Update changelog for v6.0.3 by yaananth · Pull Request #2446 · actions/checkout

yaananth · 2026-06-02T14:07:01Z

Updates CHANGELOG.md for the v6.0.3 release.

Includes:

SHA-256 repository checkout initialization support (Fix checkout init for SHA-256 repositories #2439)
SHA-256 merge commit matching/test coverage (fix: expand merge commit SHA regex and add SHA-256 test cases #2414)

Copilot

Pull request overview

Updates the project changelog to document the v6.0.3 release, capturing the two SHA-256-related fixes that were recently merged.

Changes:

Add a new ## v6.0.3 section at the top of CHANGELOG.md.
Record the two included PRs: SHA-256 repo init support (#2439) and SHA-256 merge commit SHA/test coverage updates (#2414).

Show a summary per file

File	Description
`CHANGELOG.md`	Adds the `v6.0.3` release notes with links to the two included pull requests.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 1/1 changed files
Comments generated: 0

Bumps actions/checkout from 6.0.2 to 6.0.3. ## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ib3e2359f174f37230d2386c441500eb37e4c95c5 GitHub-PR: #96 GitHub-Hash: 9442dfccd711df1f Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps actions/checkout from 6.0.2 to 6.0.3. ## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I0de7b562d12e51882bd8759fa5f832830d96b8dd GitHub-PR: #4 GitHub-Hash: b374d11a891e26a1 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `actions/checkout` from 6.0.2 to 6.0.3 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v6.0.3 > ------ > > What's Changed > -------------- > > * Update changelog by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * Update changelog for v6.0.3 by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446) > > New Contributors > ---------------- > > * [`@yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > **Full Changelog**: <actions/checkout@v6...v6.0.3> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) > > v4.2.0 > ------ > > * Add Ref and Commit outputs by [`@lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180) > * Dependency updates by [`@dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872) > > v4.1.7 > ------ > > * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739) > * Bump actions/checkout from 3 to 4 by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697) > * Check out other refs/\* by commit by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774) ... (truncated) Commits * [`df4cb1c`](actions/checkout@df4cb1c) Update changelog for v6.0.3 ([#2446](https://redirect.github.com/actions/checkout/issues/2446)) * [`1cce339`](actions/checkout@1cce339) Fix checkout init for SHA-256 repositories ([#2439](https://redirect.github.com/actions/checkout/issues/2439)) * [`900f221`](actions/checkout@900f221) fix: expand merge commit SHA regex and add SHA-256 test cases ([#2414](https://redirect.github.com/actions/checkout/issues/2414)) * [`0c366fd`](actions/checkout@0c366fd) Update changelog ([#2357](https://redirect.github.com/actions/checkout/issues/2357)) * See full diff in [compare view](actions/checkout@de0fac2...df4cb1c) Updates `anthropics/claude-code-action` from 1.0.133 to 1.0.135 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.135 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.135> > > v1.0.134 > -------- > > What's Changed > -------------- > > * Add workload identity federation support to base-action by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#1378](https://redirect.github.com/anthropics/claude-code-action/pull/1378) > * chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > * ci: bump checkout and setup-bun in test workflows to Node 24 releases by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1379](https://redirect.github.com/anthropics/claude-code-action/pull/1379) > > New Contributors > ---------------- > > * [`@ant-kurt`](https://github.com/ant-kurt) made their first contribution in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.134> Commits * [`70a6e52`](anthropics/claude-code-action@70a6e52) chore: bump Claude Code to 2.1.162 and Agent SDK to 0.3.162 * [`36a69b6`](anthropics/claude-code-action@36a69b6) chore: bump Claude Code to 2.1.161 and Agent SDK to 0.3.161 * [`bfad70d`](anthropics/claude-code-action@bfad70d) ci: bump checkout and setup-bun in test workflows to Node 24 releases ([#1379](https://redirect.github.com/anthropics/claude-code-action/issues/1379)) * [`dc081a3`](anthropics/claude-code-action@dc081a3) chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) ([#1377](https://redirect.github.com/anthropics/claude-code-action/issues/1377)) * [`420335d`](anthropics/claude-code-action@420335d) Add workload identity federation support to base-action ([#1378](https://redirect.github.com/anthropics/claude-code-action/issues/1378)) * [`7f37f2e`](anthropics/claude-code-action@7f37f2e) chore: bump Claude Code to 2.1.160 and Agent SDK to 0.3.160 * [`fb53c37`](anthropics/claude-code-action@fb53c37) chore: bump Claude Code to 2.1.159 and Agent SDK to 0.3.159 * [`c5c315c`](anthropics/claude-code-action@c5c315c) chore: bump Claude Code to 2.1.158 and Agent SDK to 0.3.158 * [`f809dea`](anthropics/claude-code-action@f809dea) chore: bump Claude Code to 2.1.157 and Agent SDK to 0.3.157 * [`0fb1b8f`](anthropics/claude-code-action@0fb1b8f) chore: bump Claude Code to 2.1.156 and Agent SDK to 0.3.156 * Additional commits viewable in [compare view](anthropics/claude-code-action@787c5a0...70a6e52) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

…updates [skip ci] Bumps the github-actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `6.0.3` | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.2.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.1.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.1.0` | | [graalvm/setup-graalvm](https://github.com/graalvm/setup-graalvm) | `1.5.2` | `1.5.4` | | [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) | `6.2.1` | `6.2.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.35.2` | `4.36.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.110` | `1.0.135` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.306.0` | `1.310.0` | Updates `actions/checkout` from 6.0.2 to 6.0.3 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v6.0.3 > ------ > > What's Changed > -------------- > > * Update changelog by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * Update changelog for v6.0.3 by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446) > > New Contributors > ---------------- > > * [`@yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > **Full Changelog**: <actions/checkout@v6...v6.0.3> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) > > v4.2.0 > ------ > > * Add Ref and Commit outputs by [`@lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180) > * Dependency updates by [`@dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872) > > v4.1.7 > ------ > > * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739) > * Bump actions/checkout from 3 to 4 by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697) > * Check out other refs/\* by commit by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774) ... (truncated) Commits * [`df4cb1c`](actions/checkout@df4cb1c) Update changelog for v6.0.3 ([#2446](https://redirect.github.com/actions/checkout/issues/2446)) * [`1cce339`](actions/checkout@1cce339) Fix checkout init for SHA-256 repositories ([#2439](https://redirect.github.com/actions/checkout/issues/2439)) * [`900f221`](actions/checkout@900f221) fix: expand merge commit SHA regex and add SHA-256 test cases ([#2414](https://redirect.github.com/actions/checkout/issues/2414)) * [`0c366fd`](actions/checkout@0c366fd) Update changelog ([#2357](https://redirect.github.com/actions/checkout/issues/2357)) * See full diff in [compare view](actions/checkout@de0fac2...df4cb1c) Updates `docker/login-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).* > v4.2.0 > ------ > > * Bump `@actions/core` from 3.0.0 to 3.0.1 in [docker/login-action#976](https://redirect.github.com/docker/login-action/pull/976) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1050.0 in [docker/login-action#960](https://redirect.github.com/docker/login-action/pull/960) > * Bump `@docker/actions-toolkit` from 0.86.0 to 0.90.0 in [docker/login-action#970](https://redirect.github.com/docker/login-action/pull/970) > * Bump brace-expansion from 2.0.1 to 5.0.6 in [docker/login-action#993](https://redirect.github.com/docker/login-action/pull/993) > * Bump fast-xml-builder from 1.1.4 to 1.2.0 in [docker/login-action#985](https://redirect.github.com/docker/login-action/pull/985) > * Bump fast-xml-parser from 5.3.6 to 5.8.0 in [docker/login-action#963](https://redirect.github.com/docker/login-action/pull/963) > * Bump http-proxy-agent and https-proxy-agent to 9.0.0 in [docker/login-action#961](https://redirect.github.com/docker/login-action/pull/961) > * Bump postcss from 8.5.6 to 8.5.10 in [docker/login-action#979](https://redirect.github.com/docker/login-action/pull/979) > * Bump tar from 6.2.1 to 7.5.15 in [docker/login-action#991](https://redirect.github.com/docker/login-action/pull/991) > * Bump vite from 7.3.1 to 7.3.3 in [docker/login-action#986](https://redirect.github.com/docker/login-action/pull/986) > > **Full Changelog**: <docker/login-action@v4.1.0...v4.2.0> Commits * [`650006c`](docker/login-action@650006c) Merge pull request [#960](https://redirect.github.com/docker/login-action/issues/960) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependenc... * [`99df1a3`](docker/login-action@99df1a3) chore: update generated content * [`3ab375f`](docker/login-action@3ab375f) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up... * [`39d8580`](docker/login-action@39d8580) Merge pull request [#970](https://redirect.github.com/docker/login-action/issues/970) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`4eefcd3`](docker/login-action@4eefcd3) chore: update generated content * [`56d092c`](docker/login-action@56d092c) build(deps): bump `@docker/actions-toolkit` from 0.86.0 to 0.90.0 * [`e2e31ca`](docker/login-action@e2e31ca) Merge pull request [#976](https://redirect.github.com/docker/login-action/issues/976) from docker/dependabot/npm\_and\_yarn/actions/core-3.0.1 * [`0bced94`](docker/login-action@0bced94) chore: update generated content * [`3e75a0f`](docker/login-action@3e75a0f) build(deps): bump `@actions/core` from 3.0.0 to 3.0.1 * [`365bebd`](docker/login-action@365bebd) Merge pull request [#984](https://redirect.github.com/docker/login-action/issues/984) from docker/dependabot/github\_actions/aws-actions/con... * Additional commits viewable in [compare view](docker/login-action@4907a6d...650006c) Updates `docker/setup-qemu-action` from 4.0.0 to 4.1.0 Release notes *Sourced from [docker/setup-qemu-action's releases](https://github.com/docker/setup-qemu-action/releases).* > v4.1.0 > ------ > > * Add `reset` input to uninstall current emulators by [`@crazy-max`](https://github.com/crazy-max) in [docker/setup-qemu-action#21](https://redirect.github.com/docker/setup-qemu-action/pull/21) > * Bump `@docker/actions-toolkit` from 0.77.0 to 0.91.0 in [docker/setup-qemu-action#250](https://redirect.github.com/docker/setup-qemu-action/pull/250) [docker/setup-qemu-action#247](https://redirect.github.com/docker/setup-qemu-action/pull/247) > * Bump brace-expansion from 1.1.12 to 1.1.15 in [docker/setup-qemu-action#265](https://redirect.github.com/docker/setup-qemu-action/pull/265) > * Bump fast-xml-builder from 1.0.0 to 1.2.0 in [docker/setup-qemu-action#286](https://redirect.github.com/docker/setup-qemu-action/pull/286) > * Bump fast-xml-parser from 5.4.2 to 5.8.0 in [docker/setup-qemu-action#255](https://redirect.github.com/docker/setup-qemu-action/pull/255) > * Bump flatted from 3.3.3 to 3.4.2 in [docker/setup-qemu-action#257](https://redirect.github.com/docker/setup-qemu-action/pull/257) > * Bump glob from 10.3.15 to 10.5.0 in [docker/setup-qemu-action#254](https://redirect.github.com/docker/setup-qemu-action/pull/254) > * Bump handlebars from 4.7.8 to 4.7.9 in [docker/setup-qemu-action#262](https://redirect.github.com/docker/setup-qemu-action/pull/262) > * Bump lodash from 4.17.23 to 4.18.1 in [docker/setup-qemu-action#273](https://redirect.github.com/docker/setup-qemu-action/pull/273) > * Bump postcss from 8.5.6 to 8.5.10 in [docker/setup-qemu-action#285](https://redirect.github.com/docker/setup-qemu-action/pull/285) > * Bump tar from 6.2.1 to 7.5.15 in [docker/setup-qemu-action#287](https://redirect.github.com/docker/setup-qemu-action/pull/287) > * Bump tmp from 0.2.5 to 0.2.6 in [docker/setup-qemu-action#291](https://redirect.github.com/docker/setup-qemu-action/pull/291) > * Bump undici from 6.23.0 to 6.26.0 in [docker/setup-qemu-action#251](https://redirect.github.com/docker/setup-qemu-action/pull/251) > * Bump vite from 7.3.1 to 7.3.2 in [docker/setup-qemu-action#271](https://redirect.github.com/docker/setup-qemu-action/pull/271) > > **Full Changelog**: <docker/setup-qemu-action@v4.0.0...v4.1.0> Commits * [`0611638`](docker/setup-qemu-action@0611638) Merge pull request [#21](https://redirect.github.com/docker/setup-qemu-action/issues/21) from crazy-max/uninst * [`ce59c81`](docker/setup-qemu-action@ce59c81) chore: update generated content * [`2ddad44`](docker/setup-qemu-action@2ddad44) uninstall current emulators * [`8c37cd6`](docker/setup-qemu-action@8c37cd6) Merge pull request [#250](https://redirect.github.com/docker/setup-qemu-action/issues/250) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`d1a0ff3`](docker/setup-qemu-action@d1a0ff3) chore: update generated content * [`0a8f3dc`](docker/setup-qemu-action@0a8f3dc) build(deps): bump `@docker/actions-toolkit` from 0.79.0 to 0.91.0 * [`9430f61`](docker/setup-qemu-action@9430f61) Merge pull request [#291](https://redirect.github.com/docker/setup-qemu-action/issues/291) from docker/dependabot/npm\_and\_yarn/tmp-0.2.6 * [`978bd77`](docker/setup-qemu-action@978bd77) chore: update generated content * [`3479feb`](docker/setup-qemu-action@3479feb) build(deps): bump tmp from 0.2.5 to 0.2.6 * [`b113c26`](docker/setup-qemu-action@b113c26) Merge pull request [#255](https://redirect.github.com/docker/setup-qemu-action/issues/255) from docker/dependabot/npm\_and\_yarn/fast-xml-parser-5... * Additional commits viewable in [compare view](docker/setup-qemu-action@ce36039...0611638) Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0 Release notes *Sourced from [docker/setup-buildx-action's releases](https://github.com/docker/setup-buildx-action/releases).* > v4.1.0 > ------ > > * Bump `@docker/actions-toolkit` from 0.79.0 to 0.90.0 in [docker/setup-buildx-action#489](https://redirect.github.com/docker/setup-buildx-action/pull/489) > * Bump brace-expansion from 1.1.12 to 5.0.6 in [docker/setup-buildx-action#547](https://redirect.github.com/docker/setup-buildx-action/pull/547) [docker/setup-buildx-action#508](https://redirect.github.com/docker/setup-buildx-action/pull/508) > * Bump fast-xml-builder from 1.0.0 to 1.2.0 in [docker/setup-buildx-action#540](https://redirect.github.com/docker/setup-buildx-action/pull/540) > * Bump fast-xml-parser from 5.4.2 to 5.8.0 in [docker/setup-buildx-action#496](https://redirect.github.com/docker/setup-buildx-action/pull/496) > * Bump flatted from 3.3.3 to 3.4.2 in [docker/setup-buildx-action#499](https://redirect.github.com/docker/setup-buildx-action/pull/499) > * Bump glob from 10.3.12 to 13.0.6 in [docker/setup-buildx-action#495](https://redirect.github.com/docker/setup-buildx-action/pull/495) > * Bump handlebars from 4.7.8 to 4.7.9 in [docker/setup-buildx-action#504](https://redirect.github.com/docker/setup-buildx-action/pull/504) > * Bump lodash from 4.17.23 to 4.18.1 in [docker/setup-buildx-action#523](https://redirect.github.com/docker/setup-buildx-action/pull/523) > * Bump picomatch from 4.0.3 to 4.0.4 in [docker/setup-buildx-action#503](https://redirect.github.com/docker/setup-buildx-action/pull/503) > * Bump postcss from 8.5.6 to 8.5.10 in [docker/setup-buildx-action#537](https://redirect.github.com/docker/setup-buildx-action/pull/537) > * Bump tar from 6.2.1 to 7.5.15 in [docker/setup-buildx-action#545](https://redirect.github.com/docker/setup-buildx-action/pull/545) > * Bump undici from 6.23.0 to 6.25.0 in [docker/setup-buildx-action#492](https://redirect.github.com/docker/setup-buildx-action/pull/492) > * Bump vite from 7.3.1 to 7.3.2 in [docker/setup-buildx-action#520](https://redirect.github.com/docker/setup-buildx-action/pull/520) > > **Full Changelog**: <docker/setup-buildx-action@v4.0.0...v4.1.0> Commits * [`d7f5e7f`](docker/setup-buildx-action@d7f5e7f) Merge pull request [#489](https://redirect.github.com/docker/setup-buildx-action/issues/489) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`92bc5c9`](docker/setup-buildx-action@92bc5c9) chore: update generated content * [`da11e35`](docker/setup-buildx-action@da11e35) build(deps): bump `@docker/actions-toolkit` from 0.79.0 to 0.90.0 * [`f021e16`](docker/setup-buildx-action@f021e16) Merge pull request [#492](https://redirect.github.com/docker/setup-buildx-action/issues/492) from docker/dependabot/npm\_and\_yarn/undici-6.24.1 * [`b5af94f`](docker/setup-buildx-action@b5af94f) chore: update generated content * [`16ad977`](docker/setup-buildx-action@16ad977) build(deps): bump undici from 6.23.0 to 6.25.0 * [`d7a12d7`](docker/setup-buildx-action@d7a12d7) Merge pull request [#495](https://redirect.github.com/docker/setup-buildx-action/issues/495) from docker/dependabot/npm\_and\_yarn/glob-10.5.0 * [`28ff27d`](docker/setup-buildx-action@28ff27d) build(deps): bump glob from 10.3.12 to 13.0.6 * [`daf436b`](docker/setup-buildx-action@daf436b) Merge pull request [#496](https://redirect.github.com/docker/setup-buildx-action/issues/496) from docker/dependabot/npm\_and\_yarn/fast-xml-parser-5... * [`9725348`](docker/setup-buildx-action@9725348) chore: update generated content * Additional commits viewable in [compare view](docker/setup-buildx-action@4d04d5d...d7f5e7f) Updates `graalvm/setup-graalvm` from 1.5.2 to 1.5.4 Release notes *Sourced from [graalvm/setup-graalvm's releases](https://github.com/graalvm/setup-graalvm/releases).* > v1.5.4 > ------ > > What's Changed > -------------- > > * Bump the "all" group with 2 updates across multiple ecosystems by [`@dependabot`](https://github.com/dependabot)[bot] in [graalvm/setup-graalvm#217](https://redirect.github.com/graalvm/setup-graalvm/pull/217) > > **Full Changelog**: <graalvm/setup-graalvm@v1.5.3...v1.5.4> > > v1.5.3 > ------ > > What's Changed > -------------- > > * Bump the "all" group with 2 updates across multiple ecosystems by [`@dependabot`](https://github.com/dependabot)[bot] in [graalvm/setup-graalvm#216](https://redirect.github.com/graalvm/setup-graalvm/pull/216) > > **Full Changelog**: <graalvm/setup-graalvm@v1.5.2...v1.5.3> Commits * [`329c42c`](graalvm/setup-graalvm@329c42c) Run npm audit fix, regenerate dist/ files, bump version to 1.5.4 * [`e9b9f56`](graalvm/setup-graalvm@e9b9f56) Bump actions/checkout from 6.0.2 to 6.0.3 in the all group * [`bef4b0e`](graalvm/setup-graalvm@bef4b0e) Bump version to `1.5.3`. * [`827e827`](graalvm/setup-graalvm@827e827) Regenerate dist/ files. * [`71fb2ab`](graalvm/setup-graalvm@71fb2ab) Run `npm audit fix`. * [`e2605aa`](graalvm/setup-graalvm@e2605aa) Bump the all group with 3 updates * See full diff in [compare view](graalvm/setup-graalvm@60c2672...329c42c) Updates `mikepenz/release-changelog-builder-action` from 6.2.1 to 6.2.2 Release notes *Sourced from [mikepenz/release-changelog-builder-action's releases](https://github.com/mikepenz/release-changelog-builder-action/releases).* > v6.2.2 > ------ > > 🐛 Fixes > ------- > > * fix: preserve $-escape sequences and backticks in placeholder values > + PR: [#1572](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1572) > > 💬 Other > ------- > > * ci: allow commit-dist to run for renovate-mike bot > + PR: [#1560](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1560) > > 📦 Dependencies > -------------- > > * chore(deps): update devdependency non-major updates > + PR: [#1557](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1557) > * chore(deps): update dependency undici to v8 > + PR: [#1558](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1558) > * fix(deps): update dependency https-proxy-agent to v9 > + PR: [#1559](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1559) > * chore(deps): update devdependency non-major updates > + PR: [#1563](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1563) > * fix(deps): update dependency `@actions/github` to v9.1.0 > + PR: [#1564](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1564) > * chore(deps): update dependency vite to v8.0.8 > + PR: [#1562](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1562) > * chore(deps): update dependency undici to v8.0.3 > + PR: [#1561](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1561) > * chore(deps): update devdependency non-major updates > + PR: [#1566](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1566) > * chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24-bullseye docker digest to 147a65f > + PR: [#1565](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1565) > * chore(deps): update dependency undici to v8.1.0 > + PR: [#1568](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1568) > * chore(deps): lock file maintenance > + PR: [#1581](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1581) > * chore(deps): update node devdependency non-major updates > + PR: [#1580](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1580) > * fix(deps): update dependency `@actions/github` to v9.1.1 > + PR: [#1579](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1579) > * fix(deps): update dependency `@actions/core` to v3.0.1 > + PR: [#1578](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1578) > * chore(deps): update dependency vite to v8.0.9 > + PR: [#1577](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1577) > * chore(deps): update mikepenz/action-gh-release action to v3 > + PR: [#1588](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1588) > * chore(deps): lock file maintenance > + PR: [#1589](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1589) > * chore(deps): update dependency vite to v8.0.11 > + PR: [#1587](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1587) ... (truncated) Commits * [`348e88f`](mikepenz/release-changelog-builder-action@348e88f) Merge pull request [#1590](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1590) from mikepenz/develop * [`9816d6c`](mikepenz/release-changelog-builder-action@9816d6c) chore: recompile dist * [`d9e4ec1`](mikepenz/release-changelog-builder-action@d9e4ec1) Merge pull request [#1587](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1587) from mikepenz/renovate/vite-8.x * [`393b7ac`](mikepenz/release-changelog-builder-action@393b7ac) chore(deps): lock file maintenance ([#1589](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1589)) * [`b8176fa`](mikepenz/release-changelog-builder-action@b8176fa) chore(deps): update mikepenz/action-gh-release action to v3 ([#1588](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1588)) * [`5d9a567`](mikepenz/release-changelog-builder-action@5d9a567) chore(deps): update dependency vite to v8.0.11 * [`b51ce95`](mikepenz/release-changelog-builder-action@b51ce95) Merge pull request [#1586](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1586) from mikepenz/chore/pin-actions * [`1f6fce9`](mikepenz/release-changelog-builder-action@1f6fce9) chore(ci): pin GitHub Actions to specific versions * [`9c3faaf`](mikepenz/release-changelog-builder-action@9c3faaf) Merge pull request [#1577](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1577) from mikepenz/renovate/vite-8.x * [`0cd8201`](mikepenz/release-changelog-builder-action@0cd8201) Merge pull request [#1578](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1578) from mikepenz/renovate/actions-core-3.x * Additional commits viewable in [compare view](mikepenz/release-changelog-builder-action@bcae711...348e88f) Updates `github/codeql-action` from 4.35.2 to 4.36.1 Release notes *Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).* > v4.36.1 > ------- > > No user facing changes. > > v4.36.0 > ------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > v4.35.5 > ------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > v4.35.4 > ------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > v4.35.3 > ------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) Changelog *Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) > * The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. [#3789](https://redirect.github.com/github/codeql-action/pull/3789) > * Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. [#3794](https://redirect.github.com/github/codeql-action/pull/3794) > * Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. [#3807](https://redirect.github.com/github/codeql-action/pull/3807) > * Update default CodeQL bundle version to [2.25.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2). [#3823](https://redirect.github.com/github/codeql-action/pull/3823) > > 4.35.1 - 27 Mar 2026 > -------------------- > > * Fix incorrect minimum required Git version for [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158): it should have been 2.36.0, not 2.11.0. [#3781](https://redirect.github.com/github/codeql-action/pull/3781) > > 4.35.0 - 27 Mar 2026 > -------------------- ... (truncated) Commits * [`87557b9`](github/codeql-action@87557b9) Merge pull request [#3940](https://redirect.github.com/github/codeql-action/issues/3940) from github/update-v4.36.1-2a1689ed4 * [`9431011`](github/codeql-action@9431011) Update changelog for v4.36.1 * [`2a1689e`](github/codeql-action@2a1689e) Merge pull request [#3939](https://redirect.github.com/github/codeql-action/issues/3939) from github/henrymercer/skip-overlay-revert-when-exp... * [`5245323`](github/codeql-action@5245323) Disable missing diff-ranges fallback when overlay enabled manually * [`d1eb120`](github/codeql-action@d1eb120) Merge pull request [#3933](https://redirect.github.com/github/codeql-action/issues/3933) from github/update-supported-enterprise-server-versions * [`115001b`](github/codeql-action@115001b) Merge pull request [#3934](https://redirect.github.com/github/codeql-action/issues/3934) from github/dependabot/npm\_and\_yarn/npm-minor-86fb5c... * [`cef2e7a`](github/codeql-action@cef2e7a) Merge pull request [#3925](https://redirect.github.com/github/codeql-action/issues/3925) from github/dependabot/github\_actions/dot-github/wor... * [`5e6adf7`](github/codeql-action@5e6adf7) Merge pull request [#3936](https://redirect.github.com/github/codeql-action/issues/3936) from github/dependabot/npm\_and\_yarn/tmp-0.2.7 * [`ad170e6`](github/codeql-action@ad170e6) Merge branch 'main' into dependabot/github\_actions/dot-github/workflows/actio... * [`6a37b3a`](github/codeql-action@6a37b3a) Rebuild * Additional commits viewable in [compare view](github/codeql-action@95e58e9...87557b9) Updates `anthropics/claude-code-action` from 1.0.110 to 1.0.135 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.135 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.135> > > v1.0.134 > -------- > > What's Changed > -------------- > > * Add workload identity federation support to base-action by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#1378](https://redirect.github.com/anthropics/claude-code-action/pull/1378) > * chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > * ci: bump checkout and setup-bun in test workflows to Node 24 releases by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1379](https://redirect.github.com/anthropics/claude-code-action/pull/1379) > > New Contributors > ---------------- > > * [`@ant-kurt`](https://github.com/ant-kurt) made their first contribution in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.134> > > v1.0.133 > -------- > > What's Changed > -------------- > > * Use workload identity federation for Claude auth in CI workflows by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#1344](https://redirect.github.com/anthropics/claude-code-action/pull/1344) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.133> > > v1.0.132 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.132> > > v1.0.131 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.131> > > v1.0.130 > -------- > > What's Changed > -------------- > > * Add Workload Identity Federation (OIDC) authentication support by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#1338](https://redirect.github.com/anthropics/claude-code-action/pull/1338) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.130> > > v1.0.129 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.129> > > v1.0.128 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.128> > > v1.0.127 > -------- > > What's Changed > -------------- > > * Refactor allowed\_bots actor resolution by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#1330](https://redirect.github.com/anthropics/claude-code-action/pull/1330) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.127> > > v1.0.126 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.126> ... (truncated) Commits * [`70a6e52`](anthropics/claude-code-action@70a6e52) chore: bump Claude Code to 2.1.162 and Agent SDK to 0.3.162 * [`36a69b6`](anthropics/claude-code-action@36a69b6) chore: bump Claude Code to 2.1.161 and Agent SDK to 0.3.161 * [`bfad70d`](anthropics/claude-code-action@bfad70d) ci: bump checkout and setup-bun in test workflows to Node 24 releases ([#1379](https://redirect.github.com/anthropics/claude-code-action/issues/1379)) * [`dc081a3`](anthropics/claude-code-action@dc081a3) chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) ([#1377](https://redirect.github.com/anthropics/claude-code-action/issues/1377)) * [`420335d`](anthropics/claude-code-action@420335d) Add workload identity federation support to base-action ([#1378](https://redirect.github.com/anthropics/claude-code-action/issues/1378)) * [`7f37f2e`](anthropics/claude-code-action@7f37f2e) chore: bump Claude Code to 2.1.160 and Agent SDK to 0.3.160 * [`fb53c37`](anthropics/claude-code-action@fb53c37) chore: bump Claude Code to 2.1.159 and Agent SDK to 0.3.159 * [`c5c315c`](anthropics/claude-code-action@c5c315c) chore: bump Claude Code to 2.1.158 and Agent SDK to 0.3.158 * [`f809dea`](anthropics/claude-code-action@f809dea) chore: bump Claude Code to 2.1.157 and Agent SDK to 0.3.157 * [`0fb1b8f`](anthropics/claude-code-action@0fb1b8f) chore: bump Claude Code to 2.1.156 and Agent SDK to 0.3.156 * Additional commits viewable in [compare view](anthropics/claude-code-action@ef50f12...70a6e52) Updates `ruby/setup-ruby` from 1.306.0 to 1.310.0 Release notes *Sourced from [ruby/setup-ruby's releases](https://github.com/ruby/setup-ruby/releases).* > v1.310.0 > -------- > > What's Changed > -------------- > > * Add ruby-4.0.5 by [`@ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#918](https://redirect.github.com/ruby/setup-ruby/pull/918) > > **Full Changelog**: <ruby/setup-ruby@v1.309.0...v1.310.0> > > v1.309.0 > -------- > > What's Changed > -------------- > > * Update CRuby releases on Windows by [`@ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#917](https://redirect.github.com/ruby/setup-ruby/pull/917) > > **Full Changelog**: <ruby/setup-ruby@v1.308.0...v1.309.0> > > v1.308.0 > -------- > > What's Changed > -------------- > > * Update CRuby releases on Windows by [`@ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#912](https://redirect.github.com/ruby/setup-ruby/pull/912) > > **Full Changelog**: <ruby/setup-ruby@v1.307.0...v1.308.0> > > v1.307.0 > -------- > > What's Changed > -------------- > > * Update README: fix outdated URLs and Ruby version examples by [`@fkmy`](https://github.com/fkmy) in [ruby/setup-ruby#910](https://redirect.github.com/ruby/setup-ruby/pull/910) > * Add ruby-4.0.4 by [`@ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#911](https://redirect.github.com/ruby/setup-ruby/pull/911) > > **Full Changelog**: <ruby/setup-ruby@v1.306.0...v1.307.0> Commits * [`afeafc3`](ruby/setup-ruby@afeafc3) Add ruby-4.0.5 * [`28c65f7`](ruby/setup-ruby@28c65f7) Update CRuby releases on Windows * [`97ecb7b`](ruby/setup-ruby@97ecb7b) Update CRuby releases on Windows * [`6aaa311`](ruby/setup-ruby@6aaa311) Add ruby-4.0.4 * [`f02c009`](ruby/setup-ruby@f02c009) Fix docs.github.com URLs to avoid 301 redirects * [`98bfeb1`](ruby/setup-ruby@98bfeb1) Remove EOL Ruby versions from matrix example in README * [`59a7680`](ruby/setup-ruby@59a7680) Update Ruby version examples in README to include 4.0 * [`6459287`](ruby/setup-ruby@6459287) Replace outdated help.github.com URLs with docs.github.com * See full diff in [compare view](ruby/setup-ruby@c4e5b13...afeafc3) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/checkout` from 6.0.2 to 6.0.3 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v6.0.3 > ------ > > What's Changed > -------------- > > * Update changelog by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * Update changelog for v6.0.3 by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446) > > New Contributors > ---------------- > > * [`@yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > **Full Changelog**: <actions/checkout@v6...v6.0.3> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) > > v4.2.0 > ------ > > * Add Ref and Commit outputs by [`@lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180) > * Dependency updates by [`@dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872) > > v4.1.7 > ------ > > * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739) > * Bump actions/checkout from 3 to 4 by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697) > * Check out other refs/\* by commit by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774) ... (truncated) Commits * [`df4cb1c`](actions/checkout@df4cb1c) Update changelog for v6.0.3 ([#2446](https://redirect.github.com/actions/checkout/issues/2446)) * [`1cce339`](actions/checkout@1cce339) Fix checkout init for SHA-256 repositories ([#2439](https://redirect.github.com/actions/checkout/issues/2439)) * [`900f221`](actions/checkout@900f221) fix: expand merge commit SHA regex and add SHA-256 test cases ([#2414](https://redirect.github.com/actions/checkout/issues/2414)) * [`0c366fd`](actions/checkout@0c366fd) Update changelog ([#2357](https://redirect.github.com/actions/checkout/issues/2357)) * See full diff in [compare view](actions/checkout@de0fac2...df4cb1c) Updates `anthropics/claude-code-action` from 1.0.133 to 1.0.140 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.140 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.140> > > v1.0.139 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.139> > > v1.0.138 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.138> > > v1.0.137 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.137> > > v1.0.136 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.136> > > v1.0.135 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.135> > > v1.0.134 > -------- > > What's Changed > -------------- > > * Add workload identity federation support to base-action by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#1378](https://redirect.github.com/anthropics/claude-code-action/pull/1378) > * chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > * ci: bump checkout and setup-bun in test workflows to Node 24 releases by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1379](https://redirect.github.com/anthropics/claude-code-action/pull/1379) > > New Contributors > ---------------- > > * [`@ant-kurt`](https://github.com/ant-kurt) made their first contribution in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.134> Commits * [`fbda2eb`](anthropics/claude-code-action@fbda2eb) chore: bump Claude Code to 2.1.168 and Agent SDK to 0.3.168 * [`64de744`](anthropics/claude-code-action@64de744) chore: bump Claude Code to 2.1.167 and Agent SDK to 0.3.167 * [`4101658`](anthropics/claude-code-action@4101658) chore: bump Claude Code to 2.1.166 and Agent SDK to 0.3.166 * [`41ea764`](anthropics/claude-code-action@41ea764) chore: bump Claude Code to 2.1.165 and Agent SDK to 0.3.165 * [`0b1b620`](anthropics/claude-code-action@0b1b620) chore: bump Claude Code to 2.1.163 and Agent SDK to 0.3.163 * [`70a6e52`](anthropics/claude-code-action@70a6e52) chore: bump Claude Code to 2.1.162 and Agent SDK to 0.3.162 * [`36a69b6`](anthropics/claude-code-action@36a69b6) chore: bump Claude Code to 2.1.161 and Agent SDK to 0.3.161 * [`bfad70d`](anthropics/claude-code-action@bfad70d) ci: bump checkout and setup-bun in test workflows to Node 24 releases ([#1379](https://redirect.github.com/anthropics/claude-code-action/issues/1379)) * [`dc081a3`](anthropics/claude-code-action@dc081a3) chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) ([#1377](https://redirect.github.com/anthropics/claude-code-action/issues/1377)) * [`420335d`](anthropics/claude-code-action@420335d) Add workload identity federation support to base-action ([#1378](https://redirect.github.com/anthropics/claude-code-action/issues/1378)) * Additional commits viewable in [compare view](anthropics/claude-code-action@787c5a0...fbda2eb) Updates `github/codeql-action` from 4.36.0 to 4.36.2 Release notes *Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).* > v4.36.2 > ------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > v4.36.1 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) > * The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. [#3789](https://redirect.github.com/github/codeql-action/pull/3789) > * Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. [#3794](https://redirect.github.com/github/codeql-action/pull/3794) > * Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. [#3807](https://redirect.github.com/github/codeql-action/pull/3807) > * Update default CodeQL bundle version to [2.25.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2). [#3823](https://redirect.github.com/github/codeql-action/pull/3823) ... (truncated) Commits * [`8aad20d`](github/codeql-action@8aad20d) Merge pull request [#3949](https://redirect.github.com/github/codeql-action/issues/3949) from github/update-v4.36.2-dcb947ce1 * [`f521b08`](github/codeql-action@f521b08) Add additional changelog notes * [`8aeff0f`](github/codeql-action@8aeff0f) Update changelog for v4.36.2 * [`dcb947c`](github/codeql-action@dcb947c) Merge pull request [#3948](https://redirect.github.com/github/codeql-action/issues/3948) from github/update-bundle/codeql-bundle-v2.25.6 * [`c251bce`](github/codeql-action@c251bce) Add changelog note * [`62953c1`](github/codeql-action@62953c1) Update default bundle to codeql-bundle-v2.25.6 * [`423b570`](github/codeql-action@423b570) Merge pull request [#3946](https://redirect.github.com/github/codeql-action/issues/3946) from github/dependabot/npm\_and\_yarn/npm-minor-5d507a... * [`c35d1b1`](github/codeql-action@c35d1b1) Merge pull request [#3947](https://redirect.github.com/github/codeql-action/issues/3947) from github/dependabot/github\_actions/dot-github/wor... * [`cb1a588`](github/codeql-action@cb1a588) Merge pull request [#3937](https://redirect.github.com/github/codeql-action/issues/3937) from github/robertbrignull/waitForProcessing\_backoff * [`ba47406`](github/codeql-action@ba47406) Merge pull request [#3943](https://redirect.github.com/github/codeql-action/issues/3943) from github/henrymercer/cache-cli-version-info * Additional commits viewable in [compare view](github/codeql-action@7211b7c...8aad20d) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Iacfe226b185ac1314bd1a951834636b8edde7fc9 GitHub-PR: #15 GitHub-Hash: 202695363514f86a Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

… [skip ci] Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 6.0.2 to 6.0.3 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v6.0.3 > ------ > > What's Changed > -------------- > > * Update changelog by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * Update changelog for v6.0.3 by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446) > > New Contributors > ---------------- > > * [`@yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > **Full Changelog**: <actions/checkout@v6...v6.0.3> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) > > v4.2.0 > ------ > > * Add Ref and Commit outputs by [`@lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180) > * Dependency updates by [`@dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872) > > v4.1.7 > ------ > > * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739) > * Bump actions/checkout from 3 to 4 by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697) > * Check out other refs/\* by commit by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774) ... (truncated) Commits * [`df4cb1c`](actions/checkout@df4cb1c) Update changelog for v6.0.3 ([#2446](https://redirect.github.com/actions/checkout/issues/2446)) * [`1cce339`](actions/checkout@1cce339) Fix checkout init for SHA-256 repositories ([#2439](https://redirect.github.com/actions/checkout/issues/2439)) * [`900f221`](actions/checkout@900f221) fix: expand merge commit SHA regex and add SHA-256 test cases ([#2414](https://redirect.github.com/actions/checkout/issues/2414)) * [`0c366fd`](actions/checkout@0c366fd) Update changelog ([#2357](https://redirect.github.com/actions/checkout/issues/2357)) * See full diff in [compare view](actions/checkout@de0fac2...df4cb1c) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=6.0.2&new-version=6.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

Bumps actions/checkout from 6.0.2 to 6.0.3. ## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I655d025b837089f1183f3ba060ecea20d876a961 GitHub-PR: #52 GitHub-Hash: a11059816007969b Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps actions/checkout from 6.0.2 to 6.0.3. ## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I7c12c159c6b417e99ebc82ef600b4097cac4338e GitHub-PR: #203 GitHub-Hash: 072396327c1c1d07 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I12987ea7607d6d124195f9d55491ebd286071fb6 GitHub-PR: #13 GitHub-Hash: 5478b90e52c4b764 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I42650b65b0617feec74e198945080e0a1faf958f GitHub-PR: #19 GitHub-Hash: 99d6acb564c40b9e Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ib092bef20f4e58e6ec133a4c661aa6015b5382d7 GitHub-PR: #13 GitHub-Hash: cac35b3484706e4b Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I6369c999c21642d30e1419c4df359a5310c92c0b GitHub-PR: #22 GitHub-Hash: 9c210db6bd56dd66 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps actions/checkout from 6.0.2 to 6.0.3. ## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ia47cdaa6ee4844aa6ec31f0c2188e825b2db67ca GitHub-PR: #46 GitHub-Hash: 2dbd91df96429a7e Signed-off-by: lfit.gh2gerrit <releng+lfit-gh2gerrit@linuxfoundation.org>

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3. Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v6.0.3 > ------ > > What's Changed > -------------- > > * Update changelog by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * Update changelog for v6.0.3 by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446) > > New Contributors > ---------------- > > * [`@yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > **Full Changelog**: <actions/checkout@v6...v6.0.3> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) > > v4.2.0 > ------ > > * Add Ref and Commit outputs by [`@lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180) > * Dependency updates by [`@dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872) > > v4.1.7 > ------ > > * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739) > * Bump actions/checkout from 3 to 4 by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697) > * Check out other refs/\* by commit by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774) ... (truncated) Commits * [`df4cb1c`](actions/checkout@df4cb1c) Update changelog for v6.0.3 ([#2446](https://redirect.github.com/actions/checkout/issues/2446)) * [`1cce339`](actions/checkout@1cce339) Fix checkout init for SHA-256 repositories ([#2439](https://redirect.github.com/actions/checkout/issues/2439)) * [`900f221`](actions/checkout@900f221) fix: expand merge commit SHA regex and add SHA-256 test cases ([#2414](https://redirect.github.com/actions/checkout/issues/2414)) * [`0c366fd`](actions/checkout@0c366fd) Update changelog ([#2357](https://redirect.github.com/actions/checkout/issues/2357)) * See full diff in [compare view](actions/checkout@de0fac2...df4cb1c) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=6.0.2&new-version=6.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ia743dc99ba1b973b3e22f009941d988027ac251e GitHub-PR: #2 GitHub-Hash: 2687954e254a0be4 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 ... (truncated) ## Commits df4cb1c Update changelog for v6.0.3 (#2446) 1cce339 Fix checkout init for SHA-256 repositories (#2439) 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414) 0c366fd Update changelog (#2357) See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I3924a3bf47c843776aeb0d8386ede51e7bff1fd8 GitHub-PR: #4 GitHub-Hash: 4a7ce2f7eab37645 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

dimanardiyansah123-stack · 2026-06-17T01:25:30Z

Bl@

dimanardiyansah123-stack · 2026-06-17T01:25:58Z

BIH

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 Full Changelog: actions/checkout@v6.0.1...v6.0.2 v6.0.1 What's Changed Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 Clarify v6 README by @ericsciple in actions/checkout#2328 Full Changelog: actions/checkout@v6...v6.0.1 v6.0.0 What's Changed Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 Persist creds to a separate file by @ericsciple in actions/checkout#2286 v6-beta by @ericsciple in actions/checkout#2298 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I0257ff54336f6a5a04de119f21042027498aabc9 GitHub-PR: #13 GitHub-Hash: a973259582b94e51 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 Full Changelog: actions/checkout@v6.0.1...v6.0.2 v6.0.1 What's Changed Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 Clarify v6 README by @ericsciple in actions/checkout#2328 Full Changelog: actions/checkout@v6...v6.0.1 v6.0.0 What's Changed Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 Persist creds to a separate file by @ericsciple in actions/checkout#2286 v6-beta by @ericsciple in actions/checkout#2298 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ie5e77b7c4904eafa826efbb218ff1e6647103254 GitHub-PR: #22 GitHub-Hash: 8537f31db1e6f0df Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I6f40f47b8a569dc13f6ae337937ada87c02ea350 GitHub-PR: #23 GitHub-Hash: 63f67404f53a219b Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 Full Changelog: actions/checkout@v6.0.1...v6.0.2 v6.0.1 What's Changed Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 Clarify v6 README by @ericsciple in actions/checkout#2328 Full Changelog: actions/checkout@v6...v6.0.1 v6.0.0 What's Changed Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 Persist creds to a separate file by @ericsciple in actions/checkout#2286 v6-beta by @ericsciple in actions/checkout#2298 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I11d6a44ae523128d952533074e84405ad7fdd05d GitHub-PR: #13 GitHub-Hash: 0badd86242e6004e Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 Full Changelog: actions/checkout@v6.0.1...v6.0.2 v6.0.1 What's Changed Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 Clarify v6 README by @ericsciple in actions/checkout#2328 Full Changelog: actions/checkout@v6...v6.0.1 v6.0.0 What's Changed Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 Persist creds to a separate file by @ericsciple in actions/checkout#2286 v6-beta by @ericsciple in actions/checkout#2298 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I99dda40cb3576bf7b6e13721ce4a6c6f0b044aba GitHub-PR: #29 GitHub-Hash: c16a264a8087c924 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org> Signed-off-by: danielhanrahan <daniel.hanrahan@est.tech>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 Full Changelog: actions/checkout@v6.0.1...v6.0.2 v6.0.1 What's Changed Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 Clarify v6 README by @ericsciple in actions/checkout#2328 Full Changelog: actions/checkout@v6...v6.0.1 v6.0.0 What's Changed Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 Persist creds to a separate file by @ericsciple in actions/checkout#2286 v6-beta by @ericsciple in actions/checkout#2298 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I78ac5cd7f01725ebed9dd225b0dbcecc189e3812 GitHub-PR: #10 GitHub-Hash: 1d9e523e8acbc2f2 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org> Signed-off-by: danielhanrahan <daniel.hanrahan@est.tech>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 Full Changelog: actions/checkout@v6.0.1...v6.0.2 v6.0.1 What's Changed Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 Clarify v6 README by @ericsciple in actions/checkout#2328 Full Changelog: actions/checkout@v6...v6.0.1 v6.0.0 What's Changed Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 Persist creds to a separate file by @ericsciple in actions/checkout#2286 v6-beta by @ericsciple in actions/checkout#2298 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ief3eb0a5163dfd1a8594d356e46cc0169d4863d9 GitHub-PR: #16 GitHub-Hash: fb0050762f28d2d0 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Idee1ce8a6d9755eb76ddc157300fe9e43b92c7ef GitHub-PR: #7 GitHub-Hash: 442a705d918ba192 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 Full Changelog: actions/checkout@v6.0.1...v6.0.2 v6.0.1 What's Changed Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 Clarify v6 README by @ericsciple in actions/checkout#2328 Full Changelog: actions/checkout@v6...v6.0.1 v6.0.0 What's Changed Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 Persist creds to a separate file by @ericsciple in actions/checkout#2286 v6-beta by @ericsciple in actions/checkout#2298 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ibc22099a6d9a314f3e135181632d5fdc6a64d028 GitHub-PR: #10 GitHub-Hash: 811f6f884f9e33c3 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Id2b6b190bb392ad47617238f044f65b7189300fb GitHub-PR: #18 GitHub-Hash: eec56e04a0193481 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps actions/checkout from 6.0.2 to 7.0.0. ## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I3137cb6d46dfcdf17d30972a6c381adb677232fe GitHub-PR: #15 GitHub-Hash: 2c6aa2c4b4501111 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/checkout` from 6.0.2 to 6.0.3 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v6.0.3 > ------ > > What's Changed > -------------- > > * Update changelog by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * Update changelog for v6.0.3 by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446) > > New Contributors > ---------------- > > * [`@yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > **Full Changelog**: <actions/checkout@v6...v6.0.3> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) > > v4.2.0 > ------ > > * Add Ref and Commit outputs by [`@lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180) > * Dependency updates by [`@dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872) > > v4.1.7 > ------ > > * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739) > * Bump actions/checkout from 3 to 4 by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697) > * Check out other refs/\* by commit by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774) ... (truncated) Commits * [`df4cb1c`](actions/checkout@df4cb1c) Update changelog for v6.0.3 ([ArcadeData#2446](https://redirect.github.com/actions/checkout/issues/2446)) * [`1cce339`](actions/checkout@1cce339) Fix checkout init for SHA-256 repositories ([ArcadeData#2439](https://redirect.github.com/actions/checkout/issues/2439)) * [`900f221`](actions/checkout@900f221) fix: expand merge commit SHA regex and add SHA-256 test cases ([#2414](https://redirect.github.com/actions/checkout/issues/2414)) * [`0c366fd`](actions/checkout@0c366fd) Update changelog ([ArcadeData#2357](https://redirect.github.com/actions/checkout/issues/2357)) * See full diff in [compare view](actions/checkout@de0fac2...df4cb1c) Updates `anthropics/claude-code-action` from 1.0.133 to 1.0.140 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.140 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.140> > > v1.0.139 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.139> > > v1.0.138 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.138> > > v1.0.137 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.137> > > v1.0.136 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.136> > > v1.0.135 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.135> > > v1.0.134 > -------- > > What's Changed > -------------- > > * Add workload identity federation support to base-action by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#1378](https://redirect.github.com/anthropics/claude-code-action/pull/1378) > * chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > * ci: bump checkout and setup-bun in test workflows to Node 24 releases by [`@ant-kurt`](https://github.com/ant-kurt) in [anthropics/claude-code-action#1379](https://redirect.github.com/anthropics/claude-code-action/pull/1379) > > New Contributors > ---------------- > > * [`@ant-kurt`](https://github.com/ant-kurt) made their first contribution in [anthropics/claude-code-action#1377](https://redirect.github.com/anthropics/claude-code-action/pull/1377) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.134> Commits * [`fbda2eb`](anthropics/claude-code-action@fbda2eb) chore: bump Claude Code to 2.1.168 and Agent SDK to 0.3.168 * [`64de744`](anthropics/claude-code-action@64de744) chore: bump Claude Code to 2.1.167 and Agent SDK to 0.3.167 * [`4101658`](anthropics/claude-code-action@4101658) chore: bump Claude Code to 2.1.166 and Agent SDK to 0.3.166 * [`41ea764`](anthropics/claude-code-action@41ea764) chore: bump Claude Code to 2.1.165 and Agent SDK to 0.3.165 * [`0b1b620`](anthropics/claude-code-action@0b1b620) chore: bump Claude Code to 2.1.163 and Agent SDK to 0.3.163 * [`70a6e52`](anthropics/claude-code-action@70a6e52) chore: bump Claude Code to 2.1.162 and Agent SDK to 0.3.162 * [`36a69b6`](anthropics/claude-code-action@36a69b6) chore: bump Claude Code to 2.1.161 and Agent SDK to 0.3.161 * [`bfad70d`](anthropics/claude-code-action@bfad70d) ci: bump checkout and setup-bun in test workflows to Node 24 releases ([ArcadeData#1379](https://redirect.github.com/anthropics/claude-code-action/issues/1379)) * [`dc081a3`](anthropics/claude-code-action@dc081a3) chore: bump actions/setup-node from v4.4.0 to v6.4.0 (Node.js 24) ([ArcadeData#1377](https://redirect.github.com/anthropics/claude-code-action/issues/1377)) * [`420335d`](anthropics/claude-code-action@420335d) Add workload identity federation support to base-action ([ArcadeData#1378](https://redirect.github.com/anthropics/claude-code-action/issues/1378)) * Additional commits viewable in [compare view](anthropics/claude-code-action@787c5a0...fbda2eb) Updates `github/codeql-action` from 4.36.0 to 4.36.2 Release notes *Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).* > v4.36.2 > ------- > > * Cache CodeQL CLI version information across Actions steps. [ArcadeData#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [ArcadeData#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [ArcadeData#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > v4.36.1 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [ArcadeData#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [ArcadeData#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [ArcadeData#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [ArcadeData#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [ArcadeData#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [ArcadeData#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [ArcadeData#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [ArcadeData#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [ArcadeData#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [ArcadeData#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [ArcadeData#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [ArcadeData#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [ArcadeData#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [ArcadeData#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [ArcadeData#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [ArcadeData#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [ArcadeData#3795](https://redirect.github.com/github/codeql-action/pull/3795) > * The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. [ArcadeData#3789](https://redirect.github.com/github/codeql-action/pull/3789) > * Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. [ArcadeData#3794](https://redirect.github.com/github/codeql-action/pull/3794) > * Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. [#3807](https://redirect.github.com/github/codeql-action/pull/3807) > * Update default CodeQL bundle version to [2.25.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2). [ArcadeData#3823](https://redirect.github.com/github/codeql-action/pull/3823) ... (truncated) Commits * [`8aad20d`](github/codeql-action@8aad20d) Merge pull request [ArcadeData#3949](https://redirect.github.com/github/codeql-action/issues/3949) from github/update-v4.36.2-dcb947ce1 * [`f521b08`](github/codeql-action@f521b08) Add additional changelog notes * [`8aeff0f`](github/codeql-action@8aeff0f) Update changelog for v4.36.2 * [`dcb947c`](github/codeql-action@dcb947c) Merge pull request [ArcadeData#3948](https://redirect.github.com/github/codeql-action/issues/3948) from github/update-bundle/codeql-bundle-v2.25.6 * [`c251bce`](github/codeql-action@c251bce) Add changelog note * [`62953c1`](github/codeql-action@62953c1) Update default bundle to codeql-bundle-v2.25.6 * [`423b570`](github/codeql-action@423b570) Merge pull request [ArcadeData#3946](https://redirect.github.com/github/codeql-action/issues/3946) from github/dependabot/npm\_and\_yarn/npm-minor-5d507a... * [`c35d1b1`](github/codeql-action@c35d1b1) Merge pull request [ArcadeData#3947](https://redirect.github.com/github/codeql-action/issues/3947) from github/dependabot/github\_actions/dot-github/wor... * [`cb1a588`](github/codeql-action@cb1a588) Merge pull request [ArcadeData#3937](https://redirect.github.com/github/codeql-action/issues/3937) from github/robertbrignull/waitForProcessing\_backoff * [`ba47406`](github/codeql-action@ba47406) Merge pull request [ArcadeData#3943](https://redirect.github.com/github/codeql-action/issues/3943) from github/henrymercer/cache-cli-version-info * Additional commits viewable in [compare view](github/codeql-action@7211b7c...8aad20d) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I11c9bee0262deb835df192a8c23412c50fe69402 GitHub-PR: #17 GitHub-Hash: 1c2020fcde65fec6 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I294dd3eec172c62c66b931b1e0f93a0748426dee GitHub-PR: #16 GitHub-Hash: d4285b70708b90a9 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I63ca73b6762aa694dd4b616de41078fd26946e4a GitHub-PR: #26 GitHub-Hash: 6ca18bfe9d211425 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ief80f686b084fa12ba0e1be3aea94d8c02029591 GitHub-PR: #16 GitHub-Hash: 5ad3b7a8ba689fb2 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ib61411d1eb405b39acef151554cd4e81583d413a GitHub-PR: #19 GitHub-Hash: bfe386d185052ed3 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I3af03f24ae80124618078b71f104ec087dd421a0 GitHub-PR: #19 GitHub-Hash: ea33758d5f936ae5 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I2d05db49a05b18a8c80c137417470a2ea8891709 GitHub-PR: #15 GitHub-Hash: 56a78e46492ad45b Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I73efc7683e32a4ef0fc20213debe36d45fbfe169 GitHub-PR: #15 GitHub-Hash: cda41fe1602c74e8 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I250aeabfd3e3865edf4c6c502d96af2edcba58f4 GitHub-PR: #13 GitHub-Hash: 6a7e44c90306e2b8 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I1c2b4bb825f932c9b97a43ed506dca29c9e0f629 GitHub-PR: #13 GitHub-Hash: 735d57219fd2065e Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v7.0.0 > ------ > > What's Changed > -------------- > > * block checking out fork pr for pull\_request\_target and workflow\_run by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2454](https://redirect.github.com/actions/checkout/pull/2454) > * Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2458](https://redirect.github.com/actions/checkout/pull/2458) > * Bump flatted from 3.3.1 to 3.4.2 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2460](https://redirect.github.com/actions/checkout/pull/2460) > * Bump js-yaml from 4.1.0 to 4.2.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2461](https://redirect.github.com/actions/checkout/pull/2461) > * Bump `@actions/core` and `@actions/tool-cache` and Remove uuid by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2459](https://redirect.github.com/actions/checkout/pull/2459) > * upgrade module to esm and update dependencies by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2463](https://redirect.github.com/actions/checkout/pull/2463) > * Bump the minor-npm-dependencies group across 1 directory with 3 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2462](https://redirect.github.com/actions/checkout/pull/2462) > * getting ready for checkout v7 release by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2464](https://redirect.github.com/actions/checkout/pull/2464) > * update error wording by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2467](https://redirect.github.com/actions/checkout/pull/2467) > > New Contributors > ---------------- > > * [`@aiqiaoy`](https://github.com/aiqiaoy) made their first contribution in [actions/checkout#2454](https://redirect.github.com/actions/checkout/pull/2454) > > **Full Changelog**: <actions/checkout@v6.0.3...v7.0.0> > > v6.0.3 > ------ > > What's Changed > -------------- > > * Update changelog by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2357](https://redirect.github.com/actions/checkout/pull/2357) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * Update changelog for v6.0.3 by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2446](https://redirect.github.com/actions/checkout/pull/2446) > > New Contributors > ---------------- > > * [`@yaananth`](https://github.com/yaananth) made their first contribution in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > **Full Changelog**: <actions/checkout@v6...v6.0.3> > > v6.0.2 > ------ > > What's Changed > -------------- > > * Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2355](https://redirect.github.com/actions/checkout/pull/2355) > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > **Full Changelog**: <actions/checkout@v6.0.1...v6.0.2> > > v6.0.1 > ------ > > What's Changed > -------------- > > * Update all references from v5 and v4 to v6 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2314](https://redirect.github.com/actions/checkout/pull/2314) > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > * Clarify v6 README by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2328](https://redirect.github.com/actions/checkout/pull/2328) > > **Full Changelog**: <actions/checkout@v6...v6.0.1> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v7.0.0 > ------ > > * Block checking out fork PR for pull\_request\_target and workflow\_run by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2454](https://redirect.github.com/actions/checkout/pull/2454) > * Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2458](https://redirect.github.com/actions/checkout/pull/2458) > * Bump flatted from 3.3.1 to 3.4.2 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2460](https://redirect.github.com/actions/checkout/pull/2460) > * Bump js-yaml from 4.1.0 to 4.2.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2461](https://redirect.github.com/actions/checkout/pull/2461) > * Bump `@actions/core` and `@actions/tool-cache` and Remove uuid by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2459](https://redirect.github.com/actions/checkout/pull/2459) > * upgrade module to esm and update dependencies by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2463](https://redirect.github.com/actions/checkout/pull/2463) > * Bump the minor-npm-dependencies group across 1 directory with 3 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/checkout#2462](https://redirect.github.com/actions/checkout/pull/2462) > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) ... (truncated) Commits * [`9c091bb`](actions/checkout@9c091bb) update error wording ([#2467](https://redirect.github.com/actions/checkout/issues/2467)) * [`1044a6d`](actions/checkout@1044a6d) getting ready for checkout v7 release ([#2464](https://redirect.github.com/actions/checkout/issues/2464)) * [`f028218`](actions/checkout@f028218) Bump the minor-npm-dependencies group across 1 directory with 3 updates ([#2462](https://redirect.github.com/actions/checkout/issues/2462)) * [`d914b26`](actions/checkout@d914b26) upgrade module to esm and update dependencies ([#2463](https://redirect.github.com/actions/checkout/issues/2463)) * [`537c7ef`](actions/checkout@537c7ef) Bump `@actions/core` and `@actions/tool-cache` and Remove uuid ([#2459](https://redirect.github.com/actions/checkout/issues/2459)) * [`130a169`](actions/checkout@130a169) Bump js-yaml from 4.1.0 to 4.2.0 ([#2461](https://redirect.github.com/actions/checkout/issues/2461)) * [`7d09575`](actions/checkout@7d09575) Bump flatted from 3.3.1 to 3.4.2 ([#2460](https://redirect.github.com/actions/checkout/issues/2460)) * [`0f9f3aa`](actions/checkout@0f9f3aa) Bump actions/publish-immutable-action ([#2458](https://redirect.github.com/actions/checkout/issues/2458)) * [`f9e715a`](actions/checkout@f9e715a) block checking out fork pr for pull\_request\_target and workflow\_run ([#2454](https://redirect.github.com/actions/checkout/issues/2454)) * See full diff in [compare view](actions/checkout@v6...v7) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=6&new-version=7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I60905270e0c994532552d21318d25456cdfaf6e5 GitHub-PR: #15 GitHub-Hash: 9512ddf06717e2c1 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

## Release notes Sourced from actions/checkout's releases. v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 9c091bb update error wording (#2467) 1044a6d getting ready for checkout v7 release (#2464) f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462) d914b26 upgrade module to esm and update dependencies (#2463) 537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459) 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461) 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460) 0f9f3aa Bump actions/publish-immutable-action (#2458) f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454) df4cb1c Update changelog for v6.0.3 (#2446) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I060a5a44768557bfec5430b26e0415849372f885 GitHub-PR: #27 GitHub-Hash: f919752d7f461b1c Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Bumps the github-actions group with 7 updates: Package From To actions/checkout 4.3.1 7.0.1 actions/setup-python 5.6.0 7.0.0 actions/upload-artifact 4.6.2 7.0.1 ansible-community/ansible-test-gh-action 1.17.0 1.18.0 actions/github-script 7.1.0 9.0.0 dawidd6/action-download-artifact 16 21 SonarSource/sonarqube-scan-action 7.0.0 8.2.1 Updates actions/checkout from 4.3.1 to 7.0.1 Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.1.0 What's Changed [BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in actions/checkout#2500 backport fixes to releases-v6 by @aiqiaoy in actions/checkout#2527 https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change Full Changelog: actions/checkout@v6.0.3...v6.1.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 Escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view Updates actions/setup-python from 5.6.0 to 7.0.0 Release notes Sourced from actions/setup-python's releases. v7.0.0 What's Changed Enhancements Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-python#1330 Pin SHA commits and update docs with latest versions by @HarithaVattikuti in actions/setup-python#1338 Remove the pip-install input by @gowridurgad in actions/setup-python#1336 Bug Fix Fix to Classify stderr warning messages as warnings instead of errors in annotations by @lmvysakh in actions/setup-python#1335 Validate and retry manifest fetch to prevent silent failures by @priyagupta108 in actions/setup-python#1332 Dependency Upgrade Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @dependabot in actions/setup-python#1328 Remove EOL Python versions and Bumps numpy text fixture by @priya-kinthali in actions/setup-python#1333 Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-python#1337 New Contributors @lmvysakh made their first contribution in actions/setup-python#1335 @philip-gai made their first contribution in actions/setup-python#1337 Full Changelog: actions/setup-python@v6...v7.0.0 v6.3.0 What's Changed Enhancement Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323 Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040 Dependency update Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281 Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303 Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324 Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322 Documentation Update advanced-usage.md by @Dunky-Z in actions/setup-python#811 New Contributors @gowridurgad with @Copilot made their first contribution in actions/setup-python#1303 @jasongin made their first contribution in actions/setup-python#1324 @Dunky-Z made their first contribution in actions/setup-python#811 Full Changelog: actions/setup-python@v6.2.0...v6.3.0 v6.2.0 What's Changed Dependency Upgrades Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259 ... (truncated) Commits 5fda3b9 Pin SHA commits and update docs with latest versions (#1338) 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0 0f3a009 Remove the pip-install input (#1336) f8cf429 Migrate to ESM and upgrade dependencies (#1330) 54baeea Validate and retry manifest fetch to prevent silent failures (#1332) c709277 Annotation code fix (#1335) 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333) 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328) ece7cb0 Fix pip cache error handling on Windows. (#1040) 1d18d7a Update advanced-usage.md (#811) Additional commits viewable in compare view Updates actions/upload-artifact from 4.6.2 to 7.0.1 Release notes Sourced from actions/upload-artifact's releases. v7.0.1 What's Changed Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795 Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796 Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797 Full Changelog: actions/upload-artifact@v7...v7.0.1 v7.0.0 v7 What's new Direct Uploads Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file. ESM To support new versions of the @actions/* packages, we've upgraded the package to ESM. What's Changed Add proxy integration test by @Link- in actions/upload-artifact#754 Upgrade the module to ESM and bump dependencies by @danwkennedy in actions/upload-artifact#762 Support direct file uploads by @danwkennedy in actions/upload-artifact#764 New Contributors @Link- made their first contribution in actions/upload-artifact#754 Full Changelog: actions/upload-artifact@v6...v7.0.0 v6.0.0 v6 - What's new [!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. Node.js 24 This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. What's Changed Upload Artifact Node 24 support by @salmanmkc in actions/upload-artifact#719 fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in actions/upload-artifact#744 prepare release v6.0.0 for Node.js 24 support by @salmanmkc in actions/upload-artifact#745 Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0 v5.0.0 What's Changed ... (truncated) Commits 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency 634250c Include changes in typespec/ts-http-runtime 0.3.5 e454baa Readme: bump all the example versions to v7 (#796) 74fad66 Update the readme with direct upload details (#795) bbbca2d Support direct file uploads (#764) 589182c Upgrade the module to ESM and bump dependencies (#762) 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests 02a8460 Add proxy integration test b7c566a Merge pull request #745 from actions/upload-artifact-v6-release e516bc8 docs: correct description of Node.js 24 support in README Additional commits viewable in compare view Updates ansible-community/ansible-test-gh-action from 1.17.0 to 1.18.0 Release notes Sourced from ansible-community/ansible-test-gh-action's releases. v1.18.0 What's Changed Project Changes Support ansible-core 2.20 and 2.21, bump default ansible-core version to 2.21 by @felixfontein in ansible-community/ansible-test-gh-action#125 Dependencies Bump codecov/codecov-action from 4.5.0 to 5.4.3 by @dependabot[bot] in ansible-community/ansible-test-gh-action#101 Bump actions/checkout from 4 to 5 by @dependabot[bot] in ansible-community/ansible-test-gh-action#104 Bump codecov/codecov-action from 5.4.3 to 5.5.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#105 Bump codecov/codecov-action from 5.5.0 to 5.5.1 by @dependabot[bot] in ansible-community/ansible-test-gh-action#107 Bump actions/setup-python from 5 to 6 by @dependabot[bot] in ansible-community/ansible-test-gh-action#108 Bump actions/checkout from 5 to 6 by @dependabot[bot] in ansible-community/ansible-test-gh-action#110 Bump codecov/codecov-action from 5.5.1 to 5.5.2 by @dependabot[bot] in ansible-community/ansible-test-gh-action#111 Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in ansible-community/ansible-test-gh-action#114 Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#115 Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in ansible-community/ansible-test-gh-action#119 Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#122 Bump actions/checkout from 6 to 7 by @dependabot[bot] in ansible-community/ansible-test-gh-action#126 Full Changelog: ansible-community/ansible-test-gh-action@v1.17.0...v1.18.0 Commits 6ded727 Merge pull request #126 from ansible-community/dependabot/github_actions/acti... e0d4c98 Bump actions/checkout from 6 to 7 6c86f3f Merge pull request #125 from felixfontein/ansible-core 48b041f Merge pull request #122 from ansible-community/dependabot/github_actions/code... 3272591 Merge pull request #124 from felixfontein/fix-pre-commit c0626df Bump default ansible-core to 2.21 7dfd27a Support ansible-core 2.20 and 2.21 c8e46ea Bump pre-commit flake8 additional deps 13e4993 Bump codecov/codecov-action from 6.0.1 to 7.0.0 8b1ac34 Merge pull request #119 from ansible-community/dependabot/github_actions/code... Additional commits viewable in compare view Updates actions/github-script from 7.1.0 to 9.0.0 Release notes Sourced from actions/github-script's releases. v9.0.0 New features: getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples. Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing. Breaking changes: require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed. getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it. If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility. What's Changed Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in actions/github-script#695 ci: use deployment: false for integration test environments by @salmanmkc in actions/github-script#712 feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in actions/github-script#700 New Contributors @Copilot made their first contribution in actions/github-script#695 Full Changelog: actions/github-script@v8.0.0...v9.0.0 v8.0.0 What's Changed Update Node.js version support to 24.x by @salmanmkc in actions/github-script#637 README for updating actions/github-script from v7 to v8 by @sneha-krip in actions/github-script#653 ⚠️ Minimum Compatible Runner Version v2.327.1 Release Notes Make sure your runner is updated to this version or newer to use this release. New Contributors @salmanmkc made their first contribution in actions/github-script#637 @sneha-krip made their first contribution in actions/github-script#653 Full Changelog: actions/github-script@v7.1.0...v8.0.0 Commits 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re... ca10bbd fix: use @octokit/core/types import for v7 compatibility 86e48e2 merge: incorporate main branch changes c108472 chore: rebuild dist for v9 upgrade and getOctokit factory afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag... ff8117e ci: fix user-agent test to handle orchestration ID 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests 3953caf docs: update README examples from @v8 to @v9, add getOctokit docs and v9 brea... c17d55b ci: add getOctokit integration test job a047196 test: add getOctokit integration tests via callAsyncFunction Additional commits viewable in compare view Updates dawidd6/action-download-artifact from 16 to 21 Release notes Sourced from dawidd6/action-download-artifact's releases. v21 What's Changed build(deps): bump @actions/github from 9.0.0 to 9.1.0 by @dependabot[bot] in dawidd6/action-download-artifact#396 build(deps): bump filesize from 11.0.15 to 11.0.16 by @dependabot[bot] in dawidd6/action-download-artifact#399 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 by @dependabot[bot] in dawidd6/action-download-artifact#402 build(deps): bump @actions/github from 9.1.0 to 9.1.1 by @dependabot[bot] in dawidd6/action-download-artifact#400 build(deps): bump @actions/core from 3.0.0 to 3.0.1 by @dependabot[bot] in dawidd6/action-download-artifact#401 build(deps): bump filesize from 11.0.16 to 11.0.17 by @dependabot[bot] in dawidd6/action-download-artifact#404 Download artifacts in creation order by @matejdro in dawidd6/action-download-artifact#398 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#405 New Contributors @matejdro made their first contribution in dawidd6/action-download-artifact#398 Full Changelog: dawidd6/action-download-artifact@v20...v21 v20 What's Changed build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @dependabot[bot] in dawidd6/action-download-artifact#387 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#388 build(deps): bump filesize from 11.0.13 to 11.0.14 by @dependabot[bot] in dawidd6/action-download-artifact#389 build(deps): bump brace-expansion by @dependabot[bot] in dawidd6/action-download-artifact#390 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#391 build(deps): bump filesize from 11.0.14 to 11.0.15 by @dependabot[bot] in dawidd6/action-download-artifact#392 build(deps): bump adm-zip from 0.5.16 to 0.5.17 by @dependabot[bot] in dawidd6/action-download-artifact#393 build(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in dawidd6/action-download-artifact#394 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#395 Full Changelog: dawidd6/action-download-artifact@v19...v20 v19 What's Changed build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @dependabot[bot] in dawidd6/action-download-artifact#385 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#386 Full Changelog: dawidd6/action-download-artifact@v18...v19 v18 What's Changed build(deps): bump @actions/artifact from 6.2.0 to 6.2.1 by @dependabot[bot] in dawidd6/action-download-artifact#381 build(deps): bump undici from 6.23.0 to 6.24.0 by @dependabot[bot] in dawidd6/action-download-artifact#382 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#383 Full Changelog: dawidd6/action-download-artifact@v17...v18 v17 What's Changed ... (truncated) Commits b6e2e70 node_modules: update (#405) 1708cb3 Download artifacts in creation order (#398) 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404) 0414c42 build(deps): bump @actions/core from 3.0.0 to 3.0.1 (#401) c802aad build(deps): bump @actions/github from 9.1.0 to 9.1.1 (#400) ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402) 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399) 09d0677 build(deps): bump @actions/github from 9.0.0 to 9.1.0 (#396) 8305c0f node_modules: update (#395) 542af03 build(deps): bump lodash from 4.17.23 to 4.18.1 (#394) Additional commits viewable in compare view Updates SonarSource/sonarqube-scan-action from 7.0.0 to 8.2.1 Release notes Sourced from SonarSource/sonarqube-scan-action's releases. v8.2.1 What's Changed Bug fix SQSCANGHA-156 GPG signature verification fails when temporary directory path is too long Full Changelog: SonarSource/sonarqube-scan-action@v8.2.0...v8.2.1 v8.2.0 What's Changed SQSCANGHA-149 Add scannerBinariesAuthHeader input by @henryju in SonarSource/sonarqube-scan-action#246 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support by @henryju in SonarSource/sonarqube-scan-action#249 SQSCANGHA-84 Remove outdated wget/curl references by @henryju in SonarSource/sonarqube-scan-action#248 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4-part version by @henryju in SonarSource/sonarqube-scan-action#250 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows by @henryju in SonarSource/sonarqube-scan-action#251 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0 v8.1.0 What's Changed SQSCANGHA-146 Add proxy support for GPG keyserver access by @henryju in SonarSource/sonarqube-scan-action#244 SQSCANGHA-148 Update SonarScanner CLI to 8.1.0.6389 by @github-actions[bot] in SonarSource/sonarqube-scan-action#232 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0 v8.0.0 What's Changed Breaking change SQSCANGHA-145 Set skipSignatureVerification default value to false by @antoine-vinot-sonarsource in SonarSource/sonarqube-scan-action#241 Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0 v7.2.1 What's Changed SQSCANGHA-140 Set skipSignatureVerification default value to true to avoid breaking change by @gmmcal in SonarSource/sonarqube-scan-action#240 Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.1 v7.2.0 What's Changed SQSCANGHA-133 Upgrade the Node version used in UTs + contribution guide by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#226 SC-45750 Migrate to dateless license headers by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#229 SQSCANGHA-134 Upgrade the libraries to latest version by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#227 ... (truncated) Commits 2291811 SQSCANGHA-156 GPG signature verification fails when temporary directory path ... 7cdc154 SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (#255) 45f2736 SQSCANGHA-151 Change Code Owners (#254) 7138816 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows (#251) 3581139 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4... c9d327c SQSCANGHA-84 Remove outdated wget/curl references b243e51 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support 375c3f5 SQSCANGHA-149 Add scannerBinariesAuthHeader input for authenticated binary do... 9c78323 SQSCANGHA-144 Add gate jobs to QA workflows for branch protection 7006c44 Update SonarScanner CLI to 8.1.0.6389 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore con... Description has been truncated Reviewed-by: Mark Chappell

## Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.1.0 What's Changed [BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in actions/checkout#2500 backport fixes to releases-v6 by @aiqiaoy in actions/checkout#2527 https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change Full Changelog: actions/checkout@v6.0.3...v6.1.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 Escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I8a78c1a0b9023d089ed1c56ad0cfd1f43ff308fd GitHub-PR: #62 GitHub-Hash: 2b2ae1929fbd0b16 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Update changelog for v6.0.3

fd07e4b

yaananth marked this pull request as ready for review June 2, 2026 14:24

Copilot AI review requested due to automatic review settings June 2, 2026 14:24

Copilot started reviewing on behalf of yaananth June 2, 2026 14:24 View session

Copilot AI reviewed Jun 2, 2026

View reviewed changes

ericsciple approved these changes Jun 2, 2026

View reviewed changes

yaananth merged commit df4cb1c into main Jun 2, 2026
12 checks passed

yaananth deleted the v6.0.3 branch June 2, 2026 14:31

github-actions Bot mentioned this pull request Jun 3, 2026

chore(deps): update actions/checkout digest to df4cb1c MikaelElkiaer/nvim-config#92

Merged

1 task

mochashanyao mentioned this pull request Jun 17, 2026

chore(ci): bump actions/checkout from 4.3.1 to 6.0.3 Mininglamp-OSS/octo-web#405

Closed

github-actions Bot mentioned this pull request Jun 18, 2026

Bump actions/checkout from 6 to 7 labrynx/auto_comments#35

Merged

This was referenced Jun 24, 2026

Bump GitHub Actions dependencies FarmGPU/docs#1

Merged

Bump GitHub Actions dependencies FarmGPU/netbox-agent#4

Closed

031282 mentioned this pull request Jul 1, 2026

Bump actions/checkout from 6 to 7 031282/skills-introduction-to-github#3

Open

Navigation Menu

Uh oh!

Update changelog for v6.0.3 - #2446

Update changelog for v6.0.3#2446
yaananth merged 1 commit into
mainfrom
v6.0.3

yaananth commented Jun 2, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

dimanardiyansah123-stack commented Jun 17, 2026

Uh oh!

dimanardiyansah123-stack commented Jun 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

yaananth commented Jun 2, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

dimanardiyansah123-stack commented Jun 17, 2026

Uh oh!

dimanardiyansah123-stack commented Jun 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants