From 099f178c8308d4b7cb76d35b206d2f12573f62d2 Mon Sep 17 00:00:00 2001
From: bwvolleyball <brandon.ward@stackhawk.com>
Date: Fri, 27 Mar 2026 09:31:27 -0600
Subject: [PATCH] Bump actions/checkout to v5 for Node.js 24 compatibility

actions/checkout v3 and v4 use Node.js 16/20 which are deprecated and
will be removed from GitHub Actions runners. v5 uses Node.js 24.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/workflows/hawkscan-integration.yml |  4 ++--
 .github/workflows/test.yml                 | 16 ++++++++--------
 .github/workflows/update-main-version.yml  |  2 +-
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/hawkscan-integration.yml b/.github/workflows/hawkscan-integration.yml
index bceddcfa..9f8362f6 100644
--- a/.github/workflows/hawkscan-integration.yml
+++ b/.github/workflows/hawkscan-integration.yml
@@ -7,11 +7,11 @@ jobs:
     name: HawkScan Action Integration Test
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.client_payload.ref }}
       - name: Checkout javaspringvulny repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           repository: ${{ github.event.client_payload.repoOrg }}/${{ github.event.client_payload.repoName }}
           path: ./__tests__/integration-tests/apps/${{ github.event.client_payload.repoName }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 61e55a00..9a786291 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -16,7 +16,7 @@ jobs:
     env:
       SHAWK_API_KEY: ${{ secrets.HAWK_API_KEY }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - run: npm install --only=dev
     - run: npm run lint
     - run: npm clean-install
@@ -31,7 +31,7 @@ jobs:
     runs-on: ${{ matrix.runner }}
     steps:
       - name: Check it out
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Setup java
         uses: actions/setup-java@v4
         with:
@@ -58,7 +58,7 @@ jobs:
     runs-on: ${{ matrix.runner }}
     steps:
       - name: Check it out
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Setup java
         uses: actions/setup-java@v4
         with:
@@ -79,7 +79,7 @@ jobs:
     name: Command Line Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Setup java
         uses: actions/setup-java@v4
         with:
@@ -98,7 +98,7 @@ jobs:
       runs-on: ubuntu-latest
       steps:
         - name: Check it out
-          uses: actions/checkout@v4
+          uses: actions/checkout@v5
         - name: Setup java
           uses: actions/setup-java@v4
           with:
@@ -116,14 +116,14 @@ jobs:
     name: Java Spring Vulny Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Setup java
         uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
           java-version: '17'
       - name: Checkout javaspringvulny repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: kaakaww/javaspringvulny
           path: ./__tests__/integration-tests/apps/javaspringvulny
@@ -169,7 +169,7 @@ jobs:
       - command-line-test
       - javaspringvulny-test
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Check Release Version
diff --git a/.github/workflows/update-main-version.yml b/.github/workflows/update-main-version.yml
index f3c30094..c53cb1cc 100644
--- a/.github/workflows/update-main-version.yml
+++ b/.github/workflows/update-main-version.yml
@@ -19,7 +19,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Git config