From 8e5db484ec1a574b5afc551698cb80d8083b3b23 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 18 Jun 2026 16:04:19 +0000
Subject: [PATCH 1/3] Bump actions/checkout from 6 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/builder.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/builder.yaml b/.github/workflows/builder.yaml
index 40e5ff87f..b5f201db4 100644
--- a/.github/workflows/builder.yaml
+++ b/.github/workflows/builder.yaml
@@ -40,7 +40,7 @@ jobs:
           large-packages: false
           docker-images: false
           swap-storage: true
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: refs/pull/${{ github.event.pull_request.number }}/merge
       - name: Set up Java

From e0ff13ba5ecf69061730d7df9f6a2f1637fe18f2 Mon Sep 17 00:00:00 2001
From: Jack Green <jack.green@hazelcast.com>
Date: Mon, 31 Aug 2026 19:06:58 +0100
Subject: [PATCH 2/3] Allow unsafe PR checkout in builder workflow

---
 .github/workflows/builder.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/builder.yaml b/.github/workflows/builder.yaml
index b5f201db4..626be087f 100644
--- a/.github/workflows/builder.yaml
+++ b/.github/workflows/builder.yaml
@@ -43,6 +43,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           ref: refs/pull/${{ github.event.pull_request.number }}/merge
+          allow-unsafe-pr-checkout: true
       - name: Set up Java
         uses: actions/setup-java@v5
         with:

From affaf56cb219cb26e0a2230b989d44b5833042bd Mon Sep 17 00:00:00 2001
From: Jack Green <jack.green@hazelcast.com>
Date: Tue, 1 Sep 2026 09:19:32 +0100
Subject: [PATCH 3/3] Add branches filter to pull_request_target event

---
 .github/workflows/builder.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/builder.yaml b/.github/workflows/builder.yaml
index 626be087f..023f42248 100644
--- a/.github/workflows/builder.yaml
+++ b/.github/workflows/builder.yaml
@@ -2,6 +2,8 @@ name: Builder
 
 on:
   pull_request_target:
+    branches:
+      - master
 
 jobs:
   check_for_membership: