checkout

Bump undici from 6.27.0 to 6.28.0

Bumps [undici](https://github.com/nodejs/undici) from 6.27.0 to 6.28.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.27.0...v6.28.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot]andGitHub

2026-08-05 17:20:42 +00:00

20700d4171

Consolidate dependency updates in CHANGELOG (#2537 )

* Consolidate dependency updates in CHANGELOG

Removed specific dependency updates and consolidated them into a single entry.

* Fix capitalization in v7.0.1 changelog entries

Updated changelog entries for v7.0.1 to use consistent capitalization.

Aiqiao YanandGitHub

2026-07-20 12:20:47 -04:00

f548e57e54

prep v7.0.1 release (#2531 )

* prep v7.0.1 release

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

2026-07-17 14:45:11 -04:00

v7 v7.0.1 3d3c42e5aa

escape values passed to --unset (#2530 )

Aiqiao YanandGitHub

2026-07-17 13:44:40 -04:00

28802689a1

trim only ascii whitespace for branch (#2521 )

* trim only ascii whitespace for branch

* rebuild

Aiqiao YanandGitHub

2026-07-15 15:05:42 -04:00

12cd2235ef

skip running unsafe pr check if input is default (#2518 )

Aiqiao YanandGitHub

2026-07-15 10:02:03 -04:00

62661c4e71

Bump the minor-actions-dependencies group with 2 updates (#2499 )

Bumps the minor-actions-dependencies group with 2 updates: [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `docker/login-action` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v4.2.0...v4.4.0)

Updates `docker/build-push-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-actions-dependencies
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-07-07 16:34:44 -04:00

e8d4307400

eslint 9 (#2474 )

* Bump eslint-plugin-github from 4.10.2 to 6.0.0

Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.10.2 to 6.0.0.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.10.2...v6.0.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* eslint 9 upgrade

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aiqiao Yan <55104035+aiqiaoy@users.noreply.github.com>

2026-07-07 16:26:50 -04:00

631c942040

Bump actions/upload-artifact from 4 to 7 (#2476 )

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-30 10:34:21 -04:00

4f1f4aec02

Bump actions/checkout from 6 to 7 (#2488 )

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-30 10:33:37 -04:00

ba097532fb

Bump docker/login-action from 3.3.0 to 4.2.0 (#2479 )

Bumps [docker/login-action](https://github.com/docker/login-action) from 3.3.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3.3.0...v4.2.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-22 10:13:43 -04:00

b9e0990d21

Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478 )

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.5.0 to 7.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v6.5.0...v7.2.0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-22 10:12:50 -04:00

e8cb398be4

Bump actions/setup-node from 4 to 6 (#2477 )

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-22 10:12:03 -04:00

5de26ee9b1

Bump github/codeql-action from 3 to 4 (#2475 )

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-22 10:11:28 -04:00

79102f2503

update error wording (#2467 )

Aiqiao YanandGitHub

2026-06-17 13:51:53 -04:00

v7.0.0 9c091bb21b

getting ready for checkout v7 release (#2464 )

* getting ready for checkout v7 release

* update changelog wording

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

2026-06-17 09:59:35 -04:00

1044a6dea9

Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462 )

* Bump the minor-npm-dependencies group across 1 directory with 3 updates

Bumps the minor-npm-dependencies group with 3 updates in the / directory: [@vercel/ncc](https://github.com/vercel/ncc), [prettier](https://github.com/prettier/prettier) and [ts-jest](https://github.com/kulshekhar/ts-jest).


Updates `@vercel/ncc` from 0.38.4 to 0.44.0
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.38.4...0.44.0)

Updates `prettier` from 3.3.3 to 3.8.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.3.3...3.8.4)

Updates `ts-jest` from 29.2.5 to 29.4.11
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.2.5...v29.4.11)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-version: 0.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: prettier
  dependency-version: 3.8.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: ts-jest
  dependency-version: 29.4.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* run prettier

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aiqiao Yan <55104035+aiqiaoy@users.noreply.github.com>

2026-06-16 17:30:00 -04:00

f0282184c7

upgrade module to esm and update dependencies (#2463 )

* upgrade module to esm so I can update dependencies

* fix ci failures

Aiqiao YanandGitHub

2026-06-16 17:10:58 -04:00

d914b262ff

Bump @actions/core and @actions/tool-cache and Remove uuid (#2459 )

* Bump uuid, @actions/core and @actions/tool-cache

Bumps [uuid](https://github.com/uuidjs/uuid), [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) and [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache). These dependencies needed to be updated together.

Updates `uuid` from 9.0.1 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v9.0.1...v14.0.0)

Updates `@actions/core` from 1.10.1 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/tool-cache` from 2.0.1 to 2.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
- dependency-name: "@actions/tool-cache"
  dependency-version: 2.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* switch to use crpto.randomUUID

* update license

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aiqiao Yan <55104035+aiqiaoy@users.noreply.github.com>

2026-06-16 14:28:24 -04:00

537c7ef99c

Bump js-yaml from 4.1.0 to 4.2.0 (#2461 )

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-16 12:44:07 -04:00

130a169078

Bump flatted from 3.3.1 to 3.4.2 (#2460 )

Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.1 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-16 12:43:32 -04:00

7d09575332

Bump actions/publish-immutable-action (#2458 )

Bumps the minor-actions-dependencies group with 1 update in the / directory: [actions/publish-immutable-action](https://github.com/actions/publish-immutable-action).


Updates `actions/publish-immutable-action` from 0.0.3 to 0.0.4
- [Release notes](https://github.com/actions/publish-immutable-action/releases)
- [Commits](https://github.com/actions/publish-immutable-action/compare/0.0.3...v0.0.4)

---
updated-dependencies:
- dependency-name: actions/publish-immutable-action
  dependency-version: 0.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-06-16 12:33:25 -04:00

0f9f3aa320

block checking out fork pr for pull_request_target and workflow_run (#2454 )

* block checking out fork pr for some events

* address copilot and reviewer feedback

* run prettier formatting

* build

* update urls

* update readme

* update description and url again

* edit url one more time

Aiqiao YanandGitHub

2026-06-16 10:03:43 -04:00

f9e715a95f

Update changelog for v6.0.3 (#2446 )

Yashwanth AnantharajuandGitHub

2026-06-02 10:31:30 -04:00

v6.0.3 df4cb1c069

Fix checkout init for SHA-256 repositories (#2439 )

* Fix checkout init for SHA-256 repositories

* Remove unused object format result field

Yashwanth AnantharajuandGitHub

2026-06-01 11:35:58 -04:00

1cce3390c2

fix: expand merge commit SHA regex and add SHA-256 test cases (#2414 )

* fix: expand merge commit SHA regex and add SHA-256 test cases

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* test: add checkCommitInfo SHA coverage

Add checkCommitInfo tests for SHA-1 and SHA-256 merge messages and reject invalid 50-character hex merge heads.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* style: fix Prettier formatting in test and source files

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-05-04 13:30:55 -04:00

900f2210b1

Update changelog (#2357 )

eric scipleandGitHub

2026-01-09 14:09:42 -06:00

0c366fd6a8

Fix tag handling: preserve annotations and explicit fetch-tags (#2356 )

This PR fixes several issues with tag handling in the checkout action:

1. fetch-tags: true now works (fixes #1471)
   - Tags refspec is now included in getRefSpec() when fetchTags=true
   - Previously tags were only fetched during a separate fetch that was
     overwritten by the main fetch

2. Tag checkout preserves annotations (fixes #290)
   - Tags are fetched via refspec (+refs/tags/*:refs/tags/*) instead of
     --tags flag
   - This fetches the actual tag objects, preserving annotations

3. Tag checkout with fetch-tags: true no longer fails (fixes #1467)
   - When checking out a tag with fetchTags=true, only the wildcard
     refspec is used (specific tag refspec is redundant)

Changes:
- src/ref-helper.ts: getRefSpec() now accepts fetchTags parameter and
  prepends tags refspec when true
- src/git-command-manager.ts: fetch() simplified to always use --no-tags,
  tags are fetched explicitly via refspec
- src/git-source-provider.ts: passes fetchTags to getRefSpec()
- Added E2E test for fetch-tags option

Related #1471, #1467, #290

eric scipleandGitHub

2026-01-09 13:42:23 -06:00

v6.0.2 de0fac2e45

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (#2355 )

* Initial plan

* Add orchestration ID support to git user-agent

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Improve tests to verify user-agent content and handle empty sanitized IDs

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Simplify orchestration ID validation to accept any non-empty sanitized value

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Remove test for orchestration ID with only invalid characters

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
Co-authored-by: Tingluo Huang <tingluohuang@github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

2026-01-08 15:07:38 -05:00

064fe7f331

Clarify v6 README (#2328 )

eric scipleandGitHub

2025-12-01 20:08:49 -06:00

v6.0.1 8e8c483db8

Add worktree support for persist-credentials includeIf (#2327 )

eric scipleandGitHub

2025-12-01 19:53:23 -06:00

033fa0dc0b

Update all references from v5 and v4 to v6 (#2314 )

- Updated README.md examples to reference @v6
- Updated all workflow files to use actions/checkout@v6

eric scipleandGitHub

2025-11-23 19:32:55 -06:00

c2d88d3ecc

update readme/changelog for v6 (#2311 )

eric scipleandGitHub

2025-11-20 10:20:04 -06:00

v6.0.0 1af3b93b68

v6-beta (#2298 )

eric scipleandGitHub

2025-11-03 13:40:10 -06:00

v6-beta 71cf2267d8

Persist creds to a separate file (#2286 )

eric scipleandGitHub

2025-11-03 13:08:38 -06:00

069c695914

Update README to include Node.js 24 support details and requirements (#2248 )

* Update README to include Node.js 24 support details and requirements

* Update

Salman ChishtiandGitHub

2025-08-13 13:57:25 +01:00

ff7abcd0c3

Prepare v5.0.0 release (#2238 )

Salman ChishtiandGitHub

2025-08-11 13:35:28 +01:00

v5.0.0 08c6903cd8

Update actions checkout to use node 24 (#2226 )

* use node 24

* update other parts to node 24

* bump to major version, audit fix, changelog

* update licenses

* update dist

* update major version

* will do separate pr for v5 and will do a minor version for previous changes

Salman ChishtiandGitHub

2025-08-11 11:52:51 +01:00

9f265659d3

Prepare release v4.3.0 (#2237 )

Salman ChishtiandGitHub

2025-08-11 11:30:37 +01:00

v4.3.0 08eba0b27e

Update package dependencies (#2236 )

* package updates

* update dist

* Update license files

Salman ChishtiandGitHub

2025-08-11 11:22:41 +01:00

631c7dc4f8

Update CODEOWNERS for actions (#2224 )

Tingluo HuangandGitHub

2025-07-23 09:20:20 -04:00

8edcb1bdb4

Update README.md (#2194 )

Ben De St Paer-GotchandGitHub

2025-06-06 09:19:16 +01:00

09d2acae67

Adjust positioning of user email note and permissions heading (#2044 )

Josh GrossandGitHub

2025-01-16 15:56:18 -05:00

85e6279cec

Documentation update - add recommended permissions to Readme (#2043 )

* Update README.md

* Update README.md

Co-authored-by: Josh Gross <joshmgross@github.com>

---------

Co-authored-by: Josh Gross <joshmgross@github.com>

2025-01-16 14:14:48 -05:00

009b9ae9e4

Update README.md (#1977 )

Mohammad IsmailandGitHub

2024-11-14 10:41:00 -05:00

cbb722410c

docs: update README.md (#1971 )

Add a scenario where it is necessary to push a commit to a pull request.

The web walkerandGitHub

2024-11-08 10:32:54 -05:00

3b9b8c884f

Prepare 4.2.2 Release (#1953 )

* Prepare 4.2.2 Release

---------

Co-authored-by: Josh Gross <joshmgross@github.com>

2024-10-23 16:24:28 +02:00

v4.2.2 11bd71901b

Expand unit test coverage (#1946 )

John Wesley Walker IIIandGitHub

2024-10-23 15:59:08 +02:00

e3d2460bbb

url-helper.ts now leverages well-known environment variables. (#1941 )

* `utl-helper.ts` now leverages well-known environment variables.

---------
Co-authored-by: Erez Testiler <easyt@github.com>

2024-10-18 10:07:17 +02:00

163217dfcd

Prepare 4.2.1 release (#1925 )

Josh GrossandGitHub

2024-10-07 12:38:04 -04:00

v4.2.1 eef61447b9