chore(deps): bump actions/checkout from 5 to 6

.github/workflows/actionlint.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/backport.yaml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/e2e.yaml

@@ -41,7 +41,7 @@ jobs:
     needs: detect_changes
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -90,7 +90,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - id: set-paths-matrix
         run: |
           set -x
@@ -109,7 +109,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - uses: azure/setup-helm@v4
         name: Setup Helm
@@ -186,7 +186,7 @@ jobs:
         distribution: ["k3s", "k8s"]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - uses: azure/setup-helm@v4
         name: Setup Helm
@@ -291,7 +291,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Go
         uses: actions/setup-go@v6

.github/workflows/go-licenses-check.yaml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Go
         uses: actions/setup-go@v6

.github/workflows/go-licenses.yaml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Go
         uses: actions/setup-go@v6

.github/workflows/lint.yaml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Check for prohibited vcluster import in config dir
         run: |
@@ -31,7 +31,7 @@ jobs:
 
           IMPORT="github.com/loft-sh/vcluster"
           PATTERN="\"$IMPORT(\"|/)"
-          FOUND_FILES=$(find ./config -name "*.go" -not -path "./config/legacyconfig/*" | xargs grep -l -E "$PATTERN" 2>/dev/null || true)
+          FOUND_FILES=$(find ./config -name "*.go" -not -path "./config/legacyconfig/*" -print0 | xargs -0 grep -l -E "$PATTERN" 2>/dev/null || true)
 
           if [ -n "$FOUND_FILES" ]; then
             echo "❌ ERROR: Prohibited import prefix '$IMPORT' found in:"

.github/workflows/notify-release.yaml

@@ -20,7 +20,7 @@ jobs:
   notify_release:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ inputs.ref }}
@@ -40,12 +40,12 @@ jobs:
             BEST_DISTANCE=99999
             for REMOTE_BRANCH in $REMOTE_BRANCHES; do
               [ -z "$REMOTE_BRANCH" ] && continue
-              BRANCH_BASE=$(git merge-base origin/main origin/$REMOTE_BRANCH 2>/dev/null || echo "")
+              BRANCH_BASE=$(git merge-base origin/main "origin/$REMOTE_BRANCH" 2>/dev/null || echo "")
               if [ ! -z "$BRANCH_BASE" ]; then
                 if git merge-base --is-ancestor "$BRANCH_BASE" "$TAG_COMMIT" 2>/dev/null; then
                   DISTANCE=$(git rev-list --count "$TAG_COMMIT..origin/$REMOTE_BRANCH")
                   if [ "$DISTANCE" -lt "$BEST_DISTANCE" ]; then
-                    BEST_BRANCH=$REMOTE_BRANCH
+                    BEST_BRANCH="$REMOTE_BRANCH"
                     BEST_DISTANCE=$DISTANCE
                   fi
                 fi
@@ -54,7 +54,7 @@ jobs:
             if [ "$BEST_DISTANCE" -eq 99999 ]; then
               BEST_BRANCH=$(echo "$REMOTE_BRANCHES" | head -n 1 || echo "main")
             fi
-            BASE_BRANCH=$BEST_BRANCH
+            BASE_BRANCH="$BEST_BRANCH"
           fi
           echo "base_branch=$BASE_BRANCH" >> "$GITHUB_OUTPUT"
           echo "Base branch for $RELEASE_VERSION: $BASE_BRANCH (distance: $BEST_DISTANCE)"

.github/workflows/publish-chart.yaml

@@ -26,7 +26,7 @@ jobs:
       - name: Check validation result
         run: '[[ "${{ steps.semver.outputs.is_valid }}" == "true" ]] || (echo "Invalid version: ${{ inputs.release_version }}" && exit 1)'
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.ref }}
       - uses: azure/setup-helm@v4

.github/workflows/push-head-images.yaml

@@ -14,7 +14,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install Helm Unit Test Plugin
         run: |
           helm plugin install https://github.com/helm-unittest/helm-unittest --version v0.4.4
@@ -30,7 +30,7 @@ jobs:
       contents: read
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
@@ -52,7 +52,7 @@ jobs:
       packages: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/release.yaml

@@ -29,7 +29,7 @@ jobs:
           sudo rm -rf /usr/local/lib/android || true
           sudo rm -rf /opt/hostedtoolcache/CodeQL || true
           sudo docker image prune --all --force || true
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - run: git fetch --force --tags
@@ -132,7 +132,7 @@ jobs:
       - publish-chart
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod

.github/workflows/sync-config-schema.yaml

@@ -63,7 +63,7 @@ jobs:
 
       - name: Checkout repo
         if: ${{ steps.release.outputs.is_alpha_version == 'false' }}
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-tags: 'true'
           ref: 'refs/tags/${{ steps.release.outputs.release_tag }}'
@@ -116,7 +116,7 @@ jobs:
           git clone --single-branch https://github.com/loft-sh/vcluster-docs.git
 
           # try to clone the tagged version, if it does not exist, fallback to main
-          git clone --branch ${VCLUSTER_CONFIG_BRANCH} --depth 1 https://github.com/loft-sh/vcluster-config.git || git clone --single-branch https://github.com/loft-sh/vcluster-config.git
+          git clone --branch "${VCLUSTER_CONFIG_BRANCH}" --depth 1 https://github.com/loft-sh/vcluster-config.git || git clone --single-branch https://github.com/loft-sh/vcluster-config.git
 
           # generate vcluster.schema.json based on the current platform.schema.json in vcluster-config
           # and values.schema.json from alpha / beta release

.github/workflows/unit-tests.yaml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Install Helm Unit Test Plugin
         run: |
           helm plugin install https://github.com/helm-unittest/helm-unittest --version v0.4.4
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Set up Go
         uses: actions/setup-go@v6
         with:

.github/workflows/update-cache.yaml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/update-platform-minimum-version.yaml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Update MinimumVersionTag in main.go
         run: |