Merge pull request #7272 from nextcloud/dependabot/github_actions/dot-github/workflows/actions/checkout-6.0.1

build(deps): bump actions/checkout from 4.2.2 to 6.0.1 in /.github/workflows
Merge pull request #7271 from nextcloud/dependabot/github_actions/dot-github/workflows/astral-sh/setup-uv-7.1.4
2026-02-17 11:10:22 +00:00 · 2025-12-04 13:20:55 +01:00 · 2025-12-04 13:20:39 +01:00 · 2025-12-04 12:19:16 +00:00 · 2025-12-04 12:18:56 +00:00
1 changed files with 2 additions and 2 deletions
--- a/.github/workflows/lint-yaml.yml
+++ b/.github/workflows/lint-yaml.yml
@ -24,7 +24,7 @@ jobs:

    steps:
      - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          persist-credentials: false

@ -36,7 +36,7 @@ jobs:
            line-length: warning

      - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@f94ec6bedd8674c4426838e6b50417d36b6ab231 # v5.3.1
+        uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 # v7.1.4

      - name: Check GitHub actions
        run: uvx zizmor --min-severity medium .github/workflows/*.yml
Author	SHA1	Message	Date
Simon L.	ae8a36742a	Merge pull request #7272 from nextcloud/dependabot/github_actions/dot-github/workflows/actions/checkout-6.0.1 Some checks are pending Codespell / Check spelling (push) Waiting to run Details build(deps): bump actions/checkout from 4.2.2 to 6.0.1 in /.github/workflows	2025-12-04 13:20:55 +01:00
Simon L.	d802496580	Merge pull request #7271 from nextcloud/dependabot/github_actions/dot-github/workflows/astral-sh/setup-uv-7.1.4 build(deps): bump astral-sh/setup-uv from 5.3.1 to 7.1.4 in /.github/workflows	2025-12-04 13:20:39 +01:00
dependabot[bot]	0a23880281	build(deps): bump actions/checkout in /.github/workflows Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 6.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4.2.2...v6.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2025-12-04 12:19:16 +00:00
dependabot[bot]	911cdef763	build(deps): bump astral-sh/setup-uv in /.github/workflows Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 5.3.1 to 7.1.4. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](`f94ec6bedd...1e862dfacb`) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 7.1.4 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2025-12-04 12:18:56 +00:00