chore(deps): update actions/checkout action to v6

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v4 → v6

---

Release Notes

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on the 15th day of the month before 12pm" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Overview

Greptile Summary

This PR updates actions/checkout from v4 to v6 across all five GitHub Actions workflow files. The update is a standard dependency maintenance change.

Changes:

• Updated CI workflow (ci.yml) - basic checkout for test execution
• Updated Coana vulnerability analysis workflow (coana-analysis.yml) - single checkout
• Updated Coana guardrail workflow (coana-guardrail.yml) - two checkout instances with ref and clean parameters
• Updated release workflow (release.yml) - checkout with token and fetch-depth: 0 parameters
• Updated version bump workflow (version-bump.yml) - checkout with custom token parameter

Compatibility:
All existing parameters (ref, clean, token, fetch-depth) used in these workflows are compatible with v6. The changes skip v5 and jump directly to v6, which is fine as v5 was an intermediate release.

Confidence Score: 5/5

• This PR is safe to merge with minimal risk
• This is a straightforward dependency update that only changes version numbers from v4 to v6 for the actions/checkout action. All existing parameters remain compatible, no logic changes were made, and the update follows standard dependency maintenance practices. The workflows maintain their existing functionality with improved action versions.
• No files require special attention

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Updated actions/checkout from v4 to v6 in the CI test workflow - straightforward dependency update with no other changes
.github/workflows/coana-analysis.yml	Updated actions/checkout from v4 to v6 in the vulnerability analysis workflow - straightforward dependency update with no other changes
.github/workflows/coana-guardrail.yml	Updated actions/checkout from v4 to v6 in two places in the guardrail workflow - both checkouts work with existing parameters (ref and clean)
.github/workflows/release.yml	Updated actions/checkout from v4 to v6 in the release workflow - compatible with existing token and fetch-depth parameters
.github/workflows/version-bump.yml	Updated actions/checkout from v4 to v6 in the version bump workflow - compatible with existing token parameter

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant GH as GitHub
    participant RB as Renovate Bot
    participant CI as CI Workflow
    participant Coana as Coana Analysis
    participant Release as Release Workflow
    
    Note over RB,GH: Dependency Update Process
    RB->>GH: Detect actions/checkout v6 available
    RB->>GH: Create PR #498 (v4 → v6)
    
    Note over CI: Parallel Workflow Execution
    Dev->>GH: Push changes / Open PR
    GH->>CI: Trigger ci.yml
    CI->>CI: Checkout code with v6
    CI->>CI: Run tests (stable/oldstable Go)
    CI->>CI: Verify code formatting
    
    GH->>Coana: Trigger coana-guardrail.yml
    Coana->>Coana: Checkout base branch with v6
    Coana->>Coana: Checkout PR branch with v6
    Coana->>Coana: Compare vulnerability reports
    
    Note over Release: Release Process (on merge)
    Dev->>GH: Merge version-bump PR
    GH->>Release: Trigger release.yml
    Release->>Release: Checkout with v6 (fetch-depth: 0)
    Release->>Release: Create GitHub release
    
    Note over Dev,GH: All workflows now use v6

Loading

[greptile-apps]

_{5 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}