From 4552cf5994b1c1ddc1c6d8391eb1f0826f5d452c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 31 Oct 2025 18:08:15 +0000
Subject: [PATCH] chore(deps): bump actions/checkout from 3 to 5 in
 /.github/workflows

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/check-files.yml                  | 2 +-
 .github/workflows/check_dafny_runtime_versions.yml | 2 +-
 .github/workflows/check_only_keyword.yml           | 2 +-
 .github/workflows/ci_static-analysis.yaml          | 2 +-
 .github/workflows/dafny_versions.yaml              | 2 +-
 .github/workflows/duvet.yaml                       | 2 +-
 .github/workflows/go-release.yml                   | 2 +-
 .github/workflows/library_codegen.yml              | 2 +-
 .github/workflows/library_dafny_verification.yml   | 2 +-
 .github/workflows/library_format.yml               | 4 ++--
 .github/workflows/library_go_tests.yml             | 2 +-
 .github/workflows/library_interop_tests.yml        | 4 ++--
 .github/workflows/library_java_tests.yml           | 2 +-
 .github/workflows/library_net_tests.yml            | 2 +-
 .github/workflows/library_python_tests.yml         | 2 +-
 .github/workflows/library_rust_tests.yml           | 2 +-
 .github/workflows/sem_ver.yml                      | 4 ++--
 .github/workflows/semantic_release.yml             | 2 +-
 .github/workflows/smithy-diff.yml                  | 2 +-
 .github/workflows/test_dbesdk_examples.yml         | 4 ++--
 .github/workflows/todo-java-release.yml            | 2 +-
 21 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/check-files.yml b/.github/workflows/check-files.yml
index fdf3b53a31..e5725dacdc 100644
--- a/.github/workflows/check-files.yml
+++ b/.github/workflows/check-files.yml
@@ -16,7 +16,7 @@ jobs:
       # to add more allowlisted approvers just modify this env variable
       maintainers: seebees, texastony, ShubhamChaturvedi7, lucasmcdonald3, josecorella, imabhichow, rishav-karanjit, antonf-amzn, kessplas, RitvikKapila, ajewellamz
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/check_dafny_runtime_versions.yml b/.github/workflows/check_dafny_runtime_versions.yml
index 1ab75e7f41..f47aef9f42 100644
--- a/.github/workflows/check_dafny_runtime_versions.yml
+++ b/.github/workflows/check_dafny_runtime_versions.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Validate DafnyRuntimePython Version Consistency
         run: |
           # Extract the version from pyproject.toml
diff --git a/.github/workflows/check_only_keyword.yml b/.github/workflows/check_only_keyword.yml
index 4a8a5c9f3f..66d03fcc52 100644
--- a/.github/workflows/check_only_keyword.yml
+++ b/.github/workflows/check_only_keyword.yml
@@ -13,7 +13,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/ci_static-analysis.yaml b/.github/workflows/ci_static-analysis.yaml
index 374c2e4383..b587fcd7e3 100644
--- a/.github/workflows/ci_static-analysis.yaml
+++ b/.github/workflows/ci_static-analysis.yaml
@@ -11,6 +11,6 @@ jobs:
   not-grep:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0
diff --git a/.github/workflows/dafny_versions.yaml b/.github/workflows/dafny_versions.yaml
index 98e5815bba..aa08bf646e 100644
--- a/.github/workflows/dafny_versions.yaml
+++ b/.github/workflows/dafny_versions.yaml
@@ -25,7 +25,7 @@ jobs:
       verifyVersion: ${{ steps.read_property.outputs.dafnyVerifyVersion }}
       rustVersion: ${{ steps.read_property.outputs.dafnyRustVersion }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Read version from Properties-file
         id: read_property
         uses: christian-draeger/read-properties@1.1.1
diff --git a/.github/workflows/duvet.yaml b/.github/workflows/duvet.yaml
index e7d3f1a56c..73339bddf4 100644
--- a/.github/workflows/duvet.yaml
+++ b/.github/workflows/duvet.yaml
@@ -20,7 +20,7 @@ jobs:
       DOTNET_CLI_TELEMETRY_OPTOUT: 1
       DOTNET_NOLOGO: 1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: true
 
diff --git a/.github/workflows/go-release.yml b/.github/workflows/go-release.yml
index 3ad6511e18..c2ce730f65 100644
--- a/.github/workflows/go-release.yml
+++ b/.github/workflows/go-release.yml
@@ -39,7 +39,7 @@ jobs:
           role-session-name: GoReleaseTest
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/library_codegen.yml b/.github/workflows/library_codegen.yml
index 43728435b8..27949858ad 100644
--- a/.github/workflows/library_codegen.yml
+++ b/.github/workflows/library_codegen.yml
@@ -43,7 +43,7 @@ jobs:
         run: |
           git config --global core.longpaths true
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # The specification submodule is private so we don't have access, but we don't need
       # it to verify the Dafny code. Instead we manually pull the submodules we DO need.
       - run: git submodule update --init libraries
diff --git a/.github/workflows/library_dafny_verification.yml b/.github/workflows/library_dafny_verification.yml
index b6edca15e8..7cec4ca9e2 100644
--- a/.github/workflows/library_dafny_verification.yml
+++ b/.github/workflows/library_dafny_verification.yml
@@ -41,7 +41,7 @@ jobs:
         run: |
           git config --global core.longpaths true
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # The specification submodule is private so we don't have access, but we don't need
       # it to verify the Dafny code. Instead we manually pull the submodules we DO need.
       - run: git submodule update --init libraries
diff --git a/.github/workflows/library_format.yml b/.github/workflows/library_format.yml
index 786d2baac8..00d10b651b 100644
--- a/.github/workflows/library_format.yml
+++ b/.github/workflows/library_format.yml
@@ -42,7 +42,7 @@ jobs:
         run: |
           git config --global core.longpaths true
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # The specification submodule is private so we don't have access, but we don't need
       # it to verify the Dafny code. Instead we manually pull the submodule we DO need.
       - run: git submodule update --init libraries
@@ -90,7 +90,7 @@ jobs:
       - name: Support longpaths
         run: |
           git config --global core.longpaths true
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Check format of Java, yaml, and md
         shell: bash
         run: |
diff --git a/.github/workflows/library_go_tests.yml b/.github/workflows/library_go_tests.yml
index 689aa86bb9..2288fed63f 100644
--- a/.github/workflows/library_go_tests.yml
+++ b/.github/workflows/library_go_tests.yml
@@ -57,7 +57,7 @@ jobs:
           role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-MPL-Dafny-Role-us-west-2
           role-session-name: GoTests
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # The specification submodule is private so we don't have access, but we don't need
       # it to verify the Dafny code. Instead we manually pull the submodules we DO need.
       - run: git submodule update --init libraries
diff --git a/.github/workflows/library_interop_tests.yml b/.github/workflows/library_interop_tests.yml
index 2e9943ccfc..d9f456a492 100644
--- a/.github/workflows/library_interop_tests.yml
+++ b/.github/workflows/library_interop_tests.yml
@@ -51,7 +51,7 @@ jobs:
           role-session-name: InterOpTests
           role-duration-seconds: 7200
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: "true"
       - name: Init Submodules
@@ -258,7 +258,7 @@ jobs:
           role-session-name: InterOpTests
           role-duration-seconds: 7200
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           submodules: "true"
       - name: Init Submodules
diff --git a/.github/workflows/library_java_tests.yml b/.github/workflows/library_java_tests.yml
index fbef702549..1cc689daa1 100644
--- a/.github/workflows/library_java_tests.yml
+++ b/.github/workflows/library_java_tests.yml
@@ -54,7 +54,7 @@ jobs:
           role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-MPL-Dafny-Role-us-west-2
           role-session-name: JavaTests
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # The specification submodule is private so we don't have access, but we don't need
       # it to verify the Dafny code. Instead we manually pull the submodules we DO need.
       - run: git submodule update --init libraries
diff --git a/.github/workflows/library_net_tests.yml b/.github/workflows/library_net_tests.yml
index fc6c064366..09505ef283 100644
--- a/.github/workflows/library_net_tests.yml
+++ b/.github/workflows/library_net_tests.yml
@@ -52,7 +52,7 @@ jobs:
           role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-MPL-Dafny-Role-us-west-2
           role-session-name: NetTests
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # The specification submodule is private so we don't have access, but we don't need
       # it to verify the Dafny code. Instead we manually pull the submodules we DO need.
       - run: git submodule update --init libraries
diff --git a/.github/workflows/library_python_tests.yml b/.github/workflows/library_python_tests.yml
index 521ffde036..6e4a63a131 100644
--- a/.github/workflows/library_python_tests.yml
+++ b/.github/workflows/library_python_tests.yml
@@ -57,7 +57,7 @@ jobs:
           role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-MPL-Dafny-Role-us-west-2
           role-session-name: PythonTests
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       # The specification submodule is private so we don't have access, but we don't need
       # it to verify the Dafny code. Instead we manually pull the submodules we DO need.
       - run: git submodule update --init libraries
diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml
index 6768fcf03a..79a3fa7c5d 100644
--- a/.github/workflows/library_rust_tests.yml
+++ b/.github/workflows/library_rust_tests.yml
@@ -40,7 +40,7 @@ jobs:
       - name: Support longpaths on Git checkout
         run: |
           git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Init Submodules
         shell: bash
         run: |
diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml
index ef0fb58b6f..0ea4b3c80d 100644
--- a/.github/workflows/sem_ver.yml
+++ b/.github/workflows/sem_ver.yml
@@ -14,7 +14,7 @@ jobs:
       - name: Support longpaths on Git checkout
         run: |
           git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       # We only pull in the submodules we need to build the library
       - run: git submodule update --init libraries
 
@@ -48,7 +48,7 @@ jobs:
 
       # Test to see if we can setup semantic release
       - name: Test Semantic Release Installation
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: main
       - run: |
diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml
index 5a560bbe74..7ea71b5cf1 100644
--- a/.github/workflows/semantic_release.yml
+++ b/.github/workflows/semantic_release.yml
@@ -23,7 +23,7 @@ jobs:
       - name: Support longpaths on Git checkout
         run: |
           git config --global core.longpaths true
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       # We only pull in the submodules we need to build the library
       - run: git submodule update --init libraries
 
diff --git a/.github/workflows/smithy-diff.yml b/.github/workflows/smithy-diff.yml
index a47e041377..ea21f2bc1a 100644
--- a/.github/workflows/smithy-diff.yml
+++ b/.github/workflows/smithy-diff.yml
@@ -13,7 +13,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/test_dbesdk_examples.yml b/.github/workflows/test_dbesdk_examples.yml
index e12fc72465..4fbc0fddc6 100644
--- a/.github/workflows/test_dbesdk_examples.yml
+++ b/.github/workflows/test_dbesdk_examples.yml
@@ -31,13 +31,13 @@ jobs:
           role-session-name: MPL-DBESDK-Examples-Test
 
       - name: Checkout MPL
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - run: git submodule update --init libraries
       - run: git submodule update --init --recursive smithy-dafny
 
       - name: Checkout DB-ESDK
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: aws/aws-database-encryption-sdk-dynamodb
           path: dbesdk
diff --git a/.github/workflows/todo-java-release.yml b/.github/workflows/todo-java-release.yml
index eeb976a835..77feab47f6 100644
--- a/.github/workflows/todo-java-release.yml
+++ b/.github/workflows/todo-java-release.yml
@@ -23,7 +23,7 @@ jobs:
         run: |
           git config --global core.longpaths true
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       # We only pull in the submodules we need to build the library
       - run: git submodule update --init libraries