Skip to content

ci(deps): bump actions/checkout from 4 to 6#85

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6
Closed

ci(deps): bump actions/checkout from 4 to 6#85
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Commits
  • df4cb1c Update changelog for v6.0.3 (#2446)
  • 1cce339 Fix checkout init for SHA-256 repositories (#2439)
  • 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
  • 0c366fd Update changelog (#2357)
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • 8e8c483 Clarify v6 README (#2328)
  • 033fa0d Add worktree support for persist-credentials includeIf (#2327)
  • c2d88d3 Update all references from v5 and v4 to v6 (#2314)
  • 1af3b93 update readme/changelog for v6 (#2311)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

PythonWoods-Dev added a commit that referenced this pull request Jun 9, 2026
GHA (PR #84, #85):
- actions/checkout SHA → v6.0.3 (df4cb1c)
- github/codeql-action → 4.36.2 (8aad20d)

npm (PR #83, #86, #87):
- react 19.2.6 → 19.2.7
- react-dom 19.2.6 → 19.2.7
- @types/react 19.2.15 → 19.2.17
- typescript-eslint 8.59.4 → 8.61.0
- @types/node 25.9.1 → 25.9.2

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>
@PythonWoods-Dev

Copy link
Copy Markdown
Contributor

Superseded by commit 92d2173 on release/0.10.4: actions/checkout bumped to v6.0.3 (SHA df4cb1c) with DCO sign-off.

@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/actions/checkout-6 branch June 9, 2026 17:26
PythonWoods-Dev added a commit that referenced this pull request Jun 9, 2026
GHA (PR #84, #85):
- actions/checkout SHA → v6.0.3 (df4cb1c)
- github/codeql-action → 4.36.2 (8aad20d)

npm (PR #83, #86, #87):
- react 19.2.6 → 19.2.7
- react-dom 19.2.6 → 19.2.7
- @types/react 19.2.15 → 19.2.17
- typescript-eslint 8.59.4 → 8.61.0
- @types/node 25.9.1 → 25.9.2

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>
PythonWoods-Dev added a commit that referenced this pull request Jun 9, 2026
* ci/docs: enforce fail-closed PR build and document required checks

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* docs(changelog): record fail-closed build gate updates

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* blog: publish 'Auditing the Auditors' case study and register new tags

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* fix(blog): remove duplicate architecture tag from tags.yml

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* blog: polish 'Auditing the Auditors' — link issues/PR, rename section to The Agent Incident

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* release: bump version to 0.10.4

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* fix(deps): bump GHA actions and npm packages

GHA (PR #84, #85):
- actions/checkout SHA → v6.0.3 (df4cb1c)
- github/codeql-action → 4.36.2 (8aad20d)

npm (PR #83, #86, #87):
- react 19.2.6 → 19.2.7
- react-dom 19.2.6 → 19.2.7
- @types/react 19.2.15 → 19.2.17
- typescript-eslint 8.59.4 → 8.61.0
- @types/node 25.9.1 → 25.9.2

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* style(readme): add zenzic/doc wordmark, center all badges

- New SVG wordmark: zenzic-wordmark-doc.svg + dark variant
  (teal #0d9488/#2dd4bf accent, matching zenzic-action pattern)
- README.md + README.it.md: replace nav logo with new wordmark,
  restructure badges into <p align="center"> HTML block
- Drop markdown-syntax badge lines and bare H1 heading;
  add markdownlint-disable MD033 MD041 MD060

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* fix(brand): align doc wordmark color to official palette

Replace teal (#0d9488/#2dd4bf) with sky (#38bdf8/#7dd3fc),
the second brand color used in the icon grid.

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* fix(ci): resolve NPM audit critical and quality gate Z109

- package-lock.json: npm audit fix — shell-quote critical (GHSA-w7jw-789q-3m8p)
- .zenzic.toml: suppress Z109 on architecture.mdx (EN+IT)
  github.com/google/re2 is a valid upstream repo; failure is a
  transient CI network connection error (6/10 suppression cap)
- README.md + README.it.md: score badge updated 96 → 94 (2 new suppressions)

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

* docs(contributing): add SSH signing setup instructions

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>

---------

Signed-off-by: PythonWoods-Dev <gianluca.catalano@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant