build(deps): bump actions/checkout from 4.3.1 to 6.0.3 - #8
build(deps): bump actions/checkout from 4.3.1 to 6.0.3#8dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
Up to standards ✅🟢 Issues
|
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull Request Overview
This PR updates the actions/checkout dependency to version 6.0.3 across CI, CodeQL, and Scorecard workflows. The upgrade is intended to support Node.js 24 and improve credential persistence handling.
Codacy analysis indicates the changes are up to standards with no new quality issues or complexity increases. However, the upgrade to the v6 series introduces a dependency on GitHub Actions Runner version v2.329.0 or higher for specific scenarios. While GitHub-hosted runners are updated automatically, compatibility for any self-hosted runners should be verified prior to merging.
About this PR
- The v6 series for actions/checkout requires a minimum GitHub Actions Runner version of v2.329.0 for Docker container action scenarios due to changes in credential persistence. Ensure that any self-hosted runners used by these workflows are updated to meet this requirement.
Test suggestions
- Verify successful repository checkout in the main CI workflow using ubuntu-latest.
- Verify successful repository checkout within the CodeQL analysis matrix.
- Verify checkout with 'persist-credentials: false' configuration in the OpenSSF Scorecard workflow.
TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@34e1148...df4cb1c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
14c43c2 to
6a9e89e
Compare
|
Superseded by #28. |
Bumps actions/checkout from 4.3.1 to 6.0.3.
Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
df4cb1cUpdate changelog for v6.0.3 (#2446)1cce339Fix checkout init for SHA-256 repositories (#2439)900f221fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)0c366fdUpdate changelog (#2357)de0fac2Fix tag handling: preserve annotations and explicit fetch-tags (#2356)064fe7fAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...8e8c483Clarify v6 README (#2328)033fa0dAdd worktree support for persist-credentials includeIf (#2327)c2d88d3Update all references from v5 and v4 to v6 (#2314)1af3b93update readme/changelog for v6 (#2311)