From 9e4aded2e1b2d7aa9bfb52c15f69e82da30d0a7a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 18:35:41 +0000
Subject: [PATCH] chore(deps): update actions/checkout action to v6.1.0

---
 .github/workflows/actionlint.yml        | 2 +-
 .github/workflows/pr-cve-gate.yml       | 2 +-
 .github/workflows/pr-misconfig-scan.yml | 2 +-
 .github/workflows/release.yml           | 2 +-
 .github/workflows/scorecard.yml         | 2 +-
 .github/workflows/weekly-audit.yml      | 2 +-
 .github/workflows/weekly-release.yml    | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index a75d332..fb29484 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6.1.0
 
       - name: Install actionlint (pinned + sha256 verified)
         run: |
diff --git a/.github/workflows/pr-cve-gate.yml b/.github/workflows/pr-cve-gate.yml
index 336b3c2..06e3f79 100644
--- a/.github/workflows/pr-cve-gate.yml
+++ b/.github/workflows/pr-cve-gate.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout PR HEAD
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6.1.0
         with:
           fetch-depth: 0   # need base ref for diff
 
diff --git a/.github/workflows/pr-misconfig-scan.yml b/.github/workflows/pr-misconfig-scan.yml
index 178ada9..2e6dbe6 100644
--- a/.github/workflows/pr-misconfig-scan.yml
+++ b/.github/workflows/pr-misconfig-scan.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout PR HEAD
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6.1.0
 
       - name: Install Trivy
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1f24164..5388612 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
       attestations: write   # actions/attest-build-provenance
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6.1.0
         with:
           fetch-depth: 0    # full history so git archive sees the tag
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d3773b2..615e04d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6.1.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/weekly-audit.yml b/.github/workflows/weekly-audit.yml
index 0debe00..b126bd3 100644
--- a/.github/workflows/weekly-audit.yml
+++ b/.github/workflows/weekly-audit.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6.1.0
 
       - name: Install Trivy
         env:
diff --git a/.github/workflows/weekly-release.yml b/.github/workflows/weekly-release.yml
index ac757f4..a40295e 100644
--- a/.github/workflows/weekly-release.yml
+++ b/.github/workflows/weekly-release.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6.1.0
         with:
           fetch-depth: 0
           persist-credentials: true   # need creds to push the tag