[deps]: Update actions/checkout action to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	major	v4.3.0 -> v5.0.0	v5.0.1

---

Release Notes

actions/checkout (actions/checkout)

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in #​2226
• Prepare v5.0.0 release by @​salmanmkc in #​2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-28010
• Link: https://bitwarden.atlassian.net/browse/PM-28010

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.24%. Comparing base (979237b) to head (b667b46).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6144   +/-   ##
=======================================
  Coverage   85.24%   85.24%           
=======================================
  Files         724      724           
  Lines       52901    52901           
  Branches     7687     7687           
=======================================
  Hits        45094    45094           
  Misses       5126     5126           
  Partials     2681     2681           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[claude]

Claude finished @renovate[bot]'s task —— View job

---

Review Complete

Overall Assessment: APPROVE with observations

Findings:

Finding 1: 💭 Consider updating to v5.0.1 instead of v5.0.0

Details

The PR description notes that v5.0.1 is available as a pending update. While v5.0.0 is functional, it's generally better practice to use the latest patch version to include any immediate bug fixes released after the major version.

Recommendation: Update Renovate configuration or manually update to v5.0.1 if there are known issues in v5.0.0.

Finding 2: 💭 Verify GitHub Actions runner version compatibility

Details

The v5.0.0 release requires minimum runner version v2.327.1 due to the Node 24 upgrade. This workflow uses runs-on: ubuntu-22.04 (.github/workflows/_version.yml:63).

Key Changes in v5.0.0:

• Upgraded from Node 20 to Node 24
• Requires Actions runner v2.327.1+

Verification needed:
Confirm that GitHub-hosted ubuntu-22.04 runners meet the v2.327.1 minimum requirement. GitHub typically keeps hosted runners up-to-date, but if this workflow runs on self-hosted runners, verify they meet the minimum version requirement.

How to check runner version:
Add a step like:

- name: Check runner version
  run: echo "Runner version: $RUNNER_VERSION"

If the runner version is below v2.327.1, the checkout action will fail.

---

Summary:

The change itself is correct - updates actions/checkout from v4.3.0 to v5.0.0 with the proper commit SHA. The update only affects a single workflow file (.github/workflows/_version.yml), and all other workflows appear to already be on v5 or don't use checkout.

The upgrade to Node 24 is a standard maintenance update. The main consideration is ensuring runner compatibility (v2.327.1+), which should be satisfied by GitHub-hosted runners but warrants verification if any self-hosted runners are in use.

[github-actions]

Checkmarx One – Scan Summary & Details – 758a54fb-a1c6-4876-b943-c2e5aebcc6f2

Great job! No new security vulnerabilities introduced in this pull request