janschoenfeld/checkout.git/src, branch dependabot/github_actions/actions/setup-node-7

escape values passed to --unset (#2530)

2026-07-17T17:44:40+00:00

trim only ascii whitespace for branch (#2521)

2026-07-15T19:05:42+00:00

* trim only ascii whitespace for branch

* rebuild

skip running unsafe pr check if input is default (#2518)

2026-07-15T14:02:03+00:00

update error wording (#2467)

2026-06-17T17:51:53+00:00

getting ready for checkout v7 release (#2464)

2026-06-17T13:59:35+00:00

* getting ready for checkout v7 release

* update changelog wording

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

upgrade module to esm and update dependencies (#2463)

2026-06-16T21:10:58+00:00

* upgrade module to esm so I can update dependencies

* fix ci failures

Bump @actions/core and @actions/tool-cache and Remove uuid (#2459)

2026-06-16T18:28:24+00:00

* Bump uuid, @actions/core and @actions/tool-cache

Bumps [uuid](https://github.com/uuidjs/uuid), [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) and [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache). These dependencies needed to be updated together.

Updates `uuid` from 9.0.1 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v9.0.1...v14.0.0)

Updates `@actions/core` from 1.10.1 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/tool-cache` from 2.0.1 to 2.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
- dependency-name: "@actions/core"
  dependency-version: 1.11.1
  dependency-type: direct:production
- dependency-name: "@actions/tool-cache"
  dependency-version: 2.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] 

* switch to use crpto.randomUUID

* update license

---------

Signed-off-by: dependabot[bot] 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aiqiao Yan <55104035+aiqiaoy@users.noreply.github.com>

block checking out fork pr for pull_request_target and workflow_run (#2454)

2026-06-16T14:03:43+00:00

* block checking out fork pr for some events

* address copilot and reviewer feedback

* run prettier formatting

* build

* update urls

* update readme

* update description and url again

* edit url one more time

Fix checkout init for SHA-256 repositories (#2439)

2026-06-01T15:35:58+00:00

* Fix checkout init for SHA-256 repositories

* Remove unused object format result field

fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)

2026-05-04T17:30:55+00:00

* fix: expand merge commit SHA regex and add SHA-256 test cases

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* test: add checkCommitInfo SHA coverage

Add checkCommitInfo tests for SHA-1 and SHA-256 merge messages and reject invalid 50-character hex merge heads.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* style: fix Prettier formatting in test and source files

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>