From 893f87ade3da8ef74e22b4f2380c5666c7303a14 Mon Sep 17 00:00:00 2001 From: FlintWave Date: Sat, 6 Jun 2026 23:13:00 -0700 Subject: [PATCH] ci: bump actions/checkout to v6.0.3 Carved out of the Dependabot github-actions group (#77), taking only the safe actions/checkout v6.0.2 -> v6.0.3 patch. Holds back the group's actions/download-artifact v7 -> v8 bump: v8 makes artifact hash mismatches fail by default (a warning in v7), and the only consumer is the release workflow's "Download all installer artifacts" step over large binary installers (.dmg/.msi/.flatpak) where transient digest mismatches happen. That path is never exercised by PR CI, so the bump's risk can't be validated here. download-artifact stays on v7, which both the desktop and Android releases just shipped on. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/ci.yml | 2 +- .github/workflows/release.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 096cacf..e906adb 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Set up Python 3.12 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 934a647..09d177f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -67,7 +67,7 @@ jobs: continue-on-error: ${{ matrix.experimental || false }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Set up Python 3.12 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 @@ -114,7 +114,7 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Download all installer artifacts uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0