Repository navigation
Add support for partial checkout filters - #1396
Conversation
|
bump +1 this would be nice to use with Yarn |
|
i've used this fork/branch successfully with both |
|
I think It would be almost exactly as small, but without breaking the Git history. |
| CLONE_FILTER=$(git config --local --get remote.origin.partialclonefilter) | ||
|
|
||
| if [ "$CLONE_FILTER" != "blob:none" ]; then | ||
| echo "Expected ./fetch-filter/.git/config to have 'remote.origin.partialclonefilter' set to 'blob:none'" |
|
This is exactly what we need in our repo. Speeds up checkout by a factor of 4 without breaking git history so our existing logic that uses |
|
Thanks for your contribution. Do you mind adding an update to https://github.com/actions/checkout/blob/72f2cec99f417b1a1c5e2e88945068983b7965f9/action.yml#L56C19-L60 with the new setting with a note that it will override the The rest LGTM. |
|
Will take a look as to whats causing the test to fail soon... |
|
@cory-miller the test actions should pass now 🙏 |
|
Thanks for working on this! I will build a release soon. |
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v3...v4) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMS43IiwidXBkYXRlZEluVmVyIjoiMzcuMzEuNyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciJ9--> Reviewed-on: https://git.apud.pl/jacek/adventofcode/pulls/38 Co-authored-by: Renovate <renovate@apud.pl> Co-committed-by: Renovate <renovate@apud.pl>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v3...v4) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNDEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE0MS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Reviewed-on: https://gitea.int.magicalinternetbox.net/joel/rhel-wireguard/pulls/10 Co-authored-by: Renovate Bot <renovatebot-gitea@talktojoel.me> Co-committed-by: Renovate Bot <renovatebot-gitea@talktojoel.me>
This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` -> `v5.0.0` | [](https://securityscorecards.dev/viewer/?uri=github.com/actions/checkout) | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v5.0.0`](https://github.com/actions/checkout/releases/tag/v5.0.0) [Compare Source](actions/checkout@v4.3.0...v5.0.0) #### What's Changed - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) - Prepare v5.0.0 release by [@​salmanmkc](https://github.com/salmanmkc) in [#​2238](actions/checkout#2238) ####⚠️ Minimum Compatible Runner Version **v2.327.1**\ [Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) Make sure your runner is updated to this version or newer to use this release. **Full Changelog**: <actions/checkout@v4...v5.0.0> ### [`v4.3.0`](https://github.com/actions/checkout/releases/tag/v4.3.0) [Compare Source](actions/checkout@v4.2.2...v4.3.0) #### What's Changed - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) - Prepare release v4.3.0 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2237](actions/checkout#2237) #### New Contributors - [@​motss](https://github.com/motss) made their first contribution in [#​1971](actions/checkout#1971) - [@​mouismail](https://github.com/mouismail) made their first contribution in [#​1977](actions/checkout#1977) - [@​benwells](https://github.com/benwells) made their first contribution in [#​2043](actions/checkout#2043) - [@​nebuk89](https://github.com/nebuk89) made their first contribution in [#​2194](actions/checkout#2194) - [@​salmanmkc](https://github.com/salmanmkc) made their first contribution in [#​2236](actions/checkout#2236) **Full Changelog**: <actions/checkout@v4...v4.3.0> ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTEuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE1MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJtYWpvciIsInZlcnNpb24tdXBkYXRlIl19--> Reviewed-on: https://git.xmsl.im/WolfYangFan/PortHog/pulls/9 Co-authored-by: Renovate Bot <renovate-bot@932.moe> Co-committed-by: Renovate Bot <renovate-bot@932.moe>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://git.ryujinx.app/actions/checkout) | action | major | `v4` → `v6` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.2`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v6...v6) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v6`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v5.0.1...v6) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v5.0.1`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v5...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v5...v5) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v5`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.3.1...v5) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v4.3.1`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://git.ryujinx.app/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](https://git.ryujinx.app/actions/checkout/compare/v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> Reviewed-on: https://git.ryujinx.app/projects/Ryubing/pulls/52
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [actions/checkout](https://github.com/actions/checkout) | major | `v4` → `v6.0.3` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.0.1...v6) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.3.1...v5) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTQuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNC40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJ0ZW1wbGF0ZSJdfQ==--> Reviewed-on: https://git.lx.e6a.app/tools/cookie-py/pulls/87
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.1.0...v6) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.4.0...v5) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://code.vicoli.de/piscis/agent-skills/pulls/2
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v5.1.0...v6.0.0) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5.0.0...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v4.4.0...v5.0.0) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4.0.0...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzIuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjEzMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> --------- Co-authored-by: Renovate Bot <renovate@solidrust.net> Reviewed-on: https://gitea.hq.solidrust.net:30008/solidrust/solidrust-ai-docs.github.io/pulls/12 Co-authored-by: renovate-bot <renovate-bot+shaun@solidrust.net> Co-committed-by: renovate-bot <renovate-bot+shaun@solidrust.net>
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [actions/checkout](https://github.com/actions/checkout) | major | `v4` → `v6.0.3` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.0.1...v6) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.3.1...v5) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTQuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNC40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJ0ZW1wbGF0ZSJdfQ==-->
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull_request_target and workflow_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v5.1.0...v6.0.0) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5.0.0...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v4.4.0...v5.0.0) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4.0.0...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 9am on tuesday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NS4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSJdfQ==--> Reviewed-on: https://code.futo.org/harbor/harbor/pulls/1841 Reviewed-by: Thomas de Zeeuw <thomas@futo.org>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](actions/checkout#2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2461](actions/checkout#2461) - Bump [@​actions/core](https://github.com/actions/core) and [@​actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​2462](actions/checkout#2462) ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](actions/checkout#2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.1.0...v6) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](actions/checkout#2414) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](actions/checkout@v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](actions/checkout#2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.4.0...v5) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](actions/checkout#2301) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](actions/checkout@v4.3.1...v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2502](actions/checkout#2502) - backport fixes to releases-v4 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](actions/checkout@v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@​ericsciple](https://github.com/ericsciple) in [#​2305](actions/checkout#2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](actions/checkout@v4.2.2...v4.3.0) - docs: update README.md by [@​motss](https://github.com/motss) in [#​1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@​mouismail](https://github.com/mouismail) in [#​1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@​benwells](https://github.com/benwells) in [#​2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@​joshmgross](https://github.com/joshmgross) in [#​2044](actions/checkout#2044) - Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@​TingluoHuang](https://github.com/TingluoHuang) in [#​2224](actions/checkout#2224) - Update package dependencies by [@​salmanmkc](https://github.com/salmanmkc) in [#​2236](actions/checkout#2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](actions/checkout@v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@​jww3](https://github.com/jww3) in [#​1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@​jww3](https://github.com/jww3) in [#​1946](actions/checkout#1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](actions/checkout@v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://github.com/orhantoy) in [#​1924](actions/checkout#1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](actions/checkout@v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://github.com/lucacome) in [#​1180](actions/checkout#1180) - Dependency updates by [@​dependabot-](https://github.com/dependabot-) [#​1777](actions/checkout#1777), [#​1872](actions/checkout#1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](actions/checkout@v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot) in [#​1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1697](actions/checkout#1697) - Check out other refs/\* by commit by [@​orhantoy](https://github.com/orhantoy) in [#​1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://github.com/jww3) in [#​1776](actions/checkout#1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](actions/checkout@v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://github.com/cory-miller) in [#​1732](actions/checkout#1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](actions/checkout@v4.1.4...v4.1.5) - Update NPM dependencies by [@​cory-miller](https://github.com/cory-miller) in [#​1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [#​1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://github.com/dependabot) in [#​1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://github.com/cory-miller) in [#​1707](actions/checkout#1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](actions/checkout@v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1692](actions/checkout#1692) - Add dependabot config by [@​cory-miller](https://github.com/cory-miller) in [#​1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://github.com/dependabot) in [#​1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [#​1643](actions/checkout#1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](actions/checkout@v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://github.com/jww3) in [#​1656](actions/checkout#1656) - Add SSH user parameter by [@​cory-miller](https://github.com/cory-miller) in [#​1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://github.com/jww3) in [#​1650](actions/checkout#1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](actions/checkout@v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://github.com/dscho) in [#​1598](actions/checkout#1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](actions/checkout@v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [#​1511](actions/checkout#1511) - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [#​1514](actions/checkout#1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](actions/checkout@v4...v4.1.0) - [Add support for partial checkout filters](actions/checkout#1396) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://code.vicoli.de/piscis/agent-skills/pulls/2
##### [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ##### [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ##### [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ##### [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ##### [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ##### [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ##### [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ##### [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ##### [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ##### [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ##### [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ##### [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ##### [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ##### [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ##### [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ##### [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872) ##### [vv4.1.7](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in [#1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1697](actions/checkout#1697) - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in [#1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in [#1776](actions/checkout#1776) ##### [vv4.1.6](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) - Check platform to set archive extension appropriately by [@cory-miller](https://github.com/cory-miller) in [#1732](actions/checkout#1732) ##### [vv4.1.5](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) - Update NPM dependencies by [@cory-miller](https://github.com/cory-miller) in [#1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://github.com/dependabot) in [#1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://github.com/dependabot) in [#1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://github.com/cory-miller) in [#1707](actions/checkout#1707) ##### [vv4.1.4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1692](actions/checkout#1692) - Add dependabot config by [@cory-miller](https://github.com/cory-miller) in [#1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://github.com/dependabot) in [#1643](actions/checkout#1643) ##### [vv4.1.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1656](actions/checkout#1656) - Add SSH user parameter by [@cory-miller](https://github.com/cory-miller) in [#1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://github.com/jww3) in [#1650](actions/checkout#1650) ##### [vv4.1.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in [#1598](actions/checkout#1598) ##### [vv4.1.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) - Correct link to GitHub Docs by [@peterbe](https://github.com/peterbe) in [#1511](actions/checkout#1511) - Link to release page from what's new section by [@cory-miller](https://github.com/cory-miller) in [#1514](actions/checkout#1514) ##### [vv4.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) - [Add support for partial checkout filters](actions/checkout#1396) ##### [vv4.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400) - [Support fetching without the --progress option](actions/checkout#1067) - [Update to node20](actions/checkout#1436) ##### [vv3.7.0](https://github.com/actions/checkout/releases/tag/v3.7.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2503](actions/checkout#2503) - backport fixes to releases-v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2525](actions/checkout#2525) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v3.6.0...v3.7.0> ##### [vv3.6.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) - [Fix: Mark test scripts with Bash'isms to be run via Bash](actions/checkout#1377) - [Add option to fetch tags even if fetch-depth > 0](actions/checkout#579) ##### [vv3.5.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](actions/checkout#1196) - [Fix typos found by codespell](actions/checkout#1287) - [Add support for sparse checkouts](actions/checkout#1369) ##### [vv3.5.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v352) - [Fix api endpoint for GHES](actions/checkout#1289) ##### [vv3.5.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v351) - [Fix slow checkout on Windows](actions/checkout#1246) ##### [vv3.5.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v350) - [Add new public key for known_hosts](actions/checkout#1237) ##### [vv3.4.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) - [Upgrade codeql actions to v2](actions/checkout#1209) - [Upgrade dependencies](actions/checkout#1210) - [Upgrade @actions/io](actions/checkout#1225) ##### [vv3.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v330) - [Implement branch list using callbacks from exec function](actions/checkout#1045) - [Add in explicit reference to private checkout options](actions/checkout#1050) - [Fix comment typos (that got added in #770)](actions/checkout#1057) ##### [vv3.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v320) - [Add GitHub Action to perform release](actions/checkout#942) - [Fix status badge](actions/checkout#967) - [Replace datadog/squid with ubuntu/squid Docker image](actions/checkout#1002) - [Wrap pipeline commands for submoduleForeach in quotes](actions/checkout#964) - [Update @actions/io to 1.1.2](actions/checkout#1029) - [Upgrading version to 3.2.0](actions/checkout#1039) ##### [vv3.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) - [Use @actions/core `saveState` and `getState`](actions/checkout#939) - [Add `github-server-url` input](actions/checkout#922) ##### [vv3.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v302) - [Add input `set-safe-directory`](actions/checkout#770) ##### [vv3.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v301) - [Fixed an issue where checkout failed to run in container jobs due to the new git setting `safe.directory`](actions/checkout#762) - [Bumped various npm package versions](actions/checkout#744)
##### [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ##### [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ##### [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ##### [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ##### [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ##### [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ##### [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ##### [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ##### [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ##### [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ##### [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ##### [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ##### [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ##### [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ##### [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ##### [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872) ##### [vv4.1.7](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in [#1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1697](actions/checkout#1697) - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in [#1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in [#1776](actions/checkout#1776) ##### [vv4.1.6](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) - Check platform to set archive extension appropriately by [@cory-miller](https://github.com/cory-miller) in [#1732](actions/checkout#1732) ##### [vv4.1.5](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) - Update NPM dependencies by [@cory-miller](https://github.com/cory-miller) in [#1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://github.com/dependabot) in [#1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://github.com/dependabot) in [#1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://github.com/cory-miller) in [#1707](actions/checkout#1707) ##### [vv4.1.4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1692](actions/checkout#1692) - Add dependabot config by [@cory-miller](https://github.com/cory-miller) in [#1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://github.com/dependabot) in [#1643](actions/checkout#1643) ##### [vv4.1.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1656](actions/checkout#1656) - Add SSH user parameter by [@cory-miller](https://github.com/cory-miller) in [#1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://github.com/jww3) in [#1650](actions/checkout#1650) ##### [vv4.1.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in [#1598](actions/checkout#1598) ##### [vv4.1.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) - Correct link to GitHub Docs by [@peterbe](https://github.com/peterbe) in [#1511](actions/checkout#1511) - Link to release page from what's new section by [@cory-miller](https://github.com/cory-miller) in [#1514](actions/checkout#1514) ##### [vv4.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) - [Add support for partial checkout filters](actions/checkout#1396) ##### [vv4.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400) - [Support fetching without the --progress option](actions/checkout#1067) - [Update to node20](actions/checkout#1436) ##### [vv3.7.0](https://github.com/actions/checkout/releases/tag/v3.7.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2503](actions/checkout#2503) - backport fixes to releases-v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2525](actions/checkout#2525) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v3.6.0...v3.7.0> ##### [vv3.6.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) - [Fix: Mark test scripts with Bash'isms to be run via Bash](actions/checkout#1377) - [Add option to fetch tags even if fetch-depth > 0](actions/checkout#579) ##### [vv3.5.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](actions/checkout#1196) - [Fix typos found by codespell](actions/checkout#1287) - [Add support for sparse checkouts](actions/checkout#1369) ##### [vv3.5.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v352) - [Fix api endpoint for GHES](actions/checkout#1289) ##### [vv3.5.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v351) - [Fix slow checkout on Windows](actions/checkout#1246) ##### [vv3.5.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v350) - [Add new public key for known_hosts](actions/checkout#1237) ##### [vv3.4.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) - [Upgrade codeql actions to v2](actions/checkout#1209) - [Upgrade dependencies](actions/checkout#1210) - [Upgrade @actions/io](actions/checkout#1225) ##### [vv3.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v330) - [Implement branch list using callbacks from exec function](actions/checkout#1045) - [Add in explicit reference to private checkout options](actions/checkout#1050) - [Fix comment typos (that got added in #770)](actions/checkout#1057) ##### [vv3.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v320) - [Add GitHub Action to perform release](actions/checkout#942) - [Fix status badge](actions/checkout#967) - [Replace datadog/squid with ubuntu/squid Docker image](actions/checkout#1002) - [Wrap pipeline commands for submoduleForeach in quotes](actions/checkout#964) - [Update @actions/io to 1.1.2](actions/checkout#1029) - [Upgrading version to 3.2.0](actions/checkout#1039) ##### [vv3.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) - [Use @actions/core `saveState` and `getState`](actions/checkout#939) - [Add `github-server-url` input](actions/checkout#922) ##### [vv3.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v302) - [Add input `set-safe-directory`](actions/checkout#770) ##### [vv3.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v301) - [Fixed an issue where checkout failed to run in container jobs due to the new git setting `safe.directory`](actions/checkout#762) - [Bumped various npm package versions](actions/checkout#744) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
##### [vv7.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ##### [vv7.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ##### [vv6.1.0](https://github.com/actions/checkout/releases/tag/v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> ##### [vv6.0.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ##### [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ##### [vv6.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ##### [vv6.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ##### [vv5.1.0](https://github.com/actions/checkout/releases/tag/v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](actions/checkout#2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](actions/checkout#2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v5.0.1...v5.1.0> ##### [vv5.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ##### [vv5.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ##### [vv4.4.0](https://github.com/actions/checkout/releases/tag/v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](actions/checkout#2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](actions/checkout#2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v4.3.1...v4.4.0> ##### [vv4.3.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305) ##### [vv4.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236) ##### [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946) ##### [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924) ##### [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872) ##### [vv4.1.7](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in [#1739](actions/checkout#1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1697](actions/checkout#1697) - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in [#1774](actions/checkout#1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in [#1776](actions/checkout#1776) ##### [vv4.1.6](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) - Check platform to set archive extension appropriately by [@cory-miller](https://github.com/cory-miller) in [#1732](actions/checkout#1732) ##### [vv4.1.5](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) - Update NPM dependencies by [@cory-miller](https://github.com/cory-miller) in [#1703](actions/checkout#1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1694](actions/checkout#1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://github.com/dependabot) in [#1696](actions/checkout#1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://github.com/dependabot) in [#1695](actions/checkout#1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://github.com/cory-miller) in [#1707](actions/checkout#1707) ##### [vv4.1.4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1692](actions/checkout#1692) - Add dependabot config by [@cory-miller](https://github.com/cory-miller) in [#1688](actions/checkout#1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1693](actions/checkout#1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://github.com/dependabot) in [#1643](actions/checkout#1643) ##### [vv4.1.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1656](actions/checkout#1656) - Add SSH user parameter by [@cory-miller](https://github.com/cory-miller) in [#1685](actions/checkout#1685) - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://github.com/jww3) in [#1650](actions/checkout#1650) ##### [vv4.1.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in [#1598](actions/checkout#1598) ##### [vv4.1.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) - Correct link to GitHub Docs by [@peterbe](https://github.com/peterbe) in [#1511](actions/checkout#1511) - Link to release page from what's new section by [@cory-miller](https://github.com/cory-miller) in [#1514](actions/checkout#1514) ##### [vv4.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) - [Add support for partial checkout filters](actions/checkout#1396) ##### [vv4.0.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400) - [Support fetching without the --progress option](actions/checkout#1067) - [Update to node20](actions/checkout#1436) ##### [vv3.7.0](https://github.com/actions/checkout/releases/tag/v3.7.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2503](actions/checkout#2503) - backport fixes to releases-v3 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2525](actions/checkout#2525) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v3.6.0...v3.7.0> ##### [vv3.6.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) - [Fix: Mark test scripts with Bash'isms to be run via Bash](actions/checkout#1377) - [Add option to fetch tags even if fetch-depth > 0](actions/checkout#579) ##### [vv3.5.3](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](actions/checkout#1196) - [Fix typos found by codespell](actions/checkout#1287) - [Add support for sparse checkouts](actions/checkout#1369) ##### [vv3.5.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v352) - [Fix api endpoint for GHES](actions/checkout#1289) ##### [vv3.5.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v351) - [Fix slow checkout on Windows](actions/checkout#1246) ##### [vv3.5.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v350) - [Add new public key for known_hosts](actions/checkout#1237) ##### [vv3.4.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) - [Upgrade codeql actions to v2](actions/checkout#1209) - [Upgrade dependencies](actions/checkout#1210) - [Upgrade @actions/io](actions/checkout#1225) ##### [vv3.3.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v330) - [Implement branch list using callbacks from exec function](actions/checkout#1045) - [Add in explicit reference to private checkout options](actions/checkout#1050) - [Fix comment typos (that got added in #770)](actions/checkout#1057) ##### [vv3.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v320) - [Add GitHub Action to perform release](actions/checkout#942) - [Fix status badge](actions/checkout#967) - [Replace datadog/squid with ubuntu/squid Docker image](actions/checkout#1002) - [Wrap pipeline commands for submoduleForeach in quotes](actions/checkout#964) - [Update @actions/io to 1.1.2](actions/checkout#1029) - [Upgrading version to 3.2.0](actions/checkout#1039) ##### [vv3.1.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) - [Use @actions/core `saveState` and `getState`](actions/checkout#939) - [Add `github-server-url` input](actions/checkout#922) ##### [vv3.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v302) - [Add input `set-safe-directory`](actions/checkout#770) ##### [vv3.0.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v301) - [Fixed an issue where checkout failed to run in container jobs due to the new git setting `safe.directory`](actions/checkout#762) - [Bumped various npm package versions](actions/checkout#744) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
A change to add support for sparse checkouts has been added recently (#1369). This extends upon that to allow support for other filters, and the ability to filter without a sparse checkout.
Inspired by this blog post -> https://github.blog/2020-12-21-get-up-to-speed-with-partial-clone-and-shallow-clone