Bump actions/checkout from 4 to 6 by dependabot[bot] · Pull Request #118 · samrusani/AliceBot

dependabot · 2026-04-09T22:12:55Z

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

Persist creds to a separate file by @ericsciple in actions/checkout#2286

v6-beta by @ericsciple in actions/checkout#2298

update readme/changelog for v6 by @ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

Prepare v5.0.0 release by @salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

... (truncated)

Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
8e8c483 Clarify v6 README (#2328)
033fa0d Add worktree support for persist-credentials includeIf (#2327)
c2d88d3 Update all references from v5 and v4 to v6 (#2314)
1af3b93 update readme/changelog for v6 (#2311)
71cf226 v6-beta (#2298)
069c695 Persist creds to a separate file (#2286)
ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
08c6903 Prepare v5.0.0 release (#2238)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5H: semantic artifact chunk retrieval packet * Sprint 5H: semantic artifact chunk retrieval primitive --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5I: compile semantic artifact retrieval packet * Sprint 5I: compile semantic artifact retrieval adoption --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5J: hybrid artifact merge packet * Sprint 5J: deterministic hybrid artifact merge --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5K: project truth sync packet * Sprint 5K: project truth synchronization --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5L: PDF artifact parsing packet * Sprint 5L: PDF artifact parsing v0 --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5M: DOCX artifact parsing packet * Sprint 5M: DOCX artifact parsing v0 --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5N: RFC822 email artifact parsing packet * Sprint 5N: RFC822 email artifact parsing v0 --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5O: Gmail connection and single-message ingestion packet * Sprint 5O: Gmail connection and single-message ingestion --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5P: Gmail credential hardening packet * Sprint 5P: Gmail credential hardening --------- Co-authored-by: Sami Rusani <sr@samirusani>

* Sprint 5Q: Gmail refresh token lifecycle packet * Sprint 5Q: Gmail refresh token lifecycle --------- Co-authored-by: Sami Rusani <sr@samirusani>

Co-authored-by: Sami Rusani <sr@samirusani>

) Co-authored-by: Sami Rusani <sr@samirusani>

Co-authored-by: Sami Rusani <sr@samirusani>

* Compaction 01: archive stale planning context * Compaction 01: restore control packet metadata --------- Co-authored-by: Sami Rusani <sr@samirusani>

Co-authored-by: Sami Rusani <sr@samirusani>

Co-authored-by: Redacted User <redacted@users.noreply.github.com>

#114) Co-authored-by: Redacted User <redacted@users.noreply.github.com>

Co-authored-by: Redacted User <redacted@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

samrusani and others added 30 commits March 13, 2026 23:24

Sprint 5A: task workspace records and provisioning (#1)

38aeb73

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5B: Project Truth Compaction 01 (#2)

8103d5e

Sprint 5C: task artifact records and registration (#3)

389e22b

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5D: Local Artifact Ingestion V0 (#4)

ec8055e

Sprint 5E: add artifact chunk retrieval (#5)

ec13202

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5F: artifact chunk compile integration (#6)

a740d52

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5G: artifact chunk embedding substrate (#7)

50012a9

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5H: semantic artifact chunk retrieval primitive (#8)

ba6b982

* Sprint 5H: semantic artifact chunk retrieval packet * Sprint 5H: semantic artifact chunk retrieval primitive --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5I: compile semantic artifact retrieval adoption (#9)

d716653

* Sprint 5I: compile semantic artifact retrieval packet * Sprint 5I: compile semantic artifact retrieval adoption --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5J: deterministic hybrid artifact merge (#10)

9d7451e

* Sprint 5J: hybrid artifact merge packet * Sprint 5J: deterministic hybrid artifact merge --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5K: project truth synchronization (#11)

dfd3694

* Sprint 5K: project truth sync packet * Sprint 5K: project truth synchronization --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5L: PDF artifact parsing v0 (#12)

9635d08

* Sprint 5L: PDF artifact parsing packet * Sprint 5L: PDF artifact parsing v0 --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5M: DOCX artifact parsing v0 (#13)

914014d

* Sprint 5M: DOCX artifact parsing packet * Sprint 5M: DOCX artifact parsing v0 --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5N: RFC822 email artifact parsing v0 (#14)

64c1c94

* Sprint 5N: RFC822 email artifact parsing packet * Sprint 5N: RFC822 email artifact parsing v0 --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5O: Gmail connection and single-message ingestion (#15)

a65f00e

* Sprint 5O: Gmail connection and single-message ingestion packet * Sprint 5O: Gmail connection and single-message ingestion --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5P: Gmail credential hardening (#16)

93637e2

* Sprint 5P: Gmail credential hardening packet * Sprint 5P: Gmail credential hardening --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5Q: Gmail refresh token lifecycle (#17)

d3bf99d

* Sprint 5Q: Gmail refresh token lifecycle packet * Sprint 5Q: Gmail refresh token lifecycle --------- Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5R: Gmail refresh-token rotation handling (#18)

945a6b8

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5S: project truth synchronization after Gmail auth hardening (#19

e28aa92

) Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 5T: externalize Gmail credential storage

e13dca3

Sprint 5U: project truth sync after Gmail secret externalization (#20)

ae91851

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6A: MVP web shell and core operator views (#21)

9c1da9c

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6B: governed request approval workflow UI (#22)

4e42dd3

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6C: stabilize web workspace verification (#23)

c3b11fd

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6D: trace review APIs for explain-why (#24)

e1aaba3

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6E: live explain-why trace UI (#25)

dd40925

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6F: approval execution and review UI (#26)

d64b857

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6G: operator chat response mode (#27)

9a8709f

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6H: thread and session continuity APIs (#28)

5c4cab0

Co-authored-by: Sami Rusani <sr@samirusani>

Sprint 6I: chat thread selection and continuity review UI (#29)

e94d705

Co-authored-by: Sami Rusani <sr@samirusani>

samrusani and others added 24 commits April 7, 2026 22:11

P9-S34: ship CLI and continuity UX (#101)

c11af18

Co-authored-by: Sami Rusani <sr@samirusani>

P9-S35: ship MCP server (#102)

b3e0f94

Co-authored-by: Sami Rusani <sr@samirusani>

P9-S36: ship OpenClaw adapter (#103)

142d80a

Co-authored-by: Sami Rusani <sr@samirusani>

P9-S37: ship importers and eval harness (#104)

0694cee

Co-authored-by: Sami Rusani <sr@samirusani>

P9-S38: ship launch and release docs (#105)

95fd80e

Co-authored-by: Sami Rusani <sr@samirusani>

Compaction 01: archive stale planning context (#106)

b7f5cfc

* Compaction 01: archive stale planning context * Compaction 01: restore control packet metadata --------- Co-authored-by: Sami Rusani <sr@samirusani>

P10-S1: ship identity and workspace bootstrap (#107)

7e39d7e

Co-authored-by: Sami Rusani <sr@samirusani>

P10-S2: ship Telegram transport and normalization (#108)

66d5019

Co-authored-by: Sami Rusani <sr@samirusani>

P10-S3: ship chat-native continuity and approvals (#109)

57dabe6

Co-authored-by: Sami Rusani <sr@samirusani>

P10-S4: ship daily brief and notifications (#110)

24995e5

Co-authored-by: Sami Rusani <sr@samirusani>

P10-S5: ship beta hardening and launch readiness (#111)

3f478f4

Co-authored-by: Sami Rusani <sr@samirusani>

docs: refresh README and scrub personal path identifiers (#112)

75784df

Co-authored-by: Sami Rusani <sr@samirusani>

chore(release): scaffold npm packages and tag-based publish workflow

501e271

Ship one-command OpenClaw integration

8ca5457

docs: highlight OpenClaw one-command integration in README (#113)

c60d1ce

Co-authored-by: Redacted User <redacted@users.noreply.github.com>

Add Hermes MCP integration docs, smoke test, and runtime compatibility (

2df0480

#114) Co-authored-by: Redacted User <redacted@users.noreply.github.com>

docs: surface Hermes integration in README (#115)

e9ce104

Co-authored-by: Redacted User <redacted@users.noreply.github.com>

chore(release): bump @aliceos/alice-cli to 0.1.1

e86a0f6

ci: fix npm publish workflow version detection

13379ee

Add Hermes Alice workflow skill pack and install docs (#116)

a785266

Co-authored-by: Redacted User <redacted@users.noreply.github.com>

chore: keep internal operating docs local-only

fdc8352

chore(public): remove internal planning docs and sanitize references

81eacb4

security: harden API ingress and CI scanning (#117)

d39ace6

Co-authored-by: Redacted User <redacted@users.noreply.github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 9, 2026

samrusani force-pushed the main branch 2 times, most recently from f93cfb5 to b73fd46 Compare April 11, 2026 21:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump actions/checkout from 4 to 6#118

Bump actions/checkout from 4 to 6#118
dependabot[bot] wants to merge 131 commits intomainfrom
dependabot/github_actions/actions/checkout-6

dependabot bot commented on behalf of github Apr 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 9, 2026

v6.0.0

What's Changed

v6-beta

What's Changed

v5.0.1

What's Changed

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.1

What's Changed

v4.3.0

What's Changed

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant