checkout

v6.0.3 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 1d Version Control

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Bugfix	Medium	Fixes checkout initialization for SHA-256 repositories. Fixes checkout initialization for SHA-256 repositories. Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix	Medium	Expands merge commit SHA regex and adds SHA-256 test cases. Expands merge commit SHA regex and adds SHA-256 test cases. Source: llm_adapter@2026-06-02 Confidence: high	—

Full changelog

Update changelog by @ericsciple in https://github.com/actions/checkout/pull/2357
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in https://github.com/actions/checkout/pull/2414
Fix checkout init for SHA-256 repositories by @yaananth in https://github.com/actions/checkout/pull/2439
Update changelog for v6.0.3 by @yaananth in https://github.com/actions/checkout/pull/2446

@yaananth made their first contribution in https://github.com/actions/checkout/pull/2414

Full Changelog: https://github.com/actions/checkout/compare/v6...v6.0.3

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track checkout

Get notified when new releases ship.

About checkout

Action for checking out a repo