From ff89b4b3889f5b02ec3ebef871fee45868fef8cb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 31 Mar 2026 17:12:08 +0000
Subject: [PATCH] chore(ci): Update GitHub Actions

---
 .github/workflows/enforce-sha.yaml         |  4 ++--
 .github/workflows/run_tests.yml            |  4 ++--
 .github/workflows/update_channel_v0_v1.yml | 18 +++++++++---------
 3 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/enforce-sha.yaml b/.github/workflows/enforce-sha.yaml
index 346d99a3c..1e1c8d0c9 100644
--- a/.github/workflows/enforce-sha.yaml
+++ b/.github/workflows/enforce-sha.yaml
@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Ensure SHA pinned actions
-        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@9e9574ef04ea69da568d6249bd69539ccc704e74 # v4
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5
         with:
           allowlist: |
             prefix-dev/
diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
index 1a3002705..fa1bb8067 100644
--- a/.github/workflows/run_tests.yml
+++ b/.github/workflows/run_tests.yml
@@ -9,7 +9,7 @@ jobs:
   run_tests:
     runs-on: ubuntu-latest
     steps:
-        - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
         - uses: prefix-dev/setup-pixi@v0.9.3
           with:
@@ -23,7 +23,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Set up pixi
         uses: prefix-dev/setup-pixi@v0.9.3
         with:
diff --git a/.github/workflows/update_channel_v0_v1.yml b/.github/workflows/update_channel_v0_v1.yml
index 6fa3fa160..46c8b0a91 100644
--- a/.github/workflows/update_channel_v0_v1.yml
+++ b/.github/workflows/update_channel_v0_v1.yml
@@ -50,7 +50,7 @@ jobs:
     outputs:
       string_list: ${{ steps.generate.outputs.string_list }}
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Generate combination of missing subdirs and letters
@@ -72,7 +72,7 @@ jobs:
           ANACONDA_TOKEN: ${{ inputs.needs_anaconda_token && secrets.ANACONDA_TOKEN || '' }}
 
       - name: Upload requested index.json
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: index
           path: output_index
@@ -86,11 +86,11 @@ jobs:
         subdirs: ${{fromJson(needs.generate_hash_letters.outputs.string_list)}}
 
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Get partial index artifacts
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: index
           path: output_index
@@ -105,7 +105,7 @@ jobs:
           ANACONDA_TOKEN: ${{ inputs.needs_anaconda_token && secrets.ANACONDA_TOKEN || '' }}
 
       - name: Upload partial index
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: partial_index_${{ matrix.subdirs }}
           path: output
@@ -115,11 +115,11 @@ jobs:
     needs: updater_of_records
     if: needs.updater_of_records.result == 'success'
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Get partial index artifacts
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           merge-multiple: true
           path: output
@@ -141,7 +141,7 @@ jobs:
       always() &&
       (inputs.force_v1_generation == true || needs.updater_of_index.result == 'success')
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Generate and upload v1 mappings (relations table + PyPI lookups)
@@ -168,7 +168,7 @@ jobs:
       (needs.update_v1_mappings.result == 'success' || needs.update_v1_mappings.result == 'skipped')
     steps:
       - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: prefix-dev/setup-pixi@v0.9.3
 
       - name: Update legacy mapping (if needed)