From dddd7cad9459c6f8e1a4a6ae86cc926b1bd3ffbf Mon Sep 17 00:00:00 2001
From: Mike Odnis <airwolf635@gmail.com>
Date: Tue, 22 Sep 2026 05:58:37 -0400
Subject: [PATCH] ci(api-docs/rust,cpp): bump the last two stale template pins
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The rust and cpp api-docs templates still pinned actions/checkout v6.0.2
and peter-evans/create-pull-request v7.0.8. Their consumers (crates,
vcpkg) have been on v7.0.1 and v8.1.1 since Dependabot bumped them in
June and July. sync-templates.sh does a wholesale `cp` of the template
over the consumer's workflow, so a sync today would have walked both
repos back a major on both actions.

The templates live in automation/source-repo-templates/, outside
.github/workflows/ — the only path Dependabot's github-actions ecosystem
scans — so they get no bump PRs while consumers drift forward weekly.

Pins only. Diffed against both consumers' live workflows first: the pin
lines were the sole divergence, so there was no downstream-only logic to
rescue, unlike the npm and pypi cache-poisoning mitigations recovered in
PRs 134 and 135. Both templates are now byte-identical to the file each
consumer runs.
---
 automation/source-repo-templates/api-docs.cpp.yml  | 6 +++---
 automation/source-repo-templates/api-docs.rust.yml | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/automation/source-repo-templates/api-docs.cpp.yml b/automation/source-repo-templates/api-docs.cpp.yml
index 0bda8168..24eaa702 100644
--- a/automation/source-repo-templates/api-docs.cpp.yml
+++ b/automation/source-repo-templates/api-docs.cpp.yml
@@ -66,7 +66,7 @@ jobs:
           } >> "$GITHUB_ENV"
 
       - name: Checkout source repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ inputs.ref || github.ref }}
           persist-credentials: false
@@ -346,7 +346,7 @@ jobs:
           rm _pages.txt
 
       - name: Checkout docs repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: resq-software/docs
           path: docs-checkout
@@ -420,7 +420,7 @@ jobs:
           PYINNER
 
       - name: Open PR in docs repo
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           path: docs-checkout
           token: ${{ secrets.DOCS_REPO_PR_TOKEN }}
diff --git a/automation/source-repo-templates/api-docs.rust.yml b/automation/source-repo-templates/api-docs.rust.yml
index e1b772be..4e98d337 100644
--- a/automation/source-repo-templates/api-docs.rust.yml
+++ b/automation/source-repo-templates/api-docs.rust.yml
@@ -63,7 +63,7 @@ jobs:
           } >> "$GITHUB_ENV"
 
       - name: Checkout source repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ inputs.ref || github.ref }}
           persist-credentials: false
@@ -600,7 +600,7 @@ jobs:
           rm _pages.txt
 
       - name: Checkout docs repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: resq-software/docs
           path: docs-checkout
@@ -732,7 +732,7 @@ jobs:
           PYINNER
 
       - name: Open PR in docs repo
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           path: docs-checkout
           token: ${{ secrets.DOCS_REPO_PR_TOKEN }}