Merge pull request #1307 from G-Rath/update-actions

ci: update `actions/checkout` and disable persisted git credentials
reactjs · Sep 8, 2023 · 2d41579 · 2d41579
2 parents 230e3f6 + 24627a2
commit 2d41579
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/.github/workflows/rubocop.yml b/.github/workflows/rubocop.yml
@@ -12,7 +12,9 @@ jobs:
         ruby: ['2.7', '3.0']
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}

diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
@@ -17,7 +17,9 @@ jobs:
         ruby: [2.7]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
       - name: Save root node_modules to cache
         uses: actions/cache@v3
@@ -66,7 +68,9 @@ jobs:
       # having to do with automatic kwarg splatting
       MT_KWARGS_HACK: 1
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - uses: actions/setup-node@v3
     - run: npm -g install yalc
     - run: yalc publish