build(deps): Bump actions/checkout from 4.2.2 to 6.0.3

.github/workflows/oss-checks.yml

@@ -64,7 +64,7 @@ jobs:
       GITLEAKS_VERSION: ${{ inputs.gitleaks-version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
         with:
           fetch-depth: 0
 
@@ -97,7 +97,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
 
       - name: Check license headers
         uses: apache/skywalking-eyes/header@61275cc80d0798a405cb070f7d3a8aaf7cf2c2c1  # v0.8.0

.github/workflows/release-java-central.yml

@@ -95,7 +95,7 @@ jobs:
     needs: validate-inputs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: temurin
@@ -108,7 +108,7 @@ jobs:
     needs: verify
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: temurin
@@ -152,7 +152,7 @@ jobs:
     outputs:
       deployment_id: ${{ steps.mvn-deploy.outputs.deployment_id }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.3
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: temurin

.github/workflows/release-java-ghpackages.yml

@@ -161,7 +161,7 @@ jobs:
       # 'Vendor network error' before recording any Execution.
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
 
       - name: Set up JDK
         uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5
@@ -208,7 +208,7 @@ jobs:
         include: ${{ fromJSON(inputs.native-targets) }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
 
       - name: Set up GraalVM
         uses: graalvm/setup-graalvm@v1
@@ -272,7 +272,7 @@ jobs:
       # 'Vendor network error' before recording any Execution.
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
 
       - name: Set up GraalVM
         uses: graalvm/setup-graalvm@v1
@@ -324,7 +324,7 @@ jobs:
       GITHUB_ACTOR: ${{ github.actor }}
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
 
       - name: Set up JDK
         uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5
@@ -379,7 +379,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
 
       - name: Prep dirs
         run: mkdir -p target/jars target/native

.github/workflows/release-python-pypi.yml

@@ -89,7 +89,7 @@ jobs:
       run:
         working-directory: ${{ inputs.package-dir }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
       - uses: astral-sh/setup-uv@v7
         with:
           python-version: ${{ inputs.python-version }}
@@ -102,7 +102,7 @@ jobs:
     needs: verify
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
       - uses: astral-sh/setup-uv@v7
         with:
           python-version: ${{ inputs.python-version }}

.github/workflows/release-ts-npm.yml

@@ -86,7 +86,7 @@ jobs:
       run:
         working-directory: ${{ inputs.package-dir }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
       - uses: actions/setup-node@v6
         with:
           node-version: ${{ inputs.node-version }}
@@ -104,7 +104,7 @@ jobs:
       run:
         working-directory: ${{ inputs.package-dir }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
       - uses: actions/setup-node@v6
         with:
           node-version: ${{ inputs.node-version }}
@@ -129,7 +129,7 @@ jobs:
       run:
         working-directory: ${{ inputs.package-dir }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
       - uses: actions/setup-node@v6
         with:
           node-version: ${{ inputs.node-version }}

.github/workflows/test.yml

@@ -27,15 +27,15 @@ jobs:
   audit-passes-on-pinned-fixture:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - uses: ./.github/actions/audit-action-pins
         with:
           workflows-path: tests/fixtures/pinned-workflow/workflows
 
   audit-fails-on-unpinned-fixture:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - id: audit
         continue-on-error: true
         uses: ./.github/actions/audit-action-pins
@@ -53,7 +53,7 @@ jobs:
   pin-rewrites-and-is-idempotent:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Stage fixture in a writable path
         run: |
           mkdir -p /tmp/under-test
@@ -215,7 +215,7 @@ jobs:
             checks-json: '[{"name":"build","status":"completed","conclusion":"failure"},{"name":"build","status":"completed","conclusion":"success"}]'
             expected: 'proceed:dry-run'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - id: decide
         uses: ./.github/actions/auto-merge-deps
         with: