chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 in /.github/workflows

.github/workflows/broadcast-files.yaml

@@ -37,7 +37,7 @@ jobs:
       config: ${{ steps.setup_matrix.outputs.config }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
         with:
           persist-credentials: false
 
@@ -103,7 +103,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
         with:
           persist-credentials: false
 

.github/workflows/link-checker.yaml

@@ -11,7 +11,7 @@ jobs:
   linkChecker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
         with:
            persist-credentials: false
 

.github/workflows/ossf-scorecard.yaml

@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 

.github/workflows/pr-assigner.yml

@@ -12,7 +12,7 @@ jobs:
   pr-auto-assign:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
       with:
         persist-credentials: false
 

.github/workflows/pr-cleaner.yaml

@@ -44,7 +44,7 @@ jobs:
     steps:
       # Step 1: Checkout the repository
       - name: Checkout Repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 

.github/workflows/pr-conventional-commits.yaml

@@ -16,7 +16,7 @@ jobs:
     name: Conventional Commits
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
         with:
           persist-credentials: false
 

.github/workflows/super-linter.yaml

@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           # Full git history is needed to get a proper list of changed files within `super-linter`
           fetch-depth: 0
@@ -48,7 +48,7 @@ jobs:
           fi
 
       - name: Lint Code Base
-        uses: super-linter/super-linter@9e863354e3ff62e0727d37183162c4a88873df41 #v8.6.0
+        uses: super-linter/super-linter/slim@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           VALIDATE_ALL_CODEBASE: ${{ inputs.full_scan || false }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/topics.yaml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           persist-credentials: false
 

workflow-templates/dev-docker-build-multiple-images.yml

@@ -27,100 +27,132 @@ on:
         description: "Symbol to replace in tags"
   push:
     branches:
-    - '**'
+      - '**'
     paths-ignore:
-    - '.github/**'
-    - 'docs/**'
-    - 'CODE-OF-CONDUCT.md'
-    - 'CONTRIBUTING.md'
-    - 'LICENSE'
-    - 'README.md'
-    - 'SECURITY.md'
+      - '.github/**'
+      - 'docs/**'
+      - 'CODE-OF-CONDUCT.md'
+      - 'CONTRIBUTING.md'
+      - 'LICENSE'
+      - 'README.md'
+      - 'SECURITY.md'
   pull_request:
     branches:
-    - '**'
+      - '**'
     paths-ignore:
-    - '.github/**'
-    - 'docs/**'
-    - 'CODE-OF-CONDUCT.md'
-    - 'CONTRIBUTING.md'
-    - 'LICENSE'
-    - 'README.md'
-    - 'SECURITY.md'
+      - '.github/**'
+      - 'docs/**'
+      - 'CODE-OF-CONDUCT.md'
+      - 'CONTRIBUTING.md'
+      - 'LICENSE'
+      - 'README.md'
+      - 'SECURITY.md'
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow_ref }}-${{ github.event_name }}-${{ github.ref_type == 'branch' && github.ref_name || github.sha }}
+  cancel-in-progress: false
+
 env:
   CONFIG_FILE: '.qubership/docker.cfg'
+  DRY_RUN: >-
+    ${{
+      inputs.dry-run ||
+      github.event.sender.type == 'Bot' ||
+      github.triggering_actor != github.actor ||
+      (github.event_name == 'pull_request' &&
+        (github.event.pull_request.head.repo.full_name != github.repository ||
+          github.event.pull_request.user.type == 'Bot'))
+    }}
 
 jobs:
   load-config:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     permissions:
-      packages: read
+      contents: read
     outputs:
+      dry-run: ${{ steps.policy.outputs.dry-run }}
       packages: ${{ steps.config.outputs.config }}
+      tags: ${{ steps.metadata.outputs.result }}
     steps:
+      - name: "Export publish policy"
+        id: policy
+        env:
+          VALUE: ${{ env.DRY_RUN }}
+        run: printf 'dry-run=%s\n' "$VALUE" >> "$GITHUB_OUTPUT"
+
       - name: Checkout repository
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
       - name: Get Configuration File
-        uses: netcracker/qubership-workflow-hub/actions/docker-config-resolver@cabbb90e9471163cfac84bd50ff0296b2803b44c #v2.3.0
+        uses: netcracker/qubership-workflow-hub/actions/docker-config-resolver@cabbb90e9471163cfac84bd50ff0296b2803b44c # v2.3.0
         id: config
         with:
           file-path: "${{ env.CONFIG_FILE }}"
 
+      - name: "Create name"
+        uses: netcracker/qubership-workflow-hub/actions/metadata-action@cabbb90e9471163cfac84bd50ff0296b2803b44c # v2.3.0
+        id: metadata
+        with:
+          default-template: "{{ref-name}}"
+          extra-tags: ${{ inputs.tags || '' }}
+          replace-symbol: ${{ inputs.replace-symbol || '_' }}
+
+      - name: "Summary step"
+        env:
+          METADATA: ${{ steps.metadata.outputs.result }}
+          TAGS: ${{ steps.metadata.outputs.result }}
+        run: |
+          printf '**Metadata:** %s\n' "$METADATA" >> "$GITHUB_STEP_SUMMARY"
+          printf '**Tags:** %s\n' "$TAGS" >> "$GITHUB_STEP_SUMMARY"
+
   docker-build:
-    name: "Build and Publish Docker Image"
+    name: "Docker Image Dry Run"
+    if: needs.load-config.outputs.dry-run == 'true'
     needs: load-config
     permissions:
-      packages: write
       contents: read
     runs-on: ubuntu-latest
+    timeout-minutes: 60
     strategy:
       fail-fast: true
       matrix:
         component: ${{ fromJson(needs.load-config.outputs.packages) }}
     steps:
-      - name: "Checkout code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-        with:
-          persist-credentials: false
-
-      - name: "Create name"
-        uses: netcracker/qubership-workflow-hub/actions/metadata-action@cabbb90e9471163cfac84bd50ff0296b2803b44c # v2.3.0
-        id: metadata
+      - name: "Build Docker Image"
+        uses: netcracker/qubership-workflow-hub/actions/docker-action@cabbb90e9471163cfac84bd50ff0296b2803b44c # v2.3.0
         with:
-          default-template: "{{ref-name}}"
-          extra-tags: ${{ github.event.inputs.tags || '' }}
-          replace-symbol: ${{ github.event.inputs.replace-symbol || '_'}}
-
-      - name: "Prepare tags"
-        id: prepare_tags
-        run: |
-          BASE_TAG="${{ steps.metadata.outputs.result }}"
-          EXTRA_TAG="${{ github.event.inputs.tags }}"
-          if [ -n "$EXTRA_TAG" ]; then
-            TAGS="${BASE_TAG}, ${EXTRA_TAG}"
-          else
-            TAGS="${BASE_TAG}"
-          fi
-          echo "tags=${TAGS}" >> $GITHUB_OUTPUT
-
-      - name: "Summary step"
-        run: |
-          echo "**Metadata:** ${{ steps.metadata.outputs.result }}" >> $GITHUB_STEP_SUMMARY
-          echo "**Tags:** ${{ steps.prepare_tags.outputs.tags }}" >> $GITHUB_STEP_SUMMARY
+          component: ${{ toJson(matrix.component) }}
+          platforms: ${{ matrix.component.platforms }}
+          tags: ${{ needs.load-config.outputs.tags }}
+          dry-run: "true"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+  docker-publish:
+    name: "Docker Image Publish"
+    if: needs.load-config.outputs.dry-run == 'false' && github.triggering_actor == github.actor
+    needs: load-config
+    permissions:
+      contents: read
+      packages: write
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    strategy:
+      fail-fast: true
+      matrix:
+        component: ${{ fromJson(needs.load-config.outputs.packages) }}
+    steps:
       - name: "Build and Publish Docker Image"
-        uses: netcracker/qubership-workflow-hub/actions/docker-action@cabbb90e9471163cfac84bd50ff0296b2803b44c #v2.3.0
+        uses: netcracker/qubership-workflow-hub/actions/docker-action@cabbb90e9471163cfac84bd50ff0296b2803b44c # v2.3.0
         with:
           component: ${{ toJson(matrix.component) }}
           platforms: ${{ matrix.component.platforms }}
-          checkout: "false"
-          tags: ${{ steps.prepare_tags.outputs.tags }}
-          dry-run: ${{ github.event.inputs.dry-run || 'false' }}
+          tags: ${{ needs.load-config.outputs.tags }}
+          dry-run: "false"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}