Update actions/checkout action to v6.0.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.1 → v6.0.2

---

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Change: actions/checkout@v6.0.1 → actions/checkout@v6.0.2 (patch update)

Key Changes in v6.0.2:

1. Tag Handling Fix (PR #2356 by @ericsciple):

   • Fixed fetch-tags: true functionality that wasn't working properly
   • Preserved tag annotations during checkout (tags are now fetched via refspec instead of commit hash)
   • Resolved fatal errors when using tag checkout combined with fetch-tags: true
   • Technical implementation: Modified getRefSpec() to accept fetchTags parameter and use explicit refspecs (+refs/tags/*:refs/tags/*) instead of --tags flag

2. Enhanced User Agent Tracking (PR #2355):

   • Added orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID environment variable is set
   • Improves telemetry and debugging capabilities

Breaking Changes: None

Security Fixes: None identified - this is a bug fix release

🎯 Impact Scope Investigation

Usage Analysis:

• The repository uses actions/checkout in 6 locations across 5 workflow files:
  • .github/workflows/api-push.yaml (1 usage)
  • .github/workflows/package-pr.yaml (3 usages)
  • .github/workflows/package-push.yaml (1 usage)
  • .github/workflows/repo-push.yaml (1 usage)
  • .github/workflows/claude-renovate-review.yml (1 usage)

Current Configuration:

• All usages employ default configuration (no additional parameters)
• Only one workflow (claude-renovate-review.yml) uses custom configuration: persist-credentials: false
• No workflows use fetch-tags parameter - the fixed feature is not currently utilized
• No workflows checkout tags specifically - all checkout HEAD of branches (master/v3) or PR refs

Dependency Impact:

• This is an isolated GitHub Actions dependency
• No downstream dependencies affected
• No changes to package.json, lock files, or runtime dependencies

Backward Compatibility:

• ✅ Fully backward compatible - this is a bug fix that doesn't alter existing behavior for current usage patterns
• The fix addresses edge cases (tag handling) that are not utilized in this repository
• No API changes or parameter modifications

💡 Recommended Actions

Immediate Action:

• ✅ Safe to merge immediately - no code changes required

Post-Merge Validation:

• Monitor the next workflow runs to ensure all 6 usages continue functioning normally
• Expected workflows to verify:
  • API/repo image publishing workflows
  • Package build and test workflows
  • Renovate review workflow

Optional Future Enhancements:

• No action required, but if the project ever needs to checkout specific tags or fetch all tags, this update ensures those features will work correctly

No Manual Migration Required:

• Zero code changes needed
• Zero configuration changes needed
• All current usages are unaffected by the bug fixes

🔗 Reference Links

• Release Notes
• Tag Handling Fix PR #2356
• Comparison v6.0.1...v6.0.2
• Issue #1471 - fetch-tags not working
• Issue #290 - Tag annotation preservation
• Issue #1467 - Tag checkout with fetch-tags failure

Generated by koki-develop/claude-renovate-review