -96,7 +96,7 @@ jobs: label: ${{ steps.start-ec2-runner.outputs.label }} ec2-instance-id: ${{ steps.start-ec2-runner.outputs.ec2-instance-id }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Determine AMI ID id: det_ami_id run: | @@ -138,7 +138,7 @@ jobs: needs: start-ec2-runner # required to start the main job when the runner is ready if: ${{ inputs.compiler == '' }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/bench if: ${{ inputs.opt == 'all' || inputs.opt == 'opt' }} with: @@ -175,7 +175,7 @@ jobs: needs: start-ec2-runner # required to start the main job when the runner is ready if: ${{ inputs.compiler != '' }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-apt with: packages: ${{ inputs.additional_packages }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 68f5429c8..4676c32c0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -102,7 +102,7 @@ jobs: name: Functional tests (${{ matrix.target.name }}) runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: build + test (no-opt) uses: ./.github/actions/multi-functest # no-opt exercises only the C fallback, so RVV VLEN is irrelevant; run once for riscv64 @@ -158,7 +158,7 @@ jobs: backend: [x1_scalar, x1_v84a, x2_v84a, x4_v8a_scalar, x4_v8a_v84a_scalar] runs-on: macos-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: build + test uses: ./.github/actions/multi-functest with: @@ -276,7 +276,7 @@ jobs: examples: False runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: native build+functest (default) if: ${{ matrix.compiler.darwin || matrix.target.runner != 'macos-latest' }} uses: ./.github/actions/multi-functest @@ -384,7 +384,7 @@ jobs: - external: true runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Stack analysis uses: ./.github/actions/multi-functest with: @@ -418,7 +418,7 @@ jobs: - external: true runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Unit tests under valgrind uses: ./.github/actions/functest with: @@ -470,7 +470,7 @@ jobs: extra_cflags: -DMLD_CONFIG_REDUCE_RAM runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: "Config: ${{ matrix.test.name }} (${{ matrix.target.name }})" uses: ./.github/actions/config-variations with: @@ -492,7 +492,7 @@ jobs: # On AArch64 -fcf-protection is not supported anyway runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Test control-flow protections uses: ./.github/actions/multi-functest with: @@ -524,7 +524,7 @@ jobs: name: Check API consistency runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: make quickcheck run: | OPT=0 CFLAGS="-Imldsa -DMLD_CHECK_APIS -Wno-redundant-decls" make quickcheck @@ -757,7 +757,7 @@ jobs: runs-on: ${{ matrix.target.system }} name: Check autogenerated files steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: nix-shell: ${{ matrix.target.nix_shell }} @@ -769,7 +769,7 @@ jobs: runs-on: ubuntu-latest name: Check test vectors steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: nix-shell: ci @@ -802,7 +802,7 @@ jobs: runs-on: ${{ matrix.target.system }} name: Check object code in HOL-Light proofs steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: nix-shell: ${{ matrix.target.nix_shell }} diff --git a/.github/workflows/ci_ec2_container.yml b/.github/workflows/ci_ec2_container.yml index ff9b25040..0448967c1 100644 --- a/.github/workflows/ci_ec2_container.yml +++ b/.github/workflows/ci_ec2_container.yml @@ -87,7 +87,7 @@ jobs: label: ${{ steps.remember-runner.outputs.label }} ec2-instance-id: ${{ steps.remember-runner.outputs.ec2-instance-id }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Determine AMI ID id: det_ami_id run: | diff --git a/.github/workflows/ci_ec2_reusable.yml b/.github/workflows/ci_ec2_reusable.yml index 81767dcf1..d200cf934 100644 --- a/.github/workflows/ci_ec2_reusable.yml +++ b/.github/workflows/ci_ec2_reusable.yml @@ -93,7 +93,7 @@ jobs: label: ${{ steps.remember-runner.outputs.label }} ec2-instance-id: ${{ steps.remember-runner.outputs.ec2-instance-id }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Determine AMI ID id: det_ami_id run: | @@ -168,7 +168,7 @@ jobs: needs: start-ec2-runner runs-on: ${{ needs.start-ec2-runner.outputs.label }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Linting if: ${{ inputs.lint }} uses: ./.github/actions/lint diff --git a/.github/workflows/ct-tests.yml b/.github/workflows/ct-tests.yml index 76c8946d1..f1797d18c 100644 --- a/.github/workflows/ct-tests.yml +++ b/.github/workflows/ct-tests.yml @@ -32,7 +32,7 @@ jobs: - valgrind-varlat_gcc16 runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup nix uses: ./.github/actions/setup-shell with: diff --git a/.github/workflows/hol_light.yml b/.github/workflows/hol_light.yml index ef89ac54a..928a6b51a 100644 --- a/.github/workflows/hol_light.yml +++ b/.github/workflows/hol_light.yml @@ -51,7 +51,7 @@ jobs: runs-on: ubuntu-24.04-arm if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: gh_token: ${{ secrets.GITHUB_TOKEN }} @@ -64,7 +64,7 @@ jobs: needs: [ hol_light_bytecode ] if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: gh_token: ${{ secrets.GITHUB_TOKEN }} @@ -127,7 +127,7 @@ jobs: runs-on: ubuntu-24.04-arm if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: # Enough history for changed-files (rebase-merge pushes can be multi-commit) fetch-depth: 100 @@ -171,7 +171,7 @@ jobs: runs-on: ubuntu-latest if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: gh_token: ${{ secrets.GITHUB_TOKEN }} @@ -184,7 +184,7 @@ jobs: needs: [ hol_light_bytecode_x86_64 ] if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: gh_token: ${{ secrets.GITHUB_TOKEN }} @@ -229,7 +229,7 @@ jobs: runs-on: ubuntu-latest if: github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: # Enough history for changed-files (rebase-merge pushes can be multi-commit) fetch-depth: 100 diff --git a/.github/workflows/integration-awslc.yml b/.github/workflows/integration-awslc.yml index 908eaaf83..ddf9e0540 100644 --- a/.github/workflows/integration-awslc.yml +++ b/.github/workflows/integration-awslc.yml @@ -34,7 +34,7 @@ jobs: name: AWS-LC FIPS test (${{ matrix.system }}, FIPS=${{ matrix.fips }}) runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-os with: packages: ${{ env.DEPENDENCIES }} @@ -94,7 +94,7 @@ jobs: name: Posix test (${{ matrix.test.name }}, ${{ matrix.system }}) runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-os with: packages: ${{ env.DEPENDENCIES }} @@ -139,7 +139,7 @@ jobs: name: Prefix test (${{ matrix.test.name }}, ${{ matrix.system }}) runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-os with: packages: ${{ env.DEPENDENCIES }} diff --git a/.github/workflows/integration-liboqs.yml b/.github/workflows/integration-liboqs.yml index d53e60358..56bcfa95b 100644 --- a/.github/workflows/integration-liboqs.yml +++ b/.github/workflows/integration-liboqs.yml @@ -35,7 +35,7 @@ jobs: name: Build (${{ matrix.name }}, ${{ matrix.system }}) runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-os with: packages: 'cmake python3-jinja2 python3-tabulate python3-git python3-pytest valgrind' diff --git a/.github/workflows/integration-pavona.yml b/.github/workflows/integration-pavona.yml index bc088f7ea..75010d8d6 100644 --- a/.github/workflows/integration-pavona.yml +++ b/.github/workflows/integration-pavona.yml @@ -26,7 +26,7 @@ jobs: label: ${{ steps.start-ec2-runner.outputs.label }} ec2-instance-id: ${{ steps.start-ec2-runner.outputs.ec2-instance-id }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Configure AWS credentials uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0 @@ -57,7 +57,7 @@ jobs: if: ${{ github.repository_owner == 'pq-code-package' && !github.event.pull_request.head.repo.fork }} runs-on: ${{ needs.start-ec2-runner.outputs.label }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-pavona with: pavona-repository: https://github.com/pavona/pavona diff --git a/.github/workflows/isabelle.yml b/.github/workflows/isabelle.yml index 576ecb805..d507a5ec0 100644 --- a/.github/workflows/isabelle.yml +++ b/.github/workflows/isabelle.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest container: makarius/isabelle:Isabelle2025-2 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Build Compress session run: /home/isabelle/Isabelle/bin/isabelle build -D proofs/isabelle/compress neon_ntt: @@ -25,7 +25,7 @@ jobs: image: makarius/isabelle:Isabelle2025-2_ARM_X11_Latex options: --user root steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Install conformance build tools and missing TeX packages run: | apt-get update @@ -55,7 +55,7 @@ jobs: name: Isabelle proofs (nix shell) runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-shell with: gh_token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/legacy-compilers.yml b/.github/workflows/legacy-compilers.yml index f4fa51d76..244cb5e94 100644 --- a/.github/workflows/legacy-compilers.yml +++ b/.github/workflows/legacy-compilers.yml @@ -226,7 +226,7 @@ jobs: examples: False runs-on: ${{ matrix.target.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: native build+functest (default) uses: ./.github/actions/multi-functest with: @@ -394,7 +394,7 @@ jobs: examples: False runs-on: macos-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: native build+functest (default) uses: ./.github/actions/multi-functest with: @@ -500,7 +500,7 @@ jobs: - "15.2.0" runs-on: windows-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Install MinGW-w64 run: choco install mingw --version=${{ matrix.mingw-version }} -y shell: cmd @@ -561,7 +561,7 @@ jobs: - { family: clang, version: "22", shell: clang22 } runs-on: ${{ matrix.system }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup nix uses: ./.github/actions/setup-shell with: diff --git a/.github/workflows/lint_markdown.yml b/.github/workflows/lint_markdown.yml index d115f630c..2bad89393 100644 --- a/.github/workflows/lint_markdown.yml +++ b/.github/workflows/lint_markdown.yml @@ -12,7 +12,7 @@ jobs: lint-markdown-link: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Check markdown links run: | npm install -g markdown-link-check@3.14.2 diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml index fc7b7115f..e085def07 100644 --- a/.github/workflows/nix.yml +++ b/.github/workflows/nix.yml @@ -19,7 +19,7 @@ jobs: outputs: run_needed: ${{ steps.check_run.outputs.run_needed }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 if: github.event_name != 'workflow_dispatch' with: # Enough history for changed-files (rebase-merge pushes can be multi-commit) @@ -62,7 +62,7 @@ jobs: name: build nix cache (${{ matrix.runner }}) runs-on: ${{ matrix.runner }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-nix with: cache: true diff --git a/.github/workflows/riscv.yml b/.github/workflows/riscv.yml index 4e87fc36d..f50c079f5 100644 --- a/.github/workflows/riscv.yml +++ b/.github/workflows/riscv.yml @@ -15,7 +15,7 @@ jobs: # via https://riseproject-dev.github.io/riscv-runner/ runs-on: ubuntu-24.04-riscv steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: make quickcheck run: | OPT=0 make quickcheck diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 824d211c6..913b61b39 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -25,7 +25,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false