diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 70fa2c072..33292cd77 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -26,7 +26,7 @@ jobs: - javascript-typescript steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Initialize CodeQL uses: github/codeql-action/init@v4.37.0 diff --git a/.github/workflows/crabbox-hydrate.yml b/.github/workflows/crabbox-hydrate.yml index 4ed06c680..57763fcb9 100644 --- a/.github/workflows/crabbox-hydrate.yml +++ b/.github/workflows/crabbox-hydrate.yml @@ -35,7 +35,7 @@ jobs: runs-on: [self-hosted, crabbox, openclaw, docs, "${{ inputs.crabbox_runner_label }}"] timeout-minutes: 120 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.0 with: ref: ${{ inputs.ref || github.ref }} diff --git a/.github/workflows/docs-code-ci.yml b/.github/workflows/docs-code-ci.yml index ca4fccee4..e11b0ec1d 100644 --- a/.github/workflows/docs-code-ci.yml +++ b/.github/workflows/docs-code-ci.yml @@ -30,7 +30,7 @@ jobs: timeout-minutes: 30 steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Set up Node uses: actions/setup-node@v7 diff --git a/.github/workflows/llms-full.yml b/.github/workflows/llms-full.yml index 78d28d922..c65e006d0 100644 --- a/.github/workflows/llms-full.yml +++ b/.github/workflows/llms-full.yml @@ -25,7 +25,7 @@ jobs: url: https://docs.openclaw.ai/llms-full.txt steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Check current docs main id: current-main @@ -84,7 +84,7 @@ jobs: - name: Check out OpenClaw source if: steps.current-main.outputs.stale != 'true' && steps.live-route.outputs.available != 'false' - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: repository: ${{ steps.source-meta.outputs.repository }} ref: ${{ steps.source-meta.outputs.sha }} diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index e0b4060e4..896944f14 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -41,7 +41,7 @@ jobs: url: https://docs.openclaw.ai steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Set up Node uses: actions/setup-node@v7 diff --git a/.github/workflows/r2-pages.yml b/.github/workflows/r2-pages.yml index f6b84f18e..2e19dfc3b 100644 --- a/.github/workflows/r2-pages.yml +++ b/.github/workflows/r2-pages.yml @@ -74,7 +74,7 @@ jobs: url: https://docs.openclaw.ai steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Classify artifact scope id: artifact-scope @@ -166,7 +166,7 @@ jobs: - name: Check out OpenClaw source if: steps.artifact-scope.outputs.scope == 'full' || steps.artifact-scope.outputs.scope == 'locale' || steps.artifact-scope.outputs.scope == 'page' - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: repository: ${{ steps.source-meta.outputs.repository }} ref: ${{ steps.source-meta.outputs.sha }} diff --git a/.github/workflows/translate-all.yml b/.github/workflows/translate-all.yml index 4f3b960e0..45d1d901b 100644 --- a/.github/workflows/translate-all.yml +++ b/.github/workflows/translate-all.yml @@ -76,7 +76,7 @@ jobs: source_sha: ${{ steps.prepare.outputs.source_sha }} steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: fetch-depth: 0 @@ -119,7 +119,7 @@ jobs: batch_6: ${{ steps.plan.outputs.batch_6 }} steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Build full locale plan id: plan @@ -139,7 +139,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Validate OpenAI key and model env: @@ -393,7 +393,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Download full locale artifacts continue-on-error: true diff --git a/.github/workflows/translate-finalize-reusable.yml b/.github/workflows/translate-finalize-reusable.yml index bd8c11055..65977cb1b 100644 --- a/.github/workflows/translate-finalize-reusable.yml +++ b/.github/workflows/translate-finalize-reusable.yml @@ -32,7 +32,7 @@ jobs: # The artifact commit targets latest main, while the workflow control # scripts stay pinned to the workflow ref under test. - name: Check out workflow scripts - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: ref: ${{ github.workflow_sha }} path: .openclaw-sync/workflow-ref @@ -48,7 +48,7 @@ jobs: cp -R .openclaw-sync/workflow-ref/.github/scripts/i18n/. "${I18N_SCRIPT_DIR}/" - name: Check out latest main - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: fetch-depth: 0 diff --git a/.github/workflows/translate-incremental.yml b/.github/workflows/translate-incremental.yml index c3985ed29..fe41a272e 100644 --- a/.github/workflows/translate-incremental.yml +++ b/.github/workflows/translate-incremental.yml @@ -62,7 +62,7 @@ jobs: source_sha: ${{ steps.prepare.outputs.source_sha }} steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: fetch-depth: 0 @@ -93,7 +93,7 @@ jobs: # The planner runs workflow-control scripts from the workflow ref under # test, while sizing shards from the debounced publish ref. - name: Check out workflow scripts - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: ref: ${{ github.workflow_sha }} path: .openclaw-sync/workflow-ref @@ -109,7 +109,7 @@ jobs: cp -R .openclaw-sync/workflow-ref/.github/scripts/i18n/. "${I18N_SCRIPT_DIR}/" - name: Check out publish ref - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: ref: ${{ needs.prepare.outputs.publish_ref }} persist-credentials: false @@ -156,7 +156,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Validate OpenAI key and model env: diff --git a/.github/workflows/translate-locale-reusable.yml b/.github/workflows/translate-locale-reusable.yml index 26e6ccf14..1c73b4ce3 100644 --- a/.github/workflows/translate-locale-reusable.yml +++ b/.github/workflows/translate-locale-reusable.yml @@ -77,7 +77,7 @@ jobs: # Keep workflow control-plane scripts pinned to the workflow ref. The docs # content checkout below may intentionally point at latest main. - name: Check out workflow scripts - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: ref: ${{ github.workflow_sha }} path: .openclaw-sync/workflow-ref @@ -93,7 +93,7 @@ jobs: cp -R .openclaw-sync/workflow-ref/.github/scripts/i18n/. "${I18N_SCRIPT_DIR}/" - name: Checkout publish repo - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: ref: ${{ inputs.publish_ref }} fetch-depth: 0 @@ -113,7 +113,7 @@ jobs: - name: Checkout source repo if: steps.stale.outputs.skip != 'true' - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: repository: ${{ steps.meta.outputs.repository }} ref: ${{ steps.meta.outputs.sha }} @@ -352,7 +352,7 @@ jobs: # Finalizers apply artifacts to latest main, but deploy/commit control # logic must come from this workflow ref so branch canaries test the fix. - name: Check out workflow scripts - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: ref: ${{ github.workflow_sha }} path: .openclaw-sync/workflow-ref @@ -368,7 +368,7 @@ jobs: cp -R .openclaw-sync/workflow-ref/.github/scripts/i18n/. "${I18N_SCRIPT_DIR}/" - name: Check out latest main - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: fetch-depth: 0 diff --git a/.github/workflows/translate-shell-check-reusable.yml b/.github/workflows/translate-shell-check-reusable.yml index 1c6b4d386..d1a142551 100644 --- a/.github/workflows/translate-shell-check-reusable.yml +++ b/.github/workflows/translate-shell-check-reusable.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Check bash syntax in translation workflows run: | diff --git a/.github/workflows/update-skills.yml b/.github/workflows/update-skills.yml index b42193084..0ac4c9bf5 100644 --- a/.github/workflows/update-skills.yml +++ b/.github/workflows/update-skills.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 with: fetch-depth: 0