Skip to content

chore(deps): bump actions/checkout from 4 to 6#7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6
Open

chore(deps): bump actions/checkout from 4 to 6#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 30, 2026
@dependabot dependabot Bot changed the title build(deps): bump actions/checkout from 5 to 6 chore(deps): bump actions/checkout from 4 to 6 May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch 3 times, most recently from 86ff312 to 731c985 Compare May 1, 2026 17:17
topcoder1 added a commit that referenced this pull request May 1, 2026
…Rs (#16)

claude-code-action@v1 currently crashes when invoked on a dependabot
PR with the error:

  Internal error: directory mismatch for directory
  "/home/runner/work/_actions/anthropics/claude-code-action/v1/tsconfig.json", fd 4

Verified across #7, #8, #9 — three consecutive
dependabot PRs, all FAILURE on `review / Claude Review`. The same
action+version succeeds on human-authored PRs in the same repo, so
the bug is specific to dependabot's restricted GITHUB_TOKEN scope.

Even when the action does run on dep bumps, the value is low —
diffs are upstream version metadata, not project logic. The risk
classifier still labels them; humans still see the diff at merge
time. Skipping Claude review here is signal, not loss.

Implementation: a pre-check step posts a one-line "Skipped" PR
comment when the PR author is dependabot[bot] or renovate[bot],
sets a step output, and the claude-code-action step is gated on
that output. The job remains green so branch rulesets that require
`review / Claude Review` are satisfied.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 731c985 to 1892707 Compare May 1, 2026 22:29
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 1, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 1892707 to 9817180 Compare May 2, 2026 18:22
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 2, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 9817180 to 1b8913b Compare May 3, 2026 22:32
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 3, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 1b8913b to 71fbc00 Compare May 3, 2026 22:46
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 3, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 71fbc00 to 827dff9 Compare May 4, 2026 01:26
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 4, 2026

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 827dff9 to 823ee02 Compare May 10, 2026 14:37
@github-actions
Copy link
Copy Markdown

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 823ee02 to 3df886f Compare May 14, 2026 21:58
@github-actions
Copy link
Copy Markdown

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 14, 2026

Coverage Floor — mode: enforce

metric value
measured 100.0%
floor (current) 99.0%
target 100.0%
last bumped 2026-05-12

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 3df886f to a41f177 Compare May 24, 2026 03:25
@github-actions
Copy link
Copy Markdown

Skipped: bot-authored PR (dependabot[bot]). Dependency bumps are reviewed by the risk classifier and human merge gate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants