From 98be03c2730ee9d1845ed340e04649b4bb4aff3a Mon Sep 17 00:00:00 2001
From: "Rasmus \"Pez\" Wejlgaard" <pez@pez.sh>
Date: Sun, 26 Apr 2026 18:13:38 +0100
Subject: [PATCH] fix: update checkout version to dodge deprecation (#77)

---
 .github/workflows/deploy-on-merge.yml     |  4 ++--
 .github/workflows/deploy.yml              | 10 +++++-----
 .github/workflows/lint-ansible.yml        |  2 +-
 .github/workflows/lint-docker-compose.yml |  2 +-
 .github/workflows/terraform.yml           |  6 +++---
 .github/workflows/validate-caddyfile.yml  |  2 +-
 .github/workflows/validate-terraform.yml  |  2 +-
 7 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/deploy-on-merge.yml b/.github/workflows/deploy-on-merge.yml
index 18d8e03..2f1f680 100644
--- a/.github/workflows/deploy-on-merge.yml
+++ b/.github/workflows/deploy-on-merge.yml
@@ -5,7 +5,7 @@ on:
     branches:
       - main
     paths-ignore:
-      - 'terraform/**'
+      - "terraform/**"
 
 # Requires these repository secrets:
 #   TAILSCALE_CLIENT_ID  — Tailscale OAuth client ID (federated identity)
@@ -40,7 +40,7 @@ jobs:
         host: ${{ fromJson(needs.discover.outputs.hosts) }}
       fail-fast: false
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Tailscale
         uses: tailscale/github-action@v4
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 8f0af31..b9d034c 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -4,15 +4,15 @@ on:
   workflow_dispatch:
     inputs:
       target:
-        description: 'Target host (e.g. helsinki-a, london-b, all)'
+        description: "Target host (e.g. helsinki-a, london-b, all)"
         required: true
         type: string
       playbook:
-        description: 'Ansible playbook to run (e.g. site.yml, update.yml)'
+        description: "Ansible playbook to run (e.g. site.yml, update.yml)"
         required: true
         type: string
       dry_run:
-        description: 'Dry run (--check mode)'
+        description: "Dry run (--check mode)"
         required: false
         type: boolean
         default: true
@@ -30,7 +30,7 @@ jobs:
     outputs:
       hosts: ${{ steps.prepare.outputs.hosts }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Build host matrix
         id: prepare
@@ -48,7 +48,7 @@ jobs:
     needs: prepare
     name: Deploy ${{ inputs.playbook }} → ${{ matrix.host }}
     runs-on: ubuntu-latest
-    environment: production  # requires manual approval in repo settings
+    environment: production # requires manual approval in repo settings
     permissions:
       id-token: write
     strategy:
diff --git a/.github/workflows/lint-ansible.yml b/.github/workflows/lint-ansible.yml
index 28d6810..62dfb26 100644
--- a/.github/workflows/lint-ansible.yml
+++ b/.github/workflows/lint-ansible.yml
@@ -8,7 +8,7 @@ jobs:
     name: ansible-lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Check for Ansible files
         id: check
diff --git a/.github/workflows/lint-docker-compose.yml b/.github/workflows/lint-docker-compose.yml
index f23eab2..7ae874e 100644
--- a/.github/workflows/lint-docker-compose.yml
+++ b/.github/workflows/lint-docker-compose.yml
@@ -8,7 +8,7 @@ jobs:
     name: docker compose config
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Stub missing env files referenced by Compose
         run: |
diff --git a/.github/workflows/terraform.yml b/.github/workflows/terraform.yml
index 1b461c7..2883fdb 100644
--- a/.github/workflows/terraform.yml
+++ b/.github/workflows/terraform.yml
@@ -4,8 +4,8 @@ on:
   push:
     branches: [main]
     paths:
-      - 'terraform/**'
-      - '.github/workflows/terraform.yml'
+      - "terraform/**"
+      - ".github/workflows/terraform.yml"
 
 # Requires these repository secrets:
 #   AGE_SECRET_KEY     — age private key for SOPS decryption
@@ -15,7 +15,7 @@ jobs:
     name: Plan
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install OpenTofu
         uses: opentofu/setup-opentofu@v1
diff --git a/.github/workflows/validate-caddyfile.yml b/.github/workflows/validate-caddyfile.yml
index 5ba8f6b..f849b9d 100644
--- a/.github/workflows/validate-caddyfile.yml
+++ b/.github/workflows/validate-caddyfile.yml
@@ -8,7 +8,7 @@ jobs:
     name: caddy validate
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Check for Caddyfile
         id: check
diff --git a/.github/workflows/validate-terraform.yml b/.github/workflows/validate-terraform.yml
index a0c9450..4547e4c 100644
--- a/.github/workflows/validate-terraform.yml
+++ b/.github/workflows/validate-terraform.yml
@@ -8,7 +8,7 @@ jobs:
     name: tofu validate
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install OpenTofu
         uses: opentofu/setup-opentofu@v1