chore(deps): bump actions/checkout from 3 to 5

.github/workflows/benchmark.yaml

@@ -14,7 +14,7 @@ jobs:
     name: Performance regression check
     runs-on: oracle-vm-8cpu-32gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/branch-cov.yaml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     name: coverage
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/build.yaml

@@ -25,7 +25,7 @@ jobs:
         arch: [amd64, arm64]
     steps:
       - name: Check out source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Install go
         uses: actions/setup-go@v5
         with:

.github/workflows/cloc.yaml

@@ -23,7 +23,7 @@ jobs:
           cache: false
           go-version: 1.23.x
       - name: Check out source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Install dependencies
         run: |
           cd $GITHUB_WORKSPACE

.github/workflows/cluster.yaml

@@ -16,7 +16,7 @@ jobs:
     name: Stateless zot with minio and boltdb
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -271,7 +271,7 @@ jobs:
     name: Stateless zot with minio and redis
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/codeql-analysis.yml

@@ -43,7 +43,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Install go
       uses: actions/setup-go@v5

.github/workflows/commit-msg.yaml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Check Commit Type
         uses: gsactions/commit-message-checker@v2
         with:

.github/workflows/compare-binary-size.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     name: compare-with-main
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/dco.yaml

@@ -10,7 +10,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Set up Python 3.x
       uses: actions/setup-python@v5
       with:

.github/workflows/ecosystem-tools.yaml

@@ -16,7 +16,7 @@ jobs:
     name: Check client tools
     runs-on: ubuntu-latest-16-cores
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/gc-stress-test.yaml

@@ -16,7 +16,7 @@ jobs:
     name: GC(with referrers) on filesystem with short interval
     runs-on: oracle-vm-8cpu-32gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -55,7 +55,7 @@ jobs:
     name: GC(without referrers) on filesystem with short interval
     runs-on: oracle-vm-8cpu-32gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -94,7 +94,7 @@ jobs:
     name: GC(with referrers) on S3(minio) with short interval
     runs-on: oracle-vm-8cpu-32gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -178,7 +178,7 @@ jobs:
     name: GC(without referrers) on S3(minio) with short interval
     runs-on: oracle-vm-8cpu-32gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/golangci-lint.yaml

@@ -19,7 +19,7 @@ jobs:
         with:
           cache: false
           go-version: '1.23'
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run linter with GH action
         uses: golangci/golangci-lint-action@v8
         with:

.github/workflows/gqlgen.yaml

@@ -21,7 +21,7 @@ jobs:
     name: Check GQL generation
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -40,7 +40,7 @@ jobs:
     name: Check GQL schema follows best practices
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install dependencies
         run: |
           cd $GITHUB_WORKSPACE

.github/workflows/license.yaml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     name: License Check
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/nightly.yaml

@@ -18,7 +18,7 @@ jobs:
     name: Dedupe/restore blobs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           go-version: 1.23.x
@@ -69,7 +69,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           go-version: 1.23.x
@@ -86,7 +86,7 @@ jobs:
     name: GC(with referrers) on S3(localstack) with short interval
     runs-on: oracle-vm-16cpu-64gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -123,7 +123,7 @@ jobs:
     name: GC(without referrers) on S3(localstack) with short interval
     runs-on: oracle-vm-16cpu-64gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -160,9 +160,9 @@ jobs:
     name: Build docker image (for users still using Docker environments)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Check out source code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - uses: ./.github/actions/clean-runner
       - name: Build image
         run: |
@@ -172,7 +172,7 @@ jobs:
     name: Prometheus setup
     runs-on: oracle-vm-8cpu-32gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           go-version: 1.23.x
@@ -203,7 +203,7 @@ jobs:
     name: s3+dynamodb scale-out
     runs-on: oracle-vm-16cpu-64gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -289,7 +289,7 @@ jobs:
     name: s3+redis scale-out
     runs-on: oracle-vm-16cpu-64gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/oci-conformance-action.yaml

@@ -26,15 +26,15 @@ jobs:
         cache: false
         go-version: 1.23.x
     - name: Checkout this PR
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
     - name: Start zot server
       run: |
           cd $GITHUB_WORKSPACE
           make binary
           RUNNER_TRACKING_ID="" && ./bin/zot-linux-amd64 serve examples/config-conformance.json &
           IP=`hostname -I | awk '{print $1}'`
           echo "SERVER_URL=http://${IP}:8080" >> $GITHUB_ENV
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         repository: opencontainers/distribution-spec
         ref: main

.github/workflows/publish.yaml

@@ -27,7 +27,7 @@ jobs:
             echo "BASE_IMAGE=gcr.io/distroless/base-debian12:latest-${ARCH}" >> "$GITHUB_ENV"
           fi
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Log in to GitHub Docker Registry
         uses: docker/login-action@v3
         with:
@@ -112,7 +112,7 @@ jobs:
         image: [zot, zot-minimal, zxp, zb]
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Log in to GitHub Docker Registry
         uses: docker/login-action@v3
         with:
@@ -303,13 +303,13 @@ jobs:
       packages: write
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: main
           fetch-depth: '0'
 
       - name: Checkout project-zot/helm-charts
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: project-zot/helm-charts
           ref: main

.github/workflows/scorecards.yaml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v4 # v3.0.0
+        uses: actions/checkout@v5 # v3.0.0
         with:
           persist-credentials: false
 

.github/workflows/sync-3rdparty-images.yaml

@@ -40,7 +40,7 @@ jobs:
       packages: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           sparse-checkout: |
             Makefile

.github/workflows/test.yaml

@@ -16,7 +16,7 @@ jobs:
     name: Running zot without extensions tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install go
         uses: actions/setup-go@v5
         with:
@@ -56,7 +56,7 @@ jobs:
     name: Run zot with extensions tests
     runs-on: oracle-vm-16cpu-64gb-x86-64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -95,7 +95,7 @@ jobs:
     name: Running privileged tests on Linux
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false
@@ -129,7 +129,7 @@ jobs:
     if: always()
     needs: [test-run-minimal,test-run-extensions,test-run-devmode]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/tls.yaml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     name: TLS check
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           cache: false

.github/workflows/verify-config.yaml

@@ -19,7 +19,7 @@ jobs:
     name: Verify Config Files
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install go
         uses: actions/setup-go@v5
         with:

.github/workflows/web-scan.yaml

@@ -27,7 +27,7 @@ jobs:
           cache: false
           go-version: 1.23.x
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Build zot
         run: |
           echo "Building $FLAVOR"