[renovate]

This PR contains the following updates:

Package	Type	Update	Change
leafo/gh-actions-lua	action	major	v11 → v13

---

Release Notes

leafo/gh-actions-lua

v13.1.0

Compare Source

Fixes

• Tagged LuaJIT versions build again. Upstream LuaJIT deleted all of its git release tags, so versions like luajit-2.0.5 and luajit-2.1.0-beta3 failed with "Remote branch not found". Tagged versions are now cloned from the openresty/luajit2 fork, which still has the original tags. Branch versions (luajit-2.0, luajit-2.1, luajit-master) still clone from upstream.
• Self-hosted runners: a LuaJIT clone left in RUNNER_TEMP by a previous run no longer breaks the build (#​59)
• Running as root: sudo is no longer used for apt-get when the runner is already root (#​61)
• No apt-get: on Linux runners without apt-get, the readline/ncurses install is skipped with a warning instead of failing. You'll need to provide those libraries yourself for Lua 5.1–5.3 (#​33)

Updates

• 5.4 alias now points to Lua 5.4.9 and 5.5 (the default) to Lua 5.5.1
• Updated @actions/cache to 6.3.0 and undici to 6.29.1 (fixes security advisories)

The v13 tag has been moved to this release, so leafo/gh-actions-lua@v13 picks up these changes automatically.

v13.0.0

Compare Source

What's new in v13

Lua 5.5 support

• New 5.5 version alias pointing to Lua 5.5.0 (released 2025-12-15)
• Default luaVersion is now 5.5 (previously 5.4)

ESM migration

main.js has been converted to ES modules to match the latest @actions/* toolkit packages, which went ESM-only in their most recent majors. No user-facing behavior change — same action API, same inputs.

Dependency upgrades

Package	Before	After
@actions/core	1.11.1	3.0.1
@actions/cache	4.1.0	6.0.0
@actions/exec	1.1.1	3.0.0
@actions/io	1.1.3	3.0.2
@actions/tool-cache	2.0.2	4.0.0

Release tarballs refreshed

• New: 5.5.0.tar.gz
• 5.3.6.tar.gz replaces 5.3.5.tar.gz
• 5.4.8.tar.gz replaces 5.4.1.tar.gz

README / example updates

The example snippets now use:

• actions/checkout@v6 (was @master / @v4) — silences the Node.js 20 deprecation warning
• step-security/msvc-dev-cmd@v1 in place of ilammy/msvc-dev-cmd@v1 — same input surface, runs on Node.js 24, actively maintained

Full changelog: leafo/gh-actions-lua@v12...v13

v12.0.0

Compare Source

• Update to node 24 and update all GitHub actions dependencies
• Update the default Lua 5.4 version to 5.4.8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[changeset-bot]

⚠️ No Changeset found

Latest commit: a8f243f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: fe3115c7-270d-4c71-9221-227425658c00

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request