Skip to content

build: update all github actions (main)#32722

Merged
crisbeto merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/main-all-github-actions
Feb 18, 2026
Merged

build: update all github actions (main)#32722
crisbeto merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/main-all-github-actions

Conversation

@angular-robot
Copy link
Contributor

@angular-robot angular-robot commented Jan 29, 2026

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v6.0.1v6.0.2
actions/checkout action digest 8e8c483de0fac2
github/codeql-action action minor v4.31.10v4.32.3

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

github/codeql-action (github/codeql-action)

v4.32.3

Compare Source

  • Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #​3466

v4.32.2

Compare Source

v4.32.1

Compare Source

  • A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #​3422
  • Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #​3421

v4.32.0

Compare Source

v4.31.11

Compare Source

  • When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #​3409
  • Improved error handling throughout the CodeQL Action. #​3415
  • Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #​3318
  • The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #​3403

  • If you want to rebase/retry this PR, check this box

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Jan 29, 2026
@angular-robot angular-robot force-pushed the ng-renovate/main-all-github-actions branch 3 times, most recently from 1ca6d57 to 6efe9fd Compare February 5, 2026 17:19
@angular-robot angular-robot force-pushed the ng-renovate/main-all-github-actions branch from 6efe9fd to 15d3302 Compare February 13, 2026 12:11
See associated pull request for more information.
@angular-robot angular-robot force-pushed the ng-renovate/main-all-github-actions branch from 15d3302 to 199d6b4 Compare February 17, 2026 10:18
@angular-robot
Copy link
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: .github/workflows/scorecard.yml
Command failed: bazel mod deps --lockfile_mode=update
2026/02/17 10:18:12 Downloading https://releases.bazel.build/8.5.1/release/bazel-8.5.1-linux-x86_64...
Extracting Bazel installation...
Starting local Bazel server (8.5.1) and connecting to it...
 no actions running
 no actions running
 no actions running
 no actions running
WARNING: For repository 'aspect_rules_js', the root module requires module version aspect_rules_js@2.9.1, but got aspect_rules_js@2.9.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'tar.bzl', the root module requires module version tar.bzl@0.7.0, but got tar.bzl@0.8.1 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'aspect_rules_ts', the root module requires module version aspect_rules_ts@3.8.3, but got aspect_rules_ts@3.8.4 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
 no actions running
 no actions running
 no actions running
 no actions running
 no actions running
 no actions running
 no actions running
WARNING: Download from https://github.com/bazel-contrib/bazel-lib/releases/download/v3.0.0/bazel-lib-v3.0.0.tar.gz failed: class java.io.IOException GET returned 502 Bad Gateway or Proxy Error
INFO: Repository bazel_lib+ instantiated at:
  <builtin>: in <toplevel>
Repository rule http_archive defined at:
  /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_tools/tools/build_defs/repo/http.bzl:431:31: in <toplevel>
ERROR: /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_tools/tools/build_defs/repo/http.bzl:156:45: An error occurred during the fetch of repository 'bazel_lib+':
   Traceback (most recent call last):
	File "/home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_tools/tools/build_defs/repo/http.bzl", line 156, column 45, in _http_archive_impl
		download_info = ctx.download_and_extract(
Error in download_and_extract: java.io.IOException: Error downloading [https://github.com/bazel-contrib/bazel-lib/releases/download/v3.0.0/bazel-lib-v3.0.0.tar.gz] to /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_lib+/temp11597935007009470498/bazel-lib-v3.0.0.tar.gz: GET returned 502 Bad Gateway or Proxy Error
ERROR: no such package '@@bazel_lib+//lib': java.io.IOException: Error downloading [https://github.com/bazel-contrib/bazel-lib/releases/download/v3.0.0/bazel-lib-v3.0.0.tar.gz] to /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_lib+/temp11597935007009470498/bazel-lib-v3.0.0.tar.gz: GET returned 502 Bad Gateway or Proxy Error

@crisbeto crisbeto merged commit 6ec7723 into angular:main Feb 18, 2026
24 checks passed
@crisbeto
Copy link
Member

This PR was merged into the repository. The changes were merged into the following branches:

@angular-robot angular-robot deleted the ng-renovate/main-all-github-actions branch February 18, 2026 11:19
jermowery added a commit to jermowery/components that referenced this pull request Feb 23, 2026
…nside the button

Add a new API, testing API, and docs for allowing progress indicators to be projected into a button and have them shown in an accessible manner

Fixes angular#13667

undo

Use more specific selector

refactor(cdk/overlay): add way to only handle specific events in overlay

We dispatch keyboard events to the different overlays depending on their attachment order and if they're listening for keyboard events. This works fine for the most part, but can lead to unexpected behavior where an overlay only cares about one type of event which ends up blocking the event from reaching other overlays.

These changes add an `eventPredicate` option that overlay can use to allow some events to pass through.

fix(material/tooltip): do not block events to other overlays

Fixes that the tooltip was blocking keyboard events to other overlays, even if it doesn't care about them.

Fixes angular#32760.

fix(multiple): change aria keyboard manager to only handle repeated events in correct places (angular#32728)

perf(aria/grid): performance when selecting in a large grid (angular#32766)

Fixes that the grid cell's host bindings were slowing down the page significantly during selection when placed in a large grid. The issue seems to come from the fact that there's a non-zero cost to the signal reads in the directive's host bindings which can add up.

These changes address the issue by batching the reads together in an effect.

Fixes angular#32759.

fix(material/radio): hide empty labels (angular#32754)

We have similar logic in the checkbox and slide toggle so these changes apply it to the radio button: hiding the label when it's empty so it doesn't affect the layout.

build: bump stackblitz template to 21.1 (angular#32752)

Updates the template for Stackblitz examples to the latest version of Angular.

docs: release notes for the v21.1.4 release

release: cut the v21.2.0-next.4 release

fix(aria/combobox): fix autocomplete examples and add comments explaining combobox selection behavior (angular#32714)

fix(material/select): disable position locking (angular#32772)

In angular#9789 we enabled locked positioning for `mat-select` due to the previous of laying out the panel. Then in angular#30628 we enabled flexible dimensions so it's able to shrink. This combination can cause the panel to shrink when the user scrolls it out of view.

These changes remove the locked positioning since it's not necessary anymore.

Fixes angular#32771.

build: update cross-repo angular dependencies (angular#32684)

See associated pull request for more information.

fix(google-maps): fix mismatch in clusterer types (angular#32778)

Fixes that the clusterer types seem to no longer match with the ones on npm, causing a type error.

Fixes angular#32696.

refactor(material/select): remove dependency on NgClass (angular#32776)

Drops the dependency on `NgClass` from the select component since we can achieve the same with class bindings.

fix(cdk/tree): no nodes focusable if data is replaced (angular#32781)

Fixes that none of the tree nodes were focusable if the data is swapped out after initialization.

Fixes angular#32779.

build: update bazel dependencies (angular#32689)

See associated pull request for more information.

build: update all github actions (angular#32722)

See associated pull request for more information.

build: lock file maintenance (angular#32737)

See associated pull request for more information.

build: update pnpm to v10.29.3 (angular#32755)

See associated pull request for more information.

build: update cross-repo angular dependencies (angular#32784)

See associated pull request for more information.

docs: release notes for the v21.1.5 release

release: cut the v21.2.0-next.5 release

release: bump the next branch to v21.3.0-next.0

docs: release notes for the v21.2.0-rc.0 release

build: update cross-repo angular dependencies (angular#32794)

See associated pull request for more information.

fix(aria/combobox): Adjust AutoComplete examples to properly announce no results text (angular#32786)

build: update pnpm to v10.30.0 (angular#32803)

See associated pull request for more information.

build: update cross-repo angular dependencies (angular#32801)

See associated pull request for more information.

build: update dependencies and resolve breaking change (angular#32799)

Takes over the dependency bump from angular#32690 and resolves a breaking change.

fix(material/core): expose strong focus indicator structural styles (angular#32808)

Exposes the structural styles for strong focus indicators so users can use them in their own components.

Fixes angular#32773.

build: set up schematics for v22 (angular#32806)

One of the pre-requisites to release the next version of v22 is to have schematics set up. These changes add them ahead of time so we don't run into any issues when we go to release.

fix(material/datepicker): drop dependency on NgClass (angular#32810)

Drops the dependency on `NgClass` from the datepicker in favor of a direct `class` binding.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants