checkout

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (#2355 )

* Initial plan

* Add orchestration ID support to git user-agent

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Improve tests to verify user-agent content and handle empty sanitized IDs

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Simplify orchestration ID validation to accept any non-empty sanitized value

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

* Remove test for orchestration ID with only invalid characters

Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: TingluoHuang <1750815+TingluoHuang@users.noreply.github.com>
Co-authored-by: Tingluo Huang <tingluohuang@github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot · 2026-01-08 15:07:38 -05:00

064fe7f331

Clarify v6 README (#2328 )

eric sciple · 2025-12-01 20:08:49 -06:00

v6.0.1 8e8c483db8

Add worktree support for persist-credentials includeIf (#2327 )

eric sciple · 2025-12-01 19:53:23 -06:00

033fa0dc0b

Update all references from v5 and v4 to v6 (#2314 )

- Updated README.md examples to reference @v6
- Updated all workflow files to use actions/checkout@v6

eric sciple · 2025-11-23 19:32:55 -06:00

c2d88d3ecc

update readme/changelog for v6 (#2311 )

eric sciple · 2025-11-20 10:20:04 -06:00

v6.0.0 1af3b93b68

v6-beta (#2298 )

eric sciple · 2025-11-03 13:40:10 -06:00

v6-beta 71cf2267d8

Persist creds to a separate file (#2286 )

eric sciple · 2025-11-03 13:08:38 -06:00

069c695914

Update README to include Node.js 24 support details and requirements (#2248 )

* Update README to include Node.js 24 support details and requirements

* Update

Salman Chishti · 2025-08-13 13:57:25 +01:00

ff7abcd0c3

Prepare v5.0.0 release (#2238 )

Salman Chishti · 2025-08-11 13:35:28 +01:00

v5.0.0 08c6903cd8

Update actions checkout to use node 24 (#2226 )

* use node 24

* update other parts to node 24

* bump to major version, audit fix, changelog

* update licenses

* update dist

* update major version

* will do separate pr for v5 and will do a minor version for previous changes

Salman Chishti · 2025-08-11 11:52:51 +01:00

9f265659d3

Prepare release v4.3.0 (#2237 )

Salman Chishti · 2025-08-11 11:30:37 +01:00

v4.3.0 08eba0b27e

Update package dependencies (#2236 )

* package updates

* update dist

* Update license files

Salman Chishti · 2025-08-11 11:22:41 +01:00

631c7dc4f8

Update CODEOWNERS for actions (#2224 )

Tingluo Huang · 2025-07-23 09:20:20 -04:00

8edcb1bdb4

Update README.md (#2194 )

Ben De St Paer-Gotch · 2025-06-06 09:19:16 +01:00

09d2acae67

Adjust positioning of user email note and permissions heading (#2044 )

Josh Gross · 2025-01-16 15:56:18 -05:00

85e6279cec

Documentation update - add recommended permissions to Readme (#2043 )

* Update README.md

* Update README.md

Co-authored-by: Josh Gross <joshmgross@github.com>

---------

Co-authored-by: Josh Gross <joshmgross@github.com>

Ben Wells · 2025-01-16 14:14:48 -05:00

009b9ae9e4

Update README.md (#1977 )

Mohammad Ismail · 2024-11-14 10:41:00 -05:00

cbb722410c

docs: update README.md (#1971 )

Add a scenario where it is necessary to push a commit to a pull request.

The web walker · 2024-11-08 10:32:54 -05:00

3b9b8c884f

Prepare 4.2.2 Release (#1953 )

* Prepare 4.2.2 Release

---------

Co-authored-by: Josh Gross <joshmgross@github.com>

John Wesley Walker III · 2024-10-23 16:24:28 +02:00

v4.2.2 11bd71901b

Expand unit test coverage (#1946 )

John Wesley Walker III · 2024-10-23 15:59:08 +02:00

e3d2460bbb

url-helper.ts now leverages well-known environment variables. (#1941 )

* `utl-helper.ts` now leverages well-known environment variables.

---------
Co-authored-by: Erez Testiler <easyt@github.com>

John Wesley Walker III · 2024-10-18 10:07:17 +02:00

163217dfcd

Prepare 4.2.1 release (#1925 )

Josh Gross · 2024-10-07 12:38:04 -04:00

v4.2.1 eef61447b9

Add workflow file for publishing releases to immutable action package (#1919 )

This workflow file publishes new action releases to the immutable action package of the same name as this repo.

This is part of the Immutable Actions project which is not yet fully released to the public. First party actions like this one are part of our initial testing of this feature.

Joel Ambass · 2024-10-03 11:03:35 +02:00

6b42224f41

Check out other refs/* by commit if provided, fall back to ref (#1924 )

Orhan Toy · 2024-10-01 20:24:28 -04:00

de5a000abf

Prepare 4.2.0 release (#1878 )

* Bump package version to 4.1.8

* Add v4.1.8 changelog

* Bump version to `4.2.0`

Josh Gross · 2024-09-25 13:51:15 -04:00

v4.2.0 d632683dd7

Bump braces from 3.0.2 to 3.0.3 (#1777 )

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-09-05 15:04:42 -04:00

6d193bf280

Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872 )

* Bump the minor-npm-dependencies group across 1 directory with 4 updates

Bumps the minor-npm-dependencies group with 4 updates in the / directory: [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest), [prettier](https://github.com/prettier/prettier), [ts-jest](https://github.com/kulshekhar/ts-jest) and [typescript](https://github.com/Microsoft/TypeScript).


Updates `eslint-plugin-jest` from 28.5.0 to 28.8.2
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.5.0...v28.8.2)

Updates `prettier` from 3.2.5 to 3.3.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.2.5...3.3.3)

Updates `ts-jest` from 29.1.2 to 29.2.5
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.2.5)

Updates `typescript` from 5.4.5 to 5.5.4
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v5.4.5...v5.5.4)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* `npm run build`

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Josh Gross <joshmgross@github.com>

dependabot[bot] · 2024-09-05 15:04:17 -04:00

db0cee9a51

Add Ref and Commit outputs (#1180 )

Signed-off-by: Luca Comellini <luca.com@gmail.com>

Luca Comellini · 2024-09-05 11:57:13 -04:00

b684943689

Provide explanation for where user email came from (#1869 )

* Provide explanation for where user email came from

* bringing back the newline

yasonk · 2024-09-02 09:53:38 -04:00

2d7d9f7ff5

Bump docker/build-push-action from 5.3.0 to 6.5.0 (#1832 )

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5.3.0 to 6.5.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v5.3.0...v6.5.0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-07-29 16:10:36 -04:00

9a9194f871

Bump docker/login-action in the minor-actions-dependencies group (#1831 )

Bumps the minor-actions-dependencies group with 1 update: [docker/login-action](https://github.com/docker/login-action).


Updates `docker/login-action` from 3.1.0 to 3.3.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3.1.0...v3.3.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-07-29 16:10:02 -04:00

dd960bd3c3

Prepare 4.1.7 release (#1775 )

* Prepare 4.1.7 release

* Include #1776 in 4.1.7 release

Josh Gross · 2024-06-12 14:41:43 -04:00

v4.1.7 692973e3d9

Pin actions/checkout's own workflows to a known, good, stable version. (#1776 )

* Pin actions/checkout's own workflows to a known, good, stable version.

* fixed failing unit test

* fix unit test

John Wesley Walker III · 2024-06-12 13:11:03 -04:00

6ccd57f4c5

Handle hidden refs (#1774 )

Co-authored-by: Chris Gavin <chris@chrisgavin.me>

Orhan Toy · 2024-06-12 11:01:40 -04:00

b17fe1e4d5

Bump actions/checkout from 3 to 4 (#1697 )

* Bump actions/checkout from 3 to 4

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Apply suggestions from code review

* .

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Cory Miller <13227161+cory-miller@users.noreply.github.com>

dependabot[bot] · 2024-05-20 14:25:59 -04:00

b80ff79f17

Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739 )

Bumps the minor-npm-dependencies group with 4 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest).


Updates `@types/node` from 20.12.7 to 20.12.12
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 7.7.1 to 7.9.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.9.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 7.7.1 to 7.9.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.9.0/packages/parser)

Updates `eslint-plugin-jest` from 28.2.0 to 28.5.0
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.2.0...v28.5.0)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-npm-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-05-20 09:56:19 -04:00

b1ec3021b8

Update for 4.1.6 release (#1733 )

Cory Miller · 2024-05-16 14:08:36 -04:00

v4.1.6 a5ac7e51b4

Check platform for extension (#1732 )

Cory Miller · 2024-05-16 13:40:36 -04:00

24ed1a3528

README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com (#1707 )

* README: Set `user.email` to GitHub Actions Bot

* Update workflow to use proper bot GitHub Bot email

* Prefix `user.email` with `41898282+`

To match squash merge user, else showing as two different users, see: https://github.com/SocketDev/socket-sdk-js/commit/b0948d0da0cfb5b240c69d063cc34a6399abce48

* Update README.md

---------

Co-authored-by: Pelle Wessman <pelle@kodfabrik.se>

Cory Miller · 2024-04-30 11:50:54 -04:00

v4.1.5 44c2b7a8a4

Bump actions/upload-artifact from 2 to 4 (#1695 )

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-04-24 12:39:59 -04:00

8459bc0c7e

Bump actions/setup-node from 1 to 4 (#1696 )

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 1 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v1...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-04-24 12:34:46 -04:00

3f603f6d5e

Bump github/codeql-action from 2 to 3 (#1694 )

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-04-24 12:33:41 -04:00

fd084cde18

Update NPM dependencies (#1703 )

* Update dependencies manually
* Format files
* Update licenses

Cory Miller · 2024-04-24 12:04:10 -04:00

9c1e94e0ad

Prep Release v4.1.4 (#1704 )

* Update package.json and package-lock.json to reflect v4.1.4
* Update CHANGELOG

John Wesley Walker III · 2024-04-24 15:29:05 +02:00

v4.1.4 0ad4b8fada

Disable extensions.worktreeConfig when disabling sparse-checkout (#1692 )

John Wesley Walker III · 2024-04-23 22:07:43 +02:00

43045ae669

Bump the minor-actions-dependencies group with 2 updates (#1693 )

Bumps the minor-actions-dependencies group with 2 updates: [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `docker/login-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3.0.0...v3.1.0)

Updates `docker/build-push-action` from 5.1.0 to 5.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v5.1.0...v5.3.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-actions-dependencies
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-04-23 13:14:23 -04:00

37b082107b

Add dependabot config (#1688 )

* Add dependabot config
* Group minor and patch updates for NPM and GH Actions

Cory Miller · 2024-04-23 13:02:51 -04:00

9839dc14a0

Bump word-wrap from 1.2.3 to 1.2.5 (#1643 )

Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.5)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2024-04-23 12:52:06 +02:00

9b4c13b0bf

Add SSH user parameter (#1685 )

* Add a configurable SSH user

* Update docs with param

* Indentation of readme

* formatting woes

* Update src/url-helper.ts

Co-authored-by: Josh Gross <joshmgross@github.com>

* Update action.yml

Co-authored-by: Josh Gross <joshmgross@github.com>

* Update genfiles

---------

Co-authored-by: Josh Gross <joshmgross@github.com>

Cory Miller · 2024-04-18 15:29:55 -04:00

v4.1.3 1d96c772d1

Check git version before attempting to disable sparse-checkout (#1656 )

* Check git version before attempting to disable `sparse-checkout`
* Bump `MinimumGitSparseCheckoutVersion` to 2.28 due to #1386
* Initial prep for release 4.1.3

John Wesley Walker III · 2024-03-14 15:40:14 +01:00

cd7d8d697e

208 Commits