From b7c468c1685ef882c92db3b1f1a1039a0a06c02f Mon Sep 17 00:00:00 2001 From: Sarah Dutkiewicz Date: Sun, 19 Jul 2026 14:37:22 -0400 Subject: [PATCH 1/4] Updating git checkout --- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/dotnetcore.yml | 2 +- .github/workflows/publish.yml | 2 +- .github/workflows/repro-bug.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 91d1c705..e5fb9937 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Checkout repository id: checkout_repo - uses: actions/checkout@v6 + uses: actions/checkout@v7.0.0 - name: Install .NET 10 uses: actions/setup-dotnet@v5 diff --git a/.github/workflows/dotnetcore.yml b/.github/workflows/dotnetcore.yml index 9094f5e5..f722c5f4 100644 --- a/.github/workflows/dotnetcore.yml +++ b/.github/workflows/dotnetcore.yml @@ -10,7 +10,7 @@ jobs: VIMEO_TOKEN: ${{ secrets.VIMEO_TOKEN }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7.0.0 - name: Setup .NET Core uses: actions/setup-dotnet@v5 with: diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 708c3d9c..76081b17 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Checkout repo - uses: actions/checkout@v6 + uses: actions/checkout@v7.0.0 - name: Setup .NET 10 SDK uses: actions/setup-dotnet@v5 diff --git a/.github/workflows/repro-bug.yml b/.github/workflows/repro-bug.yml index cf47a5ab..022bff14 100644 --- a/.github/workflows/repro-bug.yml +++ b/.github/workflows/repro-bug.yml @@ -152,7 +152,7 @@ jobs: core.setOutput('issue_number', String(issueNumber)); - name: Checkout repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: ref: ${{ steps.target.outputs.checkout_ref }} # Don't leave the GITHUB_TOKEN in .git/config — we only need to read. From f50402c0db589c16895a3f782a2d3c12dbcacaca Mon Sep 17 00:00:00 2001 From: Sarah Dutkiewicz Date: Sun, 19 Jul 2026 14:39:08 -0400 Subject: [PATCH 2/4] Update github-script --- .github/workflows/repro-bug.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/repro-bug.yml b/.github/workflows/repro-bug.yml index 022bff14..65bf0188 100644 --- a/.github/workflows/repro-bug.yml +++ b/.github/workflows/repro-bug.yml @@ -64,7 +64,7 @@ jobs: - name: Resolve target context id: target # Pinned to v7.0.1 commit SHA for supply-chain safety. - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea + uses: actions/github-script@v9 with: script: | const isDispatch = context.eventName === 'workflow_dispatch'; @@ -292,7 +292,7 @@ jobs: - name: Comment on issue or PR with artifact link if: always() && env.ISSUE_NUMBER != '' - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 + uses: actions/github-script@v9 with: script: | const runUrl = From 99c4dc876d65093d122afa5e005db1f723446b12 Mon Sep 17 00:00:00 2001 From: Sarah Dutkiewicz Date: Sun, 19 Jul 2026 14:40:27 -0400 Subject: [PATCH 3/4] Update setup-dotnet --- .github/workflows/repro-bug.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/repro-bug.yml b/.github/workflows/repro-bug.yml index 65bf0188..91125aac 100644 --- a/.github/workflows/repro-bug.yml +++ b/.github/workflows/repro-bug.yml @@ -164,7 +164,7 @@ jobs: node-version: 22 - name: Setup .NET - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ env.DOTNET_VERSION }} From 1625af8b908afb66e3cdd7faaa43687d1ce5006a Mon Sep 17 00:00:00 2001 From: Sarah Dutkiewicz Date: Sun, 19 Jul 2026 14:42:45 -0400 Subject: [PATCH 4/4] Update setup-nodde --- .github/workflows/repro-bug.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/repro-bug.yml b/.github/workflows/repro-bug.yml index 91125aac..3de8618e 100644 --- a/.github/workflows/repro-bug.yml +++ b/.github/workflows/repro-bug.yml @@ -159,7 +159,7 @@ jobs: persist-credentials: false - name: Setup Node.js - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 + uses: actions/setup-node@v6 with: node-version: 22 @@ -280,7 +280,7 @@ jobs: - name: Upload Playwright artifacts if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@v7 with: name: repro-artifacts-${{ steps.target.outputs.issue_number }} path: |