Skip to content

chore(ci)(deps): Bump actions/checkout from 4 to 6#4

Open
dependabot[bot] wants to merge 38 commits intomainfrom
dependabot/github_actions/actions/checkout-6
Open

chore(ci)(deps): Bump actions/checkout from 4 to 6#4
dependabot[bot] wants to merge 38 commits intomainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

mos and others added 30 commits April 3, 2026 16:48
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 76 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 4 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 11 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 5 py, 0 dart, 0 ts/tsx, 22 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 9 dart, 0 ts/tsx, 3 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 25 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 8 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 7 dart, 0 ts/tsx, 6 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 5 dart, 0 ts/tsx, 5 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 3 py, 0 dart, 0 ts/tsx, 0 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 2 py, 0 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 1 dart, 0 ts/tsx, 3 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 0 dart, 0 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 3 py, 0 dart, 0 ts/tsx, 2 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 23 dart, 2 ts/tsx, 8 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 5 dart, 0 ts/tsx, 13 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 8 dart, 0 ts/tsx, 1 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 4 rs, 0 py, 119 dart, 0 ts/tsx, 154 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 1 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Merges worktree-agent-a17332f2 branch containing the complete Flutter
super-app (app/) with all 10 pillar screens, providers, and Rust bridge.
Resolved docs/papers/che-framework/are-spec.md conflict (kept worktree version).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The Flutter super-app source code (app/lib/, app/test/, app/pubspec.yaml)
was accidentally deleted in commit 8bd6eef. Restored from 8bd6eef~1.
All 11 feature screens present: vault, messenger, voip, vpn, anonymizer,
qai, email, browser, mesh, auth, settings.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…rProvider

WS-1 Pillar 5 (95% → 100%):
- AnonymizerScreen now uses anonymizerProvider for level slider + redact
  (was incorrectly using piiProvider for everything)
- L7 Quantum Jitter: entropy-seeded noise per character (non-deterministic)
- L8 Differential Privacy: Laplace mechanism for numeric PII (epsilon=1.0)
- L9 K-Anonymity: generalize email→domain, phone→area, zip→3 digits,
  name→initials, date→year
- L10 Quantum OTP: XOR with entropy bytes, FNV-1a hash tag [QR_xxxxxx]
- All levels fall back to Random.secure() when Rust entropy unavailable
- Also restored app/rust/ (accidentally deleted in 8bd6eef)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-2 Pillars 6+8 (85% → 100%):

Shared fix (P6+P8):
- main.rs: use mpsc channel to capture proxy port from async spawn
- AI sidebar now receives actual proxy port (was always None)
- Cloud AI chat routes through PQC proxy when available

P8 ZipBrowser fixes:
- Back/Forward buttons now call goBack()/goForward() on provider
  (were empty closures `() {}`)
- Fingerprint/Cookie toggles wired to BrowserState
  (were local _BrowserScreenState bools that reset on rebuild)
- BrowserState gains history stack, fingerprintProtection, cookieRotation
- Fallback screen shows "Open in System Browser" via url_launcher
  (was dead-end "Use Tauri desktop" message)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-3 Pillar 7 (75% → 90%):
- _encryptAndSend() now scans message body for PII before encrypting
- Shows dialog with PII count, sensitivity, and category breakdown
- Three actions: Cancel, Anonymize & Send (uses anonymizerProvider at
  selected attachment level), or Send Anyway
- Wired anonymizerProvider and piiProvider into email compose flow

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-4 Pillar 2 (85% → 95%):
- sendMessage() no longer unconditionally schedules demo auto-replies
- Demo replies only fire when signaling was never connected (!isLive)
- If signaling was live but dropped, shows error instead of faking replies
- Production builds won't see demo behavior when connected to real server

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 1 rs, 0 py, 0 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…mCanary)

WS-5 Pillar 9 (90% → 95%):
- PresenceProof (0x05): spatiotemporal attestation with 64B signature
- VitalAuthChallenge (0x06): continuous biometric auth with 32B nonce
- EmCanaryAlert (0x07): TEMPEST countermeasure with frequency/power/level
- All three have builder methods, serialize/deserialize, HMAC auth
- 15 existing mesh tests pass, wire format backward-compatible

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-3 Pillar 7 (90% → 95%):
- FilePicker with multi-select for txt/csv/json/pdf/doc/xlsx/png/jpg
- Attachment chips with remove buttons in compose flow
- Conditional warning when attachment anonymization level > 0
- Wired between compose card and self-destruct row

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
WS-2 Pillar 6 (85% → 100%):
- OllamaService: calls localhost:11434/api/chat with health check
- Available models discovered via /api/tags endpoint
- Provider selector shows "Ollama (Local)" with green/red health dot
- Falls back gracefully when Ollama not running

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
mos and others added 8 commits April 6, 2026 08:33
Files: 0 rs, 4 py, 1 dart, 0 ts/tsx, 0 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 0 dart, 0 ts/tsx, 0 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Restored ios/, android/, macos/, linux/, web/, windows/, rust_builder/
  (deleted in 8bd6eef, only lib/ was restored earlier)
- Fixed 12 analysis errors: isOnDevice→isLocal, removed dead rust.getEntropy
  call, added url_launcher dep, created assets/logos/ dir
- Added mesh_provider.dart, provision_ruview_mesh.py, WebSocket ratchet tests
- flutter analyze: 0 errors (5 info/warning)
- flutter build ios --no-codesign: SUCCESS (41.5 MB)

Ready for TestFlight: needs codesigning with Apple Developer cert.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 1 py, 0 dart, 0 ts/tsx, 4 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Files: 0 rs, 0 py, 0 dart, 0 ts/tsx, 3 other

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…h visualizations

Paper 1 (quantum anonymization):
- Add IND-ANON indistinguishability game with per-cell zero advantage proof
- Add DP-QRNG composition theorem (was "left for future work")
- Add ideal functionality F_ANON with UC realization sketch
- Fix: per-value bound uses joint TV (product formula), not max
- Fix: corollary no longer overclaims k-anon/l-div survival through DP
- Fix: UC delta uses single-dataset metric, not IND-ANON pair metric
- Add Canetti UC citation (FOCS 2001)
- Compiles clean, 25 pages, 20 formal results

IP Assessment Report:
- 7 figures (radar, market, thicket, regulatory, valuation, competitive, pillars)
- Full scoring tables, institution lists, market sizing
- Norwegian email body + English report versions
- PDF + HTML (self-contained with embedded figures)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
GitHub push protection blocked the push because PII scanner test
fixtures contained example Stripe test API keys. Replaced with
obviously fake placeholders that still trigger the PII scanner
pattern match.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 6, 2026

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants