chore(deps): bump actions/checkout from 5 to 6

[dependabot]

Bumps actions/checkout from 5 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248
• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• v6-beta by @​ericsciple in actions/checkout#2298
• update readme/changelog for v6 by @​ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

• Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
• Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
• Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
• Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

v4.1.6

• Check platform to set archive extension appropriately by @​cory-miller in actions/checkout#1732

... (truncated)

Commits

• de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
• 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
• 8e8c483 Clarify v6 README (#2328)
• 033fa0d Add worktree support for persist-credentials includeIf (#2327)
• c2d88d3 Update all references from v5 and v4 to v6 (#2314)
• 1af3b93 update readme/changelog for v6 (#2311)
• 71cf226 v6-beta (#2298)
• 069c695 Persist creds to a separate file (#2286)
• ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[greptile-apps]

Greptile Summary

This Dependabot PR upgrades actions/checkout to v6 across all three workflow files. The meaningful change is in codeql.yml (v5 → v6); ci.yml and release.yml were already on v6.0.2 and are being moved to the floating v6 major tag.

• codeql.yml: Straightforward v5 → v6 major upgrade; style is consistent with the file's prior use of a floating major-version tag.
• ci.yml / release.yml: Change is technically a de-pin from v6.0.2 to v6; this inconsistency with the other pinned actions in those files was already flagged in prior review threads.
• v6 breaking change note: actions/checkout v6 now stores credentials under $RUNNER_TEMP instead of the local git config, requiring Actions Runner ≥ v2.329.0 for Docker container action scenarios. None of the jobs here use Docker container actions, so this does not affect this repository.

Confidence Score: 5/5

Safe to merge — the only functional change is upgrading actions/checkout to v6, which is backwards-compatible for all job types used here.

The change is a routine dependency bump. codeql.yml is a clean major-version upgrade (v5 → v6). ci.yml and release.yml shift from a pinned patch version to a floating major tag, which was already discussed in prior review threads. None of the workflows use Docker container actions, so the v6 runner-version requirement (≥ v2.329.0) is not a concern.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/codeql.yml	Upgrades actions/checkout from v5 (floating) to v6 (floating); consistent versioning style, no other changes.
.github/workflows/ci.yml	Three actions/checkout references moved from pinned v6.0.2 to floating v6; de-pinning concern already addressed in prior review threads.
.github/workflows/release.yml	actions/checkout moved from pinned v6.0.2 to floating v6; release workflow reproducibility concern already raised in prior review threads.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Push / PR / Tag / Schedule] --> B{Workflow Trigger}
    B -->|push or PR to main| C[ci.yml]
    B -->|push/PR to main or weekly schedule| D[codeql.yml]
    B -->|tag v-star or workflow dispatch| E[release.yml]

    C --> C1[checkout v6]
    C1 --> C2[Frontend Job]
    C1 --> C3[Rust Format Job]
    C1 --> C4[Rust Test Job]
    C2 & C3 & C4 --> C5[Validate Job]

    D --> D1[checkout v6]
    D1 --> D2[CodeQL Analyze]

    E --> E1[checkout v6]
    E1 --> E2[Build macOS DMG]
    E2 --> E3[Upload Artifact]

Loading

_{Reviews (2): Last reviewed commit: "chore(deps): bump actions/checkout from ..." | Re-trigger Greptile}

[dependabot]

Looks like actions/checkout is up-to-date now, so this is no longer needed.