Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps actions/checkout from 3 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Important

Bump actions/checkout from v3 to v6 in GitHub Actions workflows for build, Android, coverage, and linting.

  • Dependencies:
    • Bump actions/checkout from v3 to v6 in build.yml and lint.yml.
  • Workflows:
    • Update build, build-android, build-coverage-tarpaulin, and lint jobs to use actions/checkout@v6.
    • Commented out build-coverage-grcov job also updated to actions/checkout@v6.

This description was created by Ellipsis for 48ca126. You can customize this summary. It will automatically update as commits are pushed.

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 1, 2026
Copy link

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to 48ca126 in 40 seconds. Click for details.
  • Reviewed 62 lines of code in 2 files
  • Skipped 0 files when reviewing.
  • Skipped posting 5 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. .github/workflows/build.yml:19
  • Draft comment:
    Bumped actions/checkout from v3 to v6 here. Verify if the new default behavior (especially around credential persistence) requires any adjustments.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to verify if the new default behavior requires adjustments, which is against the rules. It does not provide a specific suggestion or ask for a specific test to be written. It is also related to a dependency change, which should not be commented on unless it's a recognized issue.
2. .github/workflows/build.yml:52
  • Draft comment:
    Updated checkout action to v6 in the Android job. Confirm that the repository is checked out correctly for Android builds.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to confirm that the repository is checked out correctly for Android builds after updating the checkout action to v6. This falls under asking the author to confirm or double-check something, which is against the rules.
3. .github/workflows/build.yml:82
  • Draft comment:
    The checkout step in the code coverage job was bumped to v6. Please ensure that any changes (such as in credential persistence) do not affect coverage artifact access.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to ensure that changes do not affect coverage artifact access, which violates the rule against asking the author to ensure behavior is intended or tested. It does not provide a specific suggestion or point out a specific issue.
4. .github/workflows/lint.yml:14
  • Draft comment:
    Updated checkout action to v6 for the formatting job. Verify that this version works seamlessly with the linting setup.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the PR author to verify that the new version of the checkout action works with the linting setup. This falls under asking the author to ensure behavior is intended or tested, which is against the rules.
5. .github/workflows/lint.yml:29
  • Draft comment:
    Changed checkout action to v6 in the Clippy job. Ensure that the checkout behavior remains consistent with previous expectations for linting.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to ensure that the behavior remains consistent, which violates the rule against asking for confirmation or verification of behavior. It does not provide a specific suggestion or point out a specific issue.

Workflow ID: wflow_lpL8FU5ARmVZKf3M

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

@greptile-apps
Copy link

greptile-apps bot commented Jan 1, 2026

Greptile Summary

Updated actions/checkout from v3 to v6 in GitHub Actions workflows. This is a routine dependency update that brings Node.js 24 support and improved credential handling where credentials are persisted to a separate file under $RUNNER_TEMP instead of directly in the local git config.

  • Updated 6 instances across build.yml (3 active jobs + 1 commented) and lint.yml (2 jobs)
  • No breaking changes for this repository's usage
  • Requires minimum Actions Runner v2.327.1, which GitHub-hosted runners already satisfy

Confidence Score: 5/5

  • Safe to merge with no risk
  • This is a standard dependency update from Dependabot. The checkout action is only used with default parameters in all workflows, so the v3→v6 upgrade requires no configuration changes. GitHub-hosted runners already meet the minimum version requirement (v2.327.1), and the repository doesn't use Docker container actions that would need the newer runner version (v2.329.0).
  • No files require special attention

Important Files Changed

Filename Overview
.github/workflows/build.yml Updated actions/checkout from v3 to v6 across all jobs (build, Android, coverage)
.github/workflows/lint.yml Updated actions/checkout from v3 to v6 in format and clippy jobs

Sequence Diagram

sequenceDiagram
    participant D as Dependabot
    participant GH as GitHub Actions
    participant R as Runner
    
    D->>GH: Update actions/checkout v3→v6
    Note over GH: build.yml workflow
    GH->>R: Checkout code (v6)
    Note over R: Uses Node.js 24
    R->>R: Build & test on ubuntu/windows/macOS
    R->>R: Build Android
    R->>R: Generate code coverage
    
    Note over GH: lint.yml workflow
    GH->>R: Checkout code (v6)
    R->>R: Format check (rustfmt)
    R->>R: Lint check (clippy)
Loading

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant