From bd5a4b02891ae15dc88d09fb87abb001c37e5b9b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 15:07:18 +0000
Subject: [PATCH] build(deps): bump the actions group across 1 directory with 4
 updates

Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [mitchellh/vouch/action/check-pr](https://github.com/mitchellh/vouch).


Updates `actions/checkout` from 6.0.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.2...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

Updates `actions/setup-node` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)

Updates `astral-sh/setup-uv` from 8.2.0 to 8.3.2
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/fac544c07dec837d0ccb6301d7b5580bf5edae39...11f9893b081a58869d3b5fccaea48c9e9e46f990)

Updates `mitchellh/vouch/action/check-pr` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/mitchellh/vouch/releases)
- [Commits](https://github.com/mitchellh/vouch/compare/c6d80ead49839655b61b422700b7a3bc9d0804a9...d66fa29a64600490892131ad87597c30c91fcac4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mitchellh/vouch/action/check-pr
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/check-public-api.yaml | 2 +-
 .github/workflows/pr-autolabel.yml      | 2 +-
 .github/workflows/security-audit.yml    | 2 +-
 .github/workflows/sign-old-builds.yaml  | 2 +-
 .github/workflows/vouch-check-pr.yaml   | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/check-public-api.yaml b/.github/workflows/check-public-api.yaml
index 2e915722..76eaae1d 100644
--- a/.github/workflows/check-public-api.yaml
+++ b/.github/workflows/check-public-api.yaml
@@ -23,7 +23,7 @@ jobs:
   check-public-api:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/pr-autolabel.yml b/.github/workflows/pr-autolabel.yml
index 98f9de3f..9304f50e 100644
--- a/.github/workflows/pr-autolabel.yml
+++ b/.github/workflows/pr-autolabel.yml
@@ -60,7 +60,7 @@ jobs:
       # Checkout WITHOUT a ref: under pull_request_target this resolves to the
       # base repo's branch (trusted), never the PR head. We only need the
       # script and .github/pr-labels.json from it.
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       # Single self-contained Python script (stdlib only, matching the repo's
       # other .github/scripts/*.py). The workflow picks the sub-command:
diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
index 057a8542..ba8a160a 100644
--- a/.github/workflows/security-audit.yml
+++ b/.github/workflows/security-audit.yml
@@ -53,7 +53,7 @@ jobs:
           ref: refs/pull/${{ inputs.pr_number }}/head
           fetch-depth: 0
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "20"
 
diff --git a/.github/workflows/sign-old-builds.yaml b/.github/workflows/sign-old-builds.yaml
index d02e027c..dd90df4a 100644
--- a/.github/workflows/sign-old-builds.yaml
+++ b/.github/workflows/sign-old-builds.yaml
@@ -37,7 +37,7 @@ jobs:
           USER: runner
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
 
       # cosign-installer >= v4.1.1 requires envsubst (gettext), which is not
       # preinstalled on the custom runner images.
diff --git a/.github/workflows/vouch-check-pr.yaml b/.github/workflows/vouch-check-pr.yaml
index f0f558bf..5b62172c 100644
--- a/.github/workflows/vouch-check-pr.yaml
+++ b/.github/workflows/vouch-check-pr.yaml
@@ -30,7 +30,7 @@ jobs:
 
       - name: Vouch check
         if: github.event.action == 'opened' || steps.maintainer.outputs.is_maintainer != 'true'
-        uses: mitchellh/vouch/action/check-pr@c6d80ead49839655b61b422700b7a3bc9d0804a9 # v1.4.2
+        uses: mitchellh/vouch/action/check-pr@d66fa29a64600490892131ad87597c30c91fcac4 # v1.5.0
         with:
           pr-number: ${{ github.event.pull_request.number }}
           auto-close: true