From 3585bd8b5b43ddbfb694c0b18c72b55e570305d0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 13 Aug 2026 18:40:27 +0000
Subject: [PATCH] Bump the github-actions group across 1 directory with 3
 updates (#53388)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/check_issues.yml    | 2 +-
 .github/workflows/check_tools_sha.yml | 2 +-
 .github/workflows/codeql.yml          | 2 +-
 .github/workflows/stale.yml           | 2 +-
 .github/workflows/untrustedPR.yml     | 4 ++--
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/check_issues.yml b/.github/workflows/check_issues.yml
index 73b73836fd..5ba22ea0ab 100644
--- a/.github/workflows/check_issues.yml
+++ b/.github/workflows/check_issues.yml
@@ -11,7 +11,7 @@ jobs:
     permissions:
       issues: write
     steps:
-      - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             let issue_query = {
diff --git a/.github/workflows/check_tools_sha.yml b/.github/workflows/check_tools_sha.yml
index 4751af28d8..8526b0d68a 100644
--- a/.github/workflows/check_tools_sha.yml
+++ b/.github/workflows/check_tools_sha.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Bootstrap vcpkg
         run: ./bootstrap-vcpkg.sh
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6514933172..a84ae7c1a9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ jobs:
           build-mode: none
     steps:
     - name: Checkout repository
-      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Initialize CodeQL
       uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
       with:
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 771245b53e..d825a265b2 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -10,7 +10,7 @@ jobs:
   stale:
     runs-on: ubuntu-slim
     steps:
-      - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8.0.0
+      - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0
         with:
           stale-issue-message: "This is an automated message. Per our repo policy, stale issues get closed if there has been no activity in the past 180 days. The issue will be automatically closed in 14 days. If you wish to keep this issue open, please add a new comment."
           exempt-issue-labels: 'no-stale'
diff --git a/.github/workflows/untrustedPR.yml b/.github/workflows/untrustedPR.yml
index 6d00d64ea7..14d07a94f9 100644
--- a/.github/workflows/untrustedPR.yml
+++ b/.github/workflows/untrustedPR.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # fetch-depth 50 tries to ensure we capture the whole history of the branch
           fetch-depth: 50
@@ -102,7 +102,7 @@ jobs:
           git reset --hard "$synthetic_merge_commit"
 
       - name: Generate Reply
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const { promises: fs } = require('fs')