chore(deps): update actions/checkout action to v6 (#6603)

renovate[bot] · web-flow · commit f0b33e037582 · 2025-11-22T13:26:02.000Z
diff --git a/.config/python/dev/requirements.txt b/.config/python/dev/requirements.txt
@@ -35,7 +35,7 @@ termcolor==3.2.0
 urllib3==2.5.0
 webpreview==1.7.2
 yq==3.4.3
-langchain_core==1.0.5
+langchain_core==1.0.7
 langchain_anthropic==1.0.4
 langchain_deepseek==1.0.1
 langchain_google_genai==3.0.3
diff --git a/.github/workflows/auto-update-linters.yml b/.github/workflows/auto-update-linters.yml
@@ -47,7 +47,7 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # Free disk space
       - name: Free Disk space
diff --git a/.github/workflows/build-command.yml b/.github/workflows/build-command.yml
@@ -57,7 +57,7 @@ jobs:
           INPUTS_CONTEXT: ${{ toJson(github.event.inputs) }}
         run: echo "$INPUTS_CONTEXT"
       # Checkout the pull request branch
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.event.inputs.checkout-repository }}
diff --git a/.github/workflows/build-deploy-docs.yml b/.github/workflows/build-deploy-docs.yml
@@ -24,7 +24,7 @@ jobs:
       contents: write
     if: github.repository == 'oxsecurity/megalinter'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/deploy-ALPHA-flavors.yml b/.github/workflows/deploy-ALPHA-flavors.yml
@@ -82,7 +82,7 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
diff --git a/.github/workflows/deploy-ALPHA.yml b/.github/workflows/deploy-ALPHA.yml
@@ -58,7 +58,7 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       ########################################################
       # Publish updated version of mega-linter-runner on NPM #
diff --git a/.github/workflows/deploy-BETA-flavors.yml b/.github/workflows/deploy-BETA-flavors.yml
@@ -89,7 +89,7 @@ jobs:
     ##################
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Docker Metadata action
         uses: docker/metadata-action@v5.9.0
diff --git a/.github/workflows/deploy-BETA-linters.yml b/.github/workflows/deploy-BETA-linters.yml
@@ -46,7 +46,7 @@ jobs:
       linters: ${{ steps.set-matrix.outputs.linters }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Read linters_matrix.json
         id: set-matrix
         run: |
@@ -79,7 +79,7 @@ jobs:
     ##################
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Docker Metadata action
         uses: docker/metadata-action@v5.9.0
diff --git a/.github/workflows/deploy-BETA.yml b/.github/workflows/deploy-BETA.yml
@@ -55,7 +55,7 @@ jobs:
     ##################
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       ########################################################
       # Publish updated version of mega-linter-runner on NPM #
diff --git a/.github/workflows/deploy-DEV-linters.yml b/.github/workflows/deploy-DEV-linters.yml
@@ -30,7 +30,7 @@ jobs:
       linters: ${{ steps.set-matrix.outputs.linters }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Get PR title or commit message
         id: get-title
         run: |
@@ -98,7 +98,7 @@ jobs:
     ##################
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Docker Metadata action
         uses: docker/metadata-action@v5.9.0
diff --git a/.github/workflows/deploy-DEV.yml b/.github/workflows/deploy-DEV.yml
@@ -50,7 +50,7 @@ jobs:
     ##################
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Free Disk space
diff --git a/.github/workflows/deploy-RELEASE-flavors.yml b/.github/workflows/deploy-RELEASE-flavors.yml
@@ -75,7 +75,7 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
diff --git a/.github/workflows/deploy-RELEASE-linters.yml b/.github/workflows/deploy-RELEASE-linters.yml
@@ -38,7 +38,7 @@ jobs:
       linters: ${{ steps.set-matrix.outputs.linters }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Read linters_matrix.json
         id: set-matrix
         run: |
@@ -68,7 +68,7 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
diff --git a/.github/workflows/deploy-RELEASE.yml b/.github/workflows/deploy-RELEASE.yml
@@ -50,7 +50,7 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       ########################################################
       # Publish updated version of mega-linter-runner on NPM #
@@ -191,7 +191,7 @@ jobs:
     environment:
       name: release
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Get release version
diff --git a/.github/workflows/gitpod.yml b/.github/workflows/gitpod.yml
@@ -21,7 +21,7 @@ jobs:
         run: echo "TERM=xterm" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/mega-linter-for-runner.yml b/.github/workflows/mega-linter-for-runner.yml
@@ -54,7 +54,7 @@ jobs:
 
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/mega-linter.yml b/.github/workflows/mega-linter.yml
@@ -54,7 +54,7 @@ jobs:
 
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/test-mega-linter-runner.yml b/.github/workflows/test-mega-linter-runner.yml
@@ -33,7 +33,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Setup Node
         uses: actions/setup-node@v6.0.0
         with:
diff --git a/.github/workflows/test-mkdocs.yml b/.github/workflows/test-mkdocs.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions: read-all
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: 3.12.12
diff --git a/.github/workflows/versioning.yml b/.github/workflows/versioning.yml
@@ -35,7 +35,7 @@ jobs:
       #############################
       # Check out the latest code #
       #############################
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       ######################
       # Run the tag action #
diff --git a/.trivyignore b/.trivyignore
@@ -159,6 +159,8 @@ CVE-2025-8959
 CVE-2025-9288
 # https://avd.aquasec.com/nvd/cve-2025-64118 : node-tar has a race condition leading to uninitialized memory exposure. Not applicable in MegaLinter context
 CVE-2025-64118
+#  https://avd.aquasec.com/nvd/cve-2025-65106 : Langchain core vulnerable to prompt injection. As prompts are built only by MegaLinter or local overrides in the repo, this is harmless
+CVE-2025-65106
 # Dockerfile
 DS001
 DS002
diff --git a/README.md b/README.md
@@ -463,7 +463,7 @@ jobs:
     steps:
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
           fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
diff --git a/TEMPLATES/mega-linter.yml b/TEMPLATES/mega-linter.yml
@@ -52,7 +52,7 @@ jobs:
     steps:
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
 
diff --git a/docs/descriptors/repository_gitleaks.md b/docs/descriptors/repository_gitleaks.md
@@ -75,7 +75,7 @@ To scan only PR commits, the [shallow fetch](https://git-scm.com/docs/git-fetch#
 #### GitHub Actions
 
 ```yml
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
   with:
     fetch-depth: 0
 ```
diff --git a/docs/install-github.md b/docs/install-github.md
@@ -62,7 +62,7 @@ jobs:
     steps:
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
           fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
diff --git a/mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml b/mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml
@@ -59,7 +59,7 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor-builder.yml b/mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor-builder.yml
@@ -55,7 +55,7 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/mega-linter-runner/generators/mega-linter/templates/mega-linter.yml b/mega-linter-runner/generators/mega-linter/templates/mega-linter.yml
@@ -50,7 +50,7 @@ jobs:
     steps:
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
 
diff --git a/mega-linter-runner/lib/upgrade.js b/mega-linter-runner/lib/upgrade.js
@@ -223,20 +223,6 @@ jobs:
   build:
 `,
       },
-      // V5 to V6 migration rules
-      // GitHub actions
-      {
-        regex: /actions\/checkout@v2/gm,
-        replacement: "actions/checkout@v3",
-        test: "uses: actions/checkout@v2",
-        testRes: "uses: actions/checkout@v3",
-      },
-      {
-        regex: /actions\/checkout@v3/gm,
-        replacement: "actions/checkout@v4",
-        test: "uses: actions/checkout@v3",
-        testRes: "uses: actions/checkout@v4",
-      },
       // Documentation base URL
       {
         regex: /https:\/\/megalinter\.github\.io/gm,
@@ -497,10 +483,10 @@ jobs:
       },
       // v8 to v9 migrations rules
       {
-        regex: /actions\/checkout@v4/gm,
-        replacement: "actions/checkout@v5",
+        regex: /actions\/checkout@v(1|2|3|4|5)/gm,
+        replacement: "actions/checkout@v6",
         test: "uses: actions/checkout@v4",
-        testRes: "uses: actions/checkout@v5",
+        testRes: "uses: actions/checkout@v6",
       },
       // Upload artifact action
       {
diff --git a/megalinter/descriptors/repository.megalinter-descriptor.yml b/megalinter/descriptors/repository.megalinter-descriptor.yml
@@ -303,7 +303,7 @@ linters:
       #### GitHub Actions
 
       ```yml
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       ```
