This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit d96581bc9129be7640d88d8e808fc7334f4669cd
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Aug 18 12:11:47 2025 -0400
Bump actions/checkout from 4.2.2 to 5.0.0 (#2555)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to
5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08c6903cd8c0fde910a37f88322edcfb5dd907a8)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 5d8e1d54ebacfd666b9c6d4dc9d6591f336ecbf5)
# Conflicts:
# .github/workflows/pull-request-build.yml
# .github/workflows/scorecards.yml
(cherry picked from commit 3523f4795a81d04c7b6c2dfe5effbf64b66f3f9c)
# Conflicts:
# .github/workflows/codeql-analysis.yml
# .github/workflows/pull-request-build.yml
---
.github/workflows/codeql-analysis.yml | 2 +-
.github/workflows/pull-request-build.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index 93013fa35a..3bb803584c 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -37,7 +37,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
with:
# We must fetch at least the immediate parents so that if this is
# a pull request then we can checkout the head.
diff --git a/.github/workflows/pull-request-build.yml
b/.github/workflows/pull-request-build.yml
index 9cac49e446..87f4f57311 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -18,7 +18,7 @@ jobs:
pull-requests: read
timeout-minutes: 130
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
+ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #
v3.6.0
- name: Set up JDK 11
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 #
v4.7.1
with:
