chore(deps): update actions packages to v6.0.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.2 → v6.0.3

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• No breaking changes: This is a patch release (v6.0.2 → v6.0.3) with only bug fixes
• Bug fix: SHA-256 repository support: Fixes checkout init for SHA-256 repositories (#2439)
• Bug fix: merge commit SHA regex: Expands the merge commit SHA regex and adds SHA-256 test cases (#2414)
• No security advisories; no API or behavioral changes affecting standard SHA-1 repos

🎯 Impact Scope Investigation

• Usage locations: 3 occurrences in .github/workflows/ci.yml (lines 103, 145, 235)
  • Renovate review job (no with: options — default shallow clone)
  • Notion sync deploy job (fetch-depth: 1)
  • Notion sync scheduled job (fetch-depth: 1)
• No usage in .github/workflows/trigger-sync-from-pr-comment.yml
• All usages are pinned by commit SHA (Renovate updated the pin from de0fac2e... → df4cb1c0...)
• This repository uses standard SHA-1 git objects — the fixed SHA-256 edge cases do not apply here
• No other dependencies are affected; no configuration changes needed

💡 Recommended Actions

• No migration steps required
• Merge as-is; the three SHA pins in ci.yml are correctly updated by Renovate

🔗 Reference Links

• actions/checkout CHANGELOG
• Fix checkout init for SHA-256 repositories (#2439)
• Expand merge commit SHA regex (#2414)
• v6.0.2 → v6.0.3 compare

Generated by koki-develop/claude-renovate-review