Skip to content

Bump actions/checkout from 5 to 6 in /.github/workflows#783

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/actions/checkout-6
Closed

Bump actions/checkout from 5 to 6 in /.github/workflows#783
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/actions/checkout-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 21, 2025

Copy link
Copy Markdown
Contributor

Bumps actions/checkout from 5 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 21, 2025
@sonarqubecloud

Copy link
Copy Markdown

@dgee2

dgee2 commented Mar 28, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/dot-github/workflows/actions/checkout-6 branch from 93e911c to 871cf6a Compare March 28, 2026 13:38
@sonarqubecloud

Copy link
Copy Markdown

dgee2 added a commit that referenced this pull request Mar 28, 2026
Combines dependabot PRs #782, #783, #807, #808 into a single update.

- actions/checkout v6: credential storage moved to RUNNER_TEMP (security improvement)
- actions/cache v5: uses Node.js 24 runtime and new cache service APIs

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@dgee2

dgee2 commented Mar 28, 2026

Copy link
Copy Markdown
Owner

Superseded by #929 which combines all GitHub Actions dependabot updates into a single PR.

@dgee2 dgee2 closed this Mar 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/dot-github/workflows/actions/checkout-6 branch March 28, 2026 19:25
dgee2 added a commit that referenced this pull request Mar 28, 2026
* Bump actions/checkout v5→v6 and actions/cache v4→v5

Combines dependabot PRs #782, #783, #807, #808 into a single update.

- actions/checkout v6: credential storage moved to RUNNER_TEMP (security improvement)
- actions/cache v5: uses Node.js 24 runtime and new cache service APIs

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Fix pnpm cache: use setup-node built-in caching

Replace manual actions/cache step (which used non-existent ~/.pnpm-store path)
with actions/setup-node's built-in cache: 'pnpm' which auto-detects the
correct pnpm store directory.

Reorder steps so corepack enables pnpm before setup-node runs, allowing
setup-node to discover the pnpm store path for caching.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant