Skip to content

Bump and pin actions/checkout from 3.6.0 to v6.0.3 SHA - #14003

Merged
JanProvaznik merged 2 commits into
mainfrom
dependabot/github_actions/actions/checkout-6.0.3
Jun 9, 2026
Merged

Bump and pin actions/checkout from 3.6.0 to v6.0.3 SHA#14003
JanProvaznik merged 2 commits into
mainfrom
dependabot/github_actions/actions/checkout-6.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Context

This PR updates the checkout action used in skill-validation.yml from actions/checkout@3.6.0 to the v6.0.3 release, and incorporates follow-up review feedback to pin the action to the exact commit SHA.

Changes Made

  • Updated the checkout step in .github/workflows/skill-validation.yml from actions/checkout@3.6.0.
  • Pinned actions/checkout to the v6.0.3 commit SHA:
    • df4cb1c069e1874edd31b4311f1884172cec0e10 (# v6.0.3)

Testing

  • Validated workflow YAML parses successfully.
  • Ran security/quality validation for the change:
    • Code review check reported no issues.
    • CodeQL scan reported no alerts.

Notes

  • This keeps the dependency update while aligning with repository guidance to pin GitHub Actions to immutable SHAs.

Bumps [actions/checkout](https://github.com/actions/checkout) from 3.6.0 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v3.6.0...v6.0.3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 8, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 8, 2026 15:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 8, 2026
Comment thread .github/workflows/skill-validation.yml Outdated
Co-authored-by: rainersigwald <3347530+rainersigwald@users.noreply.github.com>
Copilot AI changed the title Bump actions/checkout from 3.6.0 to 6.0.3 Bump and pin actions/checkout from 3.6.0 to v6.0.3 SHA Jun 8, 2026
Copilot AI requested a review from rainersigwald June 8, 2026 16:05
@JanProvaznik
JanProvaznik merged commit b301357 into main Jun 9, 2026
14 checks passed
@JanProvaznik
JanProvaznik deleted the dependabot/github_actions/actions/checkout-6.0.3 branch June 9, 2026 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants