Skip to content

fix: expand merge commit SHA regex and add SHA-256 test cases - #2414

Merged
yaananth merged 3 commits into
actions:mainfrom
yaananth:sha256/p2-ref-helper-and-tests
May 4, 2026
Merged

fix: expand merge commit SHA regex and add SHA-256 test cases#2414
yaananth merged 3 commits into
actions:mainfrom
yaananth:sha256/p2-ref-helper-and-tests

Conversation

@yaananth

@yaananth yaananth commented Apr 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Fixes https://github.com/github/actions-runtime/issues/5476
Fixes https://github.com/github/actions-runtime/issues/5481
Fixes https://github.com/github/actions-runtime/issues/5482

Summary

  • expand merge commit SHA parsing in ref-helper to accept 40- and 64-character SHAs
  • add SHA-256 coverage in input-helper and ref-helper tests
  • include the coupled input-helper SHA regex update required for the new test coverage

Automated by project-board-agents-plugin via /project-board-agents:lead
Board: https://github.com/orgs/github/projects/24272/views/1
Items: [P2] Fix merge commit SHA regex + [P2] Add SHA-256 test cases
Run: sha256-p2-checkout-00050

@yaananth
fix: expand merge commit SHA regex and add SHA-256 test cases
4d90d5f 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@salmanmkc salmanmkc mentioned this pull request Apr 15, 2026
Closed
salmanmkc
salmanmkc reviewed Apr 15, 2026
View reviewed changes
Comment thread src/ref-helper.ts Outdated
yaananth and others added 2 commits April 16, 2026 15:27
@yaananth
test: add checkCommitInfo SHA coverage
4f1e728 
Add checkCommitInfo tests for SHA-1 and SHA-256 merge messages and reject invalid 50-character hex merge heads.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@yaananth
style: fix Prettier formatting in test and source files
71f7057 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@yaananth
yaananth marked this pull request as ready for review April 28, 2026 17:37
Copilot AI review requested due to automatic review settings April 28, 2026 17:37
Copilot AI reviewed Apr 28, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Expands SHA parsing to support repositories using SHA-256 (64-hex) commit IDs, and adds test coverage to ensure SHA-256 refs and merge commit messages are handled correctly.

Changes:

  • Update input-helper to treat 64-hex refs as explicit SHAs (set commit, clear ref).
  • Update ref-helper merge commit message parsing to accept both 40- and 64-hex SHAs.
  • Add Jest coverage for SHA-256 inputs and SHA-256 merge commit message parsing (including a negative case).
Show a summary per file
File Description
src/ref-helper.ts Expands merge commit message SHA regex to accept 40- or 64-char hex SHAs.
src/input-helper.ts Expands explicit-SHA detection to accept 40- or 64-char hex SHAs.
dist/index.js Updates bundled output to reflect the new SHA regex behavior.
test/ref-helper.test.ts Adds SHA-256 checkout info test and new checkCommitInfo SHA-1/SHA-256/invalid-merge coverage.
test/input-helper.test.ts Adds SHA-256 explicit SHA input test ensuring ref is cleared and commit is set.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 4/5 changed files
  • Comments generated: 0

@yaananth
yaananth merged commit 900f221 into actions:main May 4, 2026
16 checks passed
talcoh2x added a commit to Elmnt-Internal/checkout that referenced this pull request May 20, 2026
@talcoh2x @yasonk
@lucacome @dependabot @joshmgross @orhantoy @Jcambass @jww3 @easyt @motss @mouismail Ben Wells @nebuk89 @TingluoHuang @salmanmkc @ericsciple @yaananth
Update README and bump package dependencies for releases (#1)
a215b85 
* Provide explanation for where user email came from (actions#1869)

* Provide explanation for where user email came from

* bringing back the newline

* Add Ref and Commit outputs (actions#1180)

Signed-off-by: Luca Comellini <luca.com@gmail.com>

* Bump the minor-npm-dependencies group across 1 directory with 4 updates (actions#1872)

* Bump the minor-npm-dependencies group across 1 directory with 4 updates

Bumps the minor-npm-dependencies group with 4 updates in the / directory: [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest), [prettier](https://github.com/prettier/prettier), [ts-jest](https://github.com/kulshekhar/ts-jest) and [typescript](https://github.com/Microsoft/TypeScript).


Updates `eslint-plugin-jest` from 28.5.0 to 28.8.2
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v28.5.0...v28.8.2)

Updates `prettier` from 3.2.5 to 3.3.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.2.5...3.3.3)

Updates `ts-jest` from 29.1.2 to 29.2.5
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.1.2...v29.2.5)

Updates `typescript` from 5.4.5 to 5.5.4
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.4.5...v5.5.4)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* `npm run build`

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Josh Gross <joshmgross@github.com>

* Bump braces from 3.0.2 to 3.0.3 (actions#1777)

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Prepare 4.2.0 release (actions#1878)

* Bump package version to 4.1.8

* Add v4.1.8 changelog

* Bump version to `4.2.0`

* Check out other refs/* by commit if provided, fall back to ref (actions#1924)

* Add workflow file for publishing releases to immutable action package (actions#1919)

This workflow file publishes new action releases to the immutable action package of the same name as this repo.

This is part of the Immutable Actions project which is not yet fully released to the public. First party actions like this one are part of our initial testing of this feature.

* Prepare 4.2.1 release (actions#1925)

* `url-helper.ts` now leverages well-known environment variables. (actions#1941)

* `utl-helper.ts` now leverages well-known environment variables.

---------
Co-authored-by: Erez Testiler <easyt@github.com>

* Expand unit test coverage (actions#1946)

* Prepare 4.2.2 Release (actions#1953)

* Prepare 4.2.2 Release

---------

Co-authored-by: Josh Gross <joshmgross@github.com>

* docs: update README.md (actions#1971)

Add a scenario where it is necessary to push a commit to a pull request.

* Update README.md (actions#1977)

* Documentation update - add recommended permissions to Readme (actions#2043)

* Update README.md

* Update README.md

Co-authored-by: Josh Gross <joshmgross@github.com>

---------

Co-authored-by: Josh Gross <joshmgross@github.com>

* Adjust positioning of user email note and permissions heading (actions#2044)

* Update README.md (actions#2194)

* Update CODEOWNERS for actions (actions#2224)

* Update package dependencies (actions#2236)

* package updates

* update dist

* Update license files

* Prepare release v4.3.0 (actions#2237)

* Update actions checkout to use node 24 (actions#2226)

* use node 24

* update other parts to node 24

* bump to major version, audit fix, changelog

* update licenses

* update dist

* update major version

* will do separate pr for v5 and will do a minor version for previous changes

* Prepare v5.0.0 release (actions#2238)

* Update README to include Node.js 24 support details and requirements (actions#2248)

* Update README to include Node.js 24 support details and requirements

* Update

* Persist creds to a separate file (actions#2286)

* v6-beta (actions#2298)

* update readme/changelog for v6 (actions#2311)

* Update all references from v5 and v4 to v6 (actions#2314)

- Updated README.md examples to reference @v6
- Updated all workflow files to use actions/checkout@v6

* Add worktree support for persist-credentials includeIf (actions#2327)

* Clarify v6 README (actions#2328)

* Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (actions#2355)

* Initial plan

* Add orchestration ID support to git user-agent

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Improve tests to verify user-agent content and handle empty sanitized IDs

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Simplify orchestration ID validation to accept any non-empty sanitized value

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Remove test for orchestration ID with only invalid characters

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
Co-authored-by: Tingluo Huang <tingluohuang@github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fix tag handling: preserve annotations and explicit fetch-tags (actions#2356)

This PR fixes several issues with tag handling in the checkout action:

1. fetch-tags: true now works (fixes actions#1471)
   - Tags refspec is now included in getRefSpec() when fetchTags=true
   - Previously tags were only fetched during a separate fetch that was
     overwritten by the main fetch

2. Tag checkout preserves annotations (fixes actions#290)
   - Tags are fetched via refspec (+refs/tags/*:refs/tags/*) instead of
     --tags flag
   - This fetches the actual tag objects, preserving annotations

3. Tag checkout with fetch-tags: true no longer fails (fixes actions#1467)
   - When checking out a tag with fetchTags=true, only the wildcard
     refspec is used (specific tag refspec is redundant)

Changes:
- src/ref-helper.ts: getRefSpec() now accepts fetchTags parameter and
  prepends tags refspec when true
- src/git-command-manager.ts: fetch() simplified to always use --no-tags,
  tags are fetched explicitly via refspec
- src/git-source-provider.ts: passes fetchTags to getRefSpec()
- Added E2E test for fetch-tags option

Related actions#1471, actions#1467, actions#290

* Update changelog (actions#2357)

* fix: expand merge commit SHA regex and add SHA-256 test cases (actions#2414)

* fix: expand merge commit SHA regex and add SHA-256 test cases

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* test: add checkCommitInfo SHA coverage

Add checkCommitInfo tests for SHA-1 and SHA-256 merge messages and reject invalid 50-character hex merge heads.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* style: fix Prettier formatting in test and source files

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Signed-off-by: Luca Comellini <luca.com@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: yasonk <yason@hey.com>
Co-authored-by: Luca Comellini <luca.com@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Josh Gross <joshmgross@github.com>
Co-authored-by: Orhan Toy <orhantoy@github.com>
Co-authored-by: Joel Ambass <Jcambass@users.noreply.github.com>
Co-authored-by: John Wesley Walker III <81404201+jww3@users.noreply.github.com>
Co-authored-by: Erez Testiler <easyt@github.com>
Co-authored-by: The web walker <contact@motss.app>
Co-authored-by: Mohammad Ismail <96207520+mouismail@users.noreply.github.com>
Co-authored-by: Ben Wells <benwells@github.com>
Co-authored-by: Ben De St Paer-Gotch <nebuk89@github.com>
Co-authored-by: Tingluo Huang <tingluohuang@github.com>
Co-authored-by: Salman Chishti <salmanmkc@GitHub.com>
Co-authored-by: eric sciple <ericsciple@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Yashwanth Anantharaju <yaananth@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@yaananth yaananth mentioned this pull request Jun 2, 2026
Merged
@claude claude Bot mentioned this pull request Jun 2, 2026
Merged
@its-saffron its-saffron Bot mentioned this pull request Jun 2, 2026
Merged
1 task
eleboucher pushed a commit to eleboucher/talos-mcp that referenced this pull request Jun 2, 2026
bot-owl @eleboucher
ci(github-action): update action actions/checkout (v6.0.2 → v6.0.3) (#8)
fffd907 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/talos-mcp/pulls/8
eleboucher pushed a commit to eleboucher/apoci that referenced this pull request Jun 2, 2026
bot-owl @eleboucher
ci(github-action): update action actions/checkout (v6.0.2 → v6.0.3) (…
57a9791 
…#59)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/apoci/pulls/59
eleboucher pushed a commit to eleboucher/runner-k8s-plugin that referenced this pull request Jun 2, 2026
bot-owl @eleboucher
ci(github-action): update action actions/checkout (v6.0.2 → v6.0.3) (…
19dcc94 
…#60)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/runner-k8s-plugin/pulls/60
bjw-s pushed a commit to bjw-s-labs/action-actionlint that referenced this pull request Jun 2, 2026
renovate[bot] @bjw-s
ci(github-action): update actions/checkout ( v6.0.2 ➔ v6.0.3 ) (#3)
f46948c 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Amsterdam)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDUuMyIsInVwZGF0ZWRJblZlciI6IjQzLjIwNS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwicmVub3ZhdGUvZ2l0aHViLXJlbGVhc2UiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.bjw-s.dev/bjw-s/action-actionlint/pulls/3
doonga pushed a commit to greyrock-labs/home-ops that referenced this pull request Jun 2, 2026
renovate[bot] git.greyrock.io Instance
ci(github-action): update actions/checkout ( v6.0.2 ➔ v6.0.3 ) (#178)
57dd716 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/New_York)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDYuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIwNi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwicmVub3ZhdGUvZ2l0aHViLXJlbGVhc2UiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.greyrock.io/greyrock-labs/home-ops/pulls/178
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jun 2, 2026
@renovate
chore(deps): update actions/checkout action to v6
f6980f6 
##### [\`v6.0.3\`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

- Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414)

---
##### [\`v6.0.2\`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356)

---
##### [\`v6.0.1\`](actions/checkout@v6.0.0...v6.0.1)


---
##### [\`v6.0.0\`](actions/checkout@v5.0.1...v6.0.0)


---
##### [\`v6\`]()
@claude claude Bot mentioned this pull request Jun 3, 2026
Merged
1 task
onap-github pushed a commit to onap/portal-ng-bff that referenced this pull request Jun 3, 2026
@dependabot onap.gh2gerrit
Chore: bump actions/checkout from 6.0.2 to 6.0.3
0bf45eb 
Bumps actions/checkout from 6.0.2 to 6.0.3.
## Release notes

Sourced from actions/checkout's releases.

v6.0.3
What's Changed

Update changelog by @​ericsciple in actions/checkout#2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

@​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.3

Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774

... (truncated)

## Commits

df4cb1c Update changelog for v6.0.3 (#2446)
1cce339 Fix checkout init for SHA-256 repositories (#2439)
900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
0c366fd Update changelog (#2357)
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: Ib3e2359f174f37230d2386c441500eb37e4c95c5
GitHub-PR: #96
GitHub-Hash: 9442dfccd711df1f
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
onap-github pushed a commit to onap/portal-ng that referenced this pull request Jun 3, 2026
@dependabot onap.gh2gerrit
Chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3
9e83553 
Bumps actions/checkout from 6.0.2 to 6.0.3.
## Release notes

Sourced from actions/checkout's releases.

v6.0.3
What's Changed

Update changelog by @​ericsciple in actions/checkout#2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

@​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.3

Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774

... (truncated)

## Commits

df4cb1c Update changelog for v6.0.3 (#2446)
1cce339 Fix checkout init for SHA-256 repositories (#2439)
900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
0c366fd Update changelog (#2357)
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I0de7b562d12e51882bd8759fa5f832830d96b8dd
GitHub-PR: #4
GitHub-Hash: b374d11a891e26a1
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Jun 3, 2026
bot-owl @eleboucher
ci(github-action): update action https://data.forgejo.org/actions/che…
9094a77 
…ckout (v6.0.2 ➔ v6.0.3) (#799)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [https://data.forgejo.org/actions/checkout](https://data.forgejo.org/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (https://data.forgejo.org/actions/checkout)</summary>

### [`v6.0.3`](https://data.forgejo.org/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](https://data.forgejo.org/actions/checkout/compare/v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/799
@github-actions github-actions Bot mentioned this pull request Jun 3, 2026
Merged
1 task
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Jun 3, 2026
bot-owl @eleboucher
ci(github-action): update action actions/checkout (v6.0.2 ➔ v6.0.3) (…
1481954 
…#794)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/794
This was referenced Jun 3, 2026
Merged
Merged
Merged
Merged
mergify Bot added a commit to ArcadeData/arcadedb-deployments that referenced this pull request Jun 16, 2026
@mergify
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 [skip ci]
4aacd6d 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
Release notes

*Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).*

> v6.0.3
> ------
>
> What's Changed
> --------------
>
> * Update changelog by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357)
> * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@​yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414)
> * Fix checkout init for SHA-256 repositories by [`@​yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439)
> * Update changelog for v6.0.3 by [`@​yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446)
>
> New Contributors
> ----------------
>
> * [`@​yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414)
>
> **Full Changelog**: <actions/checkout@v6...v6.0.3>


Changelog

*Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> v6.0.3
> ------
>
> * Fix checkout init for SHA-256 repositories by [`@​yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439)
> * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@​yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414)
>
> v6.0.2
> ------
>
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> v6.0.1
> ------
>
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
>
> v6.0.0
> ------
>
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
>
> v5.0.1
> ------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> v5.0.0
> ------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
>
> v4.3.1
> ------
>
> * Port v6 cleanup to v4 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305)
>
> v4.3.0
> ------
>
> * docs: update README.md by [`@​motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971)
> * Add internal repos for checking out multiple repositories by [`@​mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977)
> * Documentation update - add recommended permissions to Readme by [`@​benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043)
> * Adjust positioning of user email note and permissions heading by [`@​joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044)
> * Update README.md by [`@​nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194)
> * Update CODEOWNERS for actions by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224)
> * Update package dependencies by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236)
>
> v4.2.2
> ------
>
> * `url-helper.ts` now leverages well-known environment variables by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941)
> * Expand unit test coverage for `isGhes` by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946)
>
> v4.2.1
> ------
>
> * Check out other refs/\* by commit if provided, fall back to ref by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924)
>
> v4.2.0
> ------
>
> * Add Ref and Commit outputs by [`@​lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180)
> * Dependency updates by [`@​dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872)
>
> v4.1.7
> ------
>
> * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739)
> * Bump actions/checkout from 3 to 4 by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697)
> * Check out other refs/\* by commit by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774)

... (truncated)


Commits

* [`df4cb1c`](actions/checkout@df4cb1c) Update changelog for v6.0.3 ([#2446](https://redirect.github.com/actions/checkout/issues/2446))
* [`1cce339`](actions/checkout@1cce339) Fix checkout init for SHA-256 repositories ([#2439](https://redirect.github.com/actions/checkout/issues/2439))
* [`900f221`](actions/checkout@900f221) fix: expand merge commit SHA regex and add SHA-256 test cases ([#2414](https://redirect.github.com/actions/checkout/issues/2414))
* [`0c366fd`](actions/checkout@0c366fd) Update changelog ([#2357](https://redirect.github.com/actions/checkout/issues/2357))
* See full diff in [compare view](actions/checkout@de0fac2...df4cb1c)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=6.0.2&new-version=6.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
onap-github pushed a commit to onap/policy-distribution that referenced this pull request Jun 16, 2026
@dependabot onap.gh2gerrit
Bump actions/checkout from 6.0.2 to 6.0.3
3ddf9bf 
## Release notes

Sourced from actions/checkout's releases.

v6.0.3
What's Changed

Update changelog by @​ericsciple in actions/checkout#2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

@​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.3

Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774

... (truncated)

## Commits

df4cb1c Update changelog for v6.0.3 (#2446)
1cce339 Fix checkout init for SHA-256 repositories (#2439)
900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
0c366fd Update changelog (#2357)
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: Ia743dc99ba1b973b3e22f009941d988027ac251e
GitHub-PR: #2
GitHub-Hash: 2687954e254a0be4
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
onap-github pushed a commit to onap/policy-parent that referenced this pull request Jun 16, 2026
@dependabot onap.gh2gerrit
Bump actions/checkout from 6.0.2 to 6.0.3
93c9eaf 
## Release notes

Sourced from actions/checkout's releases.

v6.0.3
What's Changed

Update changelog by @​ericsciple in actions/checkout#2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

@​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.3

Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774

... (truncated)

## Commits

df4cb1c Update changelog for v6.0.3 (#2446)
1cce339 Fix checkout init for SHA-256 repositories (#2439)
900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
0c366fd Update changelog (#2357)
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I3924a3bf47c843776aeb0d8386ede51e7bff1fd8
GitHub-PR: #4
GitHub-Hash: 4a7ce2f7eab37645
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
fbidu added a commit to fbidu/cookie-py that referenced this pull request Jun 16, 2026
@fbidu
chore(template): update dependency actions/checkout to v6 (#87)
2e93205 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | major | `v4` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

[Compare Source](actions/checkout@v6.0.1...v6.0.2)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2356](actions/checkout#2356)

### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601)

[Compare Source](actions/checkout@v6...v6.0.1)

- Add worktree support for persist-credentials includeIf by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2327](actions/checkout#2327)

### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600)

[Compare Source](actions/checkout@v6...v6)

- Persist creds to a separate file by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2286](actions/checkout#2286)
- Update README to include Node.js 24 support details and requirements by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;2248](actions/checkout#2248)

### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v5.0.1...v6)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501)

[Compare Source](actions/checkout@v5...v5.0.1)

- Port v6 cleanup to v5 by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2301](actions/checkout#2301)

### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500)

[Compare Source](actions/checkout@v5...v5)

- Update actions checkout to use node 24 by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;2226](actions/checkout#2226)

### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501)

[Compare Source](actions/checkout@v4.3.1...v5)

- Port v6 cleanup to v5 by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2301](actions/checkout#2301)

### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431)

[Compare Source](actions/checkout@v4.3.0...v4.3.1)

- Port v6 cleanup to v4 by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2305](actions/checkout#2305)

### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430)

[Compare Source](actions/checkout@v4.2.2...v4.3.0)

- docs: update README.md by [@&#8203;motss](https://github.com/motss) in [#&#8203;1971](actions/checkout#1971)
- Add internal repos for checking out multiple repositories by [@&#8203;mouismail](https://github.com/mouismail) in [#&#8203;1977](actions/checkout#1977)
- Documentation update - add recommended permissions to Readme by [@&#8203;benwells](https://github.com/benwells) in [#&#8203;2043](actions/checkout#2043)
- Adjust positioning of user email note and permissions heading by [@&#8203;joshmgross](https://github.com/joshmgross) in [#&#8203;2044](actions/checkout#2044)
- Update README.md by [@&#8203;nebuk89](https://github.com/nebuk89) in [#&#8203;2194](actions/checkout#2194)
- Update CODEOWNERS for actions by [@&#8203;TingluoHuang](https://github.com/TingluoHuang) in [#&#8203;2224](actions/checkout#2224)
- Update package dependencies by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;2236](actions/checkout#2236)

### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422)

[Compare Source](actions/checkout@v4.2.1...v4.2.2)

- `url-helper.ts` now leverages well-known environment variables by [@&#8203;jww3](https://github.com/jww3) in [#&#8203;1941](actions/checkout#1941)
- Expand unit test coverage for `isGhes` by [@&#8203;jww3](https://github.com/jww3) in [#&#8203;1946](actions/checkout#1946)

### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421)

[Compare Source](actions/checkout@v4.2.0...v4.2.1)

- Check out other refs/\* by commit if provided, fall back to ref by [@&#8203;orhantoy](https://github.com/orhantoy) in [#&#8203;1924](actions/checkout#1924)

### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420)

[Compare Source](actions/checkout@v4.1.7...v4.2.0)

- Add Ref and Commit outputs by [@&#8203;lucacome](https://github.com/lucacome) in [#&#8203;1180](actions/checkout#1180)
- Dependency updates by [@&#8203;dependabot-](https://github.com/dependabot-) [#&#8203;1777](actions/checkout#1777), [#&#8203;1872](actions/checkout#1872)

### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417)

[Compare Source](actions/checkout@v4.1.6...v4.1.7)

- Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1739](actions/checkout#1739)
- Bump actions/checkout from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1697](actions/checkout#1697)
- Check out other refs/\* by commit by [@&#8203;orhantoy](https://github.com/orhantoy) in [#&#8203;1774](actions/checkout#1774)
- Pin actions/checkout's own workflows to a known, good, stable version. by [@&#8203;jww3](https://github.com/jww3) in [#&#8203;1776](actions/checkout#1776)

### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416)

[Compare Source](actions/checkout@v4.1.5...v4.1.6)

- Check platform to set archive extension appropriately by [@&#8203;cory-miller](https://github.com/cory-miller) in [#&#8203;1732](actions/checkout#1732)

### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415)

[Compare Source](actions/checkout@v4.1.4...v4.1.5)

- Update NPM dependencies by [@&#8203;cory-miller](https://github.com/cory-miller) in [#&#8203;1703](actions/checkout#1703)
- Bump github/codeql-action from 2 to 3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1694](actions/checkout#1694)
- Bump actions/setup-node from 1 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1696](actions/checkout#1696)
- Bump actions/upload-artifact from 2 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1695](actions/checkout#1695)
- README: Suggest `user.email` to be `41898282+github-actions[bot]@&#8203;users.noreply.github.com` by [@&#8203;cory-miller](https://github.com/cory-miller) in [#&#8203;1707](actions/checkout#1707)

### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414)

[Compare Source](actions/checkout@v4.1.3...v4.1.4)

- Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@&#8203;jww3](https://github.com/jww3) in [#&#8203;1692](actions/checkout#1692)
- Add dependabot config by [@&#8203;cory-miller](https://github.com/cory-miller) in [#&#8203;1688](actions/checkout#1688)
- Bump the minor-actions-dependencies group with 2 updates by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1693](actions/checkout#1693)
- Bump word-wrap from 1.2.3 to 1.2.5 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1643](actions/checkout#1643)

### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413)

[Compare Source](actions/checkout@v4.1.2...v4.1.3)

- Check git version before attempting to disable `sparse-checkout` by [@&#8203;jww3](https://github.com/jww3) in [#&#8203;1656](actions/checkout#1656)
- Add SSH user parameter by [@&#8203;cory-miller](https://github.com/cory-miller) in [#&#8203;1685](actions/checkout#1685)
- Update `actions/checkout` version in `update-main-version.yml` by [@&#8203;jww3](https://github.com/jww3) in [#&#8203;1650](actions/checkout#1650)

### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412)

[Compare Source](actions/checkout@v4.1.1...v4.1.2)

- Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@&#8203;dscho](https://github.com/dscho) in [#&#8203;1598](actions/checkout#1598)

### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411)

[Compare Source](actions/checkout@v4.1.0...v4.1.1)

- Correct link to GitHub Docs by [@&#8203;peterbe](https://github.com/peterbe) in [#&#8203;1511](actions/checkout#1511)
- Link to release page from what's new section by [@&#8203;cory-miller](https://github.com/cory-miller) in [#&#8203;1514](actions/checkout#1514)

### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410)

[Compare Source](actions/checkout@v4...v4.1.0)

- [Add support for partial checkout filters](actions/checkout#1396)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTQuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNC40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJ0ZW1wbGF0ZSJdfQ==-->

Reviewed-on: https://git.lx.e6a.app/tools/cookie-py/pulls/87
@github-actions github-actions Bot mentioned this pull request Jun 18, 2026
Open
kodiakhq Bot pushed a commit to pdylanross/fatigue that referenced this pull request Jun 19, 2026
@dependabot
chore: Bump actions/checkout from 6 to 7 (#484)
65532b6 
Bumps actions/checkout from 6 to 7.

Release notes
Sourced from actions/checkout's releases.

v7.0.0
What's Changed

block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

@​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0
v6.0.3
What's Changed

Update changelog by @​ericsciple in actions/checkout#2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

@​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3
v6.0.2
What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355
Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2
v6.0.1
What's Changed

Update all references from v5 and v4 to v6 by @​ericsciple in actions/checkout#2314
Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327
Clarify v6 README by @​ericsciple in actions/checkout#2328

Full Changelog: actions/checkout@v6...v6.0.1



Changelog
Sourced from actions/checkout's changelog.

Changelog
v7.0.0

Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462

v6.0.3

Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924



... (truncated)


Commits

9c091bb update error wording (#2467)
1044a6d getting ready for checkout v7 release (#2464)
f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
d914b26 upgrade module to esm and update dependencies (#2463)
537c7ef Bump @​actions/core and @​actions/tool-cache and Remove uuid (#2459)
130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
0f9f3aa Bump actions/publish-immutable-action (#2458)
f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
See full diff in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mfenniak pushed a commit to testtrim/testtrim that referenced this pull request Jun 20, 2026
Renovate Mathieu Fenniak
chore(deps): update actions/checkout action to v7 (#1035)
c09d3db 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)

[Compare Source](actions/checkout@v7.0.0...v7.0.0)

- Block checking out fork PR for pull\_request\_target and workflow\_run by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2454](actions/checkout#2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2458](actions/checkout#2458)
- Bump flatted from 3.3.1 to 3.4.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2460](actions/checkout#2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2461](actions/checkout#2461)
- Bump [@&#8203;actions/core](https://github.com/actions/core) and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2459](actions/checkout#2459)
- upgrade module to esm and update dependencies by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2463](actions/checkout#2463)
- Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2462](actions/checkout#2462)

### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)

[Compare Source](actions/checkout@v6.0.3...v7.0.0)

- Block checking out fork PR for pull\_request\_target and workflow\_run by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2454](actions/checkout#2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2458](actions/checkout#2458)
- Bump flatted from 3.3.1 to 3.4.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2460](actions/checkout#2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2461](actions/checkout#2461)
- Bump [@&#8203;actions/core](https://github.com/actions/core) and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2459](actions/checkout#2459)
- upgrade module to esm and update dependencies by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2463](actions/checkout#2463)
- Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2462](actions/checkout#2462)

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

[Compare Source](actions/checkout@v6.0.1...v6.0.2)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2356](actions/checkout#2356)

### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601)

[Compare Source](actions/checkout@v6...v6.0.1)

- Add worktree support for persist-credentials includeIf by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2327](actions/checkout#2327)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Edmonton)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: https://codeberg.org/testtrim/testtrim/pulls/1035
@github-actions github-actions Bot mentioned this pull request Jun 21, 2026
Merged
1 task
mergify Bot added a commit to ArcadeData/arcadedb that referenced this pull request Jun 21, 2026
@mergify