Skip to content

Bump actions/checkout from 5 to 6#1185

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions/checkout-6
Open

Bump actions/checkout from 5 to 6#1185
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps actions/checkout from 5 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

V6.0.0

V5.0.1

V5.0.0

V4.3.1

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump actions/checkout from 5 to 6
a6bb49c 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 24, 2025
@github-actions
Copy link
Contributor

github-actions bot commented Nov 24, 2025 •
edited
Loading

🚀 Deployment Status: Building 🔵

🔗 Quick Actions:

📝 Recent Change Summary

Latest commit: a6bb49c - Bump actions/checkout from 5 to 6
Build started: 2025-11-24 06:41:57 UTC

📊 Overall Progress

Branch: dependabot/github_actions/actions/checkout-6
Status: 🔵 Building in progress
Preview URL (after completion): https://litlfred.github.io/sgex/dependabot-github_actions-actions-checkout-6/

💡 Build started for commit a6bb49c. Will update when complete.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 24, 2025

❌ Dependency Security Check Failed

  **Installation Error:** Unable to install dependencies due to version conflicts.
  
  ```
  Security audit could not be completed due to dependency installation failure.
  ```
  
  ---
  
  ### ❌ Security Status: CHECK FAILED
  
  **Action Required:** Please resolve dependency conflicts before security audit can run.
  
  **How to fix:**
  1. The workflow will be updated to use `--legacy-peer-deps` flag
  2. If issues persist, check for TypeScript version conflicts in package.json
  3. Consider updating peer dependencies to compatible versions
  
  **Need help?** Check the [npm dependency resolution documentation](https://docs.npmjs.com/cli/v8/configuring-npm/package-json#peerdependencies) for more details.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 24, 2025

🔍 Framework Compliance Report

Commit
Workflow
Compliance

Generated: 2025-11-24 06:41:56 UTC
Status: Action Required

📊 Summary

Status Count Percentage
🟢 Compliant 2/22 9%
🟠 Partial 20/22 91%
🔴 Non-compliant 0/22 0%

📦 Nested Layouts (4 components)

⚠️ Recommendations

Consider addressing partial compliance issues to improve code quality.

📚 Resources:

💡 This comment is automatically updated when compliance checks run.

@github-actions github-actions bot requested a deployment to branch-preview-dependabot-github-actions-actions-checkout-6 November 24, 2025 06:41 In progress
@github-actions
Copy link
Contributor

github-actions bot commented Nov 24, 2025 •
edited
Loading

🚀 Deployment Status: Successfully Deployed 🟢

📊 Deployment Information

Workflow: Deploy Feature Branch (🔀 Pull Request)
Action ID: 19625656930
Commit: f2fe10b (view changes)
Workflow Step: Successfully Deployed

🌐 Preview URLs

Open Branch Preview

🔗 Quick Actions

Build Logs

📦 Build Artifacts Status

Artifact Status Description Type
workflow-event-log 🟢 Available GitHub event metadata with links .log
build-logs 🟢 Available Complete timestamped build output .txt
webpack-stats 🟢 Available Webpack compilation statistics .json
bundle-report 🟢 Available Bundle size analysis and recommendations .txt
build-step-log 🟢 Available Build step console output .log
bundle-analysis-step-log 🟢 Available Bundle analysis console output .log

🟢 All artifacts available! Click artifact names above or visit workflow artifacts section.

How to download:

  1. Click any artifact name in the table above
  2. Or visit the workflow run page and scroll to "Artifacts"
  3. Each artifact contains a single log file (no zip extraction needed)

📊 Overall Progress

Branch: dependabot/github_actions/actions/checkout-6
Status: 🟢 Live and accessible
Status: Deployment complete - site is ready for testing

📋 Deployment Timeline

💡 This comment is automatically updated as the deployment progresses.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 24, 2025 •
edited
Loading

🔒 Security Check Report

Security Status

🟢 4 passed • 🟡 2 warnings • 🔴 1 failed

Security Checks

CheckStatusDetails
NPM Audit🔴3 vulnerabilities found (Critical: 0, High: 1, Moderate: 2, Low: 0)
Outdated Dependencies🟡16 outdated packages (1 major versions behind)
ESLint Security🟢No security-related linting issues
Security Headers🟡Some security headers missing in source
License Compliance🟢No problematic licenses detected
Secret Scanning🟢No potential secrets detected in code
Framework Compliance🟢Framework compliance checks passed

🔍 Action Items

❌ NPM Audit - 3 vulnerabilities found (Critical: 0, High: 1, Moderate: 2, Low: 0)

Details:

  • Critical: 0
  • High: 1
  • Moderate: 2
  • Low: 0

Recommendation: Run npm audit fix to automatically fix vulnerabilities

⚠️ Outdated Dependencies - 16 outdated packages (1 major versions behind)

Details:
Major version updates needed for:

  • react-syntax-highlighter

Recommendation: Review outdated packages and update where possible

⚠️ Security Headers - Some security headers missing in source

Details:

Recommendation: Ensure all security headers are properly defined

❌ Security Status: ACTION REQUIRED

Security issues were detected that need to be addressed before merging.

Last checked: Mon, 24 Nov 2025 06:42:09 GMT

This security check is automatically run on every PR build. Learn more about our security checks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants