What the developer wrote
Authored by dependabot[bot]
Bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This commit is a routine automated update by Dependabot that changes the version of a GitHub-provided action used to check out source code during automated build and lint workflows. There is no indication of a security issue in the commit itself, and no security relevance is disclosed.
No security action required. Review the actions/checkout v6 release notes as part of normal maintenance if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit bumps actions/checkout from v4 to v6 across .github/workflows/build.yaml and .github/workflows/lint.yaml. This is a standard dependency update to a GitHub-maintained action. The diff shows only version-string changes. No security fix, vulnerability disclosure, or functional code change is present.
Changed components
.github/workflows/build.yaml.github/workflows/lint.yamlInspect captured patch +10 / −10
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index dfcb52b..16001bf 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -25,7 +25,7 @@ jobs:
- 5000:5000
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
with:
fetch-depth: 0
- uses: docker/setup-buildx-action@v4
@@ -120,7 +120,7 @@ jobs:
- 5000:5000
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
with:
fetch-depth: 0
- uses: docker/setup-buildx-action@v4
@@ -167,7 +167,7 @@ jobs:
- 5000:5000
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
with:
fetch-depth: 0
- uses: docker/setup-buildx-action@v4
@@ -201,7 +201,7 @@ jobs:
- 5000:5000
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
with:
fetch-depth: 0
- uses: docker/setup-buildx-action@v4
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 98e41dc..84a0a9b 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -8,14 +8,14 @@ jobs:
name: Is REUSE compliant?
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
- uses: fsfe/reuse-action@v6
rust-code-compiles:
name: Rust code compiles?
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
- uses: ./.github/actions/rust-toolchain
with:
toolchain: 1.77.1
@@ -33,7 +33,7 @@ jobs:
needs: [rust-code-compiles]
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
- uses: ./.github/actions/rust-toolchain
with:
toolchain: 1.77.1
@@ -46,7 +46,7 @@ jobs:
name: Is the Python code formatted?
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
- run: sudo apt-get install -y pycodestyle
- run: pycodestyle --statistics --exclude translations ports/stm32/boards/Passport
@@ -55,7 +55,7 @@ jobs:
needs: [rust-code-compiles]
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
- uses: ./.github/actions/rust-toolchain
with:
toolchain: 1.77.1
@@ -71,7 +71,7 @@ jobs:
needs: [rust-code-compiles]
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v6
- uses: ./.github/actions/rust-toolchain
with:
toolchain: 1.77.1
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.