Update actions/checkout action from vv4.3.1 to v6 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	major	v4 → v6	v7.0.0 (+1)

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327

v6.0.0

Compare Source

• Persist creds to a separate file by @​ericsciple in #​2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in #​2248

v6

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v5.0.1

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

v5.0.0

Compare Source

• Update actions checkout to use node 24 by @​salmanmkc in #​2226

v5

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Docker Scan - Alert(s) found with threshold matching severity high

Results

• critical: 1
• high: 0
• medium: 4
• low: 0

Docker Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Docker Scan documentation on how to use allowlist.

[github-actions]

Docker Scan - Alert(s) found with threshold matching severity high

Results

• critical: 0
• high: 2
• medium: 4
• low: 0

Docker Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Docker Scan documentation on how to use allowlist.

[github-actions]

Docker Scan - Alert(s) found with threshold matching severity high

Results

• critical: 0
• high: 2
• medium: 6
• low: 3

Docker Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Docker Scan documentation on how to use allowlist.

[github-actions]

Docker Scan - Alert(s) found with threshold matching severity high

Results

• critical: 0
• high: 2
• medium: 6
• low: 3

Docker Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Docker Scan documentation on how to use allowlist.

[github-actions]

📄 Terraform Plan PRD

Plan: 10 to add, 0 to change, 0 to destroy. 

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
 + create

Terraform will perform the following actions:

 # google_pubsub_subscription.kafka-stopplace-changelog-subscription will be created
 + resource "google_pubsub_subscription" "kafka-stopplace-changelog-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + labels                     = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + message_retention_duration = "604800s"
     + name                       = "KafkaStopPlaceChangelog"
     + project                    = "ent-irkalla-prd"
     + topic                      = "KafkaStopPlaceChangelog"
   }

 # google_pubsub_subscription.stopplace-delete-queue-subscription will be created
 + resource "google_pubsub_subscription" "stopplace-delete-queue-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + labels                     = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + message_retention_duration = "604800s"
     + name                       = "ChouetteStopPlaceDeleteQueue"
     + project                    = "ent-irkalla-prd"
     + topic                      = "ChouetteStopPlaceDeleteQueue"
   }

 # google_pubsub_subscription.stopplace-sync-queue-subscription will be created
 + resource "google_pubsub_subscription" "stopplace-sync-queue-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + labels                     = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + message_retention_duration = "604800s"
     + name                       = "ChouetteStopPlaceSyncQueue"
     + project                    = "ent-irkalla-prd"
     + topic                      = "ChouetteStopPlaceSyncQueue"
   }

 # google_pubsub_subscription.tiamat-changelog-subscription will be created
 + resource "google_pubsub_subscription" "tiamat-changelog-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + message_retention_duration = "604800s"
     + name                       = "ror.tiamat.changelog"
     + project                    = "ent-irkalla-prd"
     + topic                      = "projects/ent-tiamat-prd/topics/ror.tiamat.changelog"
   }

 # google_pubsub_topic.kafka-stopplace-changelog-topic will be created
 + resource "google_pubsub_topic" "kafka-stopplace-changelog-topic" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "KafkaStopPlaceChangelog"
     + project = "ent-irkalla-prd"
   }

 # google_pubsub_topic.kafka-stopplace-delete-queue will be created
 + resource "google_pubsub_topic" "kafka-stopplace-delete-queue" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "KafkaStopPlaceDeleteQueue"
     + project = "ent-irkalla-prd"
   }

 # google_pubsub_topic.stopplace-delete-queue will be created
 + resource "google_pubsub_topic" "stopplace-delete-queue" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "ChouetteStopPlaceDeleteQueue"
     + project = "ent-irkalla-prd"
   }

 # google_pubsub_topic.stopplace-sync-queue will be created
 + resource "google_pubsub_topic" "stopplace-sync-queue" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "ChouetteStopPlaceSyncQueue"
     + project = "ent-irkalla-prd"
   }

 # google_storage_bucket.storage_bucket will be created
 + resource "google_storage_bucket" "storage_bucket" {
     + force_destroy               = false
     + id                          = (known after apply)
     + labels                      = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + location                    = "EUROPE-WEST1"
     + name                        = "ror-irkalla-prd"
     + project                     = "ent-irkalla-prd"
     + public_access_prevention    = (known after apply)
     + self_link                   = (known after apply)
     + storage_class               = "REGIONAL"
     + uniform_bucket_level_access = true
     + url                         = (known after apply)

     + logging {
         + log_bucket        = "false"
         + log_object_prefix = "ror-irkalla-prd"
       }

     + versioning {
         + enabled = true
       }
   }

 # google_storage_bucket_object.content_folder will be created
 + resource "google_storage_bucket_object" "content_folder" {
     + bucket         = "ror-irkalla-prd"
     + content        = (sensitive value)
     + content_type   = (known after apply)
     + crc32c         = (known after apply)
     + detect_md5hash = "different hash"
     + id             = (known after apply)
     + kms_key_name   = (known after apply)
     + md5hash        = (known after apply)
     + media_link     = (known after apply)
     + name           = "StopPlace/"
     + output_name    = (known after apply)
     + self_link      = (known after apply)
     + storage_class  = (known after apply)
   }

Plan: 10 to add, 0 to change, 0 to destroy.

View full plan