Merge pull request #474 from NHSDigital/dependabot/github_actions/actions/checkout-6

Bump actions/checkout from 5 to 6

Author: eddalmond1

.github/workflows/base-deploy.yml

@@ -36,7 +36,7 @@ jobs:
       promoted_environment: ${{ steps.promoted_env.outputs.promoted_environment }}
     steps:
       - name: "Checkout ref"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 0  # get full history + tags
@@ -114,7 +114,7 @@ jobs:
       environment: ${{ needs.metadata.outputs.promoted_environment }}
       steps:
         - name: "Checkout repository at ref"
-          uses: actions/checkout@v5
+          uses: actions/checkout@v6
           with:
             ref: ${{ needs.metadata.outputs.ref }}
             fetch-depth: 0
@@ -171,7 +171,7 @@ jobs:
     environment: ${{ needs.metadata.outputs.environment }}
     steps:
       - name: "Checkout repository at ref"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ needs.metadata.outputs.ref }}
           fetch-depth: 0

.github/workflows/cicd-1-pull-request.yaml

@@ -24,7 +24,7 @@ jobs:
       does_pull_request_exist: ${{ steps.pr_exists.outputs.does_pull_request_exist }}
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Set CI/CD variables"
         id: variables
         run: |

.github/workflows/cicd-2-publish.yaml

@@ -30,7 +30,7 @@ jobs:
       version: ${{ steps.variables.outputs.version }}
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.ref_name }}
 
@@ -72,7 +72,7 @@ jobs:
           python-version: '3.13'
 
       - name: "Checkout Repository"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.ref_name }}
 

.github/workflows/cicd-3-test-deploy.yaml

@@ -24,7 +24,7 @@ jobs:
       tag: ${{ steps.tag.outputs.name }}
     steps:
       - name: "Checkout exact commit from CI/CD publish"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
 
@@ -57,7 +57,7 @@ jobs:
       contents: read
     steps:
       - name: "Checkout same commit"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
 

.github/workflows/cicd-4-preprod-deploy.yaml

@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: Checkout (full history & tags)
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with: { fetch-depth: 0 }
 
       - name: Force HTTPS remote for act

.github/workflows/monthly-capacity-report.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v5

.github/workflows/regression-tests.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -42,7 +42,7 @@ jobs:
           echo "PYTHON_VERSION=$PYTHON_VERSION" >> $GITHUB_ENV
 
       - name: setup python venv
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: '${{ env.PYTHON_VERSION }}'

.github/workflows/sonarcube-scan-main-branch.yaml

@@ -19,7 +19,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Set up Python"
         uses: actions/setup-python@v6
         with:
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout (full history)
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: "Get the coverage report"

.github/workflows/stage-1-commit.yaml

@@ -39,7 +39,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Full history is needed to scan all commits
       - name: "Scan secrets"
@@ -50,7 +50,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Full history is needed to compare branches
       - name: "Check file format"
@@ -61,7 +61,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Full history is needed to compare branches
       - name: "Check Markdown format"
@@ -72,7 +72,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Full history is needed to compare branches
       - name: "Check English usage"
@@ -83,7 +83,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Lint Terraform"
         uses: ./.github/actions/lint-terraform
   checkov-terraform:
@@ -95,7 +95,7 @@ jobs:
     timeout-minutes: 3
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Run Checkov"
         uses: bridgecrewio/checkov-action@v12
         with:
@@ -116,7 +116,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Count lines of code"
         uses: ./.github/actions/create-lines-of-code-report
         with:
@@ -135,7 +135,7 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Scan dependencies"
         uses: ./.github/actions/scan-dependencies
         with:
@@ -154,6 +154,6 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Run OWASP Dependency Scan"
         uses: ./.github/actions/owasp-dependency-scan

.github/workflows/stage-2-test.yaml

@@ -39,7 +39,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Set up Python"
         uses: actions/setup-python@v6
         with:
@@ -58,7 +58,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: "Set up Python"
         uses: actions/setup-python@v6
         with:
@@ -79,7 +79,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Full history is needed to improving relevancy of reporting
       - name: "Get the coverage report"