Skip to content

Fix tag handling: preserve annotations and explicit fetch-tags#2356

Merged
ericsciple merged 1 commit intomainfrom
users/erisciple/26-01-tags
Jan 9, 2026
Merged

Fix tag handling: preserve annotations and explicit fetch-tags#2356
ericsciple merged 1 commit intomainfrom
users/erisciple/26-01-tags

Conversation

@ericsciple
Copy link
Contributor

@ericsciple ericsciple commented Jan 8, 2026

Summary

Fixes multiple issues with tag handling in the checkout action.

Issues Fixed

1. fetch-tags: true doesn't fetch tags (#1471)

Previously, when using fetch-tags: true on a branch checkout, tags were not actually fetched. Now tags are properly included in the fetch refspec.

2. Annotated tags converted to lightweight (#290)

When checking out an annotated tag, the tag annotation was lost because the action fetched by commit hash rather than by tag reference. Now tags are fetched via explicit refspec (+refs/tags/*:refs/tags/*), which fetches the actual tag objects and preserves annotations.

3. Fatal error with tag + fetch-tags: true (#1467)

Checking out a tag with fetch-tags: true caused a fatal error due to duplicate refspecs. Now only the wildcard refspec is used (the specific tag is redundant when fetching all tags).

Testing

Unit Tests

Added new unit tests.

E2E Tests

Scenario Result
Tag + fetch-tags: true ✅ Pass
Tag + fetch-tags: false ✅ Pass
Branch + fetch-tags: true ✅ Pass
Branch + fetch-tags: false ✅ Pass
Shallow clone + tags ✅ Pass
Full clone + tags ✅ Pass
Cross-platform (Ubuntu, Windows, macOS) ✅ Pass
Annotated tag moved after trigger ✅ Fails with clear error
Lightweight tag moved after trigger ✅ Fails with clear error

@ericsciple ericsciple force-pushed the users/erisciple/26-01-tags branch 7 times, most recently from f12cf15 to a70240b Compare January 8, 2026 23:59
@ericsciple ericsciple force-pushed the users/erisciple/26-01-tags branch from a70240b to 849c4d7 Compare January 9, 2026 00:26
@ericsciple ericsciple marked this pull request as ready for review January 9, 2026 00:28
Copilot AI review requested due to automatic review settings January 9, 2026 00:28
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request fixes multiple tag handling issues in the checkout action by changing how tags are fetched and verified.

  • Tags are now fetched by reference (not commit hash) to preserve annotations
  • The fetch-tags option now properly controls tag fetching via explicit refspecs
  • Added validation to detect when tags have been moved after workflow trigger (for shallow fetches)

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
src/ref-helper.ts Modified getRefSpec to accept fetchTags parameter and fetch tags by ref instead of commit; updated testRef to use ^{commit} for annotated tag dereferencing
src/git-source-provider.ts Removed fetchTags from fetch options (now in refspec); added tag movement validation for shallow fetches
src/git-command-manager.ts Removed fetchTags option from fetch method; always use --no-tags with explicit tag control via refspecs
test/ref-helper.test.ts Added comprehensive tests for new fetchTags parameter behavior
test/git-command-manager.test.ts Updated tests to reflect new fetch behavior with --no-tags always present
test/verify-fetch-tags.sh New script to verify tags are properly fetched in E2E tests
.github/workflows/test.yml Added E2E test for fetch-tags: true functionality
dist/index.js Compiled changes matching source modifications

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

This PR fixes several issues with tag handling in the checkout action:

1. fetch-tags: true now works (fixes #1471)
   - Tags refspec is now included in getRefSpec() when fetchTags=true
   - Previously tags were only fetched during a separate fetch that was
     overwritten by the main fetch

2. Tag checkout preserves annotations (fixes #290)
   - Tags are fetched via refspec (+refs/tags/*:refs/tags/*) instead of
     --tags flag
   - This fetches the actual tag objects, preserving annotations

3. Tag checkout with fetch-tags: true no longer fails (fixes #1467)
   - When checking out a tag with fetchTags=true, only the wildcard
     refspec is used (specific tag refspec is redundant)

Changes:
- src/ref-helper.ts: getRefSpec() now accepts fetchTags parameter and
  prepends tags refspec when true
- src/git-command-manager.ts: fetch() simplified to always use --no-tags,
  tags are fetched explicitly via refspec
- src/git-source-provider.ts: passes fetchTags to getRefSpec()
- Added E2E test for fetch-tags option

Related #1471, #1467, #290
@ericsciple ericsciple force-pushed the users/erisciple/26-01-tags branch from 849c4d7 to dc12339 Compare January 9, 2026 01:45
@ericsciple ericsciple merged commit de0fac2 into main Jan 9, 2026
12 checks passed
@ericsciple ericsciple deleted the users/erisciple/26-01-tags branch January 9, 2026 19:42
@ben-manes
Copy link

@ericsciple This is fixed in v6.0.2 but that is marked as a pre-release. Was that a mistake and, if not, why not mark it as -beta? This is causing action updates tools to skip/flag it, so I wanted to make sure you were aware of that release marker.

@ericsciple
Copy link
Contributor Author

@ben-manes thanks! I just now removed the pre-release flag (I had originally planned to remove it sooner).

I will watch for issues, then bump the v6 tag to match next week.

luketainton pushed a commit to luketainton/luke_instant-msg-api that referenced this pull request Jan 22, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.1` → `v6.0.2` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

[Compare Source](actions/checkout@v6.0.1...v6.0.2)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2356](actions/checkout#2356)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuODkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=-->

Reviewed-on: https://git.tainton.uk/luke/instant-msg-api/pulls/238
Reviewed-by: Luke Tainton <[email protected]>
Co-authored-by: renovate[bot] <[email protected]>
Co-committed-by: renovate[bot] <[email protected]>
luketainton pushed a commit to luketainton/actions_gha-workflows that referenced this pull request Jan 22, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.1` → `v6.0.2` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

[Compare Source](actions/checkout@v6.0.1...v6.0.2)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2356](actions/checkout#2356)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuODkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=-->

Reviewed-on: https://git.tainton.uk/actions/gha-workflows/pulls/58
Co-authored-by: renovate[bot] <[email protected]>
Co-committed-by: renovate[bot] <[email protected]>
renovate bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Jan 24, 2026
| datasource  | package          | from   | to     |
| ----------- | ---------------- | ------ | ------ |
| github-tags | actions/checkout | v4.1.7 | v6.0.2 |


## [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356)


## [vv6.0.1](actions/checkout@v6.0.0...v6.0.1)



## [vv6.0.0](actions/checkout@v5.0.1...v6.0.0)



## [vv5.0.1](https://github.com/actions/checkout/releases/tag/v5.0.1)

##### What's Changed

- Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301)

**Full Changelog**: <actions/checkout@v5...v5.0.1>


## [vv5.0.0](https://github.com/actions/checkout/releases/tag/v5.0.0)

##### What's Changed

- Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226)
- Prepare v5.0.0 release by [@salmanmkc](https://github.com/salmanmkc) in [#2238](actions/checkout#2238)

##### ⚠️ Minimum Compatible Runner Version

**v2.327.1**\
[Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1)

Make sure your runner is updated to this version or newer to use this release.

**Full Changelog**: <actions/checkout@v4...v5.0.0>


## [vv4.3.1](https://github.com/actions/checkout/releases/tag/v4.3.1)

##### What's Changed

- Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305)

**Full Changelog**: <actions/checkout@v4...v4.3.1>


## [vv4.3.0](https://github.com/actions/checkout/releases/tag/v4.3.0)

##### What's Changed

- docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971)
- Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977)
- Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043)
- Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044)
- Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194)
- Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224)
- Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236)
- Prepare release v4.3.0 by [@salmanmkc](https://github.com/salmanmkc) in [#2237](actions/checkout#2237)

##### New Contributors

- [@motss](https://github.com/motss) made their first contribution in [#1971](actions/checkout#1971)
- [@mouismail](https://github.com/mouismail) made their first contribution in [#1977](actions/checkout#1977)
- [@benwells](https://github.com/benwells) made their first contribution in [#2043](actions/checkout#2043)
- [@nebuk89](https://github.com/nebuk89) made their first contribution in [#2194](actions/checkout#2194)
- [@salmanmkc](https://github.com/salmanmkc) made their first contribution in [#2236](actions/checkout#2236)

**Full Changelog**: <actions/checkout@v4...v4.3.0>


## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422)

- `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941)
- Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946)


## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421)

- Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924)


## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420)

- Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180)
- Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Jan 27, 2026
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
Release notes

*Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).*

> v6.0.2
> ------
>
> What's Changed
> --------------
>
> * Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2355](https://redirect.github.com/actions/checkout/pull/2355)
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> **Full Changelog**: <actions/checkout@v6.0.1...v6.0.2>


Changelog

*Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> v6.0.2
> ------
>
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> v6.0.1
> ------
>
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
>
> v6.0.0
> ------
>
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
>
> v5.0.1
> ------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> v5.0.0
> ------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
>
> v4.3.1
> ------
>
> * Port v6 cleanup to v4 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305)
>
> v4.3.0
> ------
>
> * docs: update README.md by [`@​motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971)
> * Add internal repos for checking out multiple repositories by [`@​mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977)
> * Documentation update - add recommended permissions to Readme by [`@​benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043)
> * Adjust positioning of user email note and permissions heading by [`@​joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044)
> * Update README.md by [`@​nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194)
> * Update CODEOWNERS for actions by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224)
> * Update package dependencies by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236)
>
> v4.2.2
> ------
>
> * `url-helper.ts` now leverages well-known environment variables by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941)
> * Expand unit test coverage for `isGhes` by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946)
>
> v4.2.1
> ------
>
> * Check out other refs/\* by commit if provided, fall back to ref by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924)
>
> v4.2.0
> ------
>
> * Add Ref and Commit outputs by [`@​lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180)
> * Dependency updates by [`@​dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872)
>
> v4.1.7
> ------
>
> * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739)
> * Bump actions/checkout from 3 to 4 by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697)
> * Check out other refs/\* by commit by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774)
> * Pin actions/checkout's own workflows to a known, good, stable version. by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1776](https://redirect.github.com/actions/checkout/pull/1776)
>
> v4.1.6
> ------
>
> * Check platform to set archive extension appropriately by [`@​cory-miller`](https://github.com/cory-miller) in [actions/checkout#1732](https://redirect.github.com/actions/checkout/pull/1732)

... (truncated)


Commits

* [`de0fac2`](actions/checkout@de0fac2) Fix tag handling: preserve annotations and explicit fetch-tags ([#2356](https://redirect.github.com/actions/checkout/issues/2356))
* [`064fe7f`](actions/checkout@064fe7f) Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set (...
* See full diff in [compare view](actions/checkout@8e8c483...de0fac2)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=6.0.1&new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
onap-github pushed a commit to onap/portal-ng-bff that referenced this pull request Jan 28, 2026
Bumps actions/checkout from 5.0.0 to 6.0.2.
## Release notes

Sourced from actions/checkout's releases.

v6.0.2
What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355
Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2
v6.0.1
What's Changed

Update all references from v5 and v4 to v6 by @​ericsciple in actions/checkout#2314
Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327
Clarify v6 README by @​ericsciple in actions/checkout#2328

Full Changelog: actions/checkout@v6...v6.0.1
v6.0.0
What's Changed

Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248
Persist creds to a separate file by @​ericsciple in actions/checkout#2286
v6-beta by @​ericsciple in actions/checkout#2298
update readme/changelog for v6 by @​ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0
v6-beta
What's Changed
Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.
This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.
v5.0.1
What's Changed

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @​cory-miller in actions/checkout#1732

... (truncated)

## Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (
8e8c483 Clarify v6 README (#2328)
033fa0d Add worktree support for persist-credentials includeIf (#2327)
c2d88d3 Update all references from v5 and v4 to v6 (#2314)
1af3b93 update readme/changelog for v6 (#2311)
71cf226 v6-beta (#2298)
069c695 Persist creds to a separate file (#2286)
ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <[email protected]>
Change-Id: I2efc697cecfe2aa7bb222b00975003050af2e33d
GitHub-PR: #69
GitHub-Hash: b97dabb355259666
Signed-off-by: onap.gh2gerrit <[email protected]>
inkydragon pushed a commit to JuliaLang/julia that referenced this pull request Feb 1, 2026
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1
to 6.0.2.

v6.0.2 What's Changed
- Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​ TingluoHuang in actions/checkout#2355
- Fix tag handling: preserve annotations and explicit fetch-tags by @​ ericsciple in actions/checkout#2356
- Full Changelog: actions/[email protected]


Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
sinsky pushed a commit to sinsky/terraform-dns-management that referenced this pull request Feb 2, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | major | `v5` → `v6` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

[Compare Source](actions/checkout@v5...v6)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2356](actions/checkout#2356)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNy4wIiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: https://code.app.sinsky.cc/sinsky/terraform-dns-management/pulls/17
Co-authored-by: Renovate Bot <[email protected]>
Co-committed-by: Renovate Bot <[email protected]>
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Feb 2, 2026
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2.
Release notes

*Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).*

> v6.0.2
> ------
>
> What's Changed
> --------------
>
> * Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2355](https://redirect.github.com/actions/checkout/pull/2355)
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> **Full Changelog**: <actions/checkout@v6.0.1...v6.0.2>
>
> v6.0.1
> ------
>
> What's Changed
> --------------
>
> * Update all references from v5 and v4 to v6 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2314](https://redirect.github.com/actions/checkout/pull/2314)
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
> * Clarify v6 README by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2328](https://redirect.github.com/actions/checkout/pull/2328)
>
> **Full Changelog**: <actions/checkout@v6...v6.0.1>
>
> v6.0.0
> ------
>
> What's Changed
> --------------
>
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * v6-beta by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2298](https://redirect.github.com/actions/checkout/pull/2298)
> * update readme/changelog for v6 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2311](https://redirect.github.com/actions/checkout/pull/2311)
>
> **Full Changelog**: <actions/checkout@v5.0.0...v6.0.0>
>
> v6-beta
> -------
>
> What's Changed
> --------------
>
> Updated persist-credentials to store the credentials under `$RUNNER_TEMP` instead of directly in the local git config.
>
> This requires a minimum Actions Runner version of [v2.329.0](https://github.com/actions/runner/releases/tag/v2.329.0) to access the persisted credentials for [Docker container action](https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action) scenarios.
>
> v5.0.1
> ------
>
> What's Changed
> --------------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> **Full Changelog**: <actions/checkout@v5...v5.0.1>
>
> v5.0.0
> ------
>
> What's Changed
> --------------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
> * Prepare v5.0.0 release by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2238](https://redirect.github.com/actions/checkout/pull/2238)
>
> ⚠️ Minimum Compatible Runner Version
> ------------------------------------
>
> **v2.327.1**  
> [Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1)

... (truncated)


Changelog

*Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> v6.0.2
> ------
>
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> v6.0.1
> ------
>
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
>
> v6.0.0
> ------
>
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
>
> v5.0.1
> ------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> v5.0.0
> ------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
>
> v4.3.1
> ------
>
> * Port v6 cleanup to v4 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305)
>
> v4.3.0
> ------
>
> * docs: update README.md by [`@​motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971)
> * Add internal repos for checking out multiple repositories by [`@​mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977)
> * Documentation update - add recommended permissions to Readme by [`@​benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043)
> * Adjust positioning of user email note and permissions heading by [`@​joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044)
> * Update README.md by [`@​nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194)
> * Update CODEOWNERS for actions by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224)
> * Update package dependencies by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236)
>
> v4.2.2
> ------
>
> * `url-helper.ts` now leverages well-known environment variables by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941)
> * Expand unit test coverage for `isGhes` by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946)
>
> v4.2.1
> ------
>
> * Check out other refs/\* by commit if provided, fall back to ref by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924)
>
> v4.2.0
> ------
>
> * Add Ref and Commit outputs by [`@​lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180)
> * Dependency updates by [`@​dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872)
>
> v4.1.7
> ------
>
> * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739)
> * Bump actions/checkout from 3 to 4 by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697)
> * Check out other refs/\* by commit by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774)
> * Pin actions/checkout's own workflows to a known, good, stable version. by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1776](https://redirect.github.com/actions/checkout/pull/1776)
>
> v4.1.6
> ------
>
> * Check platform to set archive extension appropriately by [`@​cory-miller`](https://github.com/cory-miller) in [actions/checkout#1732](https://redirect.github.com/actions/checkout/pull/1732)

... (truncated)


Commits

* [`de0fac2`](actions/checkout@de0fac2) Fix tag handling: preserve annotations and explicit fetch-tags ([#2356](https://redirect.github.com/actions/checkout/issues/2356))
* [`064fe7f`](actions/checkout@064fe7f) Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set (...
* [`8e8c483`](actions/checkout@8e8c483) Clarify v6 README ([#2328](https://redirect.github.com/actions/checkout/issues/2328))
* [`033fa0d`](actions/checkout@033fa0d) Add worktree support for persist-credentials includeIf ([#2327](https://redirect.github.com/actions/checkout/issues/2327))
* [`c2d88d3`](actions/checkout@c2d88d3) Update all references from v5 and v4 to v6 ([#2314](https://redirect.github.com/actions/checkout/issues/2314))
* [`1af3b93`](actions/checkout@1af3b93) update readme/changelog for v6 ([#2311](https://redirect.github.com/actions/checkout/issues/2311))
* [`71cf226`](actions/checkout@71cf226) v6-beta ([#2298](https://redirect.github.com/actions/checkout/issues/2298))
* [`069c695`](actions/checkout@069c695) Persist creds to a separate file ([#2286](https://redirect.github.com/actions/checkout/issues/2286))
* [`ff7abcd`](actions/checkout@ff7abcd) Update README to include Node.js 24 support details and requirements ([#2248](https://redirect.github.com/actions/checkout/issues/2248))
* [`08c6903`](actions/checkout@08c6903) Prepare v5.0.0 release ([#2238](https://redirect.github.com/actions/checkout/issues/2238))
* Additional commits viewable in [compare view](actions/checkout@v4.3.1...de0fac2)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=4.3.1&new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
renovate bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Feb 3, 2026
| datasource  | package          | from   | to     |
| ----------- | ---------------- | ------ | ------ |
| github-tags | actions/checkout | v4.1.7 | v6.0.2 |


## [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356)


## [vv6.0.1](actions/checkout@v6.0.0...v6.0.1)



## [vv6.0.0](actions/checkout@v5.0.1...v6.0.0)



## [vv5.0.1](https://github.com/actions/checkout/releases/tag/v5.0.1)

##### What's Changed

- Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301)

**Full Changelog**: <actions/checkout@v5...v5.0.1>


## [vv5.0.0](https://github.com/actions/checkout/releases/tag/v5.0.0)

##### What's Changed

- Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226)
- Prepare v5.0.0 release by [@salmanmkc](https://github.com/salmanmkc) in [#2238](actions/checkout#2238)

##### ⚠️ Minimum Compatible Runner Version

**v2.327.1**\
[Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1)

Make sure your runner is updated to this version or newer to use this release.

**Full Changelog**: <actions/checkout@v4...v5.0.0>


## [vv4.3.1](https://github.com/actions/checkout/releases/tag/v4.3.1)

##### What's Changed

- Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305)

**Full Changelog**: <actions/checkout@v4...v4.3.1>


## [vv4.3.0](https://github.com/actions/checkout/releases/tag/v4.3.0)

##### What's Changed

- docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971)
- Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977)
- Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043)
- Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044)
- Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194)
- Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224)
- Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236)
- Prepare release v4.3.0 by [@salmanmkc](https://github.com/salmanmkc) in [#2237](actions/checkout#2237)

##### New Contributors

- [@motss](https://github.com/motss) made their first contribution in [#1971](actions/checkout#1971)
- [@mouismail](https://github.com/mouismail) made their first contribution in [#1977](actions/checkout#1977)
- [@benwells](https://github.com/benwells) made their first contribution in [#2043](actions/checkout#2043)
- [@nebuk89](https://github.com/nebuk89) made their first contribution in [#2194](actions/checkout#2194)
- [@salmanmkc](https://github.com/salmanmkc) made their first contribution in [#2236](actions/checkout#2236)

**Full Changelog**: <actions/checkout@v4...v4.3.0>


## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422)

- `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941)
- Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946)


## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421)

- Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924)


## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420)

- Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180)
- Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Feb 8, 2026
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2.
Release notes

*Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).*

> v6.0.2
> ------
>
> What's Changed
> --------------
>
> * Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2355](https://redirect.github.com/actions/checkout/pull/2355)
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> **Full Changelog**: <actions/checkout@v6.0.1...v6.0.2>
>
> v6.0.1
> ------
>
> What's Changed
> --------------
>
> * Update all references from v5 and v4 to v6 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2314](https://redirect.github.com/actions/checkout/pull/2314)
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
> * Clarify v6 README by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2328](https://redirect.github.com/actions/checkout/pull/2328)
>
> **Full Changelog**: <actions/checkout@v6...v6.0.1>
>
> v6.0.0
> ------
>
> What's Changed
> --------------
>
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * v6-beta by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2298](https://redirect.github.com/actions/checkout/pull/2298)
> * update readme/changelog for v6 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2311](https://redirect.github.com/actions/checkout/pull/2311)
>
> **Full Changelog**: <actions/checkout@v5.0.0...v6.0.0>
>
> v6-beta
> -------
>
> What's Changed
> --------------
>
> Updated persist-credentials to store the credentials under `$RUNNER_TEMP` instead of directly in the local git config.
>
> This requires a minimum Actions Runner version of [v2.329.0](https://github.com/actions/runner/releases/tag/v2.329.0) to access the persisted credentials for [Docker container action](https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action) scenarios.
>
> v5.0.1
> ------
>
> What's Changed
> --------------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> **Full Changelog**: <actions/checkout@v5...v5.0.1>
>
> v5.0.0
> ------
>
> What's Changed
> --------------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
> * Prepare v5.0.0 release by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2238](https://redirect.github.com/actions/checkout/pull/2238)
>
> ⚠️ Minimum Compatible Runner Version
> ------------------------------------
>
> **v2.327.1**  
> [Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1)

... (truncated)


Changelog

*Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> v6.0.2
> ------
>
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> v6.0.1
> ------
>
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
>
> v6.0.0
> ------
>
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
>
> v5.0.1
> ------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> v5.0.0
> ------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
>
> v4.3.1
> ------
>
> * Port v6 cleanup to v4 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305)
>
> v4.3.0
> ------
>
> * docs: update README.md by [`@​motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971)
> * Add internal repos for checking out multiple repositories by [`@​mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977)
> * Documentation update - add recommended permissions to Readme by [`@​benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043)
> * Adjust positioning of user email note and permissions heading by [`@​joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044)
> * Update README.md by [`@​nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194)
> * Update CODEOWNERS for actions by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224)
> * Update package dependencies by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236)
>
> v4.2.2
> ------
>
> * `url-helper.ts` now leverages well-known environment variables by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941)
> * Expand unit test coverage for `isGhes` by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946)
>
> v4.2.1
> ------
>
> * Check out other refs/\* by commit if provided, fall back to ref by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924)
>
> v4.2.0
> ------
>
> * Add Ref and Commit outputs by [`@​lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180)
> * Dependency updates by [`@​dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872)
>
> v4.1.7
> ------
>
> * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739)
> * Bump actions/checkout from 3 to 4 by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697)
> * Check out other refs/\* by commit by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774)
> * Pin actions/checkout's own workflows to a known, good, stable version. by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1776](https://redirect.github.com/actions/checkout/pull/1776)
>
> v4.1.6
> ------
>
> * Check platform to set archive extension appropriately by [`@​cory-miller`](https://github.com/cory-miller) in [actions/checkout#1732](https://redirect.github.com/actions/checkout/pull/1732)

... (truncated)


Commits

* [`de0fac2`](actions/checkout@de0fac2) Fix tag handling: preserve annotations and explicit fetch-tags ([#2356](https://redirect.github.com/actions/checkout/issues/2356))
* [`064fe7f`](actions/checkout@064fe7f) Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set (...
* [`8e8c483`](actions/checkout@8e8c483) Clarify v6 README ([#2328](https://redirect.github.com/actions/checkout/issues/2328))
* [`033fa0d`](actions/checkout@033fa0d) Add worktree support for persist-credentials includeIf ([#2327](https://redirect.github.com/actions/checkout/issues/2327))
* [`c2d88d3`](actions/checkout@c2d88d3) Update all references from v5 and v4 to v6 ([#2314](https://redirect.github.com/actions/checkout/issues/2314))
* [`1af3b93`](actions/checkout@1af3b93) update readme/changelog for v6 ([#2311](https://redirect.github.com/actions/checkout/issues/2311))
* [`71cf226`](actions/checkout@71cf226) v6-beta ([#2298](https://redirect.github.com/actions/checkout/issues/2298))
* [`069c695`](actions/checkout@069c695) Persist creds to a separate file ([#2286](https://redirect.github.com/actions/checkout/issues/2286))
* [`ff7abcd`](actions/checkout@ff7abcd) Update README to include Node.js 24 support details and requirements ([#2248](https://redirect.github.com/actions/checkout/issues/2248))
* [`08c6903`](actions/checkout@08c6903) Prepare v5.0.0 release ([#2238](https://redirect.github.com/actions/checkout/issues/2238))
* Additional commits viewable in [compare view](actions/checkout@v4.3.1...de0fac2)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=4.3.1&new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
oran-osc-github pushed a commit to o-ran-sc/it-dep that referenced this pull request Feb 9, 2026
Bumps actions/checkout from 6.0.1 to 6.0.2.
## Release notes

Sourced from actions/checkout's releases.

v6.0.2
What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355
Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @​cory-miller in actions/checkout#1732

... (truncated)

## Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <[email protected]>
Change-Id: Ib5afd68ec6617849ce824395429384a5712411ca
GitHub-PR: #32
GitHub-Hash: 13781856c4a4091d
Signed-off-by: oran.gh2gerrit <[email protected]>
renovate bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Feb 13, 2026
| datasource  | package          | from   | to     |
| ----------- | ---------------- | ------ | ------ |
| github-tags | actions/checkout | v4.1.7 | v6.0.2 |


## [vv6.0.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356)


## [vv6.0.1](actions/checkout@v6.0.0...v6.0.1)



## [vv6.0.0](actions/checkout@v5.0.1...v6.0.0)



## [vv5.0.1](https://github.com/actions/checkout/releases/tag/v5.0.1)

##### What's Changed

- Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301)

**Full Changelog**: <actions/checkout@v5...v5.0.1>


## [vv5.0.0](https://github.com/actions/checkout/releases/tag/v5.0.0)

##### What's Changed

- Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226)
- Prepare v5.0.0 release by [@salmanmkc](https://github.com/salmanmkc) in [#2238](actions/checkout#2238)

##### ⚠️ Minimum Compatible Runner Version

**v2.327.1**\
[Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1)

Make sure your runner is updated to this version or newer to use this release.

**Full Changelog**: <actions/checkout@v4...v5.0.0>


## [vv4.3.1](https://github.com/actions/checkout/releases/tag/v4.3.1)

##### What's Changed

- Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](actions/checkout#2305)

**Full Changelog**: <actions/checkout@v4...v4.3.1>


## [vv4.3.0](https://github.com/actions/checkout/releases/tag/v4.3.0)

##### What's Changed

- docs: update README.md by [@motss](https://github.com/motss) in [#1971](actions/checkout#1971)
- Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](actions/checkout#1977)
- Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](actions/checkout#2043)
- Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](actions/checkout#2044)
- Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](actions/checkout#2194)
- Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](actions/checkout#2224)
- Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](actions/checkout#2236)
- Prepare release v4.3.0 by [@salmanmkc](https://github.com/salmanmkc) in [#2237](actions/checkout#2237)

##### New Contributors

- [@motss](https://github.com/motss) made their first contribution in [#1971](actions/checkout#1971)
- [@mouismail](https://github.com/mouismail) made their first contribution in [#1977](actions/checkout#1977)
- [@benwells](https://github.com/benwells) made their first contribution in [#2043](actions/checkout#2043)
- [@nebuk89](https://github.com/nebuk89) made their first contribution in [#2194](actions/checkout#2194)
- [@salmanmkc](https://github.com/salmanmkc) made their first contribution in [#2236](actions/checkout#2236)

**Full Changelog**: <actions/checkout@v4...v4.3.0>


## [vv4.2.2](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422)

- `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](actions/checkout#1941)
- Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](actions/checkout#1946)


## [vv4.2.1](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421)

- Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](actions/checkout#1924)


## [vv4.2.0](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420)

- Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](actions/checkout#1180)
- Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](actions/checkout#1777), [#1872](actions/checkout#1872)
mergify bot added a commit to robfrank/linklift that referenced this pull request Feb 14, 2026
…updates [skip ci]

Bumps the github-actions group with 8 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` |
| [actions/cache](https://github.com/actions/cache) | `5.0.2` | `5.0.3` |
| [docker/login-action](https://github.com/docker/login-action) | `3.6.0` | `3.7.0` |
| [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) | `6.0.1` | `6.1.0` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `7.3.0` | `7.3.2` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.10` | `4.32.1` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.31` | `1.0.43` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.286.0` | `1.288.0` |
Updates `actions/checkout` from 6.0.1 to 6.0.2
Release notes

*Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).*

> v6.0.2
> ------
>
> What's Changed
> --------------
>
> * Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2355](https://redirect.github.com/actions/checkout/pull/2355)
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> **Full Changelog**: <actions/checkout@v6.0.1...v6.0.2>


Changelog

*Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> v6.0.2
> ------
>
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> v6.0.1
> ------
>
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
>
> v6.0.0
> ------
>
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
>
> v5.0.1
> ------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> v5.0.0
> ------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
>
> v4.3.1
> ------
>
> * Port v6 cleanup to v4 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305)
>
> v4.3.0
> ------
>
> * docs: update README.md by [`@​motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971)
> * Add internal repos for checking out multiple repositories by [`@​mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977)
> * Documentation update - add recommended permissions to Readme by [`@​benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043)
> * Adjust positioning of user email note and permissions heading by [`@​joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044)
> * Update README.md by [`@​nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194)
> * Update CODEOWNERS for actions by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224)
> * Update package dependencies by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236)
>
> v4.2.2
> ------
>
> * `url-helper.ts` now leverages well-known environment variables by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941)
> * Expand unit test coverage for `isGhes` by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946)
>
> v4.2.1
> ------
>
> * Check out other refs/\* by commit if provided, fall back to ref by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924)
>
> v4.2.0
> ------
>
> * Add Ref and Commit outputs by [`@​lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180)
> * Dependency updates by [`@​dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872)
>
> v4.1.7
> ------
>
> * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739)
> * Bump actions/checkout from 3 to 4 by [`@​dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697)
> * Check out other refs/\* by commit by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774)
> * Pin actions/checkout's own workflows to a known, good, stable version. by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1776](https://redirect.github.com/actions/checkout/pull/1776)
>
> v4.1.6
> ------
>
> * Check platform to set archive extension appropriately by [`@​cory-miller`](https://github.com/cory-miller) in [actions/checkout#1732](https://redirect.github.com/actions/checkout/pull/1732)

... (truncated)


Commits

* [`de0fac2`](actions/checkout@de0fac2) Fix tag handling: preserve annotations and explicit fetch-tags ([#2356](https://redirect.github.com/actions/checkout/issues/2356))
* [`064fe7f`](actions/checkout@064fe7f) Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set (...
* See full diff in [compare view](actions/checkout@8e8c483...de0fac2)
  
Updates `actions/cache` from 5.0.2 to 5.0.3
Release notes

*Sourced from [actions/cache's releases](https://github.com/actions/cache/releases).*

> v5.0.3
> ------
>
> What's Changed
> --------------
>
> * Bump `@actions/cache` to v5.0.5 (Resolves: <https://github.com/actions/cache/security/dependabot/33>)
> * Bump `@actions/core` to v2.0.3
>
> **Full Changelog**: <actions/cache@v5...v5.0.3>


Changelog

*Sourced from [actions/cache's changelog](https://github.com/actions/cache/blob/main/RELEASES.md).*

> Releases
> ========
>
> How to prepare a release
> ------------------------
>
> > [!NOTE]  
> > Relevant for maintainers with write access only.
>
> 1. Switch to a new branch from `main`.
> 2. Run `npm test` to ensure all tests are passing.
> 3. Update the version in [`https://github.com/actions/cache/blob/main/package.json`](https://github.com/actions/cache/blob/main/package.json).
> 4. Run `npm run build` to update the compiled files.
> 5. Update this [`https://github.com/actions/cache/blob/main/RELEASES.md`](https://github.com/actions/cache/blob/main/RELEASES.md) with the new version and changes in the `## Changelog` section.
> 6. Run `licensed cache` to update the license report.
> 7. Run `licensed status` and resolve any warnings by updating the [`https://github.com/actions/cache/blob/main/.licensed.yml`](https://github.com/actions/cache/blob/main/.licensed.yml) file with the exceptions.
> 8. Commit your changes and push your branch upstream.
> 9. Open a pull request against `main` and get it reviewed and merged.
> 10. Draft a new release <https://github.com/actions/cache/releases> use the same version number used in `package.json`
>     1. Create a new tag with the version number.
>     2. Auto generate release notes and update them to match the changes you made in `RELEASES.md`.
>     3. Toggle the set as the latest release option.
>     4. Publish the release.
> 11. Navigate to <https://github.com/actions/cache/actions/workflows/release-new-action-version.yml>
>     1. There should be a workflow run queued with the same version number.
>     2. Approve the run to publish the new version and update the major tags for this action.
>
> Changelog
> ---------
>
> ### 5.0.3
>
> * Bump `@actions/cache` to v5.0.5 (Resolves: <https://github.com/actions/cache/security/dependabot/33>)
> * Bump `@actions/core` to v2.0.3
>
> ### 5.0.2
>
> * Bump `@actions/cache` to v5.0.3 [#1692](https://redirect.github.com/actions/cache/pull/1692)
>
> ### 5.0.1
>
> * Update `@azure/storage-blob` to `^12.29.1` via `@actions/[email protected]` [#1685](https://redirect.github.com/actions/cache/pull/1685)
>
> ### 5.0.0
>
> > [!IMPORTANT]
> > `actions/cache@v5` runs on the Node.js 24 runtime and requires a minimum Actions Runner version of `2.327.1`.
> > If you are using self-hosted runners, ensure they are updated before upgrading.
>
> ### 4.3.0
>
> * Bump `@actions/cache` to [v4.1.0](https://redirect.github.com/actions/toolkit/pull/2132)

... (truncated)


Commits

* [`cdf6c1f`](actions/cache@cdf6c1f) Merge pull request [#1695](https://redirect.github.com/actions/cache/issues/1695) from actions/Link-/prepare-5.0.3
* [`a1bee22`](actions/cache@a1bee22) Add review for the `@​actions/http-client` license
* [`4695763`](actions/cache@4695763) Add licensed output
* [`dc73bb9`](actions/cache@dc73bb9) Upgrade dependencies and address security warnings
* [`345d5c2`](actions/cache@345d5c2) Add 5.0.3 builds
* See full diff in [compare view](actions/cache@8b402f5...cdf6c1f)
  
Updates `docker/login-action` from 3.6.0 to 3.7.0
Release notes

*Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).*

> v3.7.0
> ------
>
> * Add `scope` input to set scopes for the authentication token by [`@​crazy-max`](https://github.com/crazy-max) in [docker/login-action#912](https://redirect.github.com/docker/login-action/pull/912)
> * Add support for AWS European Sovereign Cloud ECR by [`@​dphi`](https://github.com/dphi) in [docker/login-action#914](https://redirect.github.com/docker/login-action/pull/914)
> * Ensure passwords are redacted with `registry-auth` input by [`@​crazy-max`](https://github.com/crazy-max) in [docker/login-action#911](https://redirect.github.com/docker/login-action/pull/911)
> * build(deps): bump lodash from 4.17.21 to 4.17.23 in [docker/login-action#915](https://redirect.github.com/docker/login-action/pull/915)
>
> **Full Changelog**: <docker/login-action@v3.6.0...v3.7.0>


Commits

* [`c94ce9f`](docker/login-action@c94ce9f) Merge pull request [#915](https://redirect.github.com/docker/login-action/issues/915) from docker/dependabot/npm\_and\_yarn/lodash-4.17.23
* [`8339c95`](docker/login-action@8339c95) Merge pull request [#912](https://redirect.github.com/docker/login-action/issues/912) from docker/scope
* [`c83e932`](docker/login-action@c83e932) build(deps): bump lodash from 4.17.21 to 4.17.23
* [`b268aa5`](docker/login-action@b268aa5) chore: update generated content
* [`a603229`](docker/login-action@a603229) documentation for scope input
* [`7567f92`](docker/login-action@7567f92) Add scope input to set scopes for the authentication token
* [`0567fa5`](docker/login-action@0567fa5) Merge pull request [#914](https://redirect.github.com/docker/login-action/issues/914) from dphi/add-support-for-amazonaws.eu
* [`f6ef577`](docker/login-action@f6ef577) feat: add support for AWS European Sovereign Cloud ECR registries
* [`916386b`](docker/login-action@916386b) Merge pull request [#911](https://redirect.github.com/docker/login-action/issues/911) from crazy-max/ensure-redact
* [`5b3f94a`](docker/login-action@5b3f94a) chore: update generated content
* Additional commits viewable in [compare view](docker/login-action@5e57cd1...c94ce9f)
  
Updates `mikepenz/release-changelog-builder-action` from 6.0.1 to 6.1.0
Release notes

*Sourced from [mikepenz/release-changelog-builder-action's releases](https://github.com/mikepenz/release-changelog-builder-action/releases).*

> v6.1.0
> ------
>
> 🚀 Features
> ----------
>
> * fix: update dependencies | fix undici vunerability | upgrade github dependency
>   + PR: [#1510](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1510)
> * chore: upgrade dependencies to latest major versions
>   + PR: [#1512](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1512)
>
> 📦 Dependencies
> --------------
>
> * Bump github/codeql-action from 3 to 4
>   + PR: [#1490](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1490)
> * Bump actions/setup-node from 4 to 6
>   + PR: [#1486](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1486)
> * Bump mikepenz/release-changelog-builder-action from 5 to 6
>   + PR: [#1489](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1489)
> * Bump actions/upload-artifact from 4 to 5
>   + PR: [#1488](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1488)
> * Bump mikepenz/action-junit-report from 5 to 6
>   + PR: [#1487](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1487)
> * Update `octokit/rest`, `globals`
>   + PR: [#1491](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1491)
> * Bump actions/checkout from 4 to 5
>   + PR: [#1492](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1492)
> * Bump js-yaml from 4.1.0 to 4.1.1
>   + PR: [#1494](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1494)
> * Bump the dev-dependencies group with 3 updates
>   + PR: [#1495](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1495)
> * Bump vitest from 4.0.7 to 4.0.10
>   + PR: [#1496](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1496)
> * Bump actions/checkout from 5 to 6
>   + PR: [#1501](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1501)
> * Bump actions/upload-artifact from 5 to 6
>   + PR: [#1508](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1508)
> * fix: update dependencies | fix undici vunerability | upgrade github dependency
>   + PR: [#1510](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1510)
> * chore: upgrade dependencies to latest major versions
>   + PR: [#1512](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1512)
>
> Contributors:
> -------------
>
> * [`@​dependabot`](https://github.com/dependabot)[bot], [`@​mikepenz`](https://github.com/mikepenz)


Commits

* [`6faf020`](mikepenz/release-changelog-builder-action@6faf020) Merge pull request [#1513](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1513) from mikepenz/develop
* [`758b277`](mikepenz/release-changelog-builder-action@758b277) fix: update release-changelog-builder-action to version 6
* [`22fe05c`](mikepenz/release-changelog-builder-action@22fe05c) Merge pull request [#1512](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1512) from mikepenz/feature/upgrade-dependencies-major-ver...
* [`46b3aa3`](mikepenz/release-changelog-builder-action@46b3aa3) fix: add globals as direct devDependency for ESLint 9+
* [`a8034b4`](mikepenz/release-changelog-builder-action@a8034b4) chore: upgrade dependencies to latest major versions
* [`2348b8c`](mikepenz/release-changelog-builder-action@2348b8c) Merge pull request [#1510](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1510) from mikepenz/fix/undici-security-vulnerability
* [`fe56a39`](mikepenz/release-changelog-builder-action@fe56a39) fix: address moderate security vulnerability in undici (GHSA-g9mf-h72j-4rw9)
* [`7f7d0e7`](mikepenz/release-changelog-builder-action@7f7d0e7) Merge pull request [#1508](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1508) from mikepenz/dependabot/github\_actions/actions/uplo...
* [`d51fb13`](mikepenz/release-changelog-builder-action@d51fb13) Bump actions/upload-artifact from 5 to 6
* [`dd6c4fe`](mikepenz/release-changelog-builder-action@dd6c4fe) Merge pull request [#1501](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1501) from mikepenz/dependabot/github\_actions/actions/chec...
* Additional commits viewable in [compare view](mikepenz/release-changelog-builder-action@439f79b...6faf020)
  
Updates `anchore/scan-action` from 7.3.0 to 7.3.2
Release notes

*Sourced from [anchore/scan-action's releases](https://github.com/anchore/scan-action/releases).*

> v7.3.2
> ------
>
> * feat: add option to specify one or more grype config files ([#589](https://redirect.github.com/anchore/scan-action/issues/589)) [[`@​sam-super`](https://github.com/sam-super)]
>
> ⬆️ Dependencies
> ---------------
>
> * chore(deps): bump `@​actions/cache` from 5.0.3 to 5.0.5 ([#592](https://redirect.github.com/anchore/scan-action/issues/592)) [@[dependabot[bot]](https://github.com/apps/dependabot)]
> * chore(deps): bump `@​actions/tool-cache` from 3.0.0 to 3.0.1 ([#593](https://redirect.github.com/anchore/scan-action/issues/593)) [@[dependabot[bot]](https://github.com/apps/dependabot)]
> * chore(deps): update Grype to v0.107.1 ([#594](https://redirect.github.com/anchore/scan-action/issues/594)) [@[anchore-actions-token-generator[bot]](https://github.com/apps/anchore-actions-token-generator)]
> * chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 ([#590](https://redirect.github.com/anchore/scan-action/issues/590)) [@[dependabot[bot]](https://github.com/apps/dependabot)]
> * chore(deps): update Grype to v0.107.0 ([#588](https://redirect.github.com/anchore/scan-action/issues/588)) [@[anchore-actions-token-generator[bot]](https://github.com/apps/anchore-actions-token-generator)]
> * chore(deps-dev): bump prettier from 3.8.0 to 3.8.1 ([#584](https://redirect.github.com/anchore/scan-action/issues/584)) [@[dependabot[bot]](https://github.com/apps/dependabot)]
> * chore(deps-dev): bump tar from 7.5.6 to 7.5.7 ([#586](https://redirect.github.com/anchore/scan-action/issues/586)) [@[dependabot[bot]](https://github.com/apps/dependabot)]
>
> v7.3.1
> ------
>
> ⬆️ Dependencies
> ---------------
>
> * chore(deps): update Grype to v0.106.0 ([#583](https://redirect.github.com/anchore/scan-action/issues/583)) [@[anchore-actions-token-generator[bot]](https://github.com/apps/anchore-actions-token-generator)]
> * chore(deps): bump lodash from 4.17.21 to 4.17.23 ([#580](https://redirect.github.com/anchore/scan-action/issues/580)) [@[dependabot[bot]](https://github.com/apps/dependabot)]


Commits

* [`7037fa0`](anchore/scan-action@7037fa0) chore(deps): bump `@​actions/cache` from 5.0.3 to 5.0.5 ([#592](https://redirect.github.com/anchore/scan-action/issues/592))
* [`d4c1dcd`](anchore/scan-action@d4c1dcd) chore(deps): bump `@​actions/tool-cache` from 3.0.0 to 3.0.1 ([#593](https://redirect.github.com/anchore/scan-action/issues/593))
* [`d7f5518`](anchore/scan-action@d7f5518) chore(deps): update Grype to v0.107.1 ([#594](https://redirect.github.com/anchore/scan-action/issues/594))
* [`e573fa1`](anchore/scan-action@e573fa1) feat: add option to specify one or more grype config files ([#589](https://redirect.github.com/anchore/scan-action/issues/589))
* [`4829fea`](anchore/scan-action@4829fea) chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 ([#590](https://redirect.github.com/anchore/scan-action/issues/590))
* [`db5ac0e`](anchore/scan-action@db5ac0e) chore(deps): bump release-drafter/release-drafter from 6.1.0 to 6.2.0 ([#587](https://redirect.github.com/anchore/scan-action/issues/587))
* [`5b5f7cd`](anchore/scan-action@5b5f7cd) chore(deps): update Grype to v0.107.0 ([#588](https://redirect.github.com/anchore/scan-action/issues/588))
* [`9fc81f9`](anchore/scan-action@9fc81f9) chore(deps-dev): bump prettier from 3.8.0 to 3.8.1 ([#584](https://redirect.github.com/anchore/scan-action/issues/584))
* [`d2e46d3`](anchore/scan-action@d2e46d3) chore(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#585](https://redirect.github.com/anchore/scan-action/issues/585))
* [`1091f6b`](anchore/scan-action@1091f6b) chore(deps-dev): bump tar from 7.5.6 to 7.5.7 ([#586](https://redirect.github.com/anchore/scan-action/issues/586))
* Additional commits viewable in [compare view](anchore/scan-action@0d444ed...7037fa0)
  
Updates `github/codeql-action` from 4.31.10 to 4.32.1
Release notes

*Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).*

> v4.32.1
> -------
>
> * A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [#3422](https://redirect.github.com/github/codeql-action/pull/3422)
> * Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [#3421](https://redirect.github.com/github/codeql-action/pull/3421)
>
> v4.32.0
> -------
>
> * Update default CodeQL bundle version to [2.24.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#3425](https://redirect.github.com/github/codeql-action/pull/3425)
>
> v4.31.11
> --------
>
> * When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#3409](https://redirect.github.com/github/codeql-action/pull/3409)
> * Improved error handling throughout the CodeQL Action. [#3415](https://redirect.github.com/github/codeql-action/pull/3415)
> * Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#3318](https://redirect.github.com/github/codeql-action/pull/3318)
> * The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#3403](https://redirect.github.com/github/codeql-action/pull/3403)


Changelog

*Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> No user facing changes.
>
> 4.32.1 - 02 Feb 2026
> --------------------
>
> * A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [#3422](https://redirect.github.com/github/codeql-action/pull/3422)
> * Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [#3421](https://redirect.github.com/github/codeql-action/pull/3421)
>
> 4.32.0 - 26 Jan 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.24.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#3425](https://redirect.github.com/github/codeql-action/pull/3425)
>
> 4.31.11 - 23 Jan 2026
> ---------------------
>
> * When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#3409](https://redirect.github.com/github/codeql-action/pull/3409)
> * Improved error handling throughout the CodeQL Action. [#3415](https://redirect.github.com/github/codeql-action/pull/3415)
> * Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#3318](https://redirect.github.com/github/codeql-action/pull/3318)
> * The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#3403](https://redirect.github.com/github/codeql-action/pull/3403)
>
> 4.31.10 - 12 Jan 2026
> ---------------------
>
> * Update default CodeQL bundle version to 2.23.9. [#3393](https://redirect.github.com/github/codeql-action/pull/3393)
>
> 4.31.9 - 16 Dec 2025
> --------------------
>
> No user facing changes.
>
> 4.31.8 - 11 Dec 2025
> --------------------
>
> * Update default CodeQL bundle version to 2.23.8. [#3354](https://redirect.github.com/github/codeql-action/pull/3354)
>
> 4.31.7 - 05 Dec 2025
> --------------------
>
> * Update default CodeQL bundle version to 2.23.7. [#3343](https://redirect.github.com/github/codeql-action/pull/3343)
>
> 4.31.6 - 01 Dec 2025
> --------------------
>
> No user facing changes.
>
> 4.31.5 - 24 Nov 2025
> --------------------
>
> * Update default CodeQL bundle version to 2.23.6. [#3321](https://redirect.github.com/github/codeql-action/pull/3321)
>
> 4.31.4 - 18 Nov 2025
> --------------------

... (truncated)


Commits

* [`6bc82e0`](github/codeql-action@6bc82e0) Merge pull request [#3447](https://redirect.github.com/github/codeql-action/issues/3447) from github/update-v4.32.1-f52cbc830
* [`42f00f2`](github/codeql-action@42f00f2) Add a couple of change notes
* [`cedee6d`](github/codeql-action@cedee6d) Update changelog for v4.32.1
* [`f52cbc8`](github/codeql-action@f52cbc8) Merge pull request [#3445](https://redirect.github.com/github/codeql-action/issues/3445) from github/dependabot/npm\_and\_yarn/fast-xml-parser-...
* [`c5aaca4`](github/codeql-action@c5aaca4) Merge pull request [#3446](https://redirect.github.com/github/codeql-action/issues/3446) from github/mbg/ci/pin-node-packages
* [`3e58739`](github/codeql-action@3e58739) Pin `@actions/tool-cache@3` in workflows to avoid failures with `github-script`
* [`a6ccefb`](github/codeql-action@a6ccefb) Rebuild
* [`0e64858`](github/codeql-action@0e64858) Bump fast-xml-parser from 5.3.3 to 5.3.4
* [`f985be5`](github/codeql-action@f985be5) Merge pull request [#3443](https://redirect.github.com/github/codeql-action/issues/3443) from github/dependabot/npm\_and\_yarn/tar-7.5.7
* [`0c8e06d`](github/codeql-action@0c8e06d) Bump tar from 7.5.6 to 7.5.7
* Additional commits viewable in [compare view](github/codeql-action@cdefb33...6bc82e0)
  
Updates `anthropics/claude-code-action` from 1.0.31 to 1.0.43
Release notes

*Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).*

> v1.0.43
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.43>
>
> v1.0.42
> -------
>
> What's Changed
> --------------
>
> * fix: pass OpenTelemetry environment variables to Claude Code subprocess by [`@​csy1204`](https://github.com/csy1204) in [anthropics/claude-code-action#886](https://redirect.github.com/anthropics/claude-code-action/pull/886)
> * fix: pass GitHub token to setup-bun to avoid rate limits by [`@​peloyeje`](https://github.com/peloyeje) in [anthropics/claude-code-action#861](https://redirect.github.com/anthropics/claude-code-action/pull/861)
>
> New Contributors
> ----------------
>
> * [`@​csy1204`](https://github.com/csy1204) made their first contribution in [anthropics/claude-code-action#886](https://redirect.github.com/anthropics/claude-code-action/pull/886)
> * [`@​peloyeje`](https://github.com/peloyeje) made their first contribution in [anthropics/claude-code-action#861](https://redirect.github.com/anthropics/claude-code-action/pull/861)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.42>
>
> v1.0.41
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.41>
>
> v1.0.40
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.40>
>
> v1.0.39
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.39>
>
> v1.0.38
> -------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.38>
>
> v1.0.37
> -------
>
> What's Changed
> --------------
>
> * feat: add actor-based comment filtering to GitHub data fetching by [`@​ranyhb`](https://github.com/ranyhb) in [anthropics/claude-code-action#812](https://redirect.github.com/anthropics/claude-code-action/pull/812)
> * Revert "Revert "feat: send additional\_permissions in token exchange request"" by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#866](https://redirect.github.com/anthropics/claude-code-action/pull/866)
> * Revert "chore: bump Claude Code to 2.1.21 and Agent SDK to 0.2.21" by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#869](https://redirect.github.com/anthropics/claude-code-action/pull/869)
>
> New Contributors
> ----------------
>
> * [`@​ranyhb`](https://github.com/ranyhb) made their first contribution in [anthropics/claude-code-action#812](https://redirect.github.com/anthropics/claude-code-action/pull/812)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.37>
>
> v1.0.36
> -------
>
> What's Changed
> --------------
>
> * Revert "feat: send additional\_permissions in token exchange request" by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#864](https://redirect.github.com/anthropics/claude-code-action/pull/864)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.36>
>
> v1.0.35
> -------
>
> What's Changed
> --------------
>
> * feat: send additional\_permissions in token exchange request by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#859](https://redirect.github.com/anthropics/claude-code-action/pull/859)
> * chore: upgrade checkout-action to v6 by [`@​arthur-mountain`](https://github.com/arthur-mountain) in [anthropics/claude-code-action#862](https://redirect.github.com/anthropics/claude-code-action/pull/862)
>
> New Contributors
> ----------------

... (truncated)


Commits

* [`6867bb3`](anthropics/claude-code-action@6867bb3) chore: bump Claude Code to 2.1.31 and Agent SDK to 0.2.31
* [`98af40b`](anthropics/claude-code-action@98af40b) chore: bump Claude Code to 2.1.30 and Agent SDK to 0.2.30
* [`4ce5f17`](anthropics/claude-code-action@4ce5f17) fix: pass GitHub token to setup-bun to avoid rate limits ([#861](https://redirect.github.com/anthropics/claude-code-action/issues/861))
* [`fab4258`](anthropics/claude-code-action@fab4258) fix: pass OpenTelemetry environment variables to Claude Code subprocess ([#886](https://redirect.github.com/anthropics/claude-code-action/issues/886))
* [`70e16de`](anthropics/claude-code-action@70e16de) chore: bump Claude Code to 2.1.29 and Agent SDK to 0.2.29
* [`0ed5eea`](anthropics/claude-code-action@0ed5eea) chore: bump Claude Code to 2.1.27 and Agent SDK to 0.2.27
* [`01e756b`](anthropics/claude-code-action@01e756b) chore: bump Claude Code to 2.1.25 and Agent SDK to 0.2.25
* [`ff34ce0`](anthropics/claude-code-action@ff34ce0) chore: bump Claude Code to 2.1.23 and Agent SDK to 0.2.23
* [`2817c54`](anthropics/claude-code-action@2817c54) chore: bump Claude Code to 2.1.22 and Agent SDK to 0.2.22
* [`d01eedd`](anthropics/claude-code-action@d01eedd) Revert "chore: bump Claude Code to 2.1.21 and Agent SDK to 0.2.21" ([#869](https://redirect.github.com/anthropics/claude-code-action/issues/869))
* Additional commits viewable in [compare view](anthropics/claude-code-action@2316a9a...6867bb3)
  
Updates `ruby/setup-ruby` from 1.286.0 to 1.288.0
Release notes

*Sourced from [ruby/setup-ruby's releases](https://github.com/ruby/setup-ruby/releases).*

> v1.288.0
> --------
>
> What's Changed
> --------------
>
> * Move check-new-windows-versions.yml workflow from ruby/ruby-builder to ruby/setup-ruby by [`@​eregon`](https://github.com/eregon) in [ruby/setup-ruby#870](https://redirect.github.com/ruby/setup-ruby/pull/870)
> * Add jruby-10.0.3.0 by [`@​ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#875](https://redirect.github.com/ruby/setup-ruby/pull/875)
>
> **Full Changelog**: <ruby/setup-ruby@v1.287.0...v1.288.0>
>
> v1.287.0
> --------
>
> What's Changed
> --------------
>
> * Improve the mise.toml parser to conform to the TOML specification by [`@​pan93412`](https://github.com/pan93412) in [ruby/setup-ruby#868](https://redirect.github.com/ruby/setup-ruby/pull/868)
>
> New Contributors
> ----------------
>
> * [`@​pan93412`](https://github.com/pan93412) made their first contribution in [ruby/setup-ruby#868](https://redirect.github.com/ruby/setup-ruby/pull/868)
>
> **Full Changelog**: <ruby/setup-ruby@v1.286.0...v1.287.0>


Commits

* [`09a7688`](ruby/setup-ruby@09a7688) Add jruby-10.0.3.0
* [`67178a2`](ruby/setup-ruby@67178a2) Improve the automated PR description
* [`ede5b72`](ruby/setup-ruby@ede5b72) Shorten workflow name
* [`aaddd68`](ruby/setup-ruby@aaddd68) new-versions.rb is no longer used for RubyInstaller releases
* [`c7aa9f4`](ruby/setup-ruby@c7aa9f4) Move check-new-windows-versions.yml workflow from ruby/ruby-builder to ruby/s...
* [`8d27f39`](ruby/setup-ruby@8d27f39) Improve the mise.toml parser to conform to the TOML specification
* See full diff in [compare view](ruby/setup-ruby@90be115...09a7688)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
mkuratczyk added a commit to rabbitmq/rabbitmq-server that referenced this pull request Feb 17, 2026
This functionality was broken in the past, but should be fixed now.
actions/checkout#2356

Manually fetching tags would sometimes fail with
fatal: could not read Username for 'https://github.com': No such device or address
mkuratczyk added a commit to rabbitmq/rabbitmq-server that referenced this pull request Feb 17, 2026
This functionality was broken in the past, but should be fixed now.
actions/checkout#2356

Manually fetching tags would sometimes fail with
fatal: could not read Username for 'https://github.com': No such device or address
mergify bot pushed a commit to rabbitmq/rabbitmq-server that referenced this pull request Feb 17, 2026
This functionality was broken in the past, but should be fixed now.
actions/checkout#2356

Manually fetching tags would sometimes fail with
fatal: could not read Username for 'https://github.com': No such device or address

(cherry picked from commit 2eee90f)

# Conflicts:
#	.github/workflows/test-make-target.yaml
mergify bot pushed a commit to rabbitmq/rabbitmq-server that referenced this pull request Feb 17, 2026
This functionality was broken in the past, but should be fixed now.
actions/checkout#2356

Manually fetching tags would sometimes fail with
fatal: could not read Username for 'https://github.com': No such device or address

(cherry picked from commit 2eee90f)

# Conflicts:
#	.github/workflows/test-make-target.yaml
mkuratczyk added a commit to rabbitmq/rabbitmq-server that referenced this pull request Feb 17, 2026
* GH actions: fetch tags using actions/checkout (#15487)

This functionality was broken in the past, but should be fixed now.
actions/checkout#2356

Manually fetching tags would sometimes fail with
fatal: could not read Username for 'https://github.com': No such device or address

(cherry picked from commit 2eee90f)

# Conflicts:
#	.github/workflows/test-make-target.yaml

* Resolve conflict

---------

Co-authored-by: Michal Kuratczyk <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

Comments