chore(deps): update actions/checkout action to v4

.github/workflows/auto-pr.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
     - name: Set env
       run: echo "RELEASE_VERSION=$(echo ${GITHUB_REF:10})" >> $GITHUB_ENV
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         token: ${{ secrets.REPO_GITHUB_TOKEN }}
         repository: nakamasato/k8s-deploy-test

.github/workflows/auto-release-when-pr-is-merged.yml

@@ -12,7 +12,7 @@ jobs:
     if: ${{ github.event.pull_request.merged == true && ! contains( github.event.pull_request.labels.*.name, 'release') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: prepare release tag
@@ -57,7 +57,7 @@ jobs:
     env:
       PUBLISH_RELEASE_SCRIPT: ./.publish-release.sh
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           ref: main
 

.github/workflows/check-actions-name.yml

@@ -7,5 +7,5 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - run: for f in `ls .github/workflows/*yml`; do name=$(yq e '.name' $f); ls .github/workflows/${name}.yml; done

.github/workflows/check-operator-sdk-release.yml

@@ -13,7 +13,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: check
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/conditional-auto-approve.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.pull_request.draft == false
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Check change and create comment
         id: check-change-and-create-comment

.github/workflows/create-pr-if-outdated.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           ref: ${{ env.BASE_BRANCH_NAME }}
 

.github/workflows/create-pr-when-pr-is-merged.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           ref: ${{ env.BASE_BRANCH_NAME }}
 

.github/workflows/default-commands.yml

@@ -34,7 +34,7 @@ jobs:
       - name: bc
         run: printf "%.2f" $(echo "scale=2;3/2" | bc)
 
-      - uses: actions/checkout@v3 # to get the context
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4 # to get the context
 
       # https://docs.github.com/en/actions/using-workflows/using-github-cli-in-workflows
       # https://cli.github.com/manual/gh_pr_comment

.github/workflows/docker-layer-cache.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: satackey/[email protected]
       - name: build
         run: docker build -t test-image:latest . -f docker-layer-cache/Dockerfile

.github/workflows/envvar.yml

@@ -14,14 +14,14 @@ jobs:
       NAMESPACE: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Set env ${{ env.NAMESPACE }}
         id: first-job
         run: |
           echo "TEST=TEST_VALUE" >> $GITHUB_ENV
           echo "TEST=TEST_VALUE" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Get env
         run: |
           echo ${{ env.TEST }}
@@ -30,7 +30,7 @@ jobs:
   second:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Get env
         run: |
           echo ${{ env.TEST }}

.github/workflows/github-script.yml

@@ -11,7 +11,7 @@ jobs:
       ENV_FOR_JOB: env for job
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/github-script@v6
         env:
           PLAN: steps.plan.outcome

.github/workflows/k8s-ci.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Log in to the Container registry
         uses: docker/login-action@v2
@@ -47,7 +47,7 @@ jobs:
     steps:
       - run: echo ${{ needs.build-and-push-image.outputs.tags }}
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Update manifest file
         env:
           YAML_PATH: k8s-ci/deployment.yaml

.github/workflows/matrix-from-previous-job-output-2.yml

@@ -10,7 +10,7 @@ jobs:
       CHANGED_ENVS: ${{ steps.matrix.outputs.CHANGED_ENVS }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 0  # OR "2" -> To retrieve the preceding commit.
 

.github/workflows/pip-cache.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Set up Python 3.8
         uses: actions/setup-python@v4

.github/workflows/pip-no-cache.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Set up Python 3.8
         uses: actions/setup-python@v4

.github/workflows/poetry-cache.yml

@@ -20,7 +20,7 @@ jobs:
           python-version: 3.9
 
       - name: Check-out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Load cached Poetry installation
         id: cached-poetry

.github/workflows/pre-commit.yml

@@ -6,7 +6,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-python@v4
         with:
           python-version: 3.8

.github/workflows/prereleased.yml

@@ -9,7 +9,7 @@ jobs:
     if: github.event.release.target_commitish == 'main'
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - name: deploy
       run: |
         echo "preleased"

.github/workflows/python-semantic-release.yml

@@ -14,7 +14,7 @@ jobs:
       contents: write
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       with:
         fetch-depth: 0
 

.github/workflows/released.yml

@@ -20,6 +20,6 @@ jobs:
           echo ${GITHUB_REF:10} | grep -cE '^v[0-9]+.[0-9]+.[0-9]+$'
           echo "RELEASE_VERSION=${GITHUB_REF:10}" >> $GITHUB_ENV
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: create a file
         run: echo "$(date)"

.github/workflows/update-pull-request-body.yml

@@ -9,7 +9,7 @@ jobs:
   job:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: update pull request body
         uses: actions/github-script@v6
         env: