From 8117f645324328f617e71065d7a06e60f1c6cbba Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 18:51:01 +0000
Subject: [PATCH] chore(deps): update github-actions

---
 .github/workflows/ci.yml                       | 12 ++++++------
 .github/workflows/reusable-cnb-sync.yml        |  4 ++--
 .github/workflows/reusable-issue-shoot.yml     |  2 +-
 .github/workflows/reusable-publish-npm.yml     | 12 ++++++------
 .github/workflows/reusable-spell-check.yml     |  2 +-
 .github/workflows/reusable-unit-test.yml       | 12 ++++++------
 .github/workflows/spell-check.yml              |  2 +-
 .github/workflows/test-close-release-issue.yml |  2 +-
 .github/workflows/test-upgrade-deps.yml        |  8 ++++----
 actions/check-email/action.yml                 |  4 ++--
 10 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2b8c985..7cb7eb2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,11 +7,11 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: .node-version
           cache: pnpm
@@ -23,11 +23,11 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: .node-version
           cache: pnpm
@@ -41,11 +41,11 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: .node-version
           cache: pnpm
diff --git a/.github/workflows/reusable-cnb-sync.yml b/.github/workflows/reusable-cnb-sync.yml
index e31a793..ba74b4f 100644
--- a/.github/workflows/reusable-cnb-sync.yml
+++ b/.github/workflows/reusable-cnb-sync.yml
@@ -21,11 +21,11 @@ jobs:
     if: ${{ inputs.github-repo == github.repository && github.event_name == 'push' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
-      - uses: docker://tencentcom/git-sync@sha256:233c89bd41472ea530322509cc624604ac6c3cc566feebdfbab66d827aac73b7
+      - uses: docker://tencentcom/git-sync@sha256:b7c4672616ddea5b89948dcd034610b29d37d8430e74b4bc83b421c963c25f77
         env:
           PLUGIN_TARGET_URL: https://cnb.cool/${{ inputs.cnb-repo }}.git
           PLUGIN_AUTH_TYPE: https
diff --git a/.github/workflows/reusable-issue-shoot.yml b/.github/workflows/reusable-issue-shoot.yml
index fbb5200..ce0ef02 100644
--- a/.github/workflows/reusable-issue-shoot.yml
+++ b/.github/workflows/reusable-issue-shoot.yml
@@ -18,7 +18,7 @@ jobs:
     if: contains(fromJSON('["easy", "middle", "hard"]'), github.event.label.name)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           sparse-checkout: |
             .github
diff --git a/.github/workflows/reusable-publish-npm.yml b/.github/workflows/reusable-publish-npm.yml
index fbf7c5b..66db23b 100644
--- a/.github/workflows/reusable-publish-npm.yml
+++ b/.github/workflows/reusable-publish-npm.yml
@@ -54,11 +54,11 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.ref_type == 'tag' && !inputs.publish-npm
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version-file == '' && inputs.node-version || null }}
           node-version-file: ${{ inputs.node-version-file != '' && inputs.node-version-file || null }}
@@ -67,7 +67,7 @@ jobs:
 
       - run: ${{ inputs.package-manager }} run build
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: 24
 
@@ -91,14 +91,14 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.ref_type == 'tag' && !inputs.publish-tag-website
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
 
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         if: ${{ inputs.package-manager == 'pnpm' }}
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version-file == '' && inputs.node-version || null }}
           node-version-file: ${{ inputs.node-version-file != '' && inputs.node-version-file || null }}
@@ -126,7 +126,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.ref_type == 'tag' && !inputs.publish-official-website
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: main
           fetch-depth: 0
diff --git a/.github/workflows/reusable-spell-check.yml b/.github/workflows/reusable-spell-check.yml
index b950dad..8fbafc8 100644
--- a/.github/workflows/reusable-spell-check.yml
+++ b/.github/workflows/reusable-spell-check.yml
@@ -12,7 +12,7 @@ jobs:
     name: Typos
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Check spelling
         uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0
diff --git a/.github/workflows/reusable-unit-test.yml b/.github/workflows/reusable-unit-test.yml
index 72d2586..6af765c 100644
--- a/.github/workflows/reusable-unit-test.yml
+++ b/.github/workflows/reusable-unit-test.yml
@@ -28,14 +28,14 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
 
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         if: ${{ inputs.package-manager == 'pnpm' }}
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version-file == '' && inputs.node-version || null }}
           node-version-file: ${{ inputs.node-version-file != '' && inputs.node-version-file || null }}
@@ -53,14 +53,14 @@ jobs:
     if: ${{ !inputs.skip-site }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
 
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         if: ${{ inputs.package-manager == 'pnpm' }}
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version-file == '' && inputs.node-version || null }}
           node-version-file: ${{ inputs.node-version-file != '' && inputs.node-version-file || null }}
@@ -94,14 +94,14 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
 
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         if: ${{ inputs.package-manager == 'pnpm' }}
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version-file == '' && inputs.node-version || null }}
           node-version-file: ${{ inputs.node-version-file != '' && inputs.node-version-file || null }}
diff --git a/.github/workflows/spell-check.yml b/.github/workflows/spell-check.yml
index 65a327b..8b0beff 100644
--- a/.github/workflows/spell-check.yml
+++ b/.github/workflows/spell-check.yml
@@ -11,7 +11,7 @@ jobs:
     name: Typos
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Check spelling
         uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0
diff --git a/.github/workflows/test-close-release-issue.yml b/.github/workflows/test-close-release-issue.yml
index 23695ac..b4b4940 100644
--- a/.github/workflows/test-close-release-issue.yml
+++ b/.github/workflows/test-close-release-issue.yml
@@ -11,7 +11,7 @@ jobs:
     name: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: test
         uses: ./actions/close-release-issue
diff --git a/.github/workflows/test-upgrade-deps.yml b/.github/workflows/test-upgrade-deps.yml
index ea6e152..56038b4 100644
--- a/.github/workflows/test-upgrade-deps.yml
+++ b/.github/workflows/test-upgrade-deps.yml
@@ -11,9 +11,9 @@ jobs:
     name: tdesign-vue
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
 
       - name: test
         uses: ./actions/upgrade-deps
@@ -30,9 +30,9 @@ jobs:
     name: tdesign-vue-next
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
 
       - name: test
         uses: ./actions/upgrade-deps
diff --git a/actions/check-email/action.yml b/actions/check-email/action.yml
index 3ae61cd..4fa98ce 100644
--- a/actions/check-email/action.yml
+++ b/actions/check-email/action.yml
@@ -14,7 +14,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
     # 检查仓库当前检出的最新提交（作者/提交者邮箱）
     - name: check_github_primary_email
@@ -48,7 +48,7 @@ runs:
 
     # 检出 PR 源分支（如果存在），以便检查 PR 里的最新提交
     - name: Checkout PR head
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         ref: ${{ github.event.pull_request.head.sha }}