Skip to content

Fix checkout init for SHA-256 repositories#2439

Merged
yaananth merged 2 commits into
mainfrom
fix-sha256-init-5528
Jun 1, 2026
Merged

Fix checkout init for SHA-256 repositories#2439
yaananth merged 2 commits into
mainfrom
fix-sha256-init-5528

Conversation

@yaananth
Copy link
Copy Markdown
Contributor

@yaananth yaananth commented May 21, 2026 •
edited
Loading

Summary

Fixes github/actions-runtime#5528 by initializing checkout's local Git repository with the object format used by the target repository.

SHA-256 repositories fail today because checkout creates the local repository with plain git init before fetching. Plain git init creates a SHA-1 repository by default, so the later fetch from a SHA-256 remote fails with a client/server object-format mismatch unless the workflow manually sets GIT_DEFAULT_HASH=sha256.

This PR updates checkout to:

  • determine the target repository object format before git init
  • use an existing commit SHA directly when checkout already has one
  • otherwise call GET /repos/{owner}/{repo}/hash-algorithm
  • run git init --object-format=sha256 only when the repository is identified as SHA-256
  • preserve checkout's existing default git init behavior for SHA-1 repositories and for cases where the format is not identified

Why this approach

Checkout has to choose the local repository object format before the first fetch. The hash-algorithm endpoint uses the existing action token through Octokit and works before a .git directory exists, so it supports private repositories without setting up Git credential config early.

The endpoint returns hash_algorithm as sha1 or sha256. Checkout uses that value directly instead of inferring the repository format from a branch commit SHA.

When checkout already has a 40- or 64-character commit SHA, it can determine the object format from that SHA without an API request. Otherwise, object-format detection is one pre-init API request to the hash-algorithm endpoint.

Checkout only opts into SHA-256 initialization after a positive SHA-256 result; otherwise it preserves the existing initialization path.

Security notes

The pre-init detection uses the existing Octokit/API authentication path and does not require writing Git credentials before repository initialization. Normal checkout authentication still happens through the existing auth helper flow, including the existing cleanup behavior for persist-credentials: false.

Validation

  • npm run build
  • npm test -- --runInBand
  • npm run format-check
  • npm run lint
  • unit coverage verifies the GET /repos/{owner}/{repo}/hash-algorithm request and sha1/sha256 responses

@yaananth yaananth force-pushed the fix-sha256-init-5528 branch from f279b42 to 67bd696 Compare May 21, 2026 20:56
@yaananth yaananth force-pushed the fix-sha256-init-5528 branch 2 times, most recently from 12bc7fa to d2a514d Compare May 29, 2026 02:40
@yaananth yaananth force-pushed the fix-sha256-init-5528 branch from d2a514d to 4823ef7 Compare May 29, 2026 15:39
@yaananth yaananth marked this pull request as ready for review May 29, 2026 15:52
Copilot AI review requested due to automatic review settings May 29, 2026 15:52
Copilot AI reviewed May 29, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Fixes checkout for SHA-256 repositories by detecting the target repository's object format before git init and initializing the local repo with --object-format=sha256 when appropriate. Detection uses either the existing commit SHA length (40/64 hex chars) or a pre-init call to GET /repos/{owner}/{repo}/hash-algorithm via the existing action token; SHA-1 and undetermined cases preserve the prior default git init behavior.

Changes:

  • Add tryGetRepositoryObjectFormat in github-api-helper.ts (commit-SHA-based or hash-algorithm endpoint).
  • Extend git.init() to accept an optional objectFormat and append --object-format=sha256 when applicable.
  • Wire detection into git-source-provider.ts before init, and add unit tests + rebuilt dist/index.js.
Show a summary per file
File Description
src/github-api-helper.ts Adds RepositoryObjectFormatResult interface, tryGetRepositoryObjectFormat, and getObjectFormat SHA-length helper.
src/git-source-provider.ts Detects object format prior to repo initialization and passes it to git.init.
src/git-command-manager.ts Updates init() signature/impl to optionally pass --object-format=sha256.
dist/index.js Regenerated bundle reflecting the above source changes.
test/github-api-helper.test.ts New tests covering sha1/sha256/unknown/error responses and SHA-based detection without API calls.
test/git-command-manager.test.ts New tests verifying git init arguments for sha256 vs sha1 inputs.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 5/6 changed files
  • Comments generated: 1

Comment thread src/github-api-helper.ts
@yaananth yaananth merged commit 1cce339 into main Jun 1, 2026
12 checks passed
@yaananth yaananth deleted the fix-sha256-init-5528 branch June 1, 2026 15:36
@yaananth yaananth mentioned this pull request Jun 2, 2026
Merged
@claude claude Bot mentioned this pull request Jun 2, 2026
Merged
@its-saffron its-saffron Bot mentioned this pull request Jun 2, 2026
Merged
1 task
eleboucher pushed a commit to eleboucher/talos-mcp that referenced this pull request Jun 2, 2026
@eleboucher
ci(github-action): update action actions/checkout (v6.0.2 → v6.0.3) (#8)
fffd907 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/talos-mcp/pulls/8
eleboucher pushed a commit to eleboucher/apoci that referenced this pull request Jun 2, 2026
@eleboucher
ci(github-action): update action actions/checkout (v6.0.2 → v6.0.3) (…
57a9791 
…#59)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/apoci/pulls/59
eleboucher pushed a commit to eleboucher/runner-k8s-plugin that referenced this pull request Jun 2, 2026
@eleboucher
ci(github-action): update action actions/checkout (v6.0.2 → v6.0.3) (…
19dcc94 
…#60)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/runner-k8s-plugin/pulls/60
bjw-s pushed a commit to bjw-s-labs/action-actionlint that referenced this pull request Jun 2, 2026
@bjw-s
ci(github-action): update actions/checkout ( v6.0.2 ➔ v6.0.3 ) (#3)
f46948c 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Amsterdam)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDUuMyIsInVwZGF0ZWRJblZlciI6IjQzLjIwNS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwicmVub3ZhdGUvZ2l0aHViLXJlbGVhc2UiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.bjw-s.dev/bjw-s/action-actionlint/pulls/3
doonga pushed a commit to greyrock-labs/home-ops that referenced this pull request Jun 2, 2026
ci(github-action): update actions/checkout ( v6.0.2 ➔ v6.0.3 ) (#178)
57dd716 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](actions/checkout@v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/New_York)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDYuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIwNi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwicmVub3ZhdGUvZ2l0aHViLXJlbGVhc2UiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.greyrock.io/greyrock-labs/home-ops/pulls/178
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jun 2, 2026
@renovate
chore(deps): update actions/checkout action to v6
f6980f6 
##### [\`v6.0.3\`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

- Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414)

---
##### [\`v6.0.2\`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)

- Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356)

---
##### [\`v6.0.1\`](actions/checkout@v6.0.0...v6.0.1)


---
##### [\`v6.0.0\`](actions/checkout@v5.0.1...v6.0.0)


---
##### [\`v6\`]()
@claude claude Bot mentioned this pull request Jun 3, 2026
Merged
1 task
onap-github pushed a commit to onap/portal-ng-bff that referenced this pull request Jun 3, 2026
@dependabot
Chore: bump actions/checkout from 6.0.2 to 6.0.3
0bf45eb 
Bumps actions/checkout from 6.0.2 to 6.0.3.
## Release notes

Sourced from actions/checkout's releases.

v6.0.3
What's Changed

Update changelog by @​ericsciple in actions/checkout#2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

@​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.3

Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774

... (truncated)

## Commits

df4cb1c Update changelog for v6.0.3 (#2446)
1cce339 Fix checkout init for SHA-256 repositories (#2439)
900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
0c366fd Update changelog (#2357)
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: Ib3e2359f174f37230d2386c441500eb37e4c95c5
GitHub-PR: #96
GitHub-Hash: 9442dfccd711df1f
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
onap-github pushed a commit to onap/portal-ng that referenced this pull request Jun 3, 2026
@dependabot
Chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3
9e83553 
Bumps actions/checkout from 6.0.2 to 6.0.3.
## Release notes

Sourced from actions/checkout's releases.

v6.0.3
What's Changed

Update changelog by @​ericsciple in actions/checkout#2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414
Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
Update changelog for v6.0.3 by @​yaananth in actions/checkout#2446

New Contributors

@​yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

## Changelog

Sourced from actions/checkout's changelog.

Changelog
v6.0.3

Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @​ericsciple in actions/checkout#2286
Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @​motss in actions/checkout#1971
Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
Update README.md by @​nebuk89 in actions/checkout#2194
Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
Check out other refs/* by commit by @​orhantoy in actions/checkout#1774

... (truncated)

## Commits

df4cb1c Update changelog for v6.0.3 (#2446)
1cce339 Fix checkout init for SHA-256 repositories (#2439)
900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
0c366fd Update changelog (#2357)
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I0de7b562d12e51882bd8759fa5f832830d96b8dd
GitHub-PR: #4
GitHub-Hash: b374d11a891e26a1
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Jun 3, 2026
@eleboucher
ci(github-action): update action https://data.forgejo.org/actions/che…
9094a77 
…ckout (v6.0.2 ➔ v6.0.3) (#799)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [https://data.forgejo.org/actions/checkout](https://data.forgejo.org/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` |

---

### Release Notes

<details>
<summary>actions/checkout (https://data.forgejo.org/actions/checkout)</summary>

### [`v6.0.3`](https://data.forgejo.org/actions/checkout/blob/HEAD/CHANGELOG.md#v603)

[Compare Source](https://data.forgejo.org/actions/checkout/compare/v6.0.2...v6.0.3)

- Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](actions/checkout#2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](actions/checkout#2414)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9wYXRjaCJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/799
@github-actions github-actions Bot mentioned this pull request Jun 3, 2026
Merged
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@AllanGuigou AllanGuigou AllanGuigou approved these changes

+2 more reviewers

@hhaador hhaador hhaador approved these changes

@BastirEiii BastirEiii BastirEiii approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@yaananth @AllanGuigou @hhaador @BastirEiii