From 4753637c9f1f74cc86c9ce15aba4b17762172b21 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 3 Jun 2026 17:34:12 +0000 Subject: [PATCH] build(deps): bump the actions group across 1 directory with 6 updates Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `6.0.2` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.1.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.2.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.2.0` | | [useblacksmith/setup-docker-builder](https://github.com/useblacksmith/setup-docker-builder) | `1.7.0` | `1.8.0` | | [useblacksmith/build-push-action](https://github.com/useblacksmith/build-push-action) | `2.1.0` | `2.2.0` | Updates `actions/checkout` from 6 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v6...v6.0.2) Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5) Updates `docker/login-action` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee) Updates `docker/build-push-action` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...f9f3042f7e2789586610d6e8b85c8f03e5195baf) Updates `useblacksmith/setup-docker-builder` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/useblacksmith/setup-docker-builder/releases) - [Commits](https://github.com/useblacksmith/setup-docker-builder/compare/ac083cc84672d01c60d5e8561d0a939b697de542...722e97d12b1d06a961800dd6c05d79d951ad3c80) Updates `useblacksmith/build-push-action` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/useblacksmith/build-push-action/releases) - [Commits](https://github.com/useblacksmith/build-push-action/compare/cbd1f60d194a98cb3be5523b15134501eaf0fbf3...fb9e3e6a9299c78462bfadd0d93352c316adc9b8) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/login-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: useblacksmith/setup-docker-builder dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: useblacksmith/build-push-action dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-response.yml | 2 +- .github/workflows/ci.yml | 16 ++++----- .../workflows/control-ui-locale-refresh.yml | 4 +-- .github/workflows/docker-release.yml | 28 +++++++-------- .github/workflows/docs-agent.yml | 2 +- .github/workflows/docs-sync-publish.yml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/duplicate-after-merge.yml | 2 +- .github/workflows/full-release-validation.yml | 2 +- .github/workflows/install-smoke.yml | 22 ++++++------ .github/workflows/macos-release.yml | 2 +- .github/workflows/npm-telegram-beta-e2e.yml | 6 ++-- ...nclaw-cross-os-release-checks-reusable.yml | 6 ++-- .../openclaw-live-and-e2e-checks-reusable.yml | 36 +++++++++---------- .github/workflows/openclaw-npm-release.yml | 4 +-- .github/workflows/openclaw-release-checks.yml | 8 ++--- .github/workflows/package-acceptance.yml | 2 +- .github/workflows/parity-gate.yml | 2 +- .github/workflows/plugin-clawhub-release.yml | 10 +++--- .github/workflows/plugin-npm-release.yml | 6 ++-- .../workflows/qa-live-transports-convex.yml | 12 +++---- .github/workflows/sandbox-common-smoke.yml | 4 +-- .github/workflows/test-performance-agent.yml | 2 +- .github/workflows/workflow-sanity.yml | 6 ++-- 24 files changed, 94 insertions(+), 94 deletions(-) diff --git a/.github/workflows/auto-response.yml b/.github/workflows/auto-response.yml index f079f8d7..f794c812 100644 --- a/.github/workflows/auto-response.yml +++ b/.github/workflows/auto-response.yml @@ -25,7 +25,7 @@ jobs: pull-requests: write runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.2 with: ref: ${{ github.sha }} persist-credentials: false diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cace64ac..6f478eb2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -72,7 +72,7 @@ jobs: android_matrix: ${{ steps.manifest.outputs.android_matrix }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.target_ref || github.sha }} fetch-depth: 1 @@ -316,7 +316,7 @@ jobs: PRE_COMMIT_HOME: .cache/pre-commit-security-fast steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.target_ref || github.sha }} fetch-depth: 1 @@ -407,7 +407,7 @@ jobs: timeout-minutes: 10 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.target_ref || github.sha }} fetch-depth: 1 @@ -464,7 +464,7 @@ jobs: OPENCLAW_RUST_MSRV: "1.80.0" steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preflight.outputs.checkout_sha }} fetch-depth: 1 @@ -1760,7 +1760,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preflight.outputs.checkout_sha }} persist-credentials: false @@ -1803,7 +1803,7 @@ jobs: matrix: ${{ fromJson(needs.preflight.outputs.checks_windows_matrix) }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preflight.outputs.checkout_sha }} persist-credentials: false @@ -1908,7 +1908,7 @@ jobs: matrix: ${{ fromJson(needs.preflight.outputs.macos_node_matrix) }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preflight.outputs.checkout_sha }} persist-credentials: false @@ -1949,7 +1949,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preflight.outputs.checkout_sha }} persist-credentials: false diff --git a/.github/workflows/control-ui-locale-refresh.yml b/.github/workflows/control-ui-locale-refresh.yml index 99f22948..52f05321 100644 --- a/.github/workflows/control-ui-locale-refresh.yml +++ b/.github/workflows/control-ui-locale-refresh.yml @@ -35,7 +35,7 @@ jobs: locales_json: ${{ steps.plan.outputs.locales_json }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: fetch-depth: 0 persist-credentials: false @@ -112,7 +112,7 @@ jobs: name: Refresh ${{ matrix.locale }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: persist-credentials: true submodules: false diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml index 93806f47..99cc44a0 100644 --- a/.github/workflows/docker-release.yml +++ b/.github/workflows/docker-release.yml @@ -44,7 +44,7 @@ jobs: fi - name: Checkout selected tag - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: refs/tags/${{ inputs.tag }} fetch-depth: 0 @@ -76,16 +76,16 @@ jobs: digest: ${{ steps.build.outputs.digest }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/{0}', inputs.tag) || github.ref }} fetch-depth: 0 - name: Set up Docker Builder - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - name: Login to GitHub Container Registry - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.repository_owner }} @@ -147,7 +147,7 @@ jobs: - name: Build and push amd64 image id: build # WARNING: KEEP THE OFFICIAL DOCKER ACTION HERE; DO NOT SWITCH THIS BACK TO BLACKSMITH BLINDLY. - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0 + uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 with: context: . platforms: linux/amd64 @@ -174,16 +174,16 @@ jobs: digest: ${{ steps.build.outputs.digest }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/{0}', inputs.tag) || github.ref }} fetch-depth: 0 - name: Set up Docker Builder - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - name: Login to GitHub Container Registry - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.repository_owner }} @@ -245,7 +245,7 @@ jobs: - name: Build and push arm64 image id: build # WARNING: KEEP THE OFFICIAL DOCKER ACTION HERE; DO NOT SWITCH THIS BACK TO BLACKSMITH BLINDLY. - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0 + uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 with: context: . platforms: linux/arm64 @@ -270,13 +270,13 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/{0}', inputs.tag) || github.ref }} fetch-depth: 0 - name: Login to GitHub Container Registry - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.repository_owner }} @@ -344,15 +344,15 @@ jobs: packages: read steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: fetch-depth: 1 - name: Set up Docker Builder - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - name: Login to GitHub Container Registry - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.repository_owner }} diff --git a/.github/workflows/docs-agent.yml b/.github/workflows/docs-agent.yml index ff439956..9f5c5685 100644 --- a/.github/workflows/docs-agent.yml +++ b/.github/workflows/docs-agent.yml @@ -33,7 +33,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/docs-sync-publish.yml b/.github/workflows/docs-sync-publish.yml index 0e367bc6..f55b6ce7 100644 --- a/.github/workflows/docs-sync-publish.yml +++ b/.github/workflows/docs-sync-publish.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source repo - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: fetch-depth: 0 diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index b3e6e0f3..47c2b1ac 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -23,7 +23,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: fetch-depth: 1 fetch-tags: false diff --git a/.github/workflows/duplicate-after-merge.yml b/.github/workflows/duplicate-after-merge.yml index ad9e1444..f2520231 100644 --- a/.github/workflows/duplicate-after-merge.yml +++ b/.github/workflows/duplicate-after-merge.yml @@ -35,7 +35,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 - name: Close confirmed duplicates env: diff --git a/.github/workflows/full-release-validation.yml b/.github/workflows/full-release-validation.yml index 0ff484c4..e7a59345 100644 --- a/.github/workflows/full-release-validation.yml +++ b/.github/workflows/full-release-validation.yml @@ -66,7 +66,7 @@ jobs: sha: ${{ steps.resolve.outputs.sha }} steps: - name: Checkout target ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.ref }} fetch-depth: 0 diff --git a/.github/workflows/install-smoke.yml b/.github/workflows/install-smoke.yml index 14d9e620..e4d683ae 100644 --- a/.github/workflows/install-smoke.yml +++ b/.github/workflows/install-smoke.yml @@ -53,7 +53,7 @@ jobs: run_bun_global_install_smoke: ${{ steps.manifest.outputs.run_bun_global_install_smoke }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.ref || github.ref }} fetch-depth: 1 @@ -98,17 +98,17 @@ jobs: DOCKER_BUILD_RECORD_UPLOAD: "false" steps: - name: Checkout CLI - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.ref || github.ref }} - name: Set up Blacksmith Docker Builder - uses: useblacksmith/setup-docker-builder@ac083cc84672d01c60d5e8561d0a939b697de542 # v1 + uses: useblacksmith/setup-docker-builder@722e97d12b1d06a961800dd6c05d79d951ad3c80 # v1 # Blacksmith's builder owns the Docker layer cache; keep smoke builds off # explicit gha cache directives so local tags still load cleanly. - name: Build root Dockerfile smoke image - uses: useblacksmith/build-push-action@cbd1f60d194a98cb3be5523b15134501eaf0fbf3 # v2 + uses: useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2 with: context: . file: ./Dockerfile @@ -205,12 +205,12 @@ jobs: DOCKER_BUILD_RECORD_UPLOAD: "false" steps: - name: Checkout CLI - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.ref || github.ref }} - name: Set up Blacksmith Docker Builder - uses: useblacksmith/setup-docker-builder@ac083cc84672d01c60d5e8561d0a939b697de542 # v1 + uses: useblacksmith/setup-docker-builder@722e97d12b1d06a961800dd6c05d79d951ad3c80 # v1 # Blacksmith's builder owns the Docker layer cache; keep smoke builds off # explicit gha cache directives so local tags still load cleanly. @@ -222,7 +222,7 @@ jobs: # Build once with the matrix extension and tag both smoke names. This # keeps the build-arg coverage without a second Blacksmith build action. - name: Build root Dockerfile smoke image - uses: useblacksmith/build-push-action@cbd1f60d194a98cb3be5523b15134501eaf0fbf3 # v2 + uses: useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2 with: context: . file: ./Dockerfile @@ -297,7 +297,7 @@ jobs: ' - name: Build installer smoke image - uses: useblacksmith/build-push-action@cbd1f60d194a98cb3be5523b15134501eaf0fbf3 # v2 + uses: useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2 with: context: ./scripts/docker file: ./scripts/docker/install-sh-smoke/Dockerfile @@ -307,7 +307,7 @@ jobs: provenance: false - name: Build installer non-root image - uses: useblacksmith/build-push-action@cbd1f60d194a98cb3be5523b15134501eaf0fbf3 # v2 + uses: useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2 with: context: ./scripts/docker file: ./scripts/docker/install-sh-nonroot/Dockerfile @@ -355,12 +355,12 @@ jobs: DOCKER_BUILD_RECORD_UPLOAD: "false" steps: - name: Checkout CLI - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.ref || github.ref }} - name: Set up Blacksmith Docker Builder - uses: useblacksmith/setup-docker-builder@ac083cc84672d01c60d5e8561d0a939b697de542 # v1 + uses: useblacksmith/setup-docker-builder@722e97d12b1d06a961800dd6c05d79d951ad3c80 # v1 - name: Setup Node environment for package smoke uses: ./.github/actions/setup-node-env diff --git a/.github/workflows/macos-release.yml b/.github/workflows/macos-release.yml index ff2c09f6..8f1a513b 100644 --- a/.github/workflows/macos-release.yml +++ b/.github/workflows/macos-release.yml @@ -39,7 +39,7 @@ jobs: fi - name: Checkout selected tag - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: refs/tags/${{ inputs.tag }} fetch-depth: 0 diff --git a/.github/workflows/npm-telegram-beta-e2e.yml b/.github/workflows/npm-telegram-beta-e2e.yml index 2dd18804..766a0ee2 100644 --- a/.github/workflows/npm-telegram-beta-e2e.yml +++ b/.github/workflows/npm-telegram-beta-e2e.yml @@ -99,18 +99,18 @@ jobs: DOCKER_BUILD_RECORD_UPLOAD: "false" steps: - name: Checkout dispatch ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.harness_ref || github.sha }} fetch-depth: 1 - name: Set up Blacksmith Docker Builder - uses: useblacksmith/setup-docker-builder@ac083cc84672d01c60d5e8561d0a939b697de542 # v1 + uses: useblacksmith/setup-docker-builder@722e97d12b1d06a961800dd6c05d79d951ad3c80 # v1 with: max-cache-size-mb: 800000 - name: Build Docker E2E image - uses: useblacksmith/build-push-action@cbd1f60d194a98cb3be5523b15134501eaf0fbf3 # v2 + uses: useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2 with: context: . file: ./scripts/e2e/Dockerfile diff --git a/.github/workflows/openclaw-cross-os-release-checks-reusable.yml b/.github/workflows/openclaw-cross-os-release-checks-reusable.yml index 96aa4c43..7bf0a4da 100644 --- a/.github/workflows/openclaw-cross-os-release-checks-reusable.yml +++ b/.github/workflows/openclaw-cross-os-release-checks-reusable.yml @@ -251,7 +251,7 @@ jobs: esac - name: Checkout workflow repo - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: repository: ${{ env.OPENCLAW_REPOSITORY }} ref: ${{ steps.workflow_ref.outputs.value }} @@ -260,7 +260,7 @@ jobs: persist-credentials: false - name: Checkout public source ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: repository: ${{ env.OPENCLAW_REPOSITORY }} ref: ${{ inputs.ref }} @@ -389,7 +389,7 @@ jobs: timeout-minutes: 120 steps: - name: Checkout workflow repo - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: repository: ${{ env.OPENCLAW_REPOSITORY }} ref: ${{ needs.prepare.outputs.workflow_ref }} diff --git a/.github/workflows/openclaw-live-and-e2e-checks-reusable.yml b/.github/workflows/openclaw-live-and-e2e-checks-reusable.yml index b8fedfcc..ec1d7bbf 100644 --- a/.github/workflows/openclaw-live-and-e2e-checks-reusable.yml +++ b/.github/workflows/openclaw-live-and-e2e-checks-reusable.yml @@ -232,7 +232,7 @@ jobs: trusted_reason: ${{ steps.validate.outputs.trusted_reason }} steps: - name: Checkout workflow repository - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: fetch-depth: 0 @@ -290,7 +290,7 @@ jobs: OPENCLAW_LIVE_TEST: "1" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -326,7 +326,7 @@ jobs: OPENCLAW_VITEST_MAX_WORKERS: "2" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -371,7 +371,7 @@ jobs: OPENCLAW_VITEST_MAX_WORKERS: "1" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -497,13 +497,13 @@ jobs: DOCKER_E2E_CHUNK: ${{ matrix.chunk_id }} steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 - name: Log in to GHCR for shared Docker E2E image - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ghcr.io username: ${{ github.actor }} @@ -679,13 +679,13 @@ jobs: DOCKER_E2E_LANES: ${{ inputs.docker_lanes }} steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 - name: Log in to GHCR for shared Docker E2E image - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ghcr.io username: ${{ github.actor }} @@ -817,13 +817,13 @@ jobs: OPENCLAW_SKIP_DOCKER_BUILD: "1" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 - name: Log in to GHCR for shared Docker E2E image - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ghcr.io username: ${{ github.actor }} @@ -940,7 +940,7 @@ jobs: DOCKER_BUILD_RECORD_UPLOAD: "false" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -1063,7 +1063,7 @@ jobs: - name: Log in to GHCR if: steps.plan.outputs.needs_e2e_image == '1' - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 with: registry: ghcr.io username: ${{ github.actor }} @@ -1112,11 +1112,11 @@ jobs: - name: Setup Docker builder if: steps.image_exists.outputs.needs_build == '1' - uses: useblacksmith/setup-docker-builder@ac083cc84672d01c60d5e8561d0a939b697de542 # v1 + uses: useblacksmith/setup-docker-builder@722e97d12b1d06a961800dd6c05d79d951ad3c80 # v1 - name: Build and push bare Docker E2E image if: steps.plan.outputs.needs_bare_image == '1' && steps.image_exists.outputs.bare_exists != '1' - uses: useblacksmith/build-push-action@cbd1f60d194a98cb3be5523b15134501eaf0fbf3 # v2 + uses: useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2 with: context: . file: ./scripts/e2e/Dockerfile @@ -1129,7 +1129,7 @@ jobs: - name: Build and push functional Docker E2E image if: steps.plan.outputs.needs_functional_image == '1' && steps.image_exists.outputs.functional_exists != '1' - uses: useblacksmith/build-push-action@cbd1f60d194a98cb3be5523b15134501eaf0fbf3 # v2 + uses: useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2 with: context: . file: ./scripts/e2e/Dockerfile @@ -1207,7 +1207,7 @@ jobs: OPENCLAW_VITEST_MAX_WORKERS: "2" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -1302,7 +1302,7 @@ jobs: OPENCLAW_VITEST_MAX_WORKERS: "2" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -1529,7 +1529,7 @@ jobs: OPENCLAW_VITEST_MAX_WORKERS: "2" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 diff --git a/.github/workflows/openclaw-npm-release.yml b/.github/workflows/openclaw-npm-release.yml index 7fdcb436..becdddc0 100644 --- a/.github/workflows/openclaw-npm-release.yml +++ b/.github/workflows/openclaw-npm-release.yml @@ -74,7 +74,7 @@ jobs: exit 1 - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.tag }} fetch-depth: 0 @@ -304,7 +304,7 @@ jobs: fi - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: refs/tags/${{ inputs.tag }} fetch-depth: 0 diff --git a/.github/workflows/openclaw-release-checks.yml b/.github/workflows/openclaw-release-checks.yml index 7cec1478..4b8d93a7 100644 --- a/.github/workflows/openclaw-release-checks.yml +++ b/.github/workflows/openclaw-release-checks.yml @@ -69,7 +69,7 @@ jobs: fi - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.ref }} fetch-depth: 0 @@ -299,7 +299,7 @@ jobs: OPENCLAW_ENABLE_PRIVATE_QA_CLI: "1" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.resolve_target.outputs.ref }} fetch-depth: 1 @@ -367,7 +367,7 @@ jobs: OPENCLAW_ENABLE_PRIVATE_QA_CLI: "1" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.resolve_target.outputs.ref }} fetch-depth: 1 @@ -445,7 +445,7 @@ jobs: OPENCLAW_ENABLE_PRIVATE_QA_CLI: "1" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.resolve_target.outputs.ref }} fetch-depth: 1 diff --git a/.github/workflows/package-acceptance.yml b/.github/workflows/package-acceptance.yml index 73c5fa6d..b7b24e59 100644 --- a/.github/workflows/package-acceptance.yml +++ b/.github/workflows/package-acceptance.yml @@ -256,7 +256,7 @@ jobs: telegram_mode: ${{ steps.profile.outputs.telegram_mode }} steps: - name: Checkout package workflow ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ inputs.workflow_ref }} fetch-depth: 0 diff --git a/.github/workflows/parity-gate.yml b/.github/workflows/parity-gate.yml index c88ef4f9..a3f952bb 100644 --- a/.github/workflows/parity-gate.yml +++ b/.github/workflows/parity-gate.yml @@ -56,7 +56,7 @@ jobs: OPENCLAW_ENABLE_PRIVATE_QA_CLI: "1" steps: - name: Checkout PR - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 - name: Install pnpm uses: pnpm/action-setup@v4 diff --git a/.github/workflows/plugin-clawhub-release.yml b/.github/workflows/plugin-clawhub-release.yml index 05757fe8..8b628016 100644 --- a/.github/workflows/plugin-clawhub-release.yml +++ b/.github/workflows/plugin-clawhub-release.yml @@ -42,7 +42,7 @@ jobs: matrix: ${{ steps.plan.outputs.matrix }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ github.sha }} fetch-depth: 0 @@ -148,7 +148,7 @@ jobs: plugin: ${{ fromJson(needs.preview_plugins_clawhub.outputs.matrix) }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preview_plugins_clawhub.outputs.ref_sha }} fetch-depth: 1 @@ -162,7 +162,7 @@ jobs: install-deps: "false" - name: Checkout ClawHub CLI source - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: repository: ${{ env.CLAWHUB_REPOSITORY }} ref: ${{ env.CLAWHUB_REF }} @@ -207,7 +207,7 @@ jobs: plugin: ${{ fromJson(needs.preview_plugins_clawhub.outputs.matrix) }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preview_plugins_clawhub.outputs.ref_sha }} fetch-depth: 1 @@ -221,7 +221,7 @@ jobs: install-deps: "false" - name: Checkout ClawHub CLI source - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: repository: ${{ env.CLAWHUB_REPOSITORY }} ref: ${{ env.CLAWHUB_REF }} diff --git a/.github/workflows/plugin-npm-release.yml b/.github/workflows/plugin-npm-release.yml index 8183a9df..385b5d77 100644 --- a/.github/workflows/plugin-npm-release.yml +++ b/.github/workflows/plugin-npm-release.yml @@ -52,7 +52,7 @@ jobs: matrix: ${{ steps.plan.outputs.matrix }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || github.sha }} fetch-depth: 0 @@ -149,7 +149,7 @@ jobs: plugin: ${{ fromJson(needs.preview_plugins_npm.outputs.matrix) }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preview_plugins_npm.outputs.ref_sha }} fetch-depth: 1 @@ -183,7 +183,7 @@ jobs: plugin: ${{ fromJson(needs.preview_plugins_npm.outputs.matrix) }} steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.preview_plugins_npm.outputs.ref_sha }} fetch-depth: 1 diff --git a/.github/workflows/qa-live-transports-convex.yml b/.github/workflows/qa-live-transports-convex.yml index 16524328..cda0a1fe 100644 --- a/.github/workflows/qa-live-transports-convex.yml +++ b/.github/workflows/qa-live-transports-convex.yml @@ -85,7 +85,7 @@ jobs: trusted_reason: ${{ steps.validate.outputs.trusted_reason }} steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || github.sha }} fetch-depth: 0 @@ -155,7 +155,7 @@ jobs: OPENCLAW_LIVE_SETUP_TOKEN_VALUE: "" steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -218,7 +218,7 @@ jobs: environment: qa-live-shared steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -301,7 +301,7 @@ jobs: - e2ee-cli steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -373,7 +373,7 @@ jobs: environment: qa-live-shared steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 @@ -465,7 +465,7 @@ jobs: environment: qa-live-shared steps: - name: Checkout selected ref - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: ${{ needs.validate_selected_ref.outputs.selected_sha }} fetch-depth: 1 diff --git a/.github/workflows/sandbox-common-smoke.yml b/.github/workflows/sandbox-common-smoke.yml index 54ff9275..de7b8f6e 100644 --- a/.github/workflows/sandbox-common-smoke.yml +++ b/.github/workflows/sandbox-common-smoke.yml @@ -30,12 +30,12 @@ jobs: runs-on: blacksmith-16vcpu-ubuntu-2404 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: submodules: false - name: Set up Docker Builder - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - name: Build minimal sandbox base (USER sandbox) shell: bash diff --git a/.github/workflows/test-performance-agent.yml b/.github/workflows/test-performance-agent.yml index dbf29b83..39706665 100644 --- a/.github/workflows/test-performance-agent.yml +++ b/.github/workflows/test-performance-agent.yml @@ -35,7 +35,7 @@ jobs: timeout-minutes: 240 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/workflow-sanity.yml b/.github/workflows/workflow-sanity.yml index 6ebc23e1..36a44e65 100644 --- a/.github/workflows/workflow-sanity.yml +++ b/.github/workflows/workflow-sanity.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 - name: Fail on tabs in workflow files run: | @@ -54,7 +54,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 - name: Install actionlint shell: bash @@ -86,7 +86,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.0.2 - name: Setup Node environment uses: ./.github/actions/setup-node-env