Skip to content

build(deps): bump actions/checkout from 5.0.0 to 6.0.1 #1900

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump actions/checkout from 5.0.0 to 6.0.1 #1900

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/codeql-analysis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@v5.0.0
uses: actions/checkout@v6.0.1

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ jobs:
os: [macos-latest, windows-latest, ubuntu-latest]
steps:
- name: Checkout
uses: actions/checkout@v5.0.0
uses: actions/checkout@v6.0.1
Copy link

@sentry sentry bot Dec 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Upgrading to actions/checkout@v6.0.1 requires Node.js 24, which GitHub-hosted runners lack, causing CI/CD failures.
Severity: CRITICAL | Confidence: High

🔍 Detailed Analysis

Upgrading actions/checkout to v6.0.1 requires Node.js 24. As of the PR date (December 8, 2024), GitHub-hosted runners do not have Node.js 24 available by default. Merging this change would cause all CI/CD workflows using actions/checkout@v6.0.1 to fail immediately with runtime errors like "The runner does not support Node.js 24", breaking all pipelines.

💡 Suggested Fix

Revert actions/checkout to v5.0.0 or an earlier compatible version. Alternatively, explicitly add actions/setup-node@v4 to install Node.js 24 before actions/checkout@v6.0.1 is used.

🤖 Prompt for AI Agent 
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: .github/workflows/main.yml#L15

Potential issue: Upgrading `actions/checkout` to `v6.0.1` requires Node.js 24. As of the
PR date (December 8, 2024), GitHub-hosted runners do not have Node.js 24 available by
default. Merging this change would cause all CI/CD workflows using
`actions/checkout@v6.0.1` to fail immediately with runtime errors like "The runner does
not support Node.js 24", breaking all pipelines.

Did we get this right? 👍 / 👎 to inform future reviews.
Reference ID: 6033414

with:
submodules: "true"
- name: Install dependencies
Expand Down Expand Up @@ -54,7 +54,7 @@ jobs:
runs-on: macos-latest-xlarge
steps:
- name: Checkout
uses: actions/checkout@v5.0.0
uses: actions/checkout@v6.0.1
with:
submodules: "true"
- name: Install dependencies
Expand Down Expand Up @@ -103,7 +103,7 @@ jobs:
container: python:latest
steps:
- name: Checkout
uses: actions/checkout@v5.0.0
uses: actions/checkout@v6.0.1
with:
submodules: "true"
- name: Install deps
Expand Down Expand Up @@ -144,7 +144,7 @@ jobs:
run: |
apk add git
- name: Checkout
uses: actions/checkout@v5.0.0
uses: actions/checkout@v6.0.1
with:
submodules: "true"
- name: Upload coverage to Codecov (should fail due to missing dependencies)
Expand Down Expand Up @@ -175,7 +175,7 @@ jobs:
run: |
apk add git curl gnupg bash
- name: Checkout
uses: actions/checkout@v5.0.0
uses: actions/checkout@v6.0.1
with:
submodules: "true"
- name: Upload coverage to Codecov (should succeed)
Expand Down Expand Up @@ -212,7 +212,7 @@ jobs:
run: |
apk add git curl
- name: Checkout
uses: actions/checkout@v5.0.0
uses: actions/checkout@v6.0.1
with:
submodules: "true"
- name: Upload coverage to Codecov (should fail due to missing gpg and bash)
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scorecards-analysis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ jobs:

steps:
- name: "Checkout code"
uses: actions/checkout@v5.0.0 # v3.0.0
uses: actions/checkout@v6.0.1 # v3.0.0
with:
persist-credentials: false

Expand Down
Loading