Merge pull request #5619 from kubernetes-sigs/dependabot/github_actions/actions/checkout-5

🌱 Bump actions/checkout from 4 to 5

Author: k8s-ci-robot

.github/workflows/build-ami-varsfile.yml

@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: kubernetes-sigs/image-builder
           ref: ${{ inputs.image_builder_version }}

.github/workflows/build-ami.yml

@@ -48,7 +48,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: kubernetes-sigs/image-builder
           ref: ${{ inputs.image_builder_version }}

.github/workflows/codeql-analysis.yml

@@ -21,7 +21,7 @@ jobs:
         language: [ 'go' ]
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4.1.1
+      uses: actions/checkout@v5
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/dependabot.yml

@@ -28,7 +28,7 @@ jobs:
         go-version: '1.23'
       id: go
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v4.1.1
+      uses: actions/checkout@v5
     - uses: actions/cache@v4
       name: Restore go cache
       with:

.github/workflows/md-link-checker.yml

@@ -8,7 +8,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v5
       - uses: artyom/mdlinks@v0
         with:
           dir: 'docs/book'

.github/workflows/pr-golangci-lint.yaml

@@ -17,7 +17,7 @@ jobs:
         working-directory:
           - ""
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v4.2.2
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # tag=v4.2.2
       - name: Calculate go version
         id: vars
         run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT

.github/workflows/pr-verify.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     name: verify PR contents
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v4.2.2
+    - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # tag=v4.2.2
 
     - name: Check if PR title is valid
       env:

.github/workflows/release.yaml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Set up Go

.github/workflows/scan.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v5
         with:
           ref: ${{ matrix.branch }}
       - name: Setup go