From 31deb2ad587e8517a19e8012718af9e1e1f836e3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Jul 2026 12:43:29 +0000
Subject: [PATCH] fix: bump actions/checkout from 6.0.2 to 7.0.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.2...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/presubmit-check-action-exists.yml         | 2 +-
 .github/workflows/presubmit-workflow-lint.yml               | 6 +++---
 .github/workflows/reusable-bash-shellcheck.yml              | 2 +-
 .github/workflows/reusable-container-image-scan.yml         | 4 ++--
 .github/workflows/reusable-copy-to-s3.yml                   | 2 +-
 .github/workflows/reusable-docker-build.yml                 | 2 +-
 .github/workflows/reusable-dockerfile-lint.yml              | 2 +-
 .github/workflows/reusable-eslint.yml                       | 2 +-
 .../workflows/reusable-github-actions-action-validator.yml  | 2 +-
 .github/workflows/reusable-go-build-smoke-test.yml          | 2 +-
 .github/workflows/reusable-go-test.yml                      | 2 +-
 .github/workflows/reusable-go-vet.yml                       | 2 +-
 .github/workflows/reusable-gofmt.yml                        | 2 +-
 .github/workflows/reusable-goimports.yml                    | 2 +-
 .github/workflows/reusable-golangci-lint.yml                | 2 +-
 .github/workflows/reusable-govulncheck.yml                  | 2 +-
 .github/workflows/reusable-ko-build.yml                     | 2 +-
 .github/workflows/reusable-markdown-lint.yml                | 2 +-
 .github/workflows/reusable-policy-conformance.yml           | 2 +-
 ...presubmit-actions-workflow-require-commit-digest-vet.yml | 2 +-
 ...reusable-presubmit-github-actions-workflow-validator.yml | 2 +-
 .github/workflows/reusable-presubmit-readme-toc.yml         | 2 +-
 .github/workflows/reusable-terraform-management.yml         | 4 ++--
 .github/workflows/sync-actions-forks.yml                    | 2 +-
 24 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/.github/workflows/presubmit-check-action-exists.yml b/.github/workflows/presubmit-check-action-exists.yml
index bdd463d..907ed52 100644
--- a/.github/workflows/presubmit-check-action-exists.yml
+++ b/.github/workflows/presubmit-check-action-exists.yml
@@ -6,7 +6,7 @@ jobs:
   check-actions-exist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: run check-actions-exist.sh
         env:
           GH_TOKEN: ${{ github.token }}
diff --git a/.github/workflows/presubmit-workflow-lint.yml b/.github/workflows/presubmit-workflow-lint.yml
index 1389e0a..470b282 100644
--- a/.github/workflows/presubmit-workflow-lint.yml
+++ b/.github/workflows/presubmit-workflow-lint.yml
@@ -15,7 +15,7 @@ jobs:
       REQUIRED_STRING_GENERIC: "startsWith(github.repository, 'GeoNet/') == false" # use the steps field and exit 1
       REQUIRED_STRING_APPS: "startsWith(github.repository, 'GeoNet/') != false" # use existing if statements for the chained reuse of workflows, since there's no steps field
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: check for GeoNet org requirement
         run: |
           FAILURES=false
@@ -32,7 +32,7 @@ jobs:
   require-reusable-workflow-is-documented:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: check workflow is documented
         run: |
           FAILURES=false
@@ -48,7 +48,7 @@ jobs:
   require-jobs-run-steps-have-name:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: check for run steps without name
         run: |
           FAILURES=false
diff --git a/.github/workflows/reusable-bash-shellcheck.yml b/.github/workflows/reusable-bash-shellcheck.yml
index f15a2fd..1d6c45e 100644
--- a/.github/workflows/reusable-bash-shellcheck.yml
+++ b/.github/workflows/reusable-bash-shellcheck.yml
@@ -13,7 +13,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - id: run-info
         name: collect job run info
         run: |
diff --git a/.github/workflows/reusable-container-image-scan.yml b/.github/workflows/reusable-container-image-scan.yml
index b7cc6b6..9d2d815 100644
--- a/.github/workflows/reusable-container-image-scan.yml
+++ b/.github/workflows/reusable-container-image-scan.yml
@@ -28,7 +28,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - id: set
         name: require GeoNet org
         run: |
@@ -43,7 +43,7 @@ jobs:
     strategy:
       matrix: ${{ fromJSON(needs.prepare.outputs.matrix) }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-copy-to-s3.yml b/.github/workflows/reusable-copy-to-s3.yml
index 1234915..c464177 100644
--- a/.github/workflows/reusable-copy-to-s3.yml
+++ b/.github/workflows/reusable-copy-to-s3.yml
@@ -66,7 +66,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: get session name
         id: get-session-name
         env:
diff --git a/.github/workflows/reusable-docker-build.yml b/.github/workflows/reusable-docker-build.yml
index d03708b..6863d0c 100644
--- a/.github/workflows/reusable-docker-build.yml
+++ b/.github/workflows/reusable-docker-build.yml
@@ -190,7 +190,7 @@ jobs:
         run: |
           # only get golang version we want, and select alpine latest version by default
           echo "image-ref=$( crane ls --full-ref ghcr.io/geonet/base-images/golang | grep ${{steps.setup-go.outputs.go-version}} | sort -V | tail -n 1)" >> $GITHUB_OUTPUT
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - id: default-deployment-tag
         uses: GeoNet/Actions/.github/actions/tagging@main
       - name: Generate deployment tag # TODO can this be combined with default-deployment-tag step?
diff --git a/.github/workflows/reusable-dockerfile-lint.yml b/.github/workflows/reusable-dockerfile-lint.yml
index 9103976..ceb996f 100644
--- a/.github/workflows/reusable-dockerfile-lint.yml
+++ b/.github/workflows/reusable-dockerfile-lint.yml
@@ -15,7 +15,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - id: run-info
         name: discover Dockerfiles and Containerfiles
         env:
diff --git a/.github/workflows/reusable-eslint.yml b/.github/workflows/reusable-eslint.yml
index ae8b00b..d69b9eb 100644
--- a/.github/workflows/reusable-eslint.yml
+++ b/.github/workflows/reusable-eslint.yml
@@ -26,7 +26,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ inputs.node-version }}
diff --git a/.github/workflows/reusable-github-actions-action-validator.yml b/.github/workflows/reusable-github-actions-action-validator.yml
index da287fb..5a8c188 100644
--- a/.github/workflows/reusable-github-actions-action-validator.yml
+++ b/.github/workflows/reusable-github-actions-action-validator.yml
@@ -16,7 +16,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: stable
diff --git a/.github/workflows/reusable-go-build-smoke-test.yml b/.github/workflows/reusable-go-build-smoke-test.yml
index 6b24f2a..2abeef6 100644
--- a/.github/workflows/reusable-go-build-smoke-test.yml
+++ b/.github/workflows/reusable-go-build-smoke-test.yml
@@ -31,7 +31,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-go-test.yml b/.github/workflows/reusable-go-test.yml
index d77db80..5d9d7cc 100644
--- a/.github/workflows/reusable-go-test.yml
+++ b/.github/workflows/reusable-go-test.yml
@@ -36,7 +36,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-go-vet.yml b/.github/workflows/reusable-go-vet.yml
index 641ddc1..138768e 100644
--- a/.github/workflows/reusable-go-vet.yml
+++ b/.github/workflows/reusable-go-vet.yml
@@ -20,7 +20,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-gofmt.yml b/.github/workflows/reusable-gofmt.yml
index 7e25526..e348419 100644
--- a/.github/workflows/reusable-gofmt.yml
+++ b/.github/workflows/reusable-gofmt.yml
@@ -16,7 +16,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-goimports.yml b/.github/workflows/reusable-goimports.yml
index e0bac61..c2d95f0 100644
--- a/.github/workflows/reusable-goimports.yml
+++ b/.github/workflows/reusable-goimports.yml
@@ -16,7 +16,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-golangci-lint.yml b/.github/workflows/reusable-golangci-lint.yml
index a325861..80e85a9 100644
--- a/.github/workflows/reusable-golangci-lint.yml
+++ b/.github/workflows/reusable-golangci-lint.yml
@@ -27,7 +27,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-govulncheck.yml b/.github/workflows/reusable-govulncheck.yml
index 1f864f1..cfe0b22 100644
--- a/.github/workflows/reusable-govulncheck.yml
+++ b/.github/workflows/reusable-govulncheck.yml
@@ -20,7 +20,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: ${{ inputs.go-version }}
diff --git a/.github/workflows/reusable-ko-build.yml b/.github/workflows/reusable-ko-build.yml
index b784bc5..0b4f0e5 100644
--- a/.github/workflows/reusable-ko-build.yml
+++ b/.github/workflows/reusable-ko-build.yml
@@ -111,7 +111,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: configure system
         run: |
           git config user.name 'github-actions[bot]'
diff --git a/.github/workflows/reusable-markdown-lint.yml b/.github/workflows/reusable-markdown-lint.yml
index d0adcef..2ea99e7 100644
--- a/.github/workflows/reusable-markdown-lint.yml
+++ b/.github/workflows/reusable-markdown-lint.yml
@@ -37,7 +37,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - id: lint
         name: lint markdown
         env:
diff --git a/.github/workflows/reusable-policy-conformance.yml b/.github/workflows/reusable-policy-conformance.yml
index c2b29b9..d98fb96 100644
--- a/.github/workflows/reusable-policy-conformance.yml
+++ b/.github/workflows/reusable-policy-conformance.yml
@@ -39,7 +39,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
diff --git a/.github/workflows/reusable-presubmit-actions-workflow-require-commit-digest-vet.yml b/.github/workflows/reusable-presubmit-actions-workflow-require-commit-digest-vet.yml
index 6f5f33b..e0eb665 100644
--- a/.github/workflows/reusable-presubmit-actions-workflow-require-commit-digest-vet.yml
+++ b/.github/workflows/reusable-presubmit-actions-workflow-require-commit-digest-vet.yml
@@ -9,7 +9,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - id: actions-per-workflow
         name: discover actions per workflow
         run: |
diff --git a/.github/workflows/reusable-presubmit-github-actions-workflow-validator.yml b/.github/workflows/reusable-presubmit-github-actions-workflow-validator.yml
index 07923c9..820f042 100644
--- a/.github/workflows/reusable-presubmit-github-actions-workflow-validator.yml
+++ b/.github/workflows/reusable-presubmit-github-actions-workflow-validator.yml
@@ -9,7 +9,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: stable
diff --git a/.github/workflows/reusable-presubmit-readme-toc.yml b/.github/workflows/reusable-presubmit-readme-toc.yml
index 6a386f5..7558422 100644
--- a/.github/workflows/reusable-presubmit-readme-toc.yml
+++ b/.github/workflows/reusable-presubmit-readme-toc.yml
@@ -17,7 +17,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: stable
diff --git a/.github/workflows/reusable-terraform-management.yml b/.github/workflows/reusable-terraform-management.yml
index f097c34..7de169d 100644
--- a/.github/workflows/reusable-terraform-management.yml
+++ b/.github/workflows/reusable-terraform-management.yml
@@ -10,7 +10,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         name: Cache plugin dir
         with:
@@ -34,7 +34,7 @@ jobs:
         name: require GeoNet org
         run: |
           exit 1
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
         with:
diff --git a/.github/workflows/sync-actions-forks.yml b/.github/workflows/sync-actions-forks.yml
index 0fd6af6..8f90fd2 100644
--- a/.github/workflows/sync-actions-forks.yml
+++ b/.github/workflows/sync-actions-forks.yml
@@ -18,7 +18,7 @@ jobs:
   sync-forks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: sync changes
         id: sync-changes
         env: