From 84ca4bf119c6c418b37cf28489acc65af9aa27b2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 05:46:37 +0000
Subject: [PATCH] build(deps): bump the github-actions group across 1 directory
 with 3 updates

Bumps the github-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-go](https://github.com/actions/setup-go) and [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

Updates `actions/setup-go` from 6 to 7
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v6...v7)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/agent-release.yml              |  6 +++---
 .github/workflows/ci-policy.yml                  |  2 +-
 .github/workflows/codeql.yml                     |  6 +++---
 .github/workflows/customer-bundle-check.yml      |  2 +-
 .github/workflows/deploy-docs.yml                |  4 ++--
 .github/workflows/dev-stack-check.yml            |  6 +++---
 .github/workflows/docker-publish-ansible-api.yml |  2 +-
 .github/workflows/docker-publish-ingest.yml      |  2 +-
 .github/workflows/docker-publish-web.yml         |  2 +-
 .github/workflows/pr-checks-docker-images.yml    |  8 ++++----
 .github/workflows/pr-checks-go.yml               |  4 ++--
 .github/workflows/pr-checks-web.yml              |  4 ++--
 .github/workflows/sast.yml                       | 12 ++++++------
 .github/workflows/secret-scan.yml                |  2 +-
 14 files changed, 31 insertions(+), 31 deletions(-)

diff --git a/.github/workflows/agent-release.yml b/.github/workflows/agent-release.yml
index 115f00a1..baf0c1f6 100644
--- a/.github/workflows/agent-release.yml
+++ b/.github/workflows/agent-release.yml
@@ -83,10 +83,10 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: agent/go.mod
           cache: false
@@ -166,7 +166,7 @@ jobs:
           docker run --rm -v "$GITHUB_WORKSPACE:/ws" alpine \
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.release-please.outputs.bundle_tag_name }}
 
diff --git a/.github/workflows/ci-policy.yml b/.github/workflows/ci-policy.yml
index 00ded840..760c05ec 100644
--- a/.github/workflows/ci-policy.yml
+++ b/.github/workflows/ci-policy.yml
@@ -20,7 +20,7 @@ jobs:
     name: Workflow runner policy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Assert PR workflows use hosted runners
         run: .github/scripts/assert-pr-workflows-use-hosted-runners.sh
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b947cf51..fe479a67 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -32,11 +32,11 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Go
         if: matrix.language == 'go'
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.25"
           cache: false
@@ -46,7 +46,7 @@ jobs:
 
       - name: Set up Node.js
         if: matrix.language == 'javascript-typescript'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "20"
 
diff --git a/.github/workflows/customer-bundle-check.yml b/.github/workflows/customer-bundle-check.yml
index 64218454..2dd3abb6 100644
--- a/.github/workflows/customer-bundle-check.yml
+++ b/.github/workflows/customer-bundle-check.yml
@@ -33,7 +33,7 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Stage customer bundle
         run: |
diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 7c4420bb..e7999564 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -32,7 +32,7 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # needed for showLastUpdateTime/Author
 
@@ -42,7 +42,7 @@ jobs:
           version: '10.6.5'
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '20'
           cache: 'pnpm'
diff --git a/.github/workflows/dev-stack-check.yml b/.github/workflows/dev-stack-check.yml
index f1aa5e2f..b65d30ab 100644
--- a/.github/workflows/dev-stack-check.yml
+++ b/.github/workflows/dev-stack-check.yml
@@ -28,13 +28,13 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "20"
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
           cache-dependency-path: apps/ingest/go.sum
diff --git a/.github/workflows/docker-publish-ansible-api.yml b/.github/workflows/docker-publish-ansible-api.yml
index 88720465..5bc3504a 100644
--- a/.github/workflows/docker-publish-ansible-api.yml
+++ b/.github/workflows/docker-publish-ansible-api.yml
@@ -52,7 +52,7 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ env.TAG_NAME }}
 
diff --git a/.github/workflows/docker-publish-ingest.yml b/.github/workflows/docker-publish-ingest.yml
index 28a52ea3..cfa4e395 100644
--- a/.github/workflows/docker-publish-ingest.yml
+++ b/.github/workflows/docker-publish-ingest.yml
@@ -70,7 +70,7 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ env.TAG_NAME }}
 
diff --git a/.github/workflows/docker-publish-web.yml b/.github/workflows/docker-publish-web.yml
index b63b5022..364b7329 100644
--- a/.github/workflows/docker-publish-web.yml
+++ b/.github/workflows/docker-publish-web.yml
@@ -74,7 +74,7 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ env.TAG_NAME }}
 
diff --git a/.github/workflows/pr-checks-docker-images.yml b/.github/workflows/pr-checks-docker-images.yml
index 1ab47fa5..e4940967 100644
--- a/.github/workflows/pr-checks-docker-images.yml
+++ b/.github/workflows/pr-checks-docker-images.yml
@@ -47,7 +47,7 @@ jobs:
     name: Ansible API contract
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Test ansible-api contract
         run: PYTHONPATH=apps/ansible-api python3 -m unittest discover -s apps/ansible-api/tests
@@ -56,7 +56,7 @@ jobs:
     name: Web Docker image
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -78,7 +78,7 @@ jobs:
     name: Ingest Docker image
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -100,7 +100,7 @@ jobs:
     name: Ansible API Docker image
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
diff --git a/.github/workflows/pr-checks-go.yml b/.github/workflows/pr-checks-go.yml
index 0e69b496..b95aefd0 100644
--- a/.github/workflows/pr-checks-go.yml
+++ b/.github/workflows/pr-checks-go.yml
@@ -30,9 +30,9 @@ jobs:
           docker run --rm -v "$GITHUB_WORKSPACE:/ws" alpine \
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: '1.25'
           cache: false
diff --git a/.github/workflows/pr-checks-web.yml b/.github/workflows/pr-checks-web.yml
index 52f0f951..69cee719 100644
--- a/.github/workflows/pr-checks-web.yml
+++ b/.github/workflows/pr-checks-web.yml
@@ -34,13 +34,13 @@ jobs:
           docker run --rm -v "$GITHUB_WORKSPACE:/ws" alpine \
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: pnpm/action-setup@v6
         with:
           version: '10.6.5'
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '20'
           cache: 'pnpm'
diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
index b9b10d9d..ba433944 100644
--- a/.github/workflows/sast.yml
+++ b/.github/workflows/sast.yml
@@ -31,10 +31,10 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.25"
           cache: false
@@ -77,7 +77,7 @@ jobs:
       image: semgrep/semgrep
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run semgrep
         continue-on-error: true
@@ -136,7 +136,7 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run trivy filesystem scan
         uses: aquasecurity/trivy-action@master
@@ -179,7 +179,7 @@ jobs:
           docker run --rm -v "$GITHUB_WORKSPACE:/ws" alpine \
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Deny weak hash algorithms (TS/JS)
         run: |
@@ -238,7 +238,7 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run trivy config scan
         uses: aquasecurity/trivy-action@master
diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
index 7e6c2cb2..ce72a0d5 100644
--- a/.github/workflows/secret-scan.yml
+++ b/.github/workflows/secret-scan.yml
@@ -23,7 +23,7 @@ jobs:
             chown -R $(id -u):$(id -g) /ws 2>/dev/null || true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0