Bump @actions/cache to 5.1.0, log cache write denied - #1324
Merged
Merged
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
This pull request updates the actionβs caching dependency (@actions/cache) to pick up improved handling/logging for cache write denials (e.g., read-only tokens), and aligns the actionβs own cache-save logging and published artifacts with that behavior.
Changes:
- Bump
@actions/cacheto^5.1.0and bump action version to6.3.0. - Add a debug log when
saveCachereturns-1(cache not saved) to avoid redundant warnings while still providing traceability. - Update generated
dist/**bundles and dependency license metadata to reflect the dependency update.
Show a summary per file
| File | Description |
|---|---|
| src/cache-save.ts | Adds debug logging when cache save returns -1 (not saved). |
| package.json | Bumps action version to 6.3.0 and @actions/cache to ^5.1.0. |
| package-lock.json | Updates lockfile entries for the version bump and cache dependency. |
| dist/setup/index.js | Updates bundled @actions/cache code to include cache write denied handling. |
| dist/cache-save/index.js | Updates bundled output, including the new -1 debug log and cache write denied handling. |
| .licenses/npm/@actions/cache.dep.yml | Updates dependency license metadata for @actions/cache 5.1.0. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 3/6 changed files
- Comments generated: 2
Contributor
Author
|
The e2e-cache and Validate PyPy e2e workflows are unrelated to this PR; they are failing on |
Link-
approved these changes
Jun 19, 2026
Link-
approved these changes
Jun 19, 2026
v-priya-kinthali
approved these changes
Jun 22, 2026
v-priyagupta108
approved these changes
Jun 22, 2026
ajgon
pushed a commit
to deedee-ops/schemas
that referenced
this pull request
Jun 24, 2026
β¦0) (#5) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | minor | `v6.2.0` β `v6.3.0` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.3.0`](https://github.com/actions/setup-python/releases/tag/v6.3.0) [Compare Source](actions/setup-python@v6.2.0...v6.3.0) #### What's Changed ##### Enhancement - Add RHEL support and include Linux distro in cache keys by [@​priyagupta108](https://github.com/priyagupta108) in [#​1323](actions/setup-python#1323) - Fix pip cache error handling on Windows by [@​priyagupta108](https://github.com/priyagupta108) in [#​1040](actions/setup-python#1040) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​1281](actions/setup-python#1281) - Upgrade actions dependencies by [@​gowridurgad](https://github.com/gowridurgad) with [@​Copilot](https://github.com/Copilot) in [#​1303](actions/setup-python#1303) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​1324](actions/setup-python#1324) - Upgrade dependency versions and test workflow configuration by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1322](actions/setup-python#1322) ##### Documentation - Update advanced-usage.md by [@​Dunky-Z](https://github.com/Dunky-Z) in [#​811](actions/setup-python#811) #### New Contributors - [@​gowridurgad](https://github.com/gowridurgad) with [@​Copilot](https://github.com/Copilot) made their first contribution in [#​1303](actions/setup-python#1303) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​1324](actions/setup-python#1324) - [@​Dunky-Z](https://github.com/Dunky-Z) made their first contribution in [#​811](actions/setup-python#811) **Full Changelog**: <actions/setup-python@v6...v6.3.0> </details> --- ### Configuration π **Schedule**: (in timezone Europe/Warsaw) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) π¦ **Automerge**: Disabled by config. Please merge this manually once you are satisfied. β» **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. π **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI0MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=--> Reviewed-on: https://git.ajgon.casa/deedee/schemas/pulls/5
mergify Bot
added a commit
to ArcadeData/arcadedb
that referenced
this pull request
Jun 29, 2026
Bumps the github-actions group with 4 updates: [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-java](https://github.com/actions/setup-java), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [actions/setup-dotnet](https://github.com/actions/setup-dotnet). Updates `actions/setup-python` from 6.2.0 to 6.3.0 Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.3.0 > ------ > > What's Changed > -------------- > > ### Enhancement > > * Add RHEL support and include Linux distro in cache keys by [`@βpriyagupta108`](https://github.com/priyagupta108) in [actions/setup-python#1323](https://redirect.github.com/actions/setup-python/pull/1323) > * Fix pip cache error handling on Windows by [`@βpriyagupta108`](https://github.com/priyagupta108) in [actions/setup-python#1040](https://redirect.github.com/actions/setup-python/pull/1040) > > ### Dependency update > > * Upgrade minimatch from 3.1.2 to 3.1.5 by [`@βdependabot`](https://github.com/dependabot) in [actions/setup-python#1281](https://redirect.github.com/actions/setup-python/pull/1281) > * Upgrade actions dependencies by [`@βgowridurgad`](https://github.com/gowridurgad) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-python#1303](https://redirect.github.com/actions/setup-python/pull/1303) > * Upgrade `@βactions/cache` to 5.1.0, log cache write denied by [`@βjasongin`](https://github.com/jasongin) in [actions/setup-python#1324](https://redirect.github.com/actions/setup-python/pull/1324) > * Upgrade dependency versions and test workflow configuration by [`@βHarithaVattikuti`](https://github.com/HarithaVattikuti) in [actions/setup-python#1322](https://redirect.github.com/actions/setup-python/pull/1322) > > ### Documentation > > * Update advanced-usage.md by [`@βDunky-Z`](https://github.com/Dunky-Z) in [actions/setup-python#811](https://redirect.github.com/actions/setup-python/pull/811) > > New Contributors > ---------------- > > * [`@βgowridurgad`](https://github.com/gowridurgad) with [`@βCopilot`](https://github.com/Copilot) made their first contribution in [actions/setup-python#1303](https://redirect.github.com/actions/setup-python/pull/1303) > * [`@βjasongin`](https://github.com/jasongin) made their first contribution in [actions/setup-python#1324](https://redirect.github.com/actions/setup-python/pull/1324) > * [`@βDunky-Z`](https://github.com/Dunky-Z) made their first contribution in [actions/setup-python#811](https://redirect.github.com/actions/setup-python/pull/811) > > **Full Changelog**: <actions/setup-python@v6...v6.3.0> Commits * [`ece7cb0`](actions/setup-python@ece7cb0) Fix pip cache error handling on Windows. ([#1040](https://redirect.github.com/actions/setup-python/issues/1040)) * [`1d18d7a`](actions/setup-python@1d18d7a) Update advanced-usage.md ([#811](https://redirect.github.com/actions/setup-python/issues/811)) * [`d2b357a`](actions/setup-python@d2b357a) Update dependency versions and test workflow configuration ([#1322](https://redirect.github.com/actions/setup-python/issues/1322)) * [`8f639b1`](actions/setup-python@8f639b1) Merge pull request [#1324](https://redirect.github.com/actions/setup-python/issues/1324) from jasongin/update-actions-cache-5.1.0 * [`6731c2b`](actions/setup-python@6731c2b) Resolve high-severity audit issues * [`0cb1a84`](actions/setup-python@0cb1a84) Add RHEL support and include Linux distro in cache keys ([#1323](https://redirect.github.com/actions/setup-python/issues/1323)) * [`dc6eab6`](actions/setup-python@dc6eab6) Update dist * [`6f4b74b`](actions/setup-python@6f4b74b) Strict equality * [`fa8bde1`](actions/setup-python@fa8bde1) Bump `@βactions/cache` to 5.1.0, log cache write denied * [`c8813ba`](actions/setup-python@c8813ba) Upgrade [`@βactions`](https://github.com/actions) dependencies and update licenses ([#1303](https://redirect.github.com/actions/setup-python/issues/1303)) * Additional commits viewable in [compare view](actions/setup-python@a309ff8...ece7cb0) Updates `actions/setup-java` from 5.3.0 to 5.4.0 Release notes *Sourced from [actions/setup-java's releases](https://github.com/actions/setup-java/releases).* > v5.4.0 > ------ > > What's Changed > -------------- > > * Bump `@βtypescript-eslint/parser` from 8.48.0 to 8.61.1 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1021](https://redirect.github.com/actions/setup-java/pull/1021) > * Fix codeql workflow permissions by [`@βjsoref`](https://github.com/jsoref) in [actions/setup-java#993](https://redirect.github.com/actions/setup-java/pull/993) > * fix CodeQL permissions by [`@βgdams`](https://github.com/gdams) in [actions/setup-java#1025](https://redirect.github.com/actions/setup-java/pull/1025) > * fix: reject non-semver candidate versions in isVersionSatisfies by [`@βsproctor`](https://github.com/sproctor) in [actions/setup-java#1009](https://redirect.github.com/actions/setup-java/pull/1009) > * Bump `@βactions/cache` to 5.1.0, handle cache write denied by [`@βjasongin`](https://github.com/jasongin) in [actions/setup-java#1026](https://redirect.github.com/actions/setup-java/pull/1026) > * Add Maven Wrapper cache feature by [`@βmahabaleshwars`](https://github.com/mahabaleshwars) in [actions/setup-java#1027](https://redirect.github.com/actions/setup-java/pull/1027) > * Spelling by [`@βjsoref`](https://github.com/jsoref) in [actions/setup-java#713](https://redirect.github.com/actions/setup-java/pull/713) > * add link to advanced configuration for JetBrains by [`@βrobstoll`](https://github.com/robstoll) in [actions/setup-java#850](https://redirect.github.com/actions/setup-java/pull/850) > * docs(action): fix missing required or default fields by [`@βkranthipoturaju`](https://github.com/kranthipoturaju) in [actions/setup-java#1007](https://redirect.github.com/actions/setup-java/pull/1007) > * feat: add microsoft openjdk 17.0.18 by [`@βal-kau`](https://github.com/al-kau) in [actions/setup-java#1002](https://redirect.github.com/actions/setup-java/pull/1002) > * Update README.md - use "alert syntax for Markdown" for notes by [`@βmhoffrog`](https://github.com/mhoffrog) in [actions/setup-java#924](https://redirect.github.com/actions/setup-java/pull/924) > * Bump undici from 6.24.1 to 6.27.0 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1033](https://redirect.github.com/actions/setup-java/pull/1033) > * Update contributor guide with emoji for clarity by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1028](https://redirect.github.com/actions/setup-java/pull/1028) > * add javac problem matcher by [`@βTrass3r`](https://github.com/Trass3r) in [actions/setup-java#562](https://redirect.github.com/actions/setup-java/pull/562) > * Clarify README version syntax and migration guidance by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1038](https://redirect.github.com/actions/setup-java/pull/1038) > * Update undici artifacts to 6.27.0 (license cache + dist) by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1040](https://redirect.github.com/actions/setup-java/pull/1040) > * docs: enhance custom jdk file installation by [`@βstephanabel`](https://github.com/stephanabel) in [actions/setup-java#996](https://redirect.github.com/actions/setup-java/pull/996) > * Templates for new Java distributions by [`@βpanticmilos`](https://github.com/panticmilos) in [actions/setup-java#429](https://redirect.github.com/actions/setup-java/pull/429) > * Bump actions/checkout from 6 to 7 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1032](https://redirect.github.com/actions/setup-java/pull/1032) > * Bump `@βtypes/node` from 25.9.3 to 26.0.0 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1031](https://redirect.github.com/actions/setup-java/pull/1031) > * docs: replace non-existent HelloWorldApp references with java --version by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1043](https://redirect.github.com/actions/setup-java/pull/1043) > * docs: add JavaFX Maven project configuration instructions by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1044](https://redirect.github.com/actions/setup-java/pull/1044) > * docs: self-signed certificate / internal CA handling for GitHub Enterprise by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1050](https://redirect.github.com/actions/setup-java/pull/1050) > * docs: document importing an internal CA into the installed JDK (cacerts) by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1051](https://redirect.github.com/actions/setup-java/pull/1051) > * chore: Harden workflows: least-privilege permissions + zizmor integration by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1039](https://redirect.github.com/actions/setup-java/pull/1039) > * dist: Add GraalVM Community distribution support by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1042](https://redirect.github.com/actions/setup-java/pull/1042) > * docs: note jdkfile approach for Early Access / unreleased JDK builds by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1058](https://redirect.github.com/actions/setup-java/pull/1058) > * dist: Apply Copilot review suggestions from PR [#1042](https://redirect.github.com/actions/setup-java/issues/1042) (GraalVM Community) by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1059](https://redirect.github.com/actions/setup-java/pull/1059) > > New Contributors > ---------------- > > * [`@βjsoref`](https://github.com/jsoref) made their first contribution in [actions/setup-java#993](https://redirect.github.com/actions/setup-java/pull/993) > * [`@βsproctor`](https://github.com/sproctor) made their first contribution in [actions/setup-java#1009](https://redirect.github.com/actions/setup-java/pull/1009) > * [`@βjasongin`](https://github.com/jasongin) made their first contribution in [actions/setup-java#1026](https://redirect.github.com/actions/setup-java/pull/1026) > * [`@βrobstoll`](https://github.com/robstoll) made their first contribution in [actions/setup-java#850](https://redirect.github.com/actions/setup-java/pull/850) > * [`@βkranthipoturaju`](https://github.com/kranthipoturaju) made their first contribution in [actions/setup-java#1007](https://redirect.github.com/actions/setup-java/pull/1007) > * [`@βal-kau`](https://github.com/al-kau) made their first contribution in [actions/setup-java#1002](https://redirect.github.com/actions/setup-java/pull/1002) > * [`@βmhoffrog`](https://github.com/mhoffrog) made their first contribution in [actions/setup-java#924](https://redirect.github.com/actions/setup-java/pull/924) > * [`@βbrunoborges`](https://github.com/brunoborges) made their first contribution in [actions/setup-java#1028](https://redirect.github.com/actions/setup-java/pull/1028) > * [`@βTrass3r`](https://github.com/Trass3r) made their first contribution in [actions/setup-java#562](https://redirect.github.com/actions/setup-java/pull/562) > * [`@βstephanabel`](https://github.com/stephanabel) made their first contribution in [actions/setup-java#996](https://redirect.github.com/actions/setup-java/pull/996) > > **Full Changelog**: <actions/setup-java@v5...v5.4.0> Commits * [`1bcf9fb`](actions/setup-java@1bcf9fb) dist: Address Copilot review suggestions from PR [#1042](https://redirect.github.com/actions/setup-java/issues/1042) (GraalVM Community) (#... * [`fa2c650`](actions/setup-java@fa2c650) docs: note jdkfile approach for Early Access / unreleased JDK builds ([#1058](https://redirect.github.com/actions/setup-java/issues/1058)) * [`1d56e31`](actions/setup-java@1d56e31) dist: Add GraalVM Community distribution support ([#1042](https://redirect.github.com/actions/setup-java/issues/1042)) * [`1d25252`](actions/setup-java@1d25252) chore: Harden workflows: least-privilege permissions + zizmor integration ([#1](https://redirect.github.com/actions/setup-java/issues/1)... * [`668c1ea`](actions/setup-java@668c1ea) docs: add post-install keytool import for the JDK cacerts trust store ([#1051](https://redirect.github.com/actions/setup-java/issues/1051)) * [`a9a46fb`](actions/setup-java@a9a46fb) docs: document self-signed certificate / internal CA handling for GitHub Ente... * [`5431e71`](actions/setup-java@5431e71) docs: add JavaFX Maven project configuration instructions ([#1044](https://redirect.github.com/actions/setup-java/issues/1044)) * [`4baa9b4`](actions/setup-java@4baa9b4) docs: replace non-existent HelloWorldApp references with java --version ([#1043](https://redirect.github.com/actions/setup-java/issues/1043)) * [`eab4b08`](actions/setup-java@eab4b08) Bump `@βtypes/node` from 25.9.3 to 26.0.0 ([#1031](https://redirect.github.com/actions/setup-java/issues/1031)) * [`bf0c0e6`](actions/setup-java@bf0c0e6) Bump actions/checkout from 6 to 7 ([#1032](https://redirect.github.com/actions/setup-java/issues/1032)) * Additional commits viewable in [compare view](actions/setup-java@ad2b381...1bcf9fb) Updates `anthropics/claude-code-action` from 1.0.153 to 1.0.159 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.159 > -------- > > What's Changed > -------------- > > * fix: bound app token revocation cleanup by [`@βtarunag10`](https://github.com/tarunag10) in [anthropics/claude-code-action#1437](https://redirect.github.com/anthropics/claude-code-action/pull/1437) > > New Contributors > ---------------- > > * [`@βtarunag10`](https://github.com/tarunag10) made their first contribution in [anthropics/claude-code-action#1437](https://redirect.github.com/anthropics/claude-code-action/pull/1437) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.159> > > v1.0.158 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.158> > > v1.0.157 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.157> > > v1.0.156 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.156> > > v1.0.155 > -------- > > What's Changed > -------------- > > * fix: filter PR reviews and inline review comments to trigger time by [`@βEffortlessSteven`](https://github.com/EffortlessSteven) in [anthropics/claude-code-action#1385](https://redirect.github.com/anthropics/claude-code-action/pull/1385) > * test: cover format-turns content-type fallbacks and system\_other handling by [`@βfarmer-data`](https://github.com/farmer-data) in [anthropics/claude-code-action#1421](https://redirect.github.com/anthropics/claude-code-action/pull/1421) > * fix: allow @ in branch names (valid per git-check-ref-format) by [`@βbellalMohamed`](https://github.com/bellalMohamed) in [anthropics/claude-code-action#1411](https://redirect.github.com/anthropics/claude-code-action/pull/1411) > > New Contributors > ---------------- > > * [`@βEffortlessSteven`](https://github.com/EffortlessSteven) made their first contribution in [anthropics/claude-code-action#1385](https://redirect.github.com/anthropics/claude-code-action/pull/1385) > * [`@βfarmer-data`](https://github.com/farmer-data) made their first contribution in [anthropics/claude-code-action#1421](https://redirect.github.com/anthropics/claude-code-action/pull/1421) > * [`@βbellalMohamed`](https://github.com/bellalMohamed) made their first contribution in [anthropics/claude-code-action#1411](https://redirect.github.com/anthropics/claude-code-action/pull/1411) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.155> > > v1.0.154 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.154> Commits * [`a92e7c7`](anthropics/claude-code-action@a92e7c7) chore: bump Claude Code to 2.1.195 and Agent SDK to 0.3.195 * [`f8076dc`](anthropics/claude-code-action@f8076dc) fix: bound app token revocation cleanup ([#1437](https://redirect.github.com/anthropics/claude-code-action/issues/1437)) * [`5211368`](anthropics/claude-code-action@5211368) chore: bump Claude Code to 2.1.193 and Agent SDK to 0.3.193 * [`428971d`](anthropics/claude-code-action@428971d) chore: bump Claude Code to 2.1.191 and Agent SDK to 0.3.191 * [`74eedf1`](anthropics/claude-code-action@74eedf1) chore: bump Claude Code to 2.1.190 and Agent SDK to 0.3.190 * [`80b3182`](anthropics/claude-code-action@80b3182) chore: bump Claude Code to 2.1.187 and Agent SDK to 0.3.187 * [`360be9c`](anthropics/claude-code-action@360be9c) fix: allow @ in branch names (valid per git-check-ref-format) ([#1411](https://redirect.github.com/anthropics/claude-code-action/issues/1411)) * [`e452eb9`](anthropics/claude-code-action@e452eb9) test: cover format-turns content-type fallbacks and system\_other handling ([#1](https://redirect.github.com/anthropics/claude-code-action/issues/1)... * [`6b80630`](anthropics/claude-code-action@6b80630) fix: filter PR reviews and inline review comments to trigger time ([#1385](https://redirect.github.com/anthropics/claude-code-action/issues/1385)) * [`30544b6`](anthropics/claude-code-action@30544b6) chore: bump Claude Code to 2.1.186 and Agent SDK to 0.3.186 * See full diff in [compare view](anthropics/claude-code-action@2fee155...a92e7c7) Updates `actions/setup-dotnet` from 5.3.0 to 5.4.0 Release notes *Sourced from [actions/setup-dotnet's releases](https://github.com/actions/setup-dotnet/releases).* > v5.4.0 > ------ > > What's Changed > -------------- > > ### Enhancements > > * Improve global.json SDK version validation for rollForward by [`@βpriyagupta108`](https://github.com/priyagupta108) in [actions/setup-dotnet#742](https://redirect.github.com/actions/setup-dotnet/pull/742) > * Pin actions to commit SHAs in workflows by [`@βpriya-kinthali`](https://github.com/priya-kinthali) in [actions/setup-dotnet#744](https://redirect.github.com/actions/setup-dotnet/pull/744) > * Expand the CSC problem matcher to light up more errors on GitHub. by [`@βStephenCleary`](https://github.com/StephenCleary) in [actions/setup-dotnet#717](https://redirect.github.com/actions/setup-dotnet/pull/717) > > ### Documentation > > * Docs(action): Explicitly mark all optional inputs with required: false by [`@βkranthipoturaju`](https://github.com/kranthipoturaju) in [actions/setup-dotnet#737](https://redirect.github.com/actions/setup-dotnet/pull/737) > > ### Bug Fixes > > * Fix global.json creation command by [`@βmichal2612`](https://github.com/michal2612) in [actions/setup-dotnet#694](https://redirect.github.com/actions/setup-dotnet/pull/694) > > ### Dependency Updates > > * Upgrade `@βactions/cache` to 5.1.0, log cache write denied by [`@βjasongin`](https://github.com/jasongin) in [actions/setup-dotnet#746](https://redirect.github.com/actions/setup-dotnet/pull/746) > > New Contributors > ---------------- > > * [`@βjasongin`](https://github.com/jasongin) made their first contribution in [actions/setup-dotnet#746](https://redirect.github.com/actions/setup-dotnet/pull/746) > * [`@βmichal2612`](https://github.com/michal2612) made their first contribution in [actions/setup-dotnet#694](https://redirect.github.com/actions/setup-dotnet/pull/694) > * [`@βkranthipoturaju`](https://github.com/kranthipoturaju) made their first contribution in [actions/setup-dotnet#737](https://redirect.github.com/actions/setup-dotnet/pull/737) > * [`@βStephenCleary`](https://github.com/StephenCleary) made their first contribution in [actions/setup-dotnet#717](https://redirect.github.com/actions/setup-dotnet/pull/717) > > **Full Changelog**: <actions/setup-dotnet@v5...v5.4.0> Commits * [`26b0ec1`](actions/setup-dotnet@26b0ec1) Expand the CSC problem matcher to light up more errors on GitHub. ([#717](https://redirect.github.com/actions/setup-dotnet/issues/717)) * [`da5e548`](actions/setup-dotnet@da5e548) docs(action): explicitly mark all optional inputs with required: false ([#737](https://redirect.github.com/actions/setup-dotnet/issues/737)) * [`9bd3b44`](actions/setup-dotnet@9bd3b44) Improve readability of global.json creation command ([#694](https://redirect.github.com/actions/setup-dotnet/issues/694)) * [`4406a63`](actions/setup-dotnet@4406a63) Bump `@βactions/cache` to 5.1.0, log cache write denied ([#746](https://redirect.github.com/actions/setup-dotnet/issues/746)) * [`dc3262d`](actions/setup-dotnet@dc3262d) pin actions to commit SHAs in workflows ([#744](https://redirect.github.com/actions/setup-dotnet/issues/744)) * [`95a3f8b`](actions/setup-dotnet@95a3f8b) Validate global.json SDK version before rollForward optimization ([#742](https://redirect.github.com/actions/setup-dotnet/issues/742)) * See full diff in [compare view](actions/setup-dotnet@9a946fd...26b0ec1) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
rljacob
added a commit
to E3SM-Project/E3SM-Project.github.io
that referenced
this pull request
Jun 29, 2026
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.2.0 to 6.3.0. Enhancement Add RHEL support and include Linux distro in cache keys by @βpriyagupta108 in actions/setup-python#1323 Fix pip cache error handling on Windows by @βpriyagupta108 in actions/setup-python#1040 Dependency update Upgrade minimatch from 3.1.2 to 3.1.5 by @βdependabot in actions/setup-python#1281 Upgrade actions dependencies by @βgowridurgad with @βCopilot in actions/setup-python#1303 Upgrade @βactions/cache to 5.1.0, log cache write denied by @βjasongin in actions/setup-python#1324 Upgrade dependency versions and test workflow configuration by @βHarithaVattikuti in actions/setup-python#1322 Documentation Update advanced-usage.md by @βDunky-Z in actions/setup-python#811
MateoGreil
pushed a commit
to MateoGreil/python-comwatt-client
that referenced
this pull request
Jul 4, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v5` β `v6` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.3.0`](https://github.com/actions/setup-python/releases/tag/v6.3.0) [Compare Source](actions/setup-python@v6.2.0...v6.3.0) #### What's Changed ##### Enhancement - Add RHEL support and include Linux distro in cache keys by [@​priyagupta108](https://github.com/priyagupta108) in [#​1323](actions/setup-python#1323) - Fix pip cache error handling on Windows by [@​priyagupta108](https://github.com/priyagupta108) in [#​1040](actions/setup-python#1040) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​1281](actions/setup-python#1281) - Upgrade actions dependencies by [@​gowridurgad](https://github.com/gowridurgad) with [@​Copilot](https://github.com/Copilot) in [#​1303](actions/setup-python#1303) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​1324](actions/setup-python#1324) - Upgrade dependency versions and test workflow configuration by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1322](actions/setup-python#1322) ##### Documentation - Update advanced-usage.md by [@​Dunky-Z](https://github.com/Dunky-Z) in [#​811](actions/setup-python#811) #### New Contributors - [@​gowridurgad](https://github.com/gowridurgad) with [@​Copilot](https://github.com/Copilot) made their first contribution in [#​1303](actions/setup-python#1303) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​1324](actions/setup-python#1324) - [@​Dunky-Z](https://github.com/Dunky-Z) made their first contribution in [#​811](actions/setup-python#811) **Full Changelog**: <actions/setup-python@v6...v6.3.0> ### [`v6.2.0`](https://github.com/actions/setup-python/releases/tag/v6.2.0) [Compare Source](actions/setup-python@v6.1.0...v6.2.0) #### What's Changed ##### Dependency Upgrades - Upgrade dependencies to Node 24 compatible versions by [@​salmanmkc](https://github.com/salmanmkc) in [#​1259](actions/setup-python#1259) - Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [@​dependabot](https://github.com/dependabot) in [#​1253](actions/setup-python#1253) and [#​1264](actions/setup-python#1264) **Full Changelog**: <actions/setup-python@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-python/releases/tag/v6.1.0) [Compare Source](actions/setup-python@v6...v6.1.0) #### What's Changed ##### Enhancements: - Add support for `pip-install` input by [@​gowridurgad](https://github.com/gowridurgad) in [#​1201](actions/setup-python#1201) - Add graalpy early-access and windows builds by [@​timfel](https://github.com/timfel) in [#​880](actions/setup-python#880) ##### Dependency and Documentation updates: - Enhanced wording and updated example usage for `allow-prereleases` by [@​yarikoptic](https://github.com/yarikoptic) in [#​979](actions/setup-python#979) - Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot) in [#​1139](actions/setup-python#1139) - Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by [@​dependabot](https://github.com/dependabot) in [#​1094](actions/setup-python#1094) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by [@​dependabot](https://github.com/dependabot) in [#​1199](actions/setup-python#1199) - Upgrade requests from 2.32.2 to 2.32.4 by [@​dependabot](https://github.com/dependabot) in [#​1130](actions/setup-python#1130) - Upgrade prettier from 3.5.3 to 3.6.2 by [@​dependabot](https://github.com/dependabot) in [#​1234](actions/setup-python#1234) - Upgrade [@​types/node](https://github.com/types/node) from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by [@​dependabot](https://github.com/dependabot) in [#​1235](actions/setup-python#1235) #### New Contributors - [@​yarikoptic](https://github.com/yarikoptic) made their first contribution in [#​979](actions/setup-python#979) **Full Changelog**: <actions/setup-python@v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/setup-python/releases/tag/v6.0.0) [Compare Source](actions/setup-python@v6...v6) #### What's Changed ##### Breaking Changes - Upgrade to node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​1164](actions/setup-python#1164) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) ##### Enhancements: - Add support for `pip-version` by [@​priyagupta108](https://github.com/priyagupta108) in [#​1129](actions/setup-python#1129) - Enhance reading from .python-version by [@​krystof-k](https://github.com/krystof-k) in [#​787](actions/setup-python#787) - Add version parsing from Pipfile by [@​aradkdj](https://github.com/aradkdj) in [#​1067](actions/setup-python#1067) ##### Bug fixes: - Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​1183](actions/setup-python#1183) - Change missing cache directory error to warning by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​1182](actions/setup-python#1182) - Add Architecture-Specific PATH Management for Python with --user Flag on Windows by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​1122](actions/setup-python#1122) - Include python version in PyPy python-version output by [@​cdce8p](https://github.com/cdce8p) in [#​1110](actions/setup-python#1110) - Update docs: clarification on pip authentication with setup-python by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​1156](actions/setup-python#1156) ##### Dependency updates: - Upgrade idna from 2.9 to 3.7 in /**tests**/data by [@​dependabot](https://github.com/dependabot)\[bot] in [#​843](actions/setup-python#843) - Upgrade form-data to fix critical vulnerabilities [#​182](actions/setup-python#182) & [#​183](actions/setup-python#183) by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​1163](actions/setup-python#1163) - Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​1165](actions/setup-python#1165) - Upgrade actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1181](actions/setup-python#1181) - Upgrade [@​actions/tool-cache](https://github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1095](actions/setup-python#1095) #### New Contributors - [@​krystof-k](https://github.com/krystof-k) made their first contribution in [#​787](actions/setup-python#787) - [@​cdce8p](https://github.com/cdce8p) made their first contribution in [#​1110](actions/setup-python#1110) - [@​aradkdj](https://github.com/aradkdj) made their first contribution in [#​1067](actions/setup-python#1067) **Full Changelog**: <actions/setup-python@v5...v6.0.0> ### [`v6`](actions/setup-python@v5.6.0...v6) [Compare Source](actions/setup-python@v5.6.0...v6) </details> --- ### Configuration π **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) π¦ **Automerge**: Disabled by config. Please merge this manually once you are satisfied. β» **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. π **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjI1MS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: Renovate Bot <renovate-bot@git.greil.fr> Reviewed-on: https://git.greil.fr/mat/python-comwatt-client/pulls/21
mergify Bot
added a commit
to robfrank/linklift
that referenced
this pull request
Jul 17, 2026
β¦ updates [skip ci] Bumps the github-actions group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `6.3.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.1.0` | `4.2.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.3.0` | `5.5.0` | | [graalvm/setup-graalvm](https://github.com/graalvm/setup-graalvm) | `1.5.6` | `1.6.3` | | [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) | `6.2.2` | `6.2.3` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.0` | `3.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.151` | `1.0.175` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.313.0` | `1.319.0` | | [updatecli/updatecli-action](https://github.com/updatecli/updatecli-action) | `3.3.0` | `3.4.0` | | [robfrank/kamal-accessories-updater](https://github.com/robfrank/kamal-accessories-updater) | `26.4.0` | `26.7.0` | Updates `actions/setup-python` from 6.2.0 to 6.3.0 Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.3.0 > ------ > > What's Changed > -------------- > > ### Enhancement > > * Add RHEL support and include Linux distro in cache keys by [`@βpriyagupta108`](https://github.com/priyagupta108) in [actions/setup-python#1323](https://redirect.github.com/actions/setup-python/pull/1323) > * Fix pip cache error handling on Windows by [`@βpriyagupta108`](https://github.com/priyagupta108) in [actions/setup-python#1040](https://redirect.github.com/actions/setup-python/pull/1040) > > ### Dependency update > > * Upgrade minimatch from 3.1.2 to 3.1.5 by [`@βdependabot`](https://github.com/dependabot) in [actions/setup-python#1281](https://redirect.github.com/actions/setup-python/pull/1281) > * Upgrade actions dependencies by [`@βgowridurgad`](https://github.com/gowridurgad) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-python#1303](https://redirect.github.com/actions/setup-python/pull/1303) > * Upgrade `@βactions/cache` to 5.1.0, log cache write denied by [`@βjasongin`](https://github.com/jasongin) in [actions/setup-python#1324](https://redirect.github.com/actions/setup-python/pull/1324) > * Upgrade dependency versions and test workflow configuration by [`@βHarithaVattikuti`](https://github.com/HarithaVattikuti) in [actions/setup-python#1322](https://redirect.github.com/actions/setup-python/pull/1322) > > ### Documentation > > * Update advanced-usage.md by [`@βDunky-Z`](https://github.com/Dunky-Z) in [actions/setup-python#811](https://redirect.github.com/actions/setup-python/pull/811) > > New Contributors > ---------------- > > * [`@βgowridurgad`](https://github.com/gowridurgad) with [`@βCopilot`](https://github.com/Copilot) made their first contribution in [actions/setup-python#1303](https://redirect.github.com/actions/setup-python/pull/1303) > * [`@βjasongin`](https://github.com/jasongin) made their first contribution in [actions/setup-python#1324](https://redirect.github.com/actions/setup-python/pull/1324) > * [`@βDunky-Z`](https://github.com/Dunky-Z) made their first contribution in [actions/setup-python#811](https://redirect.github.com/actions/setup-python/pull/811) > > **Full Changelog**: <https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0> Commits * [`ece7cb0`](https://github.com/actions/setup-python/commit/ece7cb06caefa5fff74198d8649806c4678c61a1) Fix pip cache error handling on Windows. ([#1040](https://redirect.github.com/actions/setup-python/issues/1040)) * [`1d18d7a`](https://github.com/actions/setup-python/commit/1d18d7af5f767c1259ede05a0a5bcc30f3dcf1cf) Update advanced-usage.md ([#811](https://redirect.github.com/actions/setup-python/issues/811)) * [`d2b357a`](https://github.com/actions/setup-python/commit/d2b357a6a3a3687dd6781a416c0d24fcfd68660e) Update dependency versions and test workflow configuration ([#1322](https://redirect.github.com/actions/setup-python/issues/1322)) * [`8f639b1`](https://github.com/actions/setup-python/commit/8f639b1e75c1048640734b2bb46e22cecf136982) Merge pull request [#1324](https://redirect.github.com/actions/setup-python/issues/1324) from jasongin/update-actions-cache-5.1.0 * [`6731c2b`](https://github.com/actions/setup-python/commit/6731c2ba87f530c26324d128c8fdd53499a4d4b0) Resolve high-severity audit issues * [`0cb1a84`](https://github.com/actions/setup-python/commit/0cb1a84326b90186fcd211036c65b42819794c87) Add RHEL support and include Linux distro in cache keys ([#1323](https://redirect.github.com/actions/setup-python/issues/1323)) * [`dc6eab6`](https://github.com/actions/setup-python/commit/dc6eab6194394e0119523369788b507096f923e2) Update dist * [`6f4b74b`](https://github.com/actions/setup-python/commit/6f4b74bfa2f520a380a620de3615c0dac427f4d3) Strict equality * [`fa8bde1`](https://github.com/actions/setup-python/commit/fa8bde1a9cc6347d06948d66bcd68c598b79eaea) Bump `@βactions/cache` to 5.1.0, log cache write denied * [`c8813ba`](https://github.com/actions/setup-python/commit/c8813ba1bc76ebf779b911ad8ffccbf2e449cb48) Upgrade [`@βactions`](https://github.com/actions) dependencies and update licenses ([#1303](https://redirect.github.com/actions/setup-python/issues/1303)) * Additional commits viewable in [compare view](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1) Updates `docker/login-action` from 4.2.0 to 4.4.0 Release notes *Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).* > v4.4.0 > ------ > > * Skip empty `registry-auth` secret mask by [`@βcrazy-max`](https://github.com/crazy-max) in [docker/login-action#1035](https://redirect.github.com/docker/login-action/pull/1035) > * Bump `@βaws-sdk/client-ecr` and `@βaws-sdk/client-ecr-public` to 3.1077.0 [docker/login-action#1034](https://redirect.github.com/docker/login-action/pull/1034) > > **Full Changelog**: <https://github.com/docker/login-action/compare/v4.3.0...v4.4.0> > > v4.3.0 > ------ > > * Preserve names in esbuild bundle by [`@βcrazy-max`](https://github.com/crazy-max) in [docker/login-action#1022](https://redirect.github.com/docker/login-action/pull/1022) > * Bump `@βaws-sdk/client-ecr` and `@βaws-sdk/client-ecr-public` to 3.1076.0 [docker/login-action#999](https://redirect.github.com/docker/login-action/pull/999) [docker/login-action#1030](https://redirect.github.com/docker/login-action/pull/1030) > * Bump `@βdocker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/login-action#1004](https://redirect.github.com/docker/login-action/pull/1004) [docker/login-action#1027](https://redirect.github.com/docker/login-action/pull/1027) > * Bump `@βsigstore/core` from 3.1.0 to 3.2.1 in [docker/login-action#1023](https://redirect.github.com/docker/login-action/pull/1023) > * Bump `@βsigstore/verify` from 3.1.0 to 3.1.1 in [docker/login-action#1029](https://redirect.github.com/docker/login-action/pull/1029) > * Bump http-proxy-agent and https-proxy-agent to 9.1.0 in [docker/login-action#1017](https://redirect.github.com/docker/login-action/pull/1017) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/login-action#1028](https://redirect.github.com/docker/login-action/pull/1028) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/login-action#1031](https://redirect.github.com/docker/login-action/pull/1031) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/login-action#1002](https://redirect.github.com/docker/login-action/pull/1002) > * Bump undici from 6.24.1 to 6.27.0 in [docker/login-action#1020](https://redirect.github.com/docker/login-action/pull/1020) > * Bump vite from 7.3.3 to 7.3.6 in [docker/login-action#1019](https://redirect.github.com/docker/login-action/pull/1019) > > **Full Changelog**: <https://github.com/docker/login-action/compare/v4.2.0...v4.3.0> Commits * [`af1e73f`](https://github.com/docker/login-action/commit/af1e73f918a031802d376d3c8bbc3fe56130a9b0) Merge pull request [#1034](https://redirect.github.com/docker/login-action/issues/1034) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependen... * [`da722bd`](https://github.com/docker/login-action/commit/da722bde43bacb027adfc67d42dbaa4c0f9e550b) [dependabot skip] chore: update generated content * [`2916ad6`](https://github.com/docker/login-action/commit/2916ad60bd5cb72f07aa54c69fdcc61749c09b7a) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up... * [`ca0a662`](https://github.com/docker/login-action/commit/ca0a662f786e4cfddce972005bd68f3dafc3a903) Merge pull request [#1035](https://redirect.github.com/docker/login-action/issues/1035) from crazy-max/fix-registry-auth-empty-mask * [`c455755`](https://github.com/docker/login-action/commit/c455755a579833bf0d2e4e54e3beb413ef10cc80) chore: update generated content * [`4835190`](https://github.com/docker/login-action/commit/48351901f89581a7c12870c787d3f06d1f498438) skip empty registry-auth secret mask * [`992421c`](https://github.com/docker/login-action/commit/992421c6e6806a7f6df609d1bfff374f9eca3004) Merge pull request [#1033](https://redirect.github.com/docker/login-action/issues/1033) from docker/dependabot/github\_actions/docker/bake-ac... * [`b249b43`](https://github.com/docker/login-action/commit/b249b43765525dd7951068267a34cf63f22ab4f0) Merge pull request [#1032](https://redirect.github.com/docker/login-action/issues/1032) from docker/dependabot/github\_actions/docker/bake-ac... * [`1b67977`](https://github.com/docker/login-action/commit/1b67977736863551a88ff218642a2d7628b10520) build(deps): bump docker/bake-action from 7.2.0 to 7.3.0 * [`9d49d6a`](https://github.com/docker/login-action/commit/9d49d6a3234c78daa10c3c12183ef7b6caa8e69e) build(deps): bump docker/bake-action/subaction/matrix * Additional commits viewable in [compare view](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0) Updates `docker/setup-qemu-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-qemu-action's releases](https://github.com/docker/setup-qemu-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@βcrazy-max`](https://github.com/crazy-max) in [docker/setup-qemu-action#311](https://redirect.github.com/docker/setup-qemu-action/pull/311) > * Bump `@βactions/core` from 3.0.0 to 3.0.1 in [docker/setup-qemu-action#295](https://redirect.github.com/docker/setup-qemu-action/pull/295) > * Bump `@βdocker/actions-toolkit` from 0.91.0 to 0.92.0 in [docker/setup-qemu-action#315](https://redirect.github.com/docker/setup-qemu-action/pull/315) > * Bump `@βsigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-qemu-action#312](https://redirect.github.com/docker/setup-qemu-action/pull/312) > * Bump js-yaml from 4.1.1 to 4.2.0 in [docker/setup-qemu-action#310](https://redirect.github.com/docker/setup-qemu-action/pull/310) > * Bump tmp from 0.2.6 to 0.2.7 in [docker/setup-qemu-action#304](https://redirect.github.com/docker/setup-qemu-action/pull/304) > * Bump undici from 6.26.0 to 6.27.0 in [docker/setup-qemu-action#308](https://redirect.github.com/docker/setup-qemu-action/pull/308) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-qemu-action#307](https://redirect.github.com/docker/setup-qemu-action/pull/307) > > **Full Changelog**: <https://github.com/docker/setup-qemu-action/compare/v4.1.0...v4.2.0> Commits * [`96fe6ef`](https://github.com/docker/setup-qemu-action/commit/96fe6ef7f33517b61c61be40b68a1882f3264fb8) Merge pull request [#315](https://redirect.github.com/docker/setup-qemu-action/issues/315) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`31f08d3`](https://github.com/docker/setup-qemu-action/commit/31f08d3fc9186dbe4b4550696f2e32e9aa7f9465) [dependabot skip] chore: update generated content * [`4e7017a`](https://github.com/docker/setup-qemu-action/commit/4e7017a474d2cf3912bb0437f7fafec6d5fb6c52) build(deps): bump `@βdocker/actions-toolkit` from 0.91.0 to 0.92.0 * [`0eca235`](https://github.com/docker/setup-qemu-action/commit/0eca235293ca1939b58c082f69bdc981ccce8c94) Merge pull request [#314](https://redirect.github.com/docker/setup-qemu-action/issues/314) from crazy-max/fix-yarn-preapprove-actions-toolkit * [`ea66a41`](https://github.com/docker/setup-qemu-action/commit/ea66a4130b037e7961e14a0e5b155836e797cced) chore: allow actions-toolkit to bypass yarn age gate * [`451542b`](https://github.com/docker/setup-qemu-action/commit/451542b03ae7946b7082a398b11c8c315a0e4e80) Merge pull request [#308](https://redirect.github.com/docker/setup-qemu-action/issues/308) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`532ae00`](https://github.com/docker/setup-qemu-action/commit/532ae0057542ec2102e2d19e9feccf85f1f69013) [dependabot skip] chore: update generated content * [`b6f5af6`](https://github.com/docker/setup-qemu-action/commit/b6f5af659afad3f9931b782668dee4595ae7e841) build(deps): bump undici from 6.26.0 to 6.27.0 * [`cf96b86`](https://github.com/docker/setup-qemu-action/commit/cf96b86294b57480ac6d330bd177fca87eac95bc) Merge pull request [#304](https://redirect.github.com/docker/setup-qemu-action/issues/304) from docker/dependabot/npm\_and\_yarn/tmp-0.2.7 * [`f0ba643`](https://github.com/docker/setup-qemu-action/commit/f0ba643f78dc96bc931fb83e5dadc39628e10047) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be40b68a1882f3264fb8) Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-buildx-action's releases](https://github.com/docker/setup-buildx-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@βcrazy-max`](https://github.com/crazy-max) in [docker/setup-buildx-action#572](https://redirect.github.com/docker/setup-buildx-action/pull/572) > * Bump `@βactions/core` from 3.0.0 to 3.0.1 in [docker/setup-buildx-action#551](https://redirect.github.com/docker/setup-buildx-action/pull/551) > * Bump `@βdocker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/setup-buildx-action#557](https://redirect.github.com/docker/setup-buildx-action/pull/557) [docker/setup-buildx-action#580](https://redirect.github.com/docker/setup-buildx-action/pull/580) > * Bump `@βsigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-buildx-action#573](https://redirect.github.com/docker/setup-buildx-action/pull/573) > * Bump `@βsigstore/verify` from 3.1.0 to 3.1.1 in [docker/setup-buildx-action#576](https://redirect.github.com/docker/setup-buildx-action/pull/576) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/setup-buildx-action#562](https://redirect.github.com/docker/setup-buildx-action/pull/562) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/setup-buildx-action#577](https://redirect.github.com/docker/setup-buildx-action/pull/577) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/setup-buildx-action#556](https://redirect.github.com/docker/setup-buildx-action/pull/556) > * Bump undici from 6.25.0 to 6.27.0 in [docker/setup-buildx-action#570](https://redirect.github.com/docker/setup-buildx-action/pull/570) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-buildx-action#569](https://redirect.github.com/docker/setup-buildx-action/pull/569) > > **Full Changelog**: <https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0> Commits * [`bb05f3f`](https://github.com/docker/setup-buildx-action/commit/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c) Merge pull request [#580](https://redirect.github.com/docker/setup-buildx-action/issues/580) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`321c814`](https://github.com/docker/setup-buildx-action/commit/321c814cb51fbe4af8eca00249525cc0973ea66f) [dependabot skip] chore: update generated content * [`b9a36ef`](https://github.com/docker/setup-buildx-action/commit/b9a36ef79ba42cfc611885a1e8c388fbf8b8cb3f) build(deps): bump `@βdocker/actions-toolkit` from 0.91.0 to 0.92.0 * [`ebeab24`](https://github.com/docker/setup-buildx-action/commit/ebeab241289497cd564ac98b3cfc9e64607bb276) Merge pull request [#570](https://redirect.github.com/docker/setup-buildx-action/issues/570) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`5c7b8ae`](https://github.com/docker/setup-buildx-action/commit/5c7b8ae78cec97a3215d4d86679b1d072eaa80cb) [dependabot skip] chore: update generated content * [`037e618`](https://github.com/docker/setup-buildx-action/commit/037e618cd98e95e81525b15ff0e9c96f507e6a0e) build(deps): bump undici from 6.25.0 to 6.27.0 * [`66080e5`](https://github.com/docker/setup-buildx-action/commit/66080e5802281ec2e72b7f3108915643e702db85) Merge pull request [#577](https://redirect.github.com/docker/setup-buildx-action/issues/577) from docker/dependabot/npm\_and\_yarn/sigstore-4.1.1 * [`409aef0`](https://github.com/docker/setup-buildx-action/commit/409aef0aa3f48f0a742e7dec4e0e04ab19afe93c) Merge pull request [#562](https://redirect.github.com/docker/setup-buildx-action/issues/562) from docker/dependabot/npm\_and\_yarn/js-yaml-4.2.0 * [`49c6e42`](https://github.com/docker/setup-buildx-action/commit/49c6e42949280fa0d70fb327633591be54efbfb6) build(deps): bump sigstore from 4.1.0 to 4.1.1 * [`2211273`](https://github.com/docker/setup-buildx-action/commit/2211273e8121ecf9ecb7d6c7c0fcd55526d530c7) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c) Updates `actions/setup-java` from 5.3.0 to 5.5.0 Release notes *Sourced from [actions/setup-java's releases](https://github.com/actions/setup-java/releases).* > v5.5.0 > ------ > > What's Changed > -------------- > > * chore: enforce pre-PR validation (aggregate scripts, git hooks, PR checklist) by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1061](https://redirect.github.com/actions/setup-java/pull/1061) > * Bump github/codeql-action from 3 to 4 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1069](https://redirect.github.com/actions/setup-java/pull/1069) > * Bump actions/checkout from 6 to 7 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1068](https://redirect.github.com/actions/setup-java/pull/1068) > * Bump actions/setup-python from 5 to 6 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1067](https://redirect.github.com/actions/setup-java/pull/1067) > * Bump `@βtypescript-eslint/parser` from 8.61.1 to 8.62.0 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1062](https://redirect.github.com/actions/setup-java/pull/1062) > * feat: Add verify-signature plumbing and Temurin+Microsoft verification support by [`@βjohnoliver`](https://github.com/johnoliver) in [actions/setup-java#1060](https://redirect.github.com/actions/setup-java/pull/1060) > * Updated jetbrains test: https.request() now catches errors. This fixes leaking tests as well by [`@βjmjaffe37`](https://github.com/jmjaffe37) in [actions/setup-java#1070](https://redirect.github.com/actions/setup-java/pull/1070) > * Fix arm64 e2e workflow tests mislabeled as x64 by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1073](https://redirect.github.com/actions/setup-java/pull/1073) > * feat: suppress Maven transfer progress via MAVEN\_ARGS by default (add show-download-progress input) by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1053](https://redirect.github.com/actions/setup-java/pull/1053) > * feat: Disable interactiveMode in generated Maven settings.xml by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1052](https://redirect.github.com/actions/setup-java/pull/1052) > * Bump prettier from 3.6.2 to 3.9.1 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1066](https://redirect.github.com/actions/setup-java/pull/1066) > * chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1074](https://redirect.github.com/actions/setup-java/pull/1074) > * fix: Maven Toolchains grows unexpectedly by [`@βOkeanos`](https://github.com/Okeanos) in [actions/setup-java#534](https://redirect.github.com/actions/setup-java/pull/534) > * dist: Support Tencent Kona JDK by [`@βjohnshajiang`](https://github.com/johnshajiang) in [actions/setup-java#672](https://redirect.github.com/actions/setup-java/pull/672) > * feat: Add set-default option by [`@βgsmet`](https://github.com/gsmet) in [actions/setup-java#1017](https://redirect.github.com/actions/setup-java/pull/1017) > * docs: document problem matcher (and how to disable it), Maven Wrapper caching, and generated interactiveMode by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1075](https://redirect.github.com/actions/setup-java/pull/1075) > * feat: Add distribution detection support to .sdkmanrc file by [`@βlukaszgyg`](https://github.com/lukaszgyg) in [actions/setup-java#975](https://redirect.github.com/actions/setup-java/pull/975) > > New Contributors > ---------------- > > * [`@βjmjaffe37`](https://github.com/jmjaffe37) made their first contribution in [actions/setup-java#1070](https://redirect.github.com/actions/setup-java/pull/1070) > * [`@βgsmet`](https://github.com/gsmet) made their first contribution in [actions/setup-java#1017](https://redirect.github.com/actions/setup-java/pull/1017) > * [`@βlukaszgyg`](https://github.com/lukaszgyg) made their first contribution in [actions/setup-java#975](https://redirect.github.com/actions/setup-java/pull/975) > > **Full Changelog**: <https://github.com/actions/setup-java/compare/v5...v5.5.0> > > v5.4.0 > ------ > > What's Changed > -------------- > > * Bump `@βtypescript-eslint/parser` from 8.48.0 to 8.61.1 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1021](https://redirect.github.com/actions/setup-java/pull/1021) > * Fix codeql workflow permissions by [`@βjsoref`](https://github.com/jsoref) in [actions/setup-java#993](https://redirect.github.com/actions/setup-java/pull/993) > * fix CodeQL permissions by [`@βgdams`](https://github.com/gdams) in [actions/setup-java#1025](https://redirect.github.com/actions/setup-java/pull/1025) > * fix: reject non-semver candidate versions in isVersionSatisfies by [`@βsproctor`](https://github.com/sproctor) in [actions/setup-java#1009](https://redirect.github.com/actions/setup-java/pull/1009) > * Bump `@βactions/cache` to 5.1.0, handle cache write denied by [`@βjasongin`](https://github.com/jasongin) in [actions/setup-java#1026](https://redirect.github.com/actions/setup-java/pull/1026) > * Add Maven Wrapper cache feature by [`@βmahabaleshwars`](https://github.com/mahabaleshwars) in [actions/setup-java#1027](https://redirect.github.com/actions/setup-java/pull/1027) > * Spelling by [`@βjsoref`](https://github.com/jsoref) in [actions/setup-java#713](https://redirect.github.com/actions/setup-java/pull/713) > * add link to advanced configuration for JetBrains by [`@βrobstoll`](https://github.com/robstoll) in [actions/setup-java#850](https://redirect.github.com/actions/setup-java/pull/850) > * docs(action): fix missing required or default fields by [`@βkranthipoturaju`](https://github.com/kranthipoturaju) in [actions/setup-java#1007](https://redirect.github.com/actions/setup-java/pull/1007) > * feat: add microsoft openjdk 17.0.18 by [`@βal-kau`](https://github.com/al-kau) in [actions/setup-java#1002](https://redirect.github.com/actions/setup-java/pull/1002) > * Update README.md - use "alert syntax for Markdown" for notes by [`@βmhoffrog`](https://github.com/mhoffrog) in [actions/setup-java#924](https://redirect.github.com/actions/setup-java/pull/924) > * Bump undici from 6.24.1 to 6.27.0 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1033](https://redirect.github.com/actions/setup-java/pull/1033) > * Update contributor guide with emoji for clarity by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1028](https://redirect.github.com/actions/setup-java/pull/1028) > * add javac problem matcher by [`@βTrass3r`](https://github.com/Trass3r) in [actions/setup-java#562](https://redirect.github.com/actions/setup-java/pull/562) > * Clarify README version syntax and migration guidance by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1038](https://redirect.github.com/actions/setup-java/pull/1038) > * Update undici artifacts to 6.27.0 (license cache + dist) by [`@βbrunoborges`](https://github.com/brunoborges) in [actions/setup-java#1040](https://redirect.github.com/actions/setup-java/pull/1040) > * docs: enhance custom jdk file installation by [`@βstephanabel`](https://github.com/stephanabel) in [actions/setup-java#996](https://redirect.github.com/actions/setup-java/pull/996) > * Templates for new Java distributions by [`@βpanticmilos`](https://github.com/panticmilos) in [actions/setup-java#429](https://redirect.github.com/actions/setup-java/pull/429) > * Bump actions/checkout from 6 to 7 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1032](https://redirect.github.com/actions/setup-java/pull/1032) > * Bump `@βtypes/node` from 25.9.3 to 26.0.0 by [`@βdependabot`](https://github.com/dependabot)[bot] in [actions/setup-java#1031](https://redirect.github.com/actions/setup-java/pull/1031) > * docs: replace non-existent HelloWorldApp references with java --version by [`@βbrunoborges`](https://github.com/brunoborges) with [`@βCopilot`](https://github.com/Copilot) in [actions/setup-java#1043](https://redirect.github.com/actions/setup-java/pull/1043) ... (truncated) Commits * [`0f481fc`](https://github.com/actions/setup-java/commit/0f481fcb613427c0f801b606911222b5b6f3083a) feat: Add distribution detection support to .sdkmanrc file ([#975](https://redirect.github.com/actions/setup-java/issues/975)) * [`c4922bf`](https://github.com/actions/setup-java/commit/c4922bf8099a153c2ad2fa6c869b9e6fa8d21017) docs: document problem matcher (and how to disable it), Maven Wrapper caching... * [`6657b99`](https://github.com/actions/setup-java/commit/6657b993409da921e0c021d82aa9c159601e7a27) feat: Add set-default option ([#1017](https://redirect.github.com/actions/setup-java/issues/1017)) * [`a50fdcc`](https://github.com/actions/setup-java/commit/a50fdccef19f861401a6f00b7caa2abf98504acb) dist: Support Tencent Kona JDK ([#672](https://redirect.github.com/actions/setup-java/issues/672)) * [`77ee41d`](https://github.com/actions/setup-java/commit/77ee41d00e246422933200d520a0334a299f26e4) fix: Maven Toolchains grows unexpectedly ([#534](https://redirect.github.com/actions/setup-java/issues/534)) * [`0765b15`](https://github.com/actions/setup-java/commit/0765b158bfd14bd15c56facab447d138e1161193) chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 ([#1074](https://redirect.github.com/actions/setup-java/issues/1074)) * [`c712b2f`](https://github.com/actions/setup-java/commit/c712b2fb55a8deb2d59f204bd7aa86ac6f938c98) Bump prettier from 3.6.2 to 3.9.1 ([#1066](https://redirect.github.com/actions/setup-java/issues/1066)) * [`733efae`](https://github.com/actions/setup-java/commit/733efaeaca653493004ffb895a11b2c6c316558e) feat: Disable interactiveMode in generated Maven settings.xml ([#1052](https://redirect.github.com/actions/setup-java/issues/1052)) * [`6c4d4a5`](https://github.com/actions/setup-java/commit/6c4d4a5025dca6ad7cc86c839fadbcb66762ed3b) feat: suppress Maven transfer progress via MAVEN\_ARGS by default (add show-do... * [`324b333`](https://github.com/actions/setup-java/commit/324b33387d37f5aa8878ea44bd7144864a316dee) Fix arm64 e2e workflow tests mislabeled as x64 ([#1073](https://redirect.github.com/actions/setup-java/issues/1073)) * Additional commits viewable in [compare view](https://github.com/actions/setup-java/compare/ad2b38190b15e4d6bdf0c97fb4fca8412226d287...0f481fcb613427c0f801b606911222b5b6f3083a) Updates `graalvm/setup-graalvm` from 1.5.6 to 1.6.3 Release notes *Sourced from [graalvm/setup-graalvm's releases](https://github.com/graalvm/setup-graalvm/releases).* > v1.6.1 > ------ > > What's Changed > -------------- > > * Fix incorrect warning and `sortBy` parameter. by [`@βfniephaus`](https://github.com/fniephaus) in [graalvm/setup-graalvm#225](https://redirect.github.com/graalvm/setup-graalvm/pull/225) > > **Full Changelog**: <https://github.com/graalvm/setup-graalvm/compare/v1.6.0...v1.6.1> > > v1.6.0 > ------ > > What's Changed > -------------- > > * Bump the "all" group with 2 updates across multiple ecosystems by [`@βdependabot`](https://github.com/dependabot)[bot] in [graalvm/setup-graalvm#222](https://redirect.github.com/graalvm/setup-graalvm/pull/222) > * Add support for GraalVM innovation releases by [`@βfniephaus`](https://github.com/fniephaus) in [graalvm/setup-graalvm#223](https://redirect.github.com/graalvm/setup-graalvm/pull/223) > > **Full Changelog**: <https://github.com/graalvm/setup-graalvm/compare/v1.5.6...v1.6.0> Commits * [`0def53c`](https://github.com/graalvm/setup-graalvm/commit/0def53c0fd8534bc13416c9469f5be45265824fd) Bump version to `1.6.3`. * [`709c6ec`](https://github.com/graalvm/setup-graalvm/commit/709c6ec64e55ce2483599b95b4ae414ca728d994) Refactor GDS integration. * [`6ceeefe`](https://github.com/graalvm/setup-graalvm/commit/6ceeefe947dedd393c9a1669609b6a3a545ad01e) Downgrade MSVC setup failure to warning for JDK 17+ * [`e5ed908`](https://github.com/graalvm/setup-graalvm/commit/e5ed908b985e23625beed1cf536c5b71c38bc29a) Use `vswhere.exe` to detect Visual Studio installations. * [`186d049`](https://github.com/graalvm/setup-graalvm/commit/186d0493a2df5eb62df5ecc498883d18fd58c303) Bump version to `1.6.2`. * [`f9f3f4d`](https://github.com/graalvm/setup-graalvm/commit/f9f3f4d5b9d843e248f00c0478e8606983c0731d) Set `responseFields=metadata` explicitly. * [`8c5543b`](https://github.com/graalvm/setup-graalvm/commit/8c5543b71f44568342e106336639979e94a8f6de) Bump version to `1.6.1`. * [`2a0c462`](https://github.com/graalvm/setup-graalvm/commit/2a0c4623e9f95af70850179e9fac992c1313117e) Fix sortBy GDS parameter for Oracle GraalVM. * [`29adb79`](https://github.com/graalvm/setup-graalvm/commit/29adb79afe1ce4fa5b0f25d5adbccab4e6fb0bc0) Fix incorrect warning. * [`fee0be0`](https://github.com/graalvm/setup-graalvm/commit/fee0be0e138bd93ed181d063832ecfedd2032219) Improve testing * Additional commits viewable in [compare view](https://github.com/graalvm/setup-graalvm/compare/6f3fa030c4b8f77c1f554a860f593a654538fa38...0def53c0fd8534bc13416c9469f5be45265824fd) Updates `mikepenz/release-changelog-builder-action` from 6.2.2 to 6.2.3 Release notes *Sourced from [mikepenz/release-changelog-builder-action's releases](https://github.com/mikepenz/release-changelog-builder-action/releases).* > v6.2.3 > ------ > > π¦ Dependencies > -------------- > > * chore(deps): update node devdependency non-major updates > + PR: [#1592](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1592) > * chore(deps): update dependency brace-expansion to v5.0.6 > + PR: [#1591](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1591) > * fix(deps): update dependency semver to v7.8.0 > + PR: [#1594](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1594) > * chore(deps): update dependency undici to v8.2.0 > + PR: [#1593](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1593) > * chore(deps): lock file maintenance > + PR: [#1600](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1600) > * chore(deps): update node devdependency non-major updates > + PR: [#1599](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1599) > * chore(deps): update dependency vite to v8.0.14 > + PR: [#1596](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1596) > * chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24-bullseye docker digest to dc1a0af > + PR: [#1595](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1595) > * chore(deps): update dependency undici to v8.3.0 > + PR: [#1598](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1598) > * fix(deps): update dependency semver to v7.8.1 > + PR: [#1597](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1597) > * chore(deps): lock file maintenance > + PR: [#1602](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1602) > * chore(deps): update node devdependency non-major updates > + PR: [#1601](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1601) > * chore(deps): lock file maintenance > + PR: [#1607](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1607) > * chore(deps): update dependency vite to v8.0.16 > + PR: [#1603](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1603) > * chore(deps): update node devdependency non-major updates > + PR: [#1604](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1604) > * chore(deps): update dependency undici to v8.4.1 > + PR: [#1606](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1606) > * fix(deps): update dependency semver to v7.8.3 > + PR: [#1605](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1605) > * chore(deps): update dependency undici to v8.5.0 [security] > + PR: [#1608](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1608) > > Contributors: > ------------- > > * [`@βrenovate-mike`](https://github.com/renovate-mike)[bot], [`@βmikepenz`](https://github.com/mikepenz) Commits * [`c9bcd82`](https://github.com/mikepenz/release-changelog-builder-action/commit/c9bcd8238b6f41e05561348339429d360b1c0247) Merge pull request [#1609](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1609) from mikepenz/develop * [`f6500fb`](https://github.com/mikepenz/release-changelog-builder-action/commit/f6500fbc8ce792922eedc32f67b55b4e4213ba45) Merge pull request [#1608](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1608) from mikepenz/renovate/npm-undici-vulnerability * [`0a4154d`](https://github.com/mikepenz/release-changelog-builder-action/commit/0a4154db9c06069889bb9923dbe1c91b88d6df57) chore: rebuild dist for renovate * [`41a4fa9`](https://github.com/mikepenz/release-changelog-builder-action/commit/41a4fa95ba9f4c6dc004256a6f345783a0ee6357) chore(deps): update dependency undici to v8.5.0 [security] * [`758bbd0`](https://github.com/mikepenz/release-changelog-builder-action/commit/758bbd0fac1552b706ec93542b52f832e67179d0) Merge pull request [#1605](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1605) from mikepenz/renovate/semver-7.x * [`5fa71a4`](https://github.com/mikepenz/release-changelog-builder-action/commit/5fa71a40fbc596ca8021a8b2e53e633b53464f4f) fix(deps): update dependency semver to v7.8.3 * [`df49c93`](https://github.com/mikepenz/release-changelog-builder-action/commit/df49c939fb2cfca1638127b39baa06c45e035620) Merge pull request [#1606](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1606) from mikepenz/renovate/undici-8.x * [`6dc5e2b`](https://github.com/mikepenz/release-changelog-builder-action/commit/6dc5e2bf81297766c7156afa8aba0f22fd029462) chore(deps): update node devdependency non-major updates ([#1604](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1604)) * [`f442d03`](https://github.com/mikepenz/release-changelog-builder-action/commit/f442d03d7aa428c35a2d15e98a72b2ad19546fd4) chore: rebuild dist for renovate * [`e917ee5`](https://github.com/mikepenz/release-changelog-builder-action/commit/e917ee5adca9158a8ca60c71383e4ec8fef4d1fd) chore(deps): update dependency undici to v8.4.1 * Additional commits viewable in [compare view](https://github.com/mikepenz/release-changelog-builder-action/compare/348e88fab4c37338b1e803ceb2d4a7a5db6c0833...c9bcd8238b6f41e05561348339429d360b1c0247) Updates `softprops/action-gh-release` from 3.0.0 to 3.0.2 Release notes *Sourced from [softprops/action-gh-release's releases](https://github.com/softprops/action-gh-release/releases).* > v3.0.2 > ------ > > `3.0.2` is a patch release focused on release reliability and compatibility. It > reuses existing draft releases when publishing prereleases, supports replacing > release assets on Gitea, hardens streamed asset uploads, and provides clearer > release-creation diagnostics. It also includes TypeScript, coverage, and tooling > maintenance merged since `3.0.1`. > > This release fixes [#795](https://redirect.github.com/softprops/action-gh-release/issues/795), [#438](https://redirect.github.com/softprops/action-gh-release/issues/438), and [#803](https://redirect.github.com/softprops/action-gh-release/issues/803). The upload transport hardening covers the > historical failure reported in [#790](https://redirect.github.com/softprops/action-gh-release/issues/790), although current hosted Node 24 runners did > not reproduce it naturally. The diagnostics work is related to [#786](https://redirect.github.com/softprops/action-gh-release/issues/786) and does not > claim a reproducible release-creation fix. > > What's Changed > -------------- > > ### Exciting New Features π > > * feat: improve release error reporting and test coverage by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#813](https://redirect.github.com/softprops/action-gh-release/pull/813) > > ### Bug fixes π > > * fix: publish existing draft releases as prereleases by [`@βgodfengliang`](https://github.com/godfengliang) in [softprops/action-gh-release#801](https://redirect.github.com/softprops/action-gh-release/pull/801) > * fix: upload small checksum assets reliably by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#815](https://redirect.github.com/softprops/action-gh-release/pull/815) > * fix: replace existing release assets on Gitea by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#816](https://redirect.github.com/softprops/action-gh-release/pull/816) > * fix: clarify release creation 404 errors by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#817](https://redirect.github.com/softprops/action-gh-release/pull/817) > > ### Other Changes π > > * chore(deps): upgrade TypeScript to 7 by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#812](https://redirect.github.com/softprops/action-gh-release/pull/812) > * chore(deps): remove unused TypeScript tooling by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#814](https://redirect.github.com/softprops/action-gh-release/pull/814) > * dependency, Node 24 pin, and CI maintenance merged since `3.0.1` > > v3.0.1 > ------ > > 3.0.1 > ----- > > * maintenance release with updated dependencies Changelog *Sourced from [softprops/action-gh-release's changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md).* > 3.0.2 > ----- > > `3.0.2` is a patch release focused on release reliability and compatibility. It > reuses existing draft releases when publishing prereleases, supports replacing > release assets on Gitea, hardens streamed asset uploads, and provides clearer > release-creation diagnostics. It also includes TypeScript, coverage, and tooling > maintenance merged since `3.0.1`. > > This release fixes [#795](https://redirect.github.com/softprops/action-gh-release/issues/795), [#438](https://redirect.github.com/softprops/action-gh-release/issues/438), and [#803](https://redirect.github.com/softprops/action-gh-release/issues/803). The upload transport hardening covers the > historical failure reported in [#790](https://redirect.github.com/softprops/action-gh-release/issues/790), although current hosted Node 24 runners did > not reproduce it naturally. The diagnostics work is related to [#786](https://redirect.github.com/softprops/action-gh-release/issues/786) and does not > claim a reproducible release-creation fix. > > What's Changed > -------------- > > ### Exciting New Features π > > * feat: improve release error reporting and test coverage by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#813](https://redirect.github.com/softprops/action-gh-release/pull/813) > > ### Bug fixes π > > * fix: publish existing draft releases as prereleases by [`@βgodfengliang`](https://github.com/godfengliang) in [softprops/action-gh-release#801](https://redirect.github.com/softprops/action-gh-release/pull/801) > * fix: upload small checksum assets reliably by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#815](https://redirect.github.com/softprops/action-gh-release/pull/815) > * fix: replace existing release assets on Gitea by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#816](https://redirect.github.com/softprops/action-gh-release/pull/816) > * fix: clarify release creation 404 errors by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#817](https://redirect.github.com/softprops/action-gh-release/pull/817) > > ### Other Changes π > > * chore(deps): upgrade TypeScript to 7 by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#812](https://redirect.github.com/softprops/action-gh-release/pull/812) > * chore(deps): remove unused TypeScript tooling by [`@βchenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#814](https://redirect.github.com/softprops/action-gh-release/pull/814) > * dependency, Node 24 pin, and CI maintenance merged since `3.0.1` > > 3.0.1 > ----- > > * maintenance release with updated dependencies > > 3.0.0 > ----- > > `3.0.0` is a major release that moves the action runtime from Node 20 to Node 24. > Use `v3` on GitHub-hosted runners and self-hosted fleets that already support the > Node 24 Actions runtime. `v2.6.2` was the final Node 20-compatible release and is > no longer maintained or supported. > > What's Changed > -------------- > > ### Other Changes π > > * Move the action runtime and bundle target to Node 24 > * Update `@types/node` to the Node 24 line and allow future Dependabot updates > * Keep the floating major tag on `v3`; freeze `v2` at the final `v2.6.2` release ... (truncated) Commits * [`3d0d988`](https://github.com/softprops/action-gh-release/commit/3d0d9888cb7fd7b750713d6e236d1fcb99157228) release 3.0.2 ([#818](https://redirect.github.com/softprops/action-gh-release/issues/818)) * [`7e13ed4`](https://github.com/softprops/action-gh-release/commit/7e13ed4ac596a4adf801d3812be5a089356949aa) fix: clarify release creation 404 errors ([#817](https://redirect.github.com/softprops/action-gh-release/issues/817)) * [`e6c70a5`](https://github.com/softprops/action-gh-release/commit/e6c70a53cf67373fbff7eeebca7782b4fe8f106c) fix: replace existing release assets on Gitea ([#816](https://redirect.github.com/softprops/action-gh-release/issues/816)) * [`f345337`](https://github.com/softprops/action-gh-release/commit/f3453378888d5ef6208e2788af1c5ba50d8a898d) fix: publish existing draft releases as prereleases ([#801](https://redirect.github.com/softprops/action-gh-release/issues/801)) * [`d8a89a2`](https://github.com/softprops/action-gh-release/commit/d8a89a206684ded8435bf16d6f698bf04ab05164) fix: upload small checksum assets reliably ([#815](https://redirect.github.com/softprops/action-gh-release/issues/815)) * [`45ece40`](https://github.com/softprops/action-gh-release/commit/45ece40c3178522904ac6c51c21d8a4e3565f3c8) chore(deps): remove unused TypeScript tooling ([#814](https://redirect.github.com/softprops/action-gh-release/issues/814)) * [`f6b913c`](https://github.com/softprops/action-gh-release/commit/f6b913c3f95302d88e8ef7cb2859c2e7656aa01e) feat: improve release error reporting and test coverage ([#813](https://redirect.github.com/softprops/action-gh-release/issues/813)) * [`15f193d`](https://github.com/softprops/action-gh-release/commit/15f193d7d8aa9623b5181913a31fafceb4e8cef9) chore(deps): upgrade TypeScript to 7 ([#812](https://redirect.github.com/softprops/action-gh-release/issues/812)) * [`cc8268d`](https://github.com/softprops/action-gh-release/commit/cc8268d46a81d57ec9b061f27b0dd68ebd7fb17f) chore(deps): bump actions/checkout in the github-actions group ([#810](https://redirect.github.com/softprops/action-gh-release/issues/810)) * [`fd0ed1e`](https://github.com/softprops/action-gh-release/commit/fd0ed1e85b6730f87f5c67d7355751c46ad513d6) chore(deps): bump the npm group with 3 updates ([#811](https://redirect.github.com/softprops/action-gh-release/issues/811)) * Additional commits viewable in [compare view](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...3d0d9888cb7fd7b750713d6e236d1fcb99157228) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.37.0 Release notes *Sourced from [github/codeql-action/upload-sarif's releases](https://github.com/github/codeql-action/releases).* > v4.37.0 > ------- > > * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995) > * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973) > > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/upload-sarif's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956) > * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019) > > 4.37.0 - 08 Jul 2026 > -------------------- > > * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995) > * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973) > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) ... (truncated) Commits * [`99df26d`](https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9) Merge pull request [#3996](https://redirect.github.com/github/codeql-action/issues/3996) from github/update-v4.37.0-c7c896d71 * [`31c2707`](https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0) Add changenote for [#3973](https://redirect.github.com/github/codeql-action/issues/3973) * [`72df218`](https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6) Update changelog for v4.37.0 * [`c7c896d`](https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91) Merge pull request [#3995](https://redirect.github.com/github/codeql-action/issues/3995) from github/update-bundle/codeql-bundle-v2.26.0 * [`3f34ff0`](https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146) Add changelog note * [`43bec09`](https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1) Update default bundle to codeql-bundle-v2.26.0 * [`f58f0d1`](https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46) Merge pull request [#3973](https://redirect.github.com/github/codeql-action/issues/3973) from github/mbg/repo-props/config-file-shorthands * [`7dc37cb`](https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8) Merge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-sh... * [`8e22350`](https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f) Thread `ActionState` to `initConfig` * [`69c9e8c`](https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b) Mark some `status-report` imports as `type`-only to avoid circular dependencies * Additional commit... \_Description has been truncated\_
centosinfra-prod-github-app Bot
pushed a commit
to ansible-collections/amazon.aws
that referenced
this pull request
Jul 31, 2026
Bumps the github-actions group with 7 updates: Package From To actions/checkout 4.3.1 7.0.1 actions/setup-python 5.6.0 7.0.0 actions/upload-artifact 4.6.2 7.0.1 ansible-community/ansible-test-gh-action 1.17.0 1.18.0 actions/github-script 7.1.0 9.0.0 dawidd6/action-download-artifact 16 21 SonarSource/sonarqube-scan-action 7.0.0 8.2.1 Updates actions/checkout from 4.3.1 to 7.0.1 Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @βaiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @βaiqiaoy in actions/checkout#2521 escape values passed to --unset by @βaiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @βaiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @βdependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @βdependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @βdependabot[bot] in actions/checkout#2461 Bump @βactions/core and @βactions/tool-cache and Remove uuid by @βdependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @βaiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @βdependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @βaiqiaoy in actions/checkout#2464 update error wording by @βaiqiaoy in actions/checkout#2467 New Contributors @βaiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.1.0 What's Changed [BREAKING] backport allow-unsafe-pr-checkout to v6 by @βaiqiaoy in actions/checkout#2500 backport fixes to releases-v6 by @βaiqiaoy in actions/checkout#2527 https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change Full Changelog: actions/checkout@v6.0.3...v6.1.0 v6.0.3 What's Changed Update changelog by @βericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @βyaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @βyaananth in actions/checkout#2439 Update changelog for v6.0.3 by @βyaananth in actions/checkout#2446 New Contributors @βyaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @βTingluoHuang in actions/checkout#2355 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @βaiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @βaiqiaoy in actions/checkout#2521 Escape values passed to --unset by @βaiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @βaiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @βyaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @βyaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @βericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @βericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @βericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @βsalmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @βericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @βsalmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @βericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @βmotss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @βmouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @βbenwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @βjoshmgross in actions/checkout#2044 Update README.md by @βnebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @βTingluoHuang in actions/checkout#2224 Update package dependencies by @βsalmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @βjww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @βjww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @βorhantoy in actions/checkout#1924 ... (truncated) Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view Updates actions/setup-python from 5.6.0 to 7.0.0 Release notes Sourced from actions/setup-python's releases. v7.0.0 What's Changed Enhancements Migrate to ESM and upgrade dependencies by @βpriyagupta108 in actions/setup-python#1330 Pin SHA commits and update docs with latest versions by @βHarithaVattikuti in actions/setup-python#1338 Remove the pip-install input by @βgowridurgad in actions/setup-python#1336 Bug Fix Fix to Classify stderr warning messages as warnings instead of errors in annotations by @βlmvysakh in actions/setup-python#1335 Validate and retry manifest fetch to prevent silent failures by @βpriyagupta108 in actions/setup-python#1332 Dependency Upgrade Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @βdependabot in actions/setup-python#1328 Remove EOL Python versions and Bumps numpy text fixture by @βpriya-kinthali in actions/setup-python#1333 Upgrade @βactions/cache to 6.2.0 by @βphilip-gai in actions/setup-python#1337 New Contributors @βlmvysakh made their first contribution in actions/setup-python#1335 @βphilip-gai made their first contribution in actions/setup-python#1337 Full Changelog: actions/setup-python@v6...v7.0.0 v6.3.0 What's Changed Enhancement Add RHEL support and include Linux distro in cache keys by @βpriyagupta108 in actions/setup-python#1323 Fix pip cache error handling on Windows by @βpriyagupta108 in actions/setup-python#1040 Dependency update Upgrade minimatch from 3.1.2 to 3.1.5 by @βdependabot in actions/setup-python#1281 Upgrade actions dependencies by @βgowridurgad with @βCopilot in actions/setup-python#1303 Upgrade @βactions/cache to 5.1.0, log cache write denied by @βjasongin in actions/setup-python#1324 Upgrade dependency versions and test workflow configuration by @βHarithaVattikuti in actions/setup-python#1322 Documentation Update advanced-usage.md by @βDunky-Z in actions/setup-python#811 New Contributors @βgowridurgad with @βCopilot made their first contribution in actions/setup-python#1303 @βjasongin made their first contribution in actions/setup-python#1324 @βDunky-Z made their first contribution in actions/setup-python#811 Full Changelog: actions/setup-python@v6.2.0...v6.3.0 v6.2.0 What's Changed Dependency Upgrades Upgrade dependencies to Node 24 compatible versions by @βsalmanmkc in actions/setup-python#1259 ... (truncated) Commits 5fda3b9 Pin SHA commits and update docs with latest versions (#1338) 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0 0f3a009 Remove the pip-install input (#1336) f8cf429 Migrate to ESM and upgrade dependencies (#1330) 54baeea Validate and retry manifest fetch to prevent silent failures (#1332) c709277 Annotation code fix (#1335) 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333) 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328) ece7cb0 Fix pip cache error handling on Windows. (#1040) 1d18d7a Update advanced-usage.md (#811) Additional commits viewable in compare view Updates actions/upload-artifact from 4.6.2 to 7.0.1 Release notes Sourced from actions/upload-artifact's releases. v7.0.1 What's Changed Update the readme with direct upload details by @βdanwkennedy in actions/upload-artifact#795 Readme: bump all the example versions to v7 by @βdanwkennedy in actions/upload-artifact#796 Include changes in typespec/ts-http-runtime 0.3.5 by @βyacaovsnc in actions/upload-artifact#797 Full Changelog: actions/upload-artifact@v7...v7.0.1 v7.0.0 v7 What's new Direct Uploads Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file. ESM To support new versions of the @actions/* packages, we've upgraded the package to ESM. What's Changed Add proxy integration test by @βLink- in actions/upload-artifact#754 Upgrade the module to ESM and bump dependencies by @βdanwkennedy in actions/upload-artifact#762 Support direct file uploads by @βdanwkennedy in actions/upload-artifact#764 New Contributors @βLink- made their first contribution in actions/upload-artifact#754 Full Changelog: actions/upload-artifact@v6...v7.0.0 v6.0.0 v6 - What's new [!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. Node.js 24 This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. What's Changed Upload Artifact Node 24 support by @βsalmanmkc in actions/upload-artifact#719 fix: update @βactions/artifact for Node.js 24 punycode deprecation by @βsalmanmkc in actions/upload-artifact#744 prepare release v6.0.0 for Node.js 24 support by @βsalmanmkc in actions/upload-artifact#745 Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0 v5.0.0 What's Changed ... (truncated) Commits 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency 634250c Include changes in typespec/ts-http-runtime 0.3.5 e454baa Readme: bump all the example versions to v7 (#796) 74fad66 Update the readme with direct upload details (#795) bbbca2d Support direct file uploads (#764) 589182c Upgrade the module to ESM and bump dependencies (#762) 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests 02a8460 Add proxy integration test b7c566a Merge pull request #745 from actions/upload-artifact-v6-release e516bc8 docs: correct description of Node.js 24 support in README Additional commits viewable in compare view Updates ansible-community/ansible-test-gh-action from 1.17.0 to 1.18.0 Release notes Sourced from ansible-community/ansible-test-gh-action's releases. v1.18.0 What's Changed Project Changes Support ansible-core 2.20 and 2.21, bump default ansible-core version to 2.21 by @βfelixfontein in ansible-community/ansible-test-gh-action#125 Dependencies Bump codecov/codecov-action from 4.5.0 to 5.4.3 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#101 Bump actions/checkout from 4 to 5 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#104 Bump codecov/codecov-action from 5.4.3 to 5.5.0 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#105 Bump codecov/codecov-action from 5.5.0 to 5.5.1 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#107 Bump actions/setup-python from 5 to 6 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#108 Bump actions/checkout from 5 to 6 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#110 Bump codecov/codecov-action from 5.5.1 to 5.5.2 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#111 Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#114 Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#115 Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#119 Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#122 Bump actions/checkout from 6 to 7 by @βdependabot[bot] in ansible-community/ansible-test-gh-action#126 Full Changelog: ansible-community/ansible-test-gh-action@v1.17.0...v1.18.0 Commits 6ded727 Merge pull request #126 from ansible-community/dependabot/github_actions/acti... e0d4c98 Bump actions/checkout from 6 to 7 6c86f3f Merge pull request #125 from felixfontein/ansible-core 48b041f Merge pull request #122 from ansible-community/dependabot/github_actions/code... 3272591 Merge pull request #124 from felixfontein/fix-pre-commit c0626df Bump default ansible-core to 2.21 7dfd27a Support ansible-core 2.20 and 2.21 c8e46ea Bump pre-commit flake8 additional deps 13e4993 Bump codecov/codecov-action from 6.0.1 to 7.0.0 8b1ac34 Merge pull request #119 from ansible-community/dependabot/github_actions/code... Additional commits viewable in compare view Updates actions/github-script from 7.1.0 to 9.0.0 Release notes Sourced from actions/github-script's releases. v9.0.0 New features: getOctokit factory function β Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples. Orchestration ID in user-agent β The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing. Breaking changes: require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead β it's available directly in the script context with no imports needed. getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it. If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility. What's Changed Add ACTIONS_ORCHESTRATION_ID to user-agent string by @βCopilot in actions/github-script#695 ci: use deployment: false for integration test environments by @βsalmanmkc in actions/github-script#712 feat!: add getOctokit to script context, upgrade @βactions/github v9, @βoctokit/core v7, and related packages by @βsalmanmkc in actions/github-script#700 New Contributors @βCopilot made their first contribution in actions/github-script#695 Full Changelog: actions/github-script@v8.0.0...v9.0.0 v8.0.0 What's Changed Update Node.js version support to 24.x by @βsalmanmkc in actions/github-script#637 README for updating actions/github-script from v7 to v8 by @βsneha-krip in actions/github-script#653β οΈ Minimum Compatible Runner Version v2.327.1 Release Notes Make sure your runner is updated to this version or newer to use this release. New Contributors @βsalmanmkc made their first contribution in actions/github-script#637 @βsneha-krip made their first contribution in actions/github-script#653 Full Changelog: actions/github-script@v7.1.0...v8.0.0 Commits 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re... ca10bbd fix: use @βoctokit/core/types import for v7 compatibility 86e48e2 merge: incorporate main branch changes c108472 chore: rebuild dist for v9 upgrade and getOctokit factory afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag... ff8117e ci: fix user-agent test to handle orchestration ID 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests 3953caf docs: update README examples from @βv8 to @βv9, add getOctokit docs and v9 brea... c17d55b ci: add getOctokit integration test job a047196 test: add getOctokit integration tests via callAsyncFunction Additional commits viewable in compare view Updates dawidd6/action-download-artifact from 16 to 21 Release notes Sourced from dawidd6/action-download-artifact's releases. v21 What's Changed build(deps): bump @βactions/github from 9.0.0 to 9.1.0 by @βdependabot[bot] in dawidd6/action-download-artifact#396 build(deps): bump filesize from 11.0.15 to 11.0.16 by @βdependabot[bot] in dawidd6/action-download-artifact#399 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 by @βdependabot[bot] in dawidd6/action-download-artifact#402 build(deps): bump @βactions/github from 9.1.0 to 9.1.1 by @βdependabot[bot] in dawidd6/action-download-artifact#400 build(deps): bump @βactions/core from 3.0.0 to 3.0.1 by @βdependabot[bot] in dawidd6/action-download-artifact#401 build(deps): bump filesize from 11.0.16 to 11.0.17 by @βdependabot[bot] in dawidd6/action-download-artifact#404 Download artifacts in creation order by @βmatejdro in dawidd6/action-download-artifact#398 node_modules: update by @βdawidd6 in dawidd6/action-download-artifact#405 New Contributors @βmatejdro made their first contribution in dawidd6/action-download-artifact#398 Full Changelog: dawidd6/action-download-artifact@v20...v21 v20 What's Changed build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @βdependabot[bot] in dawidd6/action-download-artifact#387 node_modules: update by @βdawidd6 in dawidd6/action-download-artifact#388 build(deps): bump filesize from 11.0.13 to 11.0.14 by @βdependabot[bot] in dawidd6/action-download-artifact#389 build(deps): bump brace-expansion by @βdependabot[bot] in dawidd6/action-download-artifact#390 node_modules: update by @βdawidd6 in dawidd6/action-download-artifact#391 build(deps): bump filesize from 11.0.14 to 11.0.15 by @βdependabot[bot] in dawidd6/action-download-artifact#392 build(deps): bump adm-zip from 0.5.16 to 0.5.17 by @βdependabot[bot] in dawidd6/action-download-artifact#393 build(deps): bump lodash from 4.17.23 to 4.18.1 by @βdependabot[bot] in dawidd6/action-download-artifact#394 node_modules: update by @βdawidd6 in dawidd6/action-download-artifact#395 Full Changelog: dawidd6/action-download-artifact@v19...v20 v19 What's Changed build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @βdependabot[bot] in dawidd6/action-download-artifact#385 node_modules: update by @βdawidd6 in dawidd6/action-download-artifact#386 Full Changelog: dawidd6/action-download-artifact@v18...v19 v18 What's Changed build(deps): bump @βactions/artifact from 6.2.0 to 6.2.1 by @βdependabot[bot] in dawidd6/action-download-artifact#381 build(deps): bump undici from 6.23.0 to 6.24.0 by @βdependabot[bot] in dawidd6/action-download-artifact#382 node_modules: update by @βdawidd6 in dawidd6/action-download-artifact#383 Full Changelog: dawidd6/action-download-artifact@v17...v18 v17 What's Changed ... (truncated) Commits b6e2e70 node_modules: update (#405) 1708cb3 Download artifacts in creation order (#398) 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404) 0414c42 build(deps): bump @βactions/core from 3.0.0 to 3.0.1 (#401) c802aad build(deps): bump @βactions/github from 9.1.0 to 9.1.1 (#400) ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402) 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399) 09d0677 build(deps): bump @βactions/github from 9.0.0 to 9.1.0 (#396) 8305c0f node_modules: update (#395) 542af03 build(deps): bump lodash from 4.17.23 to 4.18.1 (#394) Additional commits viewable in compare view Updates SonarSource/sonarqube-scan-action from 7.0.0 to 8.2.1 Release notes Sourced from SonarSource/sonarqube-scan-action's releases. v8.2.1 What's Changed Bug fix SQSCANGHA-156 GPG signature verification fails when temporary directory path is too long Full Changelog: SonarSource/sonarqube-scan-action@v8.2.0...v8.2.1 v8.2.0 What's Changed SQSCANGHA-149 Add scannerBinariesAuthHeader input by @βhenryju in SonarSource/sonarqube-scan-action#246 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support by @βhenryju in SonarSource/sonarqube-scan-action#249 SQSCANGHA-84 Remove outdated wget/curl references by @βhenryju in SonarSource/sonarqube-scan-action#248 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4-part version by @βhenryju in SonarSource/sonarqube-scan-action#250 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows by @βhenryju in SonarSource/sonarqube-scan-action#251 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0 v8.1.0 What's Changed SQSCANGHA-146 Add proxy support for GPG keyserver access by @βhenryju in SonarSource/sonarqube-scan-action#244 SQSCANGHA-148 Update SonarScanner CLI to 8.1.0.6389 by @βgithub-actions[bot] in SonarSource/sonarqube-scan-action#232 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0 v8.0.0 What's Changed Breaking change SQSCANGHA-145 Set skipSignatureVerification default value to false by @βantoine-vinot-sonarsource in SonarSource/sonarqube-scan-action#241 Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0 v7.2.1 What's Changed SQSCANGHA-140 Set skipSignatureVerification default value to true to avoid breaking change by @βgmmcal in SonarSource/sonarqube-scan-action#240 Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.1 v7.2.0 What's Changed SQSCANGHA-133 Upgrade the Node version used in UTs + contribution guide by @βclaire-villard-sonarsource in SonarSource/sonarqube-scan-action#226 SC-45750 Migrate to dateless license headers by @βclaire-villard-sonarsource in SonarSource/sonarqube-scan-action#229 SQSCANGHA-134 Upgrade the libraries to latest version by @βclaire-villard-sonarsource in SonarSource/sonarqube-scan-action#227 ... (truncated) Commits 2291811 SQSCANGHA-156 GPG signature verification fails when temporary directory path ... 7cdc154 SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (#255) 45f2736 SQSCANGHA-151 Change Code Owners (#254) 7138816 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows (#251) 3581139 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4... c9d327c SQSCANGHA-84 Remove outdated wget/curl references b243e51 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support 375c3f5 SQSCANGHA-149 Add scannerBinariesAuthHeader input for authenticated binary do... 9c78323 SQSCANGHA-144 Add gate jobs to QA workflows for branch protection 7006c44 Update SonarScanner CLI to 8.1.0.6389 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore con... Description has been truncated Reviewed-by: Mark Chappell
vbraun
pushed a commit
to sagemath/sage
that referenced
this pull request
Aug 4, 2026
gh-42584: build(deps): bump actions/setup-python from 5 to 7 Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup- python/releases">actions/setup-python's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108"><code>@βpriyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1330">actions/setup-python#1330</a></li> <li>Pin SHA commits and update docs with latest versions by <a href="htt ps://github.com/HarithaVattikuti"><code>@βHarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1338">actions/setup-python#1338</a></li> <li>Remove the pip-install input by <a href="https://github.com/gowridurgad"><code>@βgowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1336">actions/setup-python#1336</a></li> </ul> <h3>Bug Fix</h3> <ul> <li>Fix to Classify stderr warning messages as warnings instead of errors in annotations by <a href="https://github.com/lmvysakh"><code>@βlmvysakh</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1335">actions/setup-python#1335</a></li> <li>Validate and retry manifest fetch to prevent silent failures by <a href="https://github.com/priyagupta108"><code>@βpriyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1332">actions/setup-python#1332</a></li> </ul> <h3>Dependency Upgrade</h3> <ul> <li>Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data by <a href="https://github.com/dependabot"><code>@βdependabot</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1328">actions/setup-python#1328</a></li> <li>Remove EOL Python versions and Bumps numpy text fixture by <a href="https://github.com/priya-kinthali"><code>@βpriya- kinthali</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1333">actions/setup-python#1333</a></li> <li>Upgrade <code>@βactions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai"><code>@βphilip-gai</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1337">actions/setup-python#1337</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lmvysakh"><code>@βlmvysakh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup- python/pull/1335">actions/setup-python#1335</a></li> <li><a href="https://github.com/philip-gai"><code>@βphilip- gai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup- python/pull/1337">actions/setup-python#1337</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup- python/compare/v6...v7.0.0">https://github.com/actions/setup- python/compare/v6...v7.0.0</a></p> <h2>v6.3.0</h2> <h2>What's Changed</h2> <h3>Enhancement</h3> <ul> <li>Add RHEL support and include Linux distro in cache keys by <a href="https://github.com/priyagupta108"><code>@βpriyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1323">actions/setup-python#1323</a></li> <li>Fix pip cache error handling on Windows by <a href="https://github.com/priyagupta108"><code>@βpriyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1040">actions/setup-python#1040</a></li> </ul> <h3>Dependency update</h3> <ul> <li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a href="https://github.com/dependabot"><code>@βdependabot</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1281">actions/setup-python#1281</a></li> <li>Upgrade actions dependencies by <a href="https://github.com/gowridurgad"><code>@βgowridurgad</code></a> with <a href="https://github.com/Copilot"><code>@βCopilot</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1303">actions/setup-python#1303</a></li> <li>Upgrade <code>@βactions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin"><code>@βjasongin</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1324">actions/setup-python#1324</a></li> <li>Upgrade dependency versions and test workflow configuration by <a hr ef="https://github.com/HarithaVattikuti"><code>@βHarithaVattikuti</code> </a> in <a href="https://redirect.github.com/actions/setup- python/pull/1322">actions/setup-python#1322</a></li> </ul> <h3>Documentation</h3> <ul> <li>Update advanced-usage.md by <a href="https://github.com/Dunky-Z"><code>@βDunky-Z</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/811">actions/setup-python#811</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/gowridurgad"><code>@βgowridurgad</code></a> with <a href="https://github.com/Copilot"><code>@βCopilot</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup- python/pull/1303">actions/setup-python#1303</a></li> <li><a href="https://github.com/jasongin"><code>@βjasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup- python/pull/1324">actions/setup-python#1324</a></li> <li><a href="https://github.com/Dunky-Z"><code>@βDunky-Z</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup- python/pull/811">actions/setup-python#811</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup- python/compare/v6.2.0...v6.3.0">https://github.com/actions/setup- python/compare/v6.2.0...v6.3.0</a></p> <h2>v6.2.0</h2> <h2>What's Changed</h2> <h3>Dependency Upgrades</h3> <ul> <li>Upgrade dependencies to Node 24 compatible versions by <a href="https://github.com/salmanmkc"><code>@βsalmanmkc</code></a> in <a href="https://redirect.github.com/actions/setup- python/pull/1259">actions/setup-python#1259</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="actions/setup-python@5fda3b95a4ea 91299a34e894583c3862153e4b97"><code>5fda3b9</code></a> Pin SHA commits and update docs with latest versions (<a href="https://redirect.github.com/actions/setup- python/issues/1338">#1338</a>)</li> <li><a href="actions/setup-python@4ab7e95f05e1 68b4356aebde89dd84f59c283d8e"><code>4ab7e95</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup- python/issues/1337">#1337</a> from actions/philip-gai/bump-actions- cache-6-2-0</li> <li><a href="actions/setup-python@0f3a009f475d bea83c0371cd85d099690fee8c5c"><code>0f3a009</code></a> Remove the pip- install input (<a href="https://redirect.github.com/actions/setup- python/issues/1336">#1336</a>)</li> <li><a href="actions/setup-python@f8cf4291c8b8 e273ddd26e569454615c7315d932"><code>f8cf429</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup- python/issues/1330">#1330</a>)</li> <li><a href="actions/setup-python@54baeea5b344 17d10a7479663a23cca53ea209b5"><code>54baeea</code></a> Validate and retry manifest fetch to prevent silent failures (<a href="https://redirect.github.com/actions/setup- python/issues/1332">#1332</a>)</li> <li><a href="actions/setup-python@c7092773a316 760f4ecfe498e4af668a4dafeac5"><code>c709277</code></a> Annotation code fix (<a href="https://redirect.github.com/actions/setup- python/issues/1335">#1335</a>)</li> <li><a href="actions/setup-python@6849080452e6 9b330395e8a6d23cf90f56d76a1a"><code>6849080</code></a> remove EOL Python versions and Bumps numpy text fixture (<a href="https://redirect.github.com/actions/setup- python/issues/1333">#1333</a>)</li> <li><a href="actions/setup-python@0903b469fbf4 441aadfe4f4b249dc5b1fba3a73e"><code>0903b46</code></a> Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data (<a href="https://redirect.github.com/actions/setup- python/issues/1328">#1328</a>)</li> <li><a href="actions/setup-python@ece7cb06caef a5fff74198d8649806c4678c61a1"><code>ece7cb0</code></a> Fix pip cache error handling on Windows. (<a href="https://redirect.github.com/actions/setup- python/issues/1040">#1040</a>)</li> <li><a href="actions/setup-python@1d18d7af5f76 7c1259ede05a0a5bcc30f3dcf1cf"><code>1d18d7a</code></a> Update advanced- usage.md (<a href="https://redirect.github.com/actions/setup- python/issues/811">#811</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-python/compare/v5...v7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing- security-vulnerabilities/about-dependabot-security-updates#about- compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> URL: #42584 Reported by: dependabot[bot] Reviewer(s):
luketainton
pushed a commit
to luketainton/actions_gha-workflows
that referenced
this pull request
Aug 30, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | minor | `v6.2.0` β `v6.3.0` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.3.0`](https://github.com/actions/setup-python/releases/tag/v6.3.0) [Compare Source](actions/setup-python@v6.2.0...v6.3.0) #### What's Changed ##### Enhancement - Add RHEL support and include Linux distro in cache keys by [@​priyagupta108](https://github.com/priyagupta108) in [#​1323](actions/setup-python#1323) - Fix pip cache error handling on Windows by [@​priyagupta108](https://github.com/priyagupta108) in [#​1040](actions/setup-python#1040) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​1281](actions/setup-python#1281) - Upgrade actions dependencies by [@​gowridurgad](https://github.com/gowridurgad) with [@​Copilot](https://github.com/Copilot) in [#​1303](actions/setup-python#1303) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​1324](actions/setup-python#1324) - Upgrade dependency versions and test workflow configuration by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1322](actions/setup-python#1322) ##### Documentation - Update advanced-usage.md by [@​Dunky-Z](https://github.com/Dunky-Z) in [#​811](actions/setup-python#811) #### New Contributors - [@​gowridurgad](https://github.com/gowridurgad) with [@​Copilot](https://github.com/Copilot) made their first contribution in [#​1303](actions/setup-python#1303) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​1324](actions/setup-python#1324) - [@​Dunky-Z](https://github.com/Dunky-Z) made their first contribution in [#​811](actions/setup-python#811) **Full Changelog**: <actions/setup-python@v6.2.0...v6.3.0> </details> --- ### Configuration π **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) π¦ **Automerge**: Disabled by config. Please merge this manually once you are satisfied. β» **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. π **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41MS4yIiwidXBkYXRlZEluVmVyIjoiNDQuNTEuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://git.tainton.uk/actions/gha-workflows/pulls/108 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description:
@actions/cacheto v5.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only tokendistCheck list: