From 4582674a3970e695ceb6dd4e043aa350f163e291 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 14 Sep 2026 15:56:41 +0000 Subject: [PATCH 1/2] ci: upgrade actions/checkout to v7 in CI workflow Ref #85 Pin actions/checkout to v7.0.1 (SHA 3d3c42e5aac5ba805825da76410c181273ba90b1) across the three checkout steps in ci.yml, matching the pinned-SHA pattern already used by repo-assist.lock.yml and copilot-setup-steps.yml. This targets Node.js 24 natively ahead of GitHub's Sept 23, 2026 removal of Node.js 20 from Actions runners. publish.yml is intentionally left unchanged: modifying release/publishing workflows is outside this automation's remit; a maintainer should update that file separately. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ea0b409..741fab0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install PSScriptAnalyzer shell: pwsh @@ -52,7 +52,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Print PowerShell version shell: pwsh @@ -104,7 +104,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Print PowerShell version shell: powershell From 68070c59fd25dec320dd7bff373837301689c6ee Mon Sep 17 00:00:00 2001 From: Corey Callaway Date: Mon, 14 Sep 2026 12:13:10 -0400 Subject: [PATCH 2/2] Pin checkout action to v7.0.1 Update the publish workflow to use the immutable commit SHA for actions/checkout v7.0.1. --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 1b02635..3f2d820 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup PowerShell shell: pwsh