Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps actions/checkout from 5.0.0 to 6.0.0.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

V6.0.0

V5.0.1

V5.0.0

V4.3.1

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

automated-signal and others added 18 commits November 20, 2025 09:08
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: Jamie <113370520+jamiebuilds-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: ayumi-signal <143036029+ayumi-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: emir-signal <emir@signal.org>
Co-authored-by: Miriam Zimmerman <mutexlox@signal.org>
Co-authored-by: Jim Gustafson <jim@signal.org>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
Co-authored-by: Jim Gustafson <jim@signal.org>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 1, 2025
automated-signal and others added 8 commits December 1, 2025 11:00
Co-authored-by: ayumi-signal <143036029+ayumi-signal@users.noreply.github.com>
Co-authored-by: ayumi-signal <143036029+ayumi-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Co-authored-by: Jim Gustafson <jim@signal.org>
Co-authored-by: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
yash-signal and others added 25 commits December 3, 2025 16:36
Co-authored-by: Miriam Zimmerman <mutexlox@signal.org>
Co-authored-by: Miriam Zimmerman <mutexlox@signal.org>
Co-authored-by: Miriam Zimmerman <mutexlox@signal.org>
Co-authored-by: Miriam Zimmerman <mutexlox@signal.org>
Really slow on a phone, this commit does not really fix the issue :(
…obile

When entering a conversation, signal-quill-cjs automatically focuses the editor, triggering the on-screen keyboard on mobile devices.
This behavior is undesirable, as it suggests immediate typing is required.

To prevent this:
- The editor is now initially rendered with the inert attribute, making it non-focusable and non-interactive.
- The inert attribute is removed on user click, allowing interaction and manual focus.

This improves the user experience on mobile by preventing the keyboard from appearing until explicitly needed.
Subscribe to the `ActiveChanged` signal from `org.gnome.ScreenSaver` via DBus and maintain internal state to reflect screensaver activity. The `isActive()` method now returns `false` when the screensaver is active, ensuring that application logic properly respects user inactivity.

Useful for improving notifications behavior when the user is away.

Only GNOME is supported at this stage; other desktop environments could be added later.
…andling

When Signal is minimized to the system tray, launching a second instance
causes Electron to go through a full startup cycle before signaling the main
instance to show the window. This results in a noticeable delay (~2 seconds).

To avoid this, a lightweight D-Bus interface (`org.signal.Signal`) has been
added. It exposes a `ShowWindow` method to allow the window to be shown
immediately without full app startup.

A wrapper script (`signal-desktop-mobile`) now attempts to call this method via
`gdbus`. If the main instance is not running, it falls back to launching a new
Electron process.

This approach significantly reduces perceived startup time when the app is
already running but hidden.
Signal currently disables notifications on reconnect until the message queues are fully processed.
While this behavior prevents notification floods on a fresh start, it causes problems in our use case where freeze/unfreeze cycles can lead to missed messages.

By removing notificationService.disable() call on socket connect,
we ensure notifications remain active throughout reconnects, preventing silent message losses caused by paused queues.

This change prioritizes message delivery and user awareness over suppressing notification floods during reconnect.
Dependabot couldn't find the original pull request head commit, 05efe52.
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions/checkout-6.0.0 branch from 05efe52 to 781abc3 Compare December 17, 2025 14:36
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 1, 2026

A newer version of actions/checkout exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants