Skip to content

chore(deps): bump actions/checkout from 4 to 6#7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6
Open

chore(deps): bump actions/checkout from 4 to 6#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 30, 2026
@dependabot dependabot Bot changed the title build(deps): bump actions/checkout from 5 to 6 chore(deps): bump actions/checkout from 4 to 6 May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch 3 times, most recently from 86ff312 to 731c985 Compare May 1, 2026 17:17
topcoder1 added a commit that referenced this pull request May 1, 2026
…Rs (#16)

claude-code-action@v1 currently crashes when invoked on a dependabot
PR with the error:

  Internal error: directory mismatch for directory
  "/home/runner/work/_actions/anthropics/claude-code-action/v1/tsconfig.json", fd 4

Verified across #7, #8, #9 — three consecutive
dependabot PRs, all FAILURE on `review / Claude Review`. The same
action+version succeeds on human-authored PRs in the same repo, so
the bug is specific to dependabot's restricted GITHUB_TOKEN scope.

Even when the action does run on dep bumps, the value is low —
diffs are upstream version metadata, not project logic. The risk
classifier still labels them; humans still see the diff at merge
time. Skipping Claude review here is signal, not loss.

Implementation: a pre-check step posts a one-line "Skipped" PR
comment when the PR author is dependabot[bot] or renovate[bot],
sets a step output, and the claude-code-action step is gated on
that output. The job remains green so branch rulesets that require
`review / Claude Review` are satisfied.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 731c985 to 1892707 Compare May 1, 2026 22:29
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 1, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 1892707 to 9817180 Compare May 2, 2026 18:22
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 2, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 9817180 to 1b8913b Compare May 3, 2026 22:32
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 3, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 1b8913b to 71fbc00 Compare May 3, 2026 22:46
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 3, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 71fbc00 to 827dff9 Compare May 4, 2026 01:26
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 4, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 827dff9 to 823ee02 Compare May 10, 2026 14:37
@github-actions
Copy link
Copy Markdown

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 823ee02 to 3df886f Compare May 14, 2026 21:58
@github-actions
Copy link
Copy Markdown

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@github-actions
Copy link
Copy Markdown

Coverage Floor — mode: enforce

metric value
measured 100.0%
floor (current) 99.0%
target 100.0%
last bumped 2026-05-12

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants