chore(deps): bump actions/checkout from 4 to 6#11
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Resolves Dependabot alert #6 (GHSA-5xrq-8626-4rwp / CVE-2026-47429, vitest UI arbitrary file read). Practical exposure here is nil since this repo only runs `vitest run` headlessly, but moving to 4.x clears the alert and stays current. vitest 4 requires Node ^20 || ^22 || >=24, so the CI test matrix drops 18.x and adds 24.x. `engines.node` stays at >=18 — the SDK runtime itself doesn't need 20+, only the test toolchain does. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
eb5debb to
5fdb93b
Compare
|
Superseded by 47db6b2 on main: actions/checkout v4 → v6 across ci.yml, codeql.yml, and publish.yml. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps actions/checkout from 4 to 6.
Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
de0fac2Fix tag handling: preserve annotations and explicit fetch-tags (#2356)064fe7fAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...8e8c483Clarify v6 README (#2328)033fa0dAdd worktree support for persist-credentials includeIf (#2327)c2d88d3Update all references from v5 and v4 to v6 (#2314)1af3b93update readme/changelog for v6 (#2311)71cf226v6-beta (#2298)069c695Persist creds to a separate file (#2286)ff7abcdUpdate README to include Node.js 24 support details and requirements (#2248)08c6903Prepare v5.0.0 release (#2238)