Repository navigation
backport allow-unsafe-pr-checkout to v4 - #2502
Merged
Merged
Conversation
…2454) * block checking out fork pr for some events * address copilot and reviewer feedback * run prettier formatting * build * update urls * update readme * update description and url again * edit url one more time
allow-unsafe-pr-checkout to v4
AllanGuigou
approved these changes
Jul 7, 2026
piscis
pushed a commit
to piscis/agent-skills
that referenced
this pull request
Jul 30, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.1.0...v6) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.4.0...v5) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://code.vicoli.de/piscis/agent-skills/pulls/2
suparious
pushed a commit
to SolidRusT/solidrust-ai-docs.github.io
that referenced
this pull request
Oct 3, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v5.1.0...v6.0.0) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5.0.0...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v4.4.0...v5.0.0) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4.0.0...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzIuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjEzMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> --------- Co-authored-by: Renovate Bot <renovate@solidrust.net> Reviewed-on: https://gitea.hq.solidrust.net:30008/solidrust/solidrust-ai-docs.github.io/pulls/12 Co-authored-by: renovate-bot <renovate-bot+shaun@solidrust.net> Co-committed-by: renovate-bot <renovate-bot+shaun@solidrust.net>
markharding
pushed a commit
to futo-org/Harbor
that referenced
this pull request
Oct 13, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull_request_target and workflow_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v5.1.0...v6.0.0) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5.0.0...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v4.4.0...v5.0.0) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4.0.0...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 9am on tuesday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NS4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSJdfQ==--> Reviewed-on: https://code.futo.org/harbor/harbor/pulls/1841 Reviewed-by: Thomas de Zeeuw <thomas@futo.org>
piscis
pushed a commit
to piscis/agent-skills
that referenced
this pull request
Oct 14, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.1.0...v6) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.4.0...v5) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://code.vicoli.de/piscis/agent-skills/pulls/2
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 15, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v4.4.0 | ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 15, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v7.0.1 | ## [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ## [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ## [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ## [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ## [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ## [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ## [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ## [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ## [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ## [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 17, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v4.4.0 | ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 17, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v7.0.1 | ## [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ## [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ## [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ## [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ## [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ## [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ## [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ## [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ## [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ## [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
3 tasks done
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 22, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v4.4.0 | ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 22, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v7.0.1 | ## [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ## [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ## [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ## [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ## [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ## [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ## [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ## [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ## [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ## [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 24, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v4.4.0 | ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
renovate Bot
added a commit
to andrei-picus-tink/auto-renovate
that referenced
this pull request
Oct 24, 2026
| datasource | package | from | to | | ----------- | ---------------- | ------ | ------ | | github-tags | actions/checkout | v4.1.7 | v7.0.1 | ## [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ## [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ## [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ## [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ## [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ## [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ## [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ## [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ## [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ## [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ## [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ## [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ## [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
renovate Bot
added a commit
to cigaleapp/infrastructure
that referenced
this pull request
Oct 27, 2026
##### [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ##### [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ##### [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ##### [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ##### [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ##### [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ##### [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ##### [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ##### [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ##### [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ##### [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ##### [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ##### [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ##### [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ##### [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ##### [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872) ##### [vv4.1.7](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in [#1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1697](actions/checkout#1697) - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in [#1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in [#1776](actions/checkout#1776) ##### [vv4.1.6](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) - Check platform to set archive extension appropriately by [@cory-miller](https://github.com/cory-miller) in [#1732](actions/checkout#1732) ##### [vv4.1.5](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) - Update NPM dependencies by [@cory-miller](https://github.com/cory-miller) in [#1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://github.com/dependabot) in [#1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://github.com/dependabot) in [#1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://github.com/cory-miller) in [#1707](actions/checkout#1707) ##### [vv4.1.4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1692](actions/checkout#1692) - Add dependabot config by [@cory-miller](https://github.com/cory-miller) in [#1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://github.com/dependabot) in [#1643](actions/checkout#1643) ##### [vv4.1.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1656](actions/checkout#1656) - Add SSH user parameter by [@cory-miller](https://github.com/cory-miller) in [#1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://github.com/jww3) in [#1650](actions/checkout#1650) ##### [vv4.1.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in [#1598](actions/checkout#1598) ##### [vv4.1.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) - Correct link to GitHub Docs by [@peterbe](https://github.com/peterbe) in [#1511](actions/checkout#1511) - Link to release page from what's new section by [@cory-miller](https://github.com/cory-miller) in [#1514](actions/checkout#1514) ##### [vv4.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) - [Add support for partial checkout filters](actions/checkout#1396) ##### [vv4.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400) - [Support fetching without the --progress option](actions/checkout#1067) - [Update to node20](actions/checkout#1436) ##### [vv3.7.0](https://github.com/actions/checkout/releases/tag/v3.7.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2503](actions/checkout#2503) - backport fixes to releases-v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2525](actions/checkout#2525) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v3.6.0...v3.7.0> ##### [vv3.6.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) - [Fix: Mark test scripts with Bash'isms to be run via Bash](actions/checkout#1377) - [Add option to fetch tags even if fetch-depth > 0](actions/checkout#579) ##### [vv3.5.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](actions/checkout#1196) - [Fix typos found by codespell](actions/checkout#1287) - [Add support for sparse checkouts](actions/checkout#1369) ##### [vv3.5.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v352) - [Fix api endpoint for GHES](actions/checkout#1289) ##### [vv3.5.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v351) - [Fix slow checkout on Windows](actions/checkout#1246) ##### [vv3.5.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v350) - [Add new public key for known_hosts](actions/checkout#1237) ##### [vv3.4.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) - [Upgrade codeql actions to v2](actions/checkout#1209) - [Upgrade dependencies](actions/checkout#1210) - [Upgrade @actions/io](actions/checkout#1225) ##### [vv3.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v330) - [Implement branch list using callbacks from exec function](actions/checkout#1045) - [Add in explicit reference to private checkout options](actions/checkout#1050) - [Fix comment typos (that got added in #770)](actions/checkout#1057) ##### [vv3.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v320) - [Add GitHub Action to perform release](actions/checkout#942) - [Fix status badge](actions/checkout#967) - [Replace datadog/squid with ubuntu/squid Docker image](actions/checkout#1002) - [Wrap pipeline commands for submoduleForeach in quotes](actions/checkout#964) - [Update @actions/io to 1.1.2](actions/checkout#1029) - [Upgrading version to 3.2.0](actions/checkout#1039) ##### [vv3.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) - [Use @actions/core `saveState` and `getState`](actions/checkout#939) - [Add `github-server-url` input](actions/checkout#922) ##### [vv3.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v302) - [Add input `set-safe-directory`](actions/checkout#770) ##### [vv3.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v301) - [Fixed an issue where checkout failed to run in container jobs due to the new git setting `safe.directory`](actions/checkout#762) - [Bumped various npm package versions](actions/checkout#744)
gwennlbh
pushed a commit
to cigaleapp/infrastructure
that referenced
this pull request
Oct 27, 2026
##### [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ##### [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ##### [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ##### [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ##### [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ##### [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ##### [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ##### [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ##### [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ##### [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ##### [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ##### [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ##### [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ##### [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ##### [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ##### [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872) ##### [vv4.1.7](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in [#1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1697](actions/checkout#1697) - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in [#1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in [#1776](actions/checkout#1776) ##### [vv4.1.6](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) - Check platform to set archive extension appropriately by [@cory-miller](https://github.com/cory-miller) in [#1732](actions/checkout#1732) ##### [vv4.1.5](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) - Update NPM dependencies by [@cory-miller](https://github.com/cory-miller) in [#1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://github.com/dependabot) in [#1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://github.com/dependabot) in [#1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://github.com/cory-miller) in [#1707](actions/checkout#1707) ##### [vv4.1.4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1692](actions/checkout#1692) - Add dependabot config by [@cory-miller](https://github.com/cory-miller) in [#1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://github.com/dependabot) in [#1643](actions/checkout#1643) ##### [vv4.1.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1656](actions/checkout#1656) - Add SSH user parameter by [@cory-miller](https://github.com/cory-miller) in [#1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://github.com/jww3) in [#1650](actions/checkout#1650) ##### [vv4.1.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in [#1598](actions/checkout#1598) ##### [vv4.1.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) - Correct link to GitHub Docs by [@peterbe](https://github.com/peterbe) in [#1511](actions/checkout#1511) - Link to release page from what's new section by [@cory-miller](https://github.com/cory-miller) in [#1514](actions/checkout#1514) ##### [vv4.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) - [Add support for partial checkout filters](actions/checkout#1396) ##### [vv4.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400) - [Support fetching without the --progress option](actions/checkout#1067) - [Update to node20](actions/checkout#1436) ##### [vv3.7.0](https://github.com/actions/checkout/releases/tag/v3.7.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2503](actions/checkout#2503) - backport fixes to releases-v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2525](actions/checkout#2525) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v3.6.0...v3.7.0> ##### [vv3.6.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) - [Fix: Mark test scripts with Bash'isms to be run via Bash](actions/checkout#1377) - [Add option to fetch tags even if fetch-depth > 0](actions/checkout#579) ##### [vv3.5.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](actions/checkout#1196) - [Fix typos found by codespell](actions/checkout#1287) - [Add support for sparse checkouts](actions/checkout#1369) ##### [vv3.5.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v352) - [Fix api endpoint for GHES](actions/checkout#1289) ##### [vv3.5.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v351) - [Fix slow checkout on Windows](actions/checkout#1246) ##### [vv3.5.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v350) - [Add new public key for known_hosts](actions/checkout#1237) ##### [vv3.4.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) - [Upgrade codeql actions to v2](actions/checkout#1209) - [Upgrade dependencies](actions/checkout#1210) - [Upgrade @actions/io](actions/checkout#1225) ##### [vv3.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v330) - [Implement branch list using callbacks from exec function](actions/checkout#1045) - [Add in explicit reference to private checkout options](actions/checkout#1050) - [Fix comment typos (that got added in #770)](actions/checkout#1057) ##### [vv3.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v320) - [Add GitHub Action to perform release](actions/checkout#942) - [Fix status badge](actions/checkout#967) - [Replace datadog/squid with ubuntu/squid Docker image](actions/checkout#1002) - [Wrap pipeline commands for submoduleForeach in quotes](actions/checkout#964) - [Update @actions/io to 1.1.2](actions/checkout#1029) - [Upgrading version to 3.2.0](actions/checkout#1039) ##### [vv3.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) - [Use @actions/core `saveState` and `getState`](actions/checkout#939) - [Add `github-server-url` input](actions/checkout#922) ##### [vv3.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v302) - [Add input `set-safe-directory`](actions/checkout#770) ##### [vv3.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v301) - [Fixed an issue where checkout failed to run in container jobs due to the new git setting `safe.directory`](actions/checkout#762) - [Bumped various npm package versions](actions/checkout#744) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
gwennlbh
pushed a commit
to cigaleapp/infrastructure
that referenced
this pull request
Oct 28, 2026
##### [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ##### [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ##### [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ##### [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ##### [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ##### [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ##### [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ##### [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ##### [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ##### [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ##### [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ##### [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ##### [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ##### [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ##### [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ##### [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872) ##### [vv4.1.7](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in [#1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1697](actions/checkout#1697) - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in [#1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in [#1776](actions/checkout#1776) ##### [vv4.1.6](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) - Check platform to set archive extension appropriately by [@cory-miller](https://github.com/cory-miller) in [#1732](actions/checkout#1732) ##### [vv4.1.5](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) - Update NPM dependencies by [@cory-miller](https://github.com/cory-miller) in [#1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://github.com/dependabot) in [#1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://github.com/dependabot) in [#1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://github.com/cory-miller) in [#1707](actions/checkout#1707) ##### [vv4.1.4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1692](actions/checkout#1692) - Add dependabot config by [@cory-miller](https://github.com/cory-miller) in [#1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://github.com/dependabot) in [#1643](actions/checkout#1643) ##### [vv4.1.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1656](actions/checkout#1656) - Add SSH user parameter by [@cory-miller](https://github.com/cory-miller) in [#1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://github.com/jww3) in [#1650](actions/checkout#1650) ##### [vv4.1.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in [#1598](actions/checkout#1598) ##### [vv4.1.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) - Correct link to GitHub Docs by [@peterbe](https://github.com/peterbe) in [#1511](actions/checkout#1511) - Link to release page from what's new section by [@cory-miller](https://github.com/cory-miller) in [#1514](actions/checkout#1514) ##### [vv4.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) - [Add support for partial checkout filters](actions/checkout#1396) ##### [vv4.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400) - [Support fetching without the --progress option](actions/checkout#1067) - [Update to node20](actions/checkout#1436) ##### [vv3.7.0](https://github.com/actions/checkout/releases/tag/v3.7.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2503](actions/checkout#2503) - backport fixes to releases-v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2525](actions/checkout#2525) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v3.6.0...v3.7.0> ##### [vv3.6.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) - [Fix: Mark test scripts with Bash'isms to be run via Bash](actions/checkout#1377) - [Add option to fetch tags even if fetch-depth > 0](actions/checkout#579) ##### [vv3.5.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](actions/checkout#1196) - [Fix typos found by codespell](actions/checkout#1287) - [Add support for sparse checkouts](actions/checkout#1369) ##### [vv3.5.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v352) - [Fix api endpoint for GHES](actions/checkout#1289) ##### [vv3.5.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v351) - [Fix slow checkout on Windows](actions/checkout#1246) ##### [vv3.5.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v350) - [Add new public key for known_hosts](actions/checkout#1237) ##### [vv3.4.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) - [Upgrade codeql actions to v2](actions/checkout#1209) - [Upgrade dependencies](actions/checkout#1210) - [Upgrade @actions/io](actions/checkout#1225) ##### [vv3.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v330) - [Implement branch list using callbacks from exec function](actions/checkout#1045) - [Add in explicit reference to private checkout options](actions/checkout#1050) - [Fix comment typos (that got added in #770)](actions/checkout#1057) ##### [vv3.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v320) - [Add GitHub Action to perform release](actions/checkout#942) - [Fix status badge](actions/checkout#967) - [Replace datadog/squid with ubuntu/squid Docker image](actions/checkout#1002) - [Wrap pipeline commands for submoduleForeach in quotes](actions/checkout#964) - [Update @actions/io to 1.1.2](actions/checkout#1029) - [Upgrading version to 3.2.0](actions/checkout#1039) ##### [vv3.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) - [Use @actions/core `saveState` and `getState`](actions/checkout#939) - [Add `github-server-url` input](actions/checkout#922) ##### [vv3.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v302) - [Add input `set-safe-directory`](actions/checkout#770) ##### [vv3.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v301) - [Fixed an issue where checkout failed to run in container jobs due to the new git setting `safe.directory`](actions/checkout#762) - [Bumped various npm package versions](actions/checkout#744) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport #2454 to v4. This is a breaking change