Skip to content

chore(deps): bump actions/checkout from 4 to 6 - #3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6
Open

chore(deps): bump actions/checkout from 4 to 6#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Copy link
Copy Markdown

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github Apr 24, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot changed the title chore(deps): Bump actions/checkout from 4 to 6 chore(deps): bump actions/checkout from 4 to 6 Apr 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch 2 times, most recently from ba0402a to 2298b1b Compare April 25, 2026 00:13
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/checkout-6 branch from 2298b1b to 91093e4 Compare April 30, 2026 20:49
@dependabot
dependabot Bot requested a review from keithfawcett as a code owner April 30, 2026 20:49
phoenixtekk added a commit to phoenixtekk/openpartner that referenced this pull request Aug 31, 2026
Two Phoenixtekk divergences from upstream, both documented in the ops repo
at docs/FORK-PATCHES.md.

Patch getcoherence#1 — per-tenant selfhost mode.

Upstream resolves a tenant's payout rail with planToMode(), where NULL falls
through to the process-wide OPENPARTNER_MODE. The only way to get
mode='selfhost' for a tenant was to put the WHOLE installation into selfhost
mode, which also short-circuited four scheduler jobs — including usage-report,
the only path by which attributed GMV reaches Stripe meters. On a hosted
deployment that silently means customers are never billed for metered usage.

Phoenixtekk needs both rails on one hub: own products pay affiliates by direct
transfer (our own money on both sides), customer brands go through the funded
rail (fronting a third party's principal is unacceptable credit exposure).

  - BillingPlan gains 'selfhost'; migration widens the CHECK constraint.
  - planToMode() returns 'selfhost' for it, so the rail is decided by the
    tenant's own row.
  - The four global getMode()==='selfhost' scheduler gates are removed.
    Verified safe: every function they guarded already resolves billing state
    per tenant and no-ops for selfhost — reportUsageToStripe() returns
    "not configured for mode=selfhost", subscription reconcile only touches
    tenants holding a Stripe subscription id, and hasActivePlan() reports
    selfhost as entitled so the white-label sweep never revokes it.
  - POST /import moves from the global gate to a per-tenant one; previously,
    running the install in selfhost mode opened partner import for EVERY
    tenant, customers included.

'selfhost' is not accepted by POST /signup or the billing route — both
hardcode z.enum(['flex','revshare']) — so a brand cannot self-declare onto
the unfunded rail. Operator assignment only.

Patch getcoherence#3 — gate Network surfaces on NETWORK_URL.

The Network is OpenPartner's own federated creator-discovery service. We do
not run one, so its UI rendered a 503 (network_not_configured) on the ops
console's Creators tab and shipped dead nav to brands and partners. The API
now reports networkEnabled on /config/program and /platform-admin/me, and the
portal hides every Network route and nav entry when it is false. Routes are
gated too, not just links, so direct navigation cannot reach a page that can
only error.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
phoenixtekk added a commit to phoenixtekk/openpartner that referenced this pull request Aug 31, 2026
Upstream hardcodes 'OpenPartner' across the portal — brand fallback, logo alt
text, the review banner, settings hints, and the bank-debit authorisation.
A self-hosted operator selling this as their own product needs all of it to
carry their name, as one edit rather than twenty. New lib/platform.ts holds
PLATFORM_NAME; DEFAULT_BRAND now derives from it, so every unbranded surface
follows automatically.

The consequential one is admin/Billing.tsx. Its checkbox read 'I authorize
OpenPartner to debit our bank account', linking to openpartner.dev/terms.
Both are wrong for this deployment and would have been wrong in a way that
matters: it names the incorrect legal entity as the party taking money out of
a customer's bank account, under a third party's terms document that does not
govern the relationship. Now PLATFORM_LEGAL_ENTITY and a Phoenixtekk terms URL,
with the constant carrying a warning that the document must exist and be
reviewed by counsel before HOSTED_FUNDING_ENABLED is ever set.

Network- and creator-scoped copy still says OpenPartner; those surfaces are
hidden by patch getcoherence#3, so they are cosmetic and deliberately left for a merge
with upstream rather than churned now.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
phoenixtekk added a commit to phoenixtekk/openpartner that referenced this pull request Aug 31, 2026
Another Network surface that escaped patch getcoherence#3. 'Sign up as a creator' points at
/creator/signup, which is only meaningful with a Network coordinator — we run
none, so it led nowhere. Spotted on the live sign-in page.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants