Commit: CI: Bump the github-actions group across 1 directory with 3 updates

[Christian Brabandt]

CI: Bump the github-actions group across 1 directory with 3 updates

Commit: https://github.com/vim/vim/commit/7bc4491ad44d6aeea8c0993594c8a323262ee53a
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat Jun 13 18:08:25 2026 +0000

CI: Bump the github-actions group across 1 directory with 3 updates

Bumps the github-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [codecov/codecov-action](https://github.com/codecov/codecov-action) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3)

Updates `codecov/codecov-action` from 6 to 7.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v6...v7)

Updates `github/codeql-action` from 4.36.0 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.36.0...v4.36.2)

---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: codecov/codecov-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...

closes: #20500

Signed-off-by: dependabot[bot] <sup...@github.com>
Signed-off-by: Christian Brabandt <c...@256bit.org>

diff --git a/.github/workflows/ci-linux.yml b/.github/workflows/ci-linux.yml
index d7075e951..2bd08c452 100644
--- a/.github/workflows/ci-linux.yml
+++ b/.github/workflows/ci-linux.yml
@@ -83,7 +83,7 @@ jobs:

steps:
- name: Checkout repository from GitHub
- uses: actions/chec...@v6.0.2
+ uses: actions/chec...@v6.0.3

- name: Build
timeout-minutes: 15
@@ -170,7 +170,7 @@ jobs:
- name: Codecov
timeout-minutes: 20
if: matrix.coverage
- uses: codecov/codecov-action@v6
+ uses: codecov/codecov-action@v7
with:
flags: linux,${{ matrix.features }}-${{ matrix.compiler }}-${{ join(matrix.extra, '-') }}
token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/ci-linux_asan.yml b/.github/workflows/ci-linux_asan.yml
index 84eaca437..54dcd2dca 100644
--- a/.github/workflows/ci-linux_asan.yml
+++ b/.github/workflows/ci-linux_asan.yml
@@ -37,7 +37,7 @@ jobs:

steps:
- name: Checkout repository from GitHub
- uses: actions/chec...@v6.0.2
+ uses: actions/chec...@v6.0.3

- name: Build
timeout-minutes: 15
diff --git a/.github/workflows/ci-macos.yml b/.github/workflows/ci-macos.yml
index 890cedb83..2ab16012c 100644
--- a/.github/workflows/ci-macos.yml
+++ b/.github/workflows/ci-macos.yml
@@ -32,7 +32,7 @@ jobs:

steps:
- name: Checkout repository from GitHub
- uses: actions/chec...@v6.0.2
+ uses: actions/chec...@v6.0.3

- name: Install packages
if: matrix.features == 'huge'
diff --git a/.github/workflows/ci-windows.yml b/.github/workflows/ci-windows.yml
index de5d49bcc..4da63f182 100644
--- a/.github/workflows/ci-windows.yml
+++ b/.github/workflows/ci-windows.yml
@@ -128,7 +128,7 @@ jobs:
release: false

- name: Checkout repository from GitHub
- uses: actions/chec...@v6.0.2
+ uses: actions/chec...@v6.0.3

- name: Create a list of download URLs
shell: cmd
@@ -355,7 +355,7 @@ jobs:
- name: Codecov
timeout-minutes: 20
if: matrix.coverage
- uses: codecov/codecov-action@v6
+ uses: codecov/codecov-action@v7
with:
directory: src
flags: windows,${{ matrix.toolchain }}-${{ matrix.arch }}-${{ matrix.features }}
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 32c3bcb23..e5c02fbb9 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -44,11 +44,11 @@ jobs:

steps:
- name: Checkout repository from github
- uses: actions/chec...@v6.0.2
+ uses: actions/chec...@v6.0.3

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/in...@v4.36.0
+ uses: github/codeql-action/in...@v4.36.2
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -59,7 +59,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
- uses: github/codeql-action/auto...@v4.36.0
+ uses: github/codeql-action/auto...@v4.36.2

# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
@@ -73,4 +73,4 @@ jobs:
# make release

- name: Perform CodeQL Analysis
- uses: github/codeql-action/ana...@v4.36.0
+ uses: github/codeql-action/ana...@v4.36.2
diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml
index 664fcb786..da6955464 100644
--- a/.github/workflows/link-check.yml
+++ b/.github/workflows/link-check.yml
@@ -8,7 +8,7 @@ jobs:
lychee:
runs-on: ubuntu-latest
steps:
- - uses: actions/chec...@v6.0.2
+ - uses: actions/chec...@v6.0.3
- name: Run Lychee
uses: lycheeverse/lychee-action@v2
with: