Skip to content

⬆️ (deps): Update GitHub actions#311

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github-actions
Open

⬆️ (deps): Update GitHub actions#311
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github-actions

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 22, 2024

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/cache action minor v4.0.2v4.3.0
actions/checkout action minor v4.1.1v4.3.1
actions/download-artifact action minor v4.1.5v4.3.0
actions/setup-python action minor v5.1.0v5.6.0
actions/upload-artifact action minor v4.3.2v4.6.2
aquasecurity/trivy-action action minor 0.19.0v0.35.0
docker/build-push-action action minor v5.3.0v5.4.0
docker/login-action action minor v3.1.0v3.7.0
docker/metadata-action action minor v5.5.1v5.10.0
docker/setup-buildx-action action minor v3.3.0v3.12.0
docker/setup-qemu-action action minor v3.0.0v3.7.0
hadolint/hadolint-action action minor v3.1.0v3.3.0
helm/chart-testing-action action minor v2.6.1v2.8.0
helm/kind-action action minor v1.9.0v1.14.0
python uses-with minor 3.93.14
sigstore/cosign-installer action minor v3.5.0v3.10.1
tj-actions/changed-files action minor v44.3.0v44.5.7

Release Notes

actions/cache (actions/cache)

v4.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Full Changelog: actions/cache@v4.2.1...v4.2.2

v4.2.1

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

New Contributors

Full Changelog: actions/cache@v4.2.0...v4.2.1

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v4.1.2...v4.2.0

v4.1.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.1.1...v4.1.2

v4.1.1

Compare Source

What's Changed

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.0.2...v4.1.0

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

v4.2.1

Compare Source

v4.2.0

Compare Source

v4.1.7

Compare Source

v4.1.6

Compare Source

v4.1.5

Compare Source

v4.1.4

Compare Source

v4.1.3

Compare Source

v4.1.2

Compare Source

  • Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598
actions/download-artifact (actions/download-artifact)

v4.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

v4.2.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

v4.1.9

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

v4.1.8

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.7...v4.1.8

v4.1.7

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.6...v4.1.7

v4.1.6

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.5...v4.1.6

actions/setup-python (actions/setup-python)

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Enhancements:
Bug fixes:
  • Fix architecture for pypy on Linux ARM64 by @​mayeut in #​1011
    This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.
Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Enhancements:
Documentation changes:
Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

Bug Fixes:
Enhancements:

New Contributors

Full Changelog: actions/setup-python@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

Bug fixes:
  • Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @​priyagupta108 in #​916
    This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
  • Add arch to cache key by @​Zxilly in #​896
    This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
    Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Documentation changes:
Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v5.2.0

v5.1.1

Compare Source

What's Changed

Bug fixes:
  • fix(ci): update all failing workflows by @​mayeut in #​863
    This update ensures compatibility and optimal performance of workflows on the latest macOS version.
Documentation changes:
Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v5.1.1

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

  • Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

v4.4.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

  • Bump @actions/artifact to 2.1.11 by @​robherley in #​627
    • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

v4.3.6

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.3.6

v4.3.5

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

v4.3.4

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

v4.3.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.35.0: Release: v0.35.0

Compare Source

This release is a duplicate of 0.35.0 which was not compromised.

As part of our response to the recent supply chain attack, we have migrated all tags to use the v prefix (e.g., v0.35.0 instead of 0.35.0). Going forward, all new releases will use the v prefix convention.

We have intentionally kept the 0.35.0 tag intact to avoid breaking existing workflows that depend on it.

If you are currently using 0.35.0, your workflows are safe — no action is required.

v0.35.0

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@0.34.2...0.35.0

v0.34.0

Compare Source

v0.34.0

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@0.33.1...0.34.0

v0.33.1: Release: v0.33.1

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@v0.33.0...v0.33.1

v0.33.1

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@0.33.0...0.33.1

v0.33.0: Release: v0.33.0

Compare Source

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@v0.32.0...v0.33.0

v0.33.0

Compare Source

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@0.32.0...0.33.0

v0.32.0: Release: v0.32.0

[Compare Source](https://redirect


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the type: dependencies Categorizes issue or PR as related to dependency upgrades. label Apr 22, 2024
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 104d4d6 to cfef2e7 Compare April 25, 2024 13:05
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from a1cbec9 to 72f37e5 Compare May 12, 2024 22:15
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 1b9615c to 433db45 Compare May 23, 2024 03:45
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 7c94a80 to 48ebf07 Compare May 30, 2024 07:08
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 8d793c7 to 5b6f7c3 Compare June 12, 2024 20:32
@renovate renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from 6dcd4f3 to 3985594 Compare June 24, 2024 17:42
@renovate renovate bot force-pushed the renovate/github-actions branch 5 times, most recently from d3b91f9 to 4455235 Compare July 5, 2024 18:27
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from 3c44bac to c2211d4 Compare July 11, 2024 23:47
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from 6a5633f to dd50f2f Compare July 22, 2024 11:50
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from f96dba9 to 0c77bec Compare October 11, 2024 07:14
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from fbc3274 to b7d8ac4 Compare October 22, 2024 14:20
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from a5673f9 to f5eb8c1 Compare October 24, 2024 17:13
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from faf4985 to 0e6646d Compare November 20, 2024 03:27
@renovate renovate bot force-pushed the renovate/github-actions branch from 0e6646d to 3ebca2a Compare December 5, 2024 18:09
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from a087023 to a5129fd Compare December 23, 2024 10:27
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from 8ec4e43 to 28fbb51 Compare January 10, 2025 18:12
@renovate renovate bot force-pushed the renovate/github-actions branch from 28fbb51 to 233da6f Compare January 20, 2025 12:58
@renovate renovate bot force-pushed the renovate/github-actions branch from 233da6f to 9558302 Compare January 28, 2025 09:14
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from 054ae0e to ff09746 Compare February 6, 2025 16:39
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 0e1cbe6 to ac399f7 Compare February 21, 2025 23:23
@renovate renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from 7ea6058 to 6b89664 Compare February 28, 2025 14:28
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from e98b3d5 to 05bcdc1 Compare March 14, 2025 05:49
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: dependencies Categorizes issue or PR as related to dependency upgrades.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants