Bump actions/checkout from 6.0.1 to 6.0.2 in /github/workflows ChrisCarini/github-repo-files-sync/pull/336; Don't persist credentials in update-gradle-wrapper.yml. (#591)

* Bump actions/checkout from 6.0.1 to 6.0.2 in /github/workflows ChrisCarini/github-repo-files-sync#336

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@8e8c483...de0fac2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Don't persist credentials in `update-gradle-wrapper.yml`.

See gradle-update/update-gradle-wrapper-action#988

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: ChrisCarini

.github/workflows/build.yml

@@ -42,7 +42,7 @@ jobs:
 
       # Check out current repository
       - name: Fetch Sources
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
 
       # Setup Java environment for the next steps
@@ -84,7 +84,7 @@ jobs:
 
       # Check out current repository
       - name: Fetch Sources
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
 
       # Setup Java environment for the next steps
@@ -146,7 +146,7 @@ jobs:
 
       # Check out current repository
       - name: Fetch Sources
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
 
       # Remove old release drafts by using the curl request for the available releases with draft flag

.github/workflows/compatibility.yml

@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
 
       - name: Setup Java

.github/workflows/dependency-submission-and-review.yml

@@ -15,7 +15,7 @@ jobs:
     steps:
       # Check out current repository
       - name: Fetch Sources
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
 
       # Setup Java

.github/workflows/files-changed.yaml

@@ -55,7 +55,7 @@ jobs:
       changed_files: ${{ steps.changes.outputs.changed_files }}
     steps:
       - name: Check out repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
 
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2

.github/workflows/release.yml

@@ -17,7 +17,7 @@ jobs:
 
       # Check out current repository
       - name: Fetch Sources
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
         with:
           ref: ${{ github.event.release.tag_name }}

.github/workflows/scorecards-analysis.yml

@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
         with:
           persist-credentials: false

.github/workflows/update-gradle-wrapper.yml

@@ -12,8 +12,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
+        with:
+          persist-credentials: false
 
       - name: Setup Java
         uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
@@ -30,7 +32,7 @@ jobs:
           merge-method: SQUASH
           # NOTE: Can not set reviewer to self (`ChrisCarini`) because using PAT for self.
           #  From Docs:
-          #     Note that if you're using a Personal Access Token (PAT) as repo-token you cannot 
+          #     Note that if you're using a Personal Access Token (PAT) as repo-token you cannot
           #     request a review from the user that the PAT belongs to.
           #  Ref: https://github.com/gradle-update/update-gradle-wrapper-action#reviewers
 #          reviewers: |

.github/workflows/update-plugin-platform-version.yml

@@ -10,7 +10,7 @@ jobs:
   update-jetbrains-plugin-platform-version:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         timeout-minutes: 1
         with:
           token: ${{ secrets.PAT_TOKEN_FOR_IJ_UPDATE_ACTION }}