🚨 Update github actions (main) (major) - #18
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
October 30, 2025 15:41
d07c3bc to
e16c91f
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
2 times, most recently
from
November 14, 2025 04:44
6c35ccf to
5cedaee
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
5 times, most recently
from
November 24, 2025 13:51
4a22e4c to
729baed
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
December 5, 2025 20:56
8037de9 to
05b9aae
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
December 16, 2025 19:05
2577e92 to
c814b83
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
2 times, most recently
from
January 13, 2026 05:52
50df36e to
9097168
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
2 times, most recently
from
January 26, 2026 22:27
76d963f to
522b591
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
2 times, most recently
from
February 5, 2026 20:30
13962fe to
2fa279c
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
from
February 13, 2026 12:32
2fa279c to
2ffa4c2
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
from
February 20, 2026 14:44
2ffa4c2 to
d1569c0
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
April 12, 2026 05:08
15f27eb to
9281f2d
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
from
April 16, 2026 08:43
9281f2d to
9e957fe
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
from
April 23, 2026 11:52
9e957fe to
9d77189
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
2 times, most recently
from
May 7, 2026 21:56
22bccdc to
2aafb31
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
2 times, most recently
from
May 15, 2026 13:31
7b19323 to
f6c13df
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
from
May 20, 2026 12:58
f6c13df to
8898a3e
Compare
Codecov Report✅ All modified and coverable lines are covered by tests.
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
from
May 22, 2026 15:53
8898a3e to
a50b1b6
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
June 7, 2026 05:53
10ab992 to
134eca9
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
June 24, 2026 06:03
2b009d6 to
2db4b7d
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
2 times, most recently
from
July 8, 2026 13:37
fbbb0e3 to
66b4734
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
July 17, 2026 09:00
e8b84b8 to
7358cb8
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
July 22, 2026 06:05
2353567 to
60601c7
Compare
renovate
Bot
force-pushed
the
renovate/main-major-github-actions
branch
3 times, most recently
from
August 4, 2026 20:54
677a19b to
88f90cf
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.2.2→v7.0.1v4.0.5→v5.0.0v4.3.0→v8.0.1v5.5.0→v7.0.0v4.6.2→v7.0.1v5.5.4→v7.0.0v3.29.11→v4.37.7v2.3.4→v3.0.2Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
actions/checkout (actions/checkout)
v7.0.1Compare Source
v7.0.0Compare Source
v7Compare Source
v6.1.0Compare Source
v6.0.3Compare Source
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.1.0Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
v5Compare Source
v4.4.0Compare Source
v4.3.1Compare Source
v4.3.0Compare Source
actions/deploy-pages (actions/deploy-pages)
v5.0.0Compare Source
Changelog
See details of all code changes since previous release.
v5Compare Source
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter totrue.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v8Compare Source
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v7Compare Source
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaroundYou download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: actions/download-artifact@v4...v5.0.0
v5Compare Source
actions/setup-go (actions/setup-go)
v7.0.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-go@v6...v7.0.0
v7Compare Source
v6.5.0Compare Source
v6.4.0Compare Source
What's Changed
Enhancement
Dependency update
Documentation update
New Contributors
Full Changelog: actions/setup-go@v6...v6.4.0
v6.3.0Compare Source
What's Changed
Full Changelog: actions/setup-go@v6...v6.3.0
v6.2.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.2.0
v6.1.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Breaking Changes
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
form-datato bring in fix for critical vulnerability by @matthewhughes934 in #618New Contributors
Full Changelog: actions/setup-go@v5...v6.0.0
v6Compare Source
v5.6.0Compare Source
What's Changed
Full Changelog: actions/setup-go@v5...v5.6.0
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v7Compare Source
v6.0.0Compare Source
v6 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v5.0.0by @danwkennedy in #734New Contributors
Full Changelog: actions/upload-artifact@v4...v5.0.0
v5Compare Source
codecov/codecov-action (codecov/codecov-action)
v7.0.0Compare Source
codecovsecurityaccount. We have deleted the account and are usingcodecovsecopswith the original gpg keyWhat's Changed
Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0
v7Compare Source
v6.0.2Compare Source
This is a copy of the
v7.0.0release to make updates easierWhat's Changed
Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2
v6.0.1Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1
v6.0.0Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0
v6Compare Source
v5.5.5Compare Source
This release only contains the keybase.io change as described here.
Full Changelog: codecov/codecov-action@v5.5.4...v5.5.5
github/codeql-action (github/codeql-action)
v4.37.7Compare Source
v4.37.6Compare Source
.github/codeql-config.ymlto align it with the suggested path that is used elsewhere. #4070v4.37.5Compare Source
initAction instead of falling back to downloading the bundle before extracting it. #4061v4.37.4Compare Source
v4.37.3Compare Source
No user facing changes.
v4.37.2Compare Source
config-fileinput that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, theremote=prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023v4.37.1Compare Source
v4.37.0Compare Source
config-fileinput for thecodeql-action/initstep will soon support a new[owner/]repo[@ref][:path]format. All components except the repository name are optional. If omitted,ownerdefaults to the same owner as the repository the analysis is running for,reftomain, andpathto.github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973v4.36.3Compare Source
No user facing changes.
v4.36.2Compare Source
v4.36.1Compare Source
No user facing changes.
v4.36.0Compare Source
v4.35.5Compare Source
analysis-kindsinput, onlycode-scanningwill be enabled. Theanalysis-kindsinput is experimental, for GitHub-internal use only, and may change without notice at any time. #3892v4.35.4Compare Source
v4.35.3Compare Source
GETrequests instead ofHEADfor better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853v4.35.2Compare Source
CODEQL_ACTION_CLEANUP_TRAP_CACHESenvironment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing thetrap-caching: falseinput to theinitAction. #3795Configuration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.