213 Commits

This Branch

This Branch

All Branches

• Update changelog for v6.0.3 (#2446)
  Yashwanth Anantharaju · 2026-06-02 10:31:30 -04:00
  v6 v6.0.3 df4cb1c069
• Fix checkout init for SHA-256 repositories (#2439)

  * Fix checkout init for SHA-256 repositories
  
  * Remove unused object format result field

  Yashwanth Anantharaju · 2026-06-01 11:35:58 -04:00
  1cce3390c2
• fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)

  * fix: expand merge commit SHA regex and add SHA-256 test cases
  
  Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
  
  * test: add checkCommitInfo SHA coverage
  
  Add checkCommitInfo tests for SHA-1 and SHA-256 merge messages and reject invalid 50-character hex merge heads.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
  
  * style: fix Prettier formatting in test and source files
  
  Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
  
  ---------
  
  Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

  Yashwanth Anantharaju · 2026-05-04 13:30:55 -04:00
  900f2210b1
• Update changelog (#2357)
  eric sciple · 2026-01-09 14:09:42 -06:00
  0c366fd6a8
• Fix tag handling: preserve annotations and explicit fetch-tags (#2356)

  This PR fixes several issues with tag handling in the checkout action:
  
  1. fetch-tags: true now works (fixes #1471)
     - Tags refspec is now included in getRefSpec() when fetchTags=true
     - Previously tags were only fetched during a separate fetch that was
       overwritten by the main fetch
  
  2. Tag checkout preserves annotations (fixes #290)
     - Tags are fetched via refspec (+refs/tags/*:refs/tags/*) instead of
       --tags flag
     - This fetches the actual tag objects, preserving annotations
  
  3. Tag checkout with fetch-tags: true no longer fails (fixes #1467)
     - When checking out a tag with fetchTags=true, only the wildcard
       refspec is used (specific tag refspec is redundant)
  
  Changes:
  - src/ref-helper.ts: getRefSpec() now accepts fetchTags parameter and
    prepends tags refspec when true
  - src/git-command-manager.ts: fetch() simplified to always use --no-tags,
    tags are fetched explicitly via refspec
  - src/git-source-provider.ts: passes fetchTags to getRefSpec()
  - Added E2E test for fetch-tags option
  
  Related #1471, #1467, #290

  eric sciple · 2026-01-09 13:42:23 -06:00
  v6.0.2 de0fac2e45
• Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (#2355)

  * Initial plan
  
  * Add orchestration ID support to git user-agent
  
  Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
  
  * Apply suggestion from @Copilot
  
  Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
  
  * Improve tests to verify user-agent content and handle empty sanitized IDs
  
  Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
  
  * Simplify orchestration ID validation to accept any non-empty sanitized value
  
  Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
  
  * Remove test for orchestration ID with only invalid characters
  
  Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
  
  ---------
  
  Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
  Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
  Co-authored-by: Tingluo Huang <tingluohuang@github.com>
  Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

  Copilot · 2026-01-08 15:07:38 -05:00
  064fe7f331
• Clarify v6 README (#2328)
  eric sciple · 2025-12-01 20:08:49 -06:00
  v6.0.1 8e8c483db8
• Add worktree support for persist-credentials includeIf (#2327)
  eric sciple · 2025-12-01 19:53:23 -06:00
  033fa0dc0b
• Update all references from v5 and v4 to v6 (#2314)

  - Updated README.md examples to reference @v6
  - Updated all workflow files to use actions/checkout@v6

  eric sciple · 2025-11-23 19:32:55 -06:00
  c2d88d3ecc
• update readme/changelog for v6 (#2311)
  eric sciple · 2025-11-20 10:20:04 -06:00
  v6.0.0 1af3b93b68
• v6-beta (#2298)
  eric sciple · 2025-11-03 13:40:10 -06:00
  v6-beta 71cf2267d8
• Persist creds to a separate file (#2286)
  eric sciple · 2025-11-03 13:08:38 -06:00
  069c695914
• Update README to include Node.js 24 support details and requirements (#2248)

  * Update README to include Node.js 24 support details and requirements
  
  * Update

  Salman Chishti · 2025-08-13 13:57:25 +01:00
  ff7abcd0c3
• Prepare v5.0.0 release (#2238)
  Salman Chishti · 2025-08-11 13:35:28 +01:00
  v5.0.0 08c6903cd8
• Update actions checkout to use node 24 (#2226)

  * use node 24
  
  * update other parts to node 24
  
  * bump to major version, audit fix, changelog
  
  * update licenses
  
  * update dist
  
  * update major version
  
  * will do separate pr for v5 and will do a minor version for previous changes

  Salman Chishti · 2025-08-11 11:52:51 +01:00
  9f265659d3
• Prepare release v4.3.0 (#2237)
  Salman Chishti · 2025-08-11 11:30:37 +01:00
  v4.3.0 08eba0b27e
• Update package dependencies (#2236)

  * package updates
  
  * update dist
  
  * Update license files

  Salman Chishti · 2025-08-11 11:22:41 +01:00
  631c7dc4f8
• Update CODEOWNERS for actions (#2224)
  Tingluo Huang · 2025-07-23 09:20:20 -04:00
  8edcb1bdb4
• Update README.md (#2194)
  Ben De St Paer-Gotch · 2025-06-06 09:19:16 +01:00
  09d2acae67
• Adjust positioning of user email note and permissions heading (#2044)
  Josh Gross · 2025-01-16 15:56:18 -05:00
  85e6279cec
• Documentation update - add recommended permissions to Readme (#2043)

  * Update README.md
  
  * Update README.md
  
  Co-authored-by: Josh Gross <joshmgross@github.com>
  
  ---------
  
  Co-authored-by: Josh Gross <joshmgross@github.com>

  Ben Wells · 2025-01-16 14:14:48 -05:00
  009b9ae9e4
• Update README.md (#1977)
  Mohammad Ismail · 2024-11-14 10:41:00 -05:00
  cbb722410c
• docs: update README.md (#1971)

  Add a scenario where it is necessary to push a commit to a pull request.

  The web walker · 2024-11-08 10:32:54 -05:00
  3b9b8c884f
• Prepare 4.2.2 Release (#1953)

  * Prepare 4.2.2 Release
  
  ---------
  
  Co-authored-by: Josh Gross <joshmgross@github.com>

  John Wesley Walker III · 2024-10-23 16:24:28 +02:00
  v4.2.2 11bd71901b
• Expand unit test coverage (#1946)
  John Wesley Walker III · 2024-10-23 15:59:08 +02:00
  e3d2460bbb
• url-helper.ts now leverages well-known environment variables. (#1941)

  * `utl-helper.ts` now leverages well-known environment variables.
  
  ---------
  Co-authored-by: Erez Testiler <easyt@github.com>

  John Wesley Walker III · 2024-10-18 10:07:17 +02:00
  163217dfcd
• Prepare 4.2.1 release (#1925)
  Josh Gross · 2024-10-07 12:38:04 -04:00
  v4.2.1 eef61447b9
• Add workflow file for publishing releases to immutable action package (#1919)

  This workflow file publishes new action releases to the immutable action package of the same name as this repo.
  
  This is part of the Immutable Actions project which is not yet fully released to the public. First party actions like this one are part of our initial testing of this feature.

  Joel Ambass · 2024-10-03 11:03:35 +02:00
  6b42224f41
• Check out other refs/* by commit if provided, fall back to ref (#1924)
  Orhan Toy · 2024-10-01 20:24:28 -04:00
  de5a000abf
• Prepare 4.2.0 release (#1878)

  * Bump package version to 4.1.8
  
  * Add v4.1.8 changelog
  
  * Bump version to `4.2.0`

  Josh Gross · 2024-09-25 13:51:15 -04:00
  v4.2.0 d632683dd7
• Bump braces from 3.0.2 to 3.0.3 (#1777)

  Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
  - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
  - [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
  
  ---
  updated-dependencies:
  - dependency-name: braces
    dependency-type: indirect
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2024-09-05 15:04:42 -04:00
  6d193bf280
• Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872)

  * Bump the minor-npm-dependencies group across 1 directory with 4 updates
  
  Bumps the minor-npm-dependencies group with 4 updates in the / directory: [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest), [prettier](https://github.com/prettier/prettier), [ts-jest](https://github.com/kulshekhar/ts-jest) and [typescript](https://github.com/Microsoft/TypeScript).
  
  
  Updates `eslint-plugin-jest` from 28.5.0 to 28.8.2
  - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
  - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.5.0...v28.8.2)
  
  Updates `prettier` from 3.2.5 to 3.3.3
  - [Release notes](https://github.com/prettier/prettier/releases)
  - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/prettier/prettier/compare/3.2.5...3.3.3)
  
  Updates `ts-jest` from 29.1.2 to 29.2.5
  - [Release notes](https://github.com/kulshekhar/ts-jest/releases)
  - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.2.5)
  
  Updates `typescript` from 5.4.5 to 5.5.4
  - [Release notes](https://github.com/Microsoft/TypeScript/releases)
  - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
  - [Commits](https://github.com/Microsoft/TypeScript/compare/v5.4.5...v5.5.4)
  
  ---
  updated-dependencies:
  - dependency-name: eslint-plugin-jest
    dependency-type: direct:development
    update-type: version-update:semver-minor
    dependency-group: minor-npm-dependencies
  - dependency-name: prettier
    dependency-type: direct:development
    update-type: version-update:semver-minor
    dependency-group: minor-npm-dependencies
  - dependency-name: ts-jest
    dependency-type: direct:development
    update-type: version-update:semver-minor
    dependency-group: minor-npm-dependencies
  - dependency-name: typescript
    dependency-type: direct:development
    update-type: version-update:semver-minor
    dependency-group: minor-npm-dependencies
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  
  * `npm run build`
  
  ---------
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Co-authored-by: Josh Gross <joshmgross@github.com>

  dependabot[bot] · 2024-09-05 15:04:17 -04:00
  db0cee9a51
• Add Ref and Commit outputs (#1180)

  Signed-off-by: Luca Comellini <luca.com@gmail.com>

  Luca Comellini · 2024-09-05 11:57:13 -04:00
  b684943689
• Provide explanation for where user email came from (#1869)

  * Provide explanation for where user email came from
  
  * bringing back the newline

  yasonk · 2024-09-02 09:53:38 -04:00
  2d7d9f7ff5
• Bump docker/build-push-action from 5.3.0 to 6.5.0 (#1832)

  Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5.3.0 to 6.5.0.
  - [Release notes](https://github.com/docker/build-push-action/releases)
  - [Commits](https://github.com/docker/build-push-action/compare/v5.3.0...v6.5.0)
  
  ---
  updated-dependencies:
  - dependency-name: docker/build-push-action
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2024-07-29 16:10:36 -04:00
  9a9194f871
• Bump docker/login-action in the minor-actions-dependencies group (#1831)

  Bumps the minor-actions-dependencies group with 1 update: [docker/login-action](https://github.com/docker/login-action).
  
  
  Updates `docker/login-action` from 3.1.0 to 3.3.0
  - [Release notes](https://github.com/docker/login-action/releases)
  - [Commits](https://github.com/docker/login-action/compare/v3.1.0...v3.3.0)
  
  ---
  updated-dependencies:
  - dependency-name: docker/login-action
    dependency-type: direct:production
    update-type: version-update:semver-minor
    dependency-group: minor-actions-dependencies
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2024-07-29 16:10:02 -04:00
  dd960bd3c3
• Prepare 4.1.7 release (#1775)

  * Prepare 4.1.7 release
  
  * Include #1776 in 4.1.7 release

  Josh Gross · 2024-06-12 14:41:43 -04:00
  v4.1.7 692973e3d9
• Pin actions/checkout's own workflows to a known, good, stable version. (#1776)

  * Pin actions/checkout's own workflows to a known, good, stable version.
  
  * fixed failing unit test
  
  * fix unit test

  John Wesley Walker III · 2024-06-12 13:11:03 -04:00
  6ccd57f4c5
• Handle hidden refs (#1774)

  Co-authored-by: Chris Gavin <chris@chrisgavin.me>

  Orhan Toy · 2024-06-12 11:01:40 -04:00
  b17fe1e4d5
• Bump actions/checkout from 3 to 4 (#1697)

  * Bump actions/checkout from 3 to 4
  
  Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
  - [Release notes](https://github.com/actions/checkout/releases)
  - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/actions/checkout/compare/v3...v4)
  
  ---
  updated-dependencies:
  - dependency-name: actions/checkout
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  
  * Apply suggestions from code review
  
  * .
  
  ---------
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  Co-authored-by: Cory Miller <13227161+cory-miller@users.noreply.github.com>

  dependabot[bot] · 2024-05-20 14:25:59 -04:00
  b80ff79f17
• Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)

  Bumps the minor-npm-dependencies group with 4 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest).
  
  
  Updates `@types/node` from 20.12.7 to 20.12.12
  - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
  - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)
  
  Updates `@typescript-eslint/eslint-plugin` from 7.7.1 to 7.9.0
  - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
  - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
  - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.9.0/packages/eslint-plugin)
  
  Updates `@typescript-eslint/parser` from 7.7.1 to 7.9.0
  - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
  - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
  - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.9.0/packages/parser)
  
  Updates `eslint-plugin-jest` from 28.2.0 to 28.5.0
  - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
  - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.2.0...v28.5.0)
  
  ---
  updated-dependencies:
  - dependency-name: "@types/node"
    dependency-type: direct:development
    update-type: version-update:semver-patch
    dependency-group: minor-npm-dependencies
  - dependency-name: "@typescript-eslint/eslint-plugin"
    dependency-type: direct:development
    update-type: version-update:semver-minor
    dependency-group: minor-npm-dependencies
  - dependency-name: "@typescript-eslint/parser"
    dependency-type: direct:development
    update-type: version-update:semver-minor
    dependency-group: minor-npm-dependencies
  - dependency-name: eslint-plugin-jest
    dependency-type: direct:development
    update-type: version-update:semver-minor
    dependency-group: minor-npm-dependencies
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2024-05-20 09:56:19 -04:00
  b1ec3021b8
• Update for 4.1.6 release (#1733)
  Cory Miller · 2024-05-16 14:08:36 -04:00
  v4.1.6 a5ac7e51b4
• Check platform for extension (#1732)
  Cory Miller · 2024-05-16 13:40:36 -04:00
  24ed1a3528
• README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com (#1707)

  * README: Set `user.email` to GitHub Actions Bot
  
  * Update workflow to use proper bot GitHub Bot email
  
  * Prefix `user.email` with `41898282+`
  
  To match squash merge user, else showing as two different users, see: https://github.com/SocketDev/socket-sdk-js/commit/b0948d0da0cfb5b240c69d063cc34a6399abce48
  
  * Update README.md
  
  ---------
  
  Co-authored-by: Pelle Wessman <pelle@kodfabrik.se>

  Cory Miller · 2024-04-30 11:50:54 -04:00
  v4.1.5 44c2b7a8a4
• Bump actions/upload-artifact from 2 to 4 (#1695)

  Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 4.
  - [Release notes](https://github.com/actions/upload-artifact/releases)
  - [Commits](https://github.com/actions/upload-artifact/compare/v2...v4)
  
  ---
  updated-dependencies:
  - dependency-name: actions/upload-artifact
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2024-04-24 12:39:59 -04:00
  8459bc0c7e
• Bump actions/setup-node from 1 to 4 (#1696)

  Bumps [actions/setup-node](https://github.com/actions/setup-node) from 1 to 4.
  - [Release notes](https://github.com/actions/setup-node/releases)
  - [Commits](https://github.com/actions/setup-node/compare/v1...v4)
  
  ---
  updated-dependencies:
  - dependency-name: actions/setup-node
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2024-04-24 12:34:46 -04:00
  3f603f6d5e
• Bump github/codeql-action from 2 to 3 (#1694)

  Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
  - [Release notes](https://github.com/github/codeql-action/releases)
  - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/github/codeql-action/compare/v2...v3)
  
  ---
  updated-dependencies:
  - dependency-name: github/codeql-action
    dependency-type: direct:production
    update-type: version-update:semver-major
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2024-04-24 12:33:41 -04:00
  fd084cde18
• Update NPM dependencies (#1703)

  * Update dependencies manually
  * Format files
  * Update licenses

  Cory Miller · 2024-04-24 12:04:10 -04:00
  9c1e94e0ad
• Prep Release v4.1.4 (#1704)

  * Update package.json and package-lock.json to reflect v4.1.4
  * Update CHANGELOG

  John Wesley Walker III · 2024-04-24 15:29:05 +02:00
  v4.1.4 0ad4b8fada
• Disable extensions.worktreeConfig when disabling sparse-checkout (#1692)
  John Wesley Walker III · 2024-04-23 22:07:43 +02:00
  43045ae669