chore(gha): bump actions/checkout from 5 to 6 (#3430)

Author: dependabot[bot]

.github/workflows/build.yml

@@ -64,10 +64,10 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout with shallow clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: ${{ !contains(matrix.os.coverage, 'coverage') }}
       - name: Checkout without shallow clone
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: ${{ contains(matrix.os.coverage, 'coverage') }}
         with:
           # Disabling shallow clone is recommended for improving relevancy of SonarCloud reporting

.github/workflows/codeql-analysis.yml

@@ -41,7 +41,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/dependency-review-pr.yml

@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4

.github/workflows/generate-demo-preview.yml

@@ -28,7 +28,7 @@ jobs:
     permissions:
       pull-requests: write # surge-preview: PR comments
     steps:
-      - uses: actions/checkout@v5 # access to the local action
+      - uses: actions/checkout@v6 # access to the local action
       - name: surge preview
         uses: ./.github/actions/custom-surge-preview
         with:

.github/workflows/generate-documentation.yml

@@ -39,7 +39,7 @@ jobs:
     permissions:
       pull-requests: write # surge-preview: PR comments
     steps:
-      - uses: actions/checkout@v5 # access to the local action
+      - uses: actions/checkout@v6 # access to the local action
       - name: surge preview
         uses: ./.github/actions/custom-surge-preview
         with:
@@ -53,7 +53,7 @@ jobs:
     if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') &&  github.event.ref == 'refs/heads/master'
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Build Setup
         uses: ./.github/actions/build-setup
       - name: Build docs

.github/workflows/notify-new-version-available-on-npm.yml

@@ -21,7 +21,7 @@ jobs:
           - bpmn-visualization-R
     steps:
       # Need to checkout to access to the internal action
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Notify that a new bpmn-visualization version is available
         uses: ./.github/actions/notify-PA-repo-of-new-version
         with:

.github/workflows/publish-npm.yml

@@ -13,7 +13,7 @@ jobs:
       - name: Set VERSION
         shell: bash
         run: echo "VERSION=${GITHUB_REF#refs/tags/v*}" >> $GITHUB_ENV
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Build Setup
         uses: ./.github/actions/build-setup
         with:

.github/workflows/release.yml

@@ -14,7 +14,7 @@ jobs:
       - run: |
           echo "New version type: ${{ inputs.type }}"
       - name: Setup checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           # Use a PAT to ensure workflow run are triggered after git push
           token: ${{ secrets.GH_RELEASE_TOKEN }}

.github/workflows/test-e2e.yml

@@ -65,7 +65,7 @@ jobs:
             browser: msedge
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Free disk space on Ubuntu runner
         if: runner.os == 'Linux'
         uses: ./.github/actions/free-runner-disk-space-ubuntu

.github/workflows/test-npm-package.yml

@@ -46,7 +46,7 @@ jobs:
       test-bundles-browser: chromium
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Build Setup
         uses: ./.github/actions/build-setup
       - name: Build npm package