chore: bump actions, remove setup-sandbox

.github/workflows/add-on-disable-checkout-test.yml

@@ -29,10 +29,10 @@ jobs:
 
     steps:
       - name: Clone current repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: ${{ env.ADD_ON }}
           ref: ${{ env.ADD_ON_REF }}

.github/workflows/add-ons-test.yml

@@ -55,7 +55,7 @@ jobs:
 
     steps:
       - name: Clone current repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Retrieve last tag of add-on
         id: last_tag

.github/workflows/doc-links.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: sources
 

.github/workflows/release.yml

@@ -47,7 +47,7 @@ jobs:
           echo "major_tag=$(echo ${{ steps.set-version-number.outputs.version_number }} | cut -d. -f1)" >> $GITHUB_OUTPUT
 
       - name: Clone sources
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Check version consistency in CHANGELOG and README
         run: |
@@ -134,7 +134,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

CHANGELOG.md

@@ -24,6 +24,11 @@ The [public API](https://semver.org/spec/v2.0.0.html#spec-item-1) of this projec
 
 - Install `ddev_version: HEAD` by downloading the latest `main` build with `ddev utility download-ddev` instead of building it from source with `brew install --HEAD`, which is much faster. If the download fails, for example when nightly.link is down, the Homebrew source build is used as a fallback ([PR #68](https://github.com/ddev/github-action-add-on-test/pull/68))
 - Download the Docker images with `ddev utility download-images`, falling back to `ddev debug download-images` for DDEV older than v1.24.9 ([PR #68](https://github.com/ddev/github-action-add-on-test/pull/68))
+- Bump `actions/checkout` to v7.0.1 and `Homebrew/actions/setup-homebrew` ([PR #69](https://github.com/ddev/github-action-add-on-test/pull/69))
+
+### Removed
+
+- Remove `setup-sandbox: true` from `Homebrew/actions/setup-homebrew`, the input is gone now that Homebrew's Linux sandbox uses Landlock instead of Bubblewrap ([PR #69](https://github.com/ddev/github-action-add-on-test/pull/69))
 
 ---
 

README.md

@@ -245,7 +245,7 @@ jobs:
 
       - name: Upload artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: artifact-${{ matrix.ddev_version }}
           path: |

action.yaml

@@ -45,9 +45,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: Homebrew/actions/setup-homebrew@54f3c3de99e48b2646ca31230c9b6e9717dac4d4 # https://github.com/Homebrew/actions/commits/main/setup-homebrew/
-      with:
-        setup-sandbox: true
+    - uses: Homebrew/actions/setup-homebrew@23156a3d9674d7f52f74f1a58979ec4d77847166 # https://github.com/Homebrew/actions/commits/main/setup-homebrew/
 
     - name: Environment setup
       shell: bash
@@ -56,7 +54,7 @@ runs:
         brew install bats-core bats-core/bats-core/bats-assert bats-core/bats-core/bats-file bats-core/bats-core/bats-support jq mkcert yq >/dev/null
         mkcert -install
 
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # https://github.com/actions/checkout/commits/v6.0.3/
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/commits/v7.0.1/
       if: inputs.disable_checkout_action == 'false'
       with:
         repository: ${{ inputs.addon_repository }}