chore(deps): bump actions/checkout from 4 to 6

.github/workflows/audit-required-checks.yml

@@ -48,7 +48,7 @@ jobs:
     outputs:
       digest_path: per-org-digest-topcoder1.md
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Run fleet audit (topcoder1)
         env:
@@ -89,7 +89,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Run fleet audit (whois-api-llc)
         env:
@@ -126,7 +126,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/download-artifact@v4
         continue-on-error: true   # tolerate jobs that failed before uploading

.github/workflows/claude-adversarial-review.yml

@@ -32,7 +32,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: ${{ inputs.checkout_depth }}
 

.github/workflows/claude-author-automerge.yml

@@ -88,7 +88,7 @@ jobs:
       # path still work.
     steps:
       - name: Checkout PR head
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}

.github/workflows/claude-review.yml

@@ -31,7 +31,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: ${{ inputs.checkout_depth }}
 

.github/workflows/codex-review.yml

@@ -29,7 +29,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout (full history for diff against base)
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/coverage-floor.yml

@@ -149,7 +149,7 @@ jobs:
           --health-timeout 5s
           --health-retries 5
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           # PR branch ref so seed-mode push targets the right branch.

.github/workflows/lint.yml

@@ -115,7 +115,7 @@ jobs:
     if: ${{ format('{0}', inputs.run_actionlint) != 'false' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Download actionlint
         id: get_actionlint
@@ -153,7 +153,7 @@ jobs:
       # startup_failure if exceeded by the caller's grant.
       pull-requests: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v4
         with:
@@ -355,7 +355,7 @@ jobs:
     if: ${{ format('{0}', inputs.run_shellcheck_scripts) == 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Run shellcheck
         # Ubuntu runners ship with shellcheck preinstalled, so no install

.github/workflows/pr-classify.yml

@@ -28,7 +28,7 @@ jobs:
       class: ${{ steps.compute.outputs.class }}
     steps:
       - name: Checkout caller repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Verify risk-paths.yml exists
         run: |

.github/workflows/prettier-autofix.yml

@@ -87,7 +87,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout PR head with PAT
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Check out the PR's head ref (not the merge commit) so our push
           # writes back to the same branch the PR is tracking.

.github/workflows/regression-convention.yml

@@ -70,7 +70,7 @@ jobs:
     # no-op (no diff to enforce against).
     if: github.event_name == 'pull_request'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}

.github/workflows/tests-runner.yml

@@ -93,7 +93,7 @@ jobs:
       runner: ${{ steps.d.outputs.runner }}
       go_version: ${{ steps.d.outputs.go_version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - id: d
         env:
           # `inputs.X` is empty on pull_request/push triggers (only populated
@@ -154,7 +154,7 @@ jobs:
     if: needs.detect.outputs.language == 'python'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ inputs.python_version || '3.13' }}
@@ -219,7 +219,7 @@ jobs:
     if: needs.detect.outputs.language == 'go'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-go@v5
         with:
           go-version: ${{ needs.detect.outputs.go_version }}
@@ -242,7 +242,7 @@ jobs:
     if: needs.detect.outputs.language == 'js'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ inputs.node_version || '20' }}

.github/workflows/tty-tests.yml

@@ -65,7 +65,7 @@ jobs:
     env:
       TERM: xterm-256color
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Detect tty fixtures
         id: detect

.github/workflows/verifier-on-high-risk.yml

@@ -82,7 +82,7 @@ jobs:
           fi
 
       - name: Checkout caller code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -116,7 +116,7 @@ jobs:
           echo "Changed paths:"; cat changed-paths.txt
 
       - name: Checkout ci-workflows at pinned SHA (composite action source)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: topcoder1/ci-workflows
           ref: ${{ inputs.ci_workflows_sha }}