chore(deps): update actions/checkout action to v6.0.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.2 → v6.0.3

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 09:00 AM and 06:59 PM, Monday through Friday (* 9-18 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: d2c0b94

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

Code Metrics Report (packages/sdk)

	main (4785de1)	#1331 (f5bf17c)	+/-
Coverage	64.9%	64.9%	0.0%
Code to Test Ratio	1:0.4	1:0.4	0.0

Details

  |                    | main (4785de1) | #1331 (f5bf17c) | +/-  |
  |--------------------|----------------|-----------------|------|
  | Coverage           |          64.9% |           64.9% | 0.0% |
  |   Files            |            393 |             393 |    0 |
  |   Lines            |          13415 |           13415 |    0 |
  |   Covered          |           8711 |            8711 |    0 |
  | Code to Test Ratio |          1:0.4 |           1:0.4 |  0.0 |
  |   Code             |          89466 |           89466 |    0 |
  |   Test             |          38321 |           38321 |    0 |

SDK Configure Bundle Size

	main (4785de1)	#1331 (f5bf17c)	+/-
configure-index-size	19.69KB	19.69KB	0KB
dependency-chunks-size	34.65KB	34.65KB	0KB
total-bundle-size	54.34KB	54.34KB	0KB

Runtime Performance

	main (4785de1)	#1331 (f5bf17c)	+/-
Generate Median	2,844ms	2,547ms	-297ms
Generate Max	2,864ms	2,683ms	-181ms
Apply Build Median	2,903ms	2,610ms	-293ms
Apply Build Max	2,923ms	2,630ms	-293ms

Type Performance (instantiations)

	main (4785de1)	#1331 (f5bf17c)	+/-
tailordb-basic	33,959	33,959	0
tailordb-optional	3,841	3,841	0
tailordb-relation	5,921	5,921	0
tailordb-validate	2,566	2,566	0
tailordb-hooks	5,767	5,767	0
tailordb-object	12,136	12,136	0
tailordb-enum	2,462	2,462	0
resolver-basic	9,424	9,424	0
resolver-nested	26,111	26,111	0
resolver-array	18,187	18,187	0
executor-schedule	4,234	4,234	0
executor-webhook	873	873	0
executor-record	6,659	6,659	0
executor-resolver	4,369	4,369	0
executor-operation-function	868	868	0
executor-operation-gql	869	869	0
executor-operation-webhook	888	888	0
executor-operation-workflow	1,714	1,714	0

---

Reported by octocov

[claude]

🤖 Claude Dependency Review

📦 Update Summary

• Library: actions/checkout (GitHub Action)
• Version: v6.0.2 → v6.0.3
• Change Type: Patch
• Scope: Updates 1 instance in .github/workflows/sdk-metrics.yml

📝 Release Notes

• https://github.com/actions/checkout/releases/tag/v6.0.3
• https://github.com/actions/checkout/blob/main/CHANGELOG.md#v603

🐛 Bug Fixes

This patch release includes two bug fixes focused on SHA-256 repository compatibility:

1. Fix checkout init for SHA-256 repositories (#2439)

   • Resolves initialization issues when checking out repositories that use SHA-256 hashing instead of the traditional SHA-1
   • Ensures the action can properly initialize and work with modern Git repository configurations using SHA-256

2. Expand merge commit SHA regex and add SHA-256 test cases (#2414)

   • Improves the action's ability to handle merge commit references across different hash algorithms
   • Adds test coverage for SHA-256 scenarios to prevent future regressions

🔍 Impact Analysis

📁 Usage Locations

`actions/checkout` is used in 30 locations across 19 workflow files. This PR updates 1 instance in `sdk-metrics.yml:35` (the coverage-shard job). The remaining 29 instances were already updated to v6.0.3 in previous PRs.

Workflows using actions/checkout:

1. add-renovate-changeset.yml - Automated changeset creation
2. changeset-check.yml - Changeset validation
3. check-license.yml - License checking
4. ci.yml - CI checks (lint, format, type check)
5. cleanup-e2e-workspaces.yml - E2E workspace cleanup
6. deploy.yml (2 uses) - Deployment
7. docs-consistency-check.yml - Documentation consistency
8. generate.yml (2 uses) - Code generation
9. github-actions-lint.yml - Workflow linting
10. link-check.yml - Link validation
11. migration.yml (2 uses) - Migration tests
12. pkg-pr-new.yml (2 uses) - Package preview
13. release.yml - Release and publishing
14. renovate-auto-review.yml - Automated Renovate reviews
15. renovate-policy-check.yml - Renovate policy validation
16. sdk-e2e.yml (2 uses) - SDK E2E tests
17. sdk-metrics.yml (6 uses) - Coverage and bundle size metrics ← 1 instance updated
18. skills-sync-check.yml - Skills synchronization
19. template-tests.yml - Template testing
20. test.yml - Unit tests

All workflows use `actions/checkout` in a standard way to clone the repository at the start of jobs, typically with `persist-credentials: false` for security.

Impact Summary

• Total instances: 30 uses across 19 workflow files
• Updated by this PR: 1 instance (sdk-metrics.yml line 35)
• Already updated: 29 instances
• Breaking changes: None
• Required code changes: None
• Configuration changes: None

✅ Recommended Actions

None required - This is a safe, backward-compatible patch update that:

• Fixes SHA-256 repository compatibility (relevant for future Git versions)
• Improves merge commit handling
• Requires no code or configuration changes
• Introduces no breaking changes

The update can be merged safely once CI checks pass.

---