@@ -101,7 +101,7 @@ jobs:
101101 continue-on-error : ${{ matrix.optional == true }}
102102 timeout-minutes : 240
103103 steps :
104- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
104+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
105105
106106 - name : Install deps (Ubuntu)
107107 if : startsWith(matrix.os, 'ubuntu')
@@ -191,7 +191,7 @@ jobs:
191191 runs-on : ubuntu-latest
192192 timeout-minutes : 120
193193 steps :
194- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
194+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
195195
196196 - name : Install deps
197197 run : sudo apt-get update && sudo apt-get install -y zlib1g-dev ccache
@@ -254,7 +254,7 @@ jobs:
254254 runs-on : ubuntu-latest
255255 timeout-minutes : 180
256256 steps :
257- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
257+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
258258
259259 - name : Buildx cache
260260 uses : actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
@@ -278,7 +278,7 @@ jobs:
278278 runs-on : macos-latest
279279 timeout-minutes : 120
280280 steps :
281- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
281+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
282282
283283 - name : Install LSan-capable toolchain
284284 run : brew install llvm ccache
@@ -317,7 +317,7 @@ jobs:
317317 runs-on : ${{ matrix.os }}
318318 timeout-minutes : 120
319319 steps :
320- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
320+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
321321
322322 - name : Install deps (Ubuntu)
323323 if : runner.os == 'Linux'
@@ -373,7 +373,7 @@ jobs:
373373 continue-on-error : ${{ matrix.optional == true }}
374374 timeout-minutes : 240
375375 steps :
376- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
376+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
377377
378378 # Defender posture: real-time protection is POLICY-LOCKED OFF on hosted
379379 # Windows images (verified 2026-07-27: WinDefend starts and
@@ -490,7 +490,7 @@ jobs:
490490 # The union proof lives in the canonical scripts/ci entry, not inline
491491 # YAML (venue-parity contract) — checkout (into repo/, so the manifest
492492 # download below stays untouched) provides the script.
493- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
493+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
494494 with :
495495 path : repo
496496
@@ -513,7 +513,7 @@ jobs:
513513 runs-on : windows-latest
514514 timeout-minutes : 60
515515 steps :
516- - uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
516+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
517517
518518 - uses : msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
519519 with :
0 commit comments