Skip to content

Update actions#23481

Open
renovate[bot] wants to merge 2 commits intomasterfrom
renovate/actions
Open

Update actions#23481
renovate[bot] wants to merge 2 commits intomasterfrom
renovate/actions

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 27, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
DataDog/coverage-upload-github-action action patch v1.0.0 → v1.0.3
DataDog/datadog-static-analyzer-github-action action digest c0e10d1 → 8340f18
DataDog/dd-octo-sts-action action patch v1.0.3 → v1.0.4
DataDog/dd-octo-sts-action action patch v1.0.1 → v1.0.4
actions/cache action patch v5.0.3 → v5.0.5
actions/create-github-app-token action patch v2.2.1 → v2.2.2
actions/download-artifact action patch v8.0.0 → v8.0.1
actions/setup-node action minor v6.2.0 → v6.4.0
actions/upload-artifact action patch v7.0.0 → v7.0.1
docker/build-push-action action minor v7.0.0 → v7.1.0
docker/login-action action minor v4.0.0 → v4.1.0
dorny/paths-filter action patch v3.0.2 → v3.0.3
emibcn/badge-action action patch v2.0.3 → v2.0.4
github/codeql-action action minor v4.33.0 → v4.35.2 v4.35.3
peter-evans/create-pull-request action patch v8.1.0 → v8.1.1
pypa/gh-action-pypi-publish action minor v1.13.0 → v1.14.0
softprops/action-gh-release action minor v2.5.0 → v2.6.2
taiki-e/install-action action minor v2.68.16 → v2.75.22 v2.75.30 (+7)
tj-actions/changed-files action patch v47.0.5 → v47.0.6

Release Notes

DataDog/coverage-upload-github-action (DataDog/coverage-upload-github-action)

v1.0.3

Compare Source

What's Changed

Full Changelog: DataDog/coverage-upload-github-action@v1...v1.0.3

v1.0.2

Compare Source

What's Changed
New Contributors

Full Changelog: DataDog/coverage-upload-github-action@v1...v1.0.2

v1.0.1

Compare Source

What's Changed
New Contributors

Full Changelog: DataDog/coverage-upload-github-action@v1...v1.0.1

DataDog/dd-octo-sts-action (DataDog/dd-octo-sts-action)

v1.0.4

Compare Source

actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

v2.2.2

Compare Source

Bug Fixes
actions/download-artifact (actions/download-artifact)

v8.0.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

actions/setup-node (actions/setup-node)

v6.4.0

Compare Source

v6.3.0

Compare Source

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:
Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

docker/build-push-action (docker/build-push-action)

v7.1.0

Compare Source

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

docker/login-action (docker/login-action)

v4.1.0

Compare Source

Full Changelog: docker/login-action@v4.0.0...v4.1.0

dorny/paths-filter (dorny/paths-filter)

v3.0.3

Compare Source

emibcn/badge-action (emibcn/badge-action)

v2.0.4: Bump Node to 24

Compare Source

github/codeql-action (github/codeql-action)

v4.35.2

Compare Source

  • The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #​3795
  • The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #​3789
  • Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #​3794
  • Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #​3807
  • Update default CodeQL bundle version to 2.25.2. #​3823

v4.35.1

Compare Source

v4.35.0

Compare Source

v4.34.1

Compare Source

  • Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #​3762

v4.34.0

Compare Source

  • Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #​3569
  • We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #​3584
  • Update default CodeQL bundle version to 2.25.0. #​3585
peter-evans/create-pull-request (peter-evans/create-pull-request)

v8.1.1: Create Pull Request v8.1.1

Compare Source

What's Changed

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

v1.14.0

Compare Source

Audit your supply chain regularly!

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @​whitequark💰 in #​397.

📝 Docs

@​woodruffw💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #​388 and @​him2him2💰 brushed up some grammar in the README and SECURITY docs via #​395.

🛠️ Internal Updates

@​woodruffw💰 bumped sigstore and pypi-attestations in the lock file (#​391) and @​webknjaz💰 added infra for using type annotations in the project (#​381).

💪 New Contributors

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​facutuesca💰 and @​woodruffw💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge

softprops/action-gh-release (softprops/action-gh-release)

v2.6.2

Compare Source

What's Changed

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2...v2.6.2

v2.6.1

Compare Source

2.6.1 is a patch release focused on restoring linked discussion thread creation when
discussion_category_name is set. It fixes #764, where the draft-first publish flow
stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

v2.6.0

Compare Source

2.6.0 is a minor release centered on previous_tag support for generate_release_notes,
which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range.
It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync,
a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where
GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Exciting New Features 🎉
Bug fixes 🐛
Other Changes 🔄

v2.5.3

Compare Source

2.5.3 is a patch release focused on the remaining path-handling and release-selection bugs uncovered after 2.5.2.
It fixes #639, #571, #280, #614, #311, #403, and #368.
It also adds documentation clarifications for #541, #645, #542, #393, and #411,
where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed
Bug fixes 🐛
Other Changes 🔄
  • docs: clarify token precedence by @​chenrui333 in #​752
  • docs: clarify GitHub release limits by @​chenrui333 in #​758
  • documentation clarifications for empty-token handling, preserve_order, and special-character asset filename behavior

Full Changelog: softprops/action-gh-release@v2...v2.5.3

v2.5.2

Compare Source

2.5.2 is a patch release focused on the remaining release-creation and prerelease regressions in the 2.5.x bug-fix cycle.
It fixes #705, fixes #708, fixes #740, fixes #741, and fixes #722.
Regression testing covers the shared-tag race, prerelease event behavior, dotfile asset labels,
same-filename concurrent uploads, and blocked-tag cleanup behavior.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.5.2

v2.5.1

Compare Source

2.5.1 is a patch release focused on regressions introduced in 2.5.0 and on release lookup reliability.
It fixes #713, addresses #703, and fixes #724. Regression testing shows that
current master no longer reproduces the finalize-race behavior reported in #704 and #709.

What's Changed
Bug fixes 🐛
Other Changes 🔄
  • dependency updates, including the ESM/runtime compatibility refresh in #​731
New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.5.1

taiki-e/install-action (taiki-e/install-action)

v2.75.22: 2.75.22

Compare Source

  • Update tombi@latest to 0.9.22.

  • Update biome@latest to 2.4.13.

v2.75.21: 2.75.21

Compare Source

  • Update mise@latest to 2026.4.19.

  • Update tombi@latest to 0.9.21.

  • Update syft@latest to 1.43.0.

v2.75.20: 2.75.20

Compare Source

  • Update prek@latest to 0.3.10.

  • Update cargo-xwin@latest to 0.22.0.

v2.75.19: 2.75.19

Compare Source

  • Update wasmtime@latest to 44.0.0.

  • Update tombi@latest to 0.9.20.

  • Update martin@latest to 1.6.0.

  • Update just@latest to 1.50.0.

  • Update mise@latest to 2026.4.18.

  • Update rclone@latest to 1.73.5.

v2.75.18: 2.75.18

Compare Source

  • Update vacuum@latest to 0.26.1.

  • Update wasm-tools@latest to 1.247.0.

  • Update mise@latest to 2026.4.16.

  • Update espup@latest to 0.17.1.

  • Update trivy@latest to 0.70.0.

v2.75.17

Compare Source

Initial release

[2.62.21

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 6am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added qa/skip-qa Automatically skip this PR for the next QA renovate/actions Renovate update of GitHub actions labels Apr 27, 2026
@renovate renovate Bot requested a review from a team as a code owner April 27, 2026 00:21
@renovate renovate Bot added qa/skip-qa Automatically skip this PR for the next QA renovate/actions Renovate update of GitHub actions labels Apr 27, 2026
@datadog-prod-us1-4
Copy link
Copy Markdown
Contributor

datadog-prod-us1-4 Bot commented Apr 27, 2026 •
edited by datadog-prod-us1-6 Bot
Loading

Tests

✨ Fix all issues with BitsAI or with Cursor

⚠️ Warnings

🧪 1 Test failed

❄️ Known flaky: test_e2e_v3_explicit_version from test_e2e_core_vs_python.py   View in Datadog   (Fix with Cursor) 
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 01-check-apikey.sh: executing... 
[cont-init.d] 01-check-apikey.sh: exited 0.
[cont-init.d] 50-ci.sh: executing... 
[cont-init.d] 50-ci.sh: exited 0.
[cont-init.d] 50-ecs-managed.sh: executing... 
...

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 87.28% (+0.12%)

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: ace6cc8 | Docs | Datadog PR Page | Give us feedback!

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 27, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.79%. Comparing base (f585236) to head (ace6cc8).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@datadog-agent-integrations-bot datadog-agent-integrations-bot Bot requested a review from a team as a code owner April 27, 2026 01:32
aiuto
aiuto previously approved these changes Apr 27, 2026
View reviewed changes
@renovate renovate Bot force-pushed the renovate/actions branch from e7e1548 to d3fcf1a Compare May 4, 2026 09:29
This was referenced May 4, 2026
Merged
Merged
@renovate renovate Bot force-pushed the renovate/actions branch from d3fcf1a to ec24746 Compare May 4, 2026 09:45
@renovate renovate Bot force-pushed the renovate/actions branch from ec24746 to 473e9ec Compare May 4, 2026 10:08
@temporal-github-worker-1 temporal-github-worker-1 Bot dismissed aiuto’s stale review May 4, 2026 10:58

Review from aiuto is dismissed. Related teams and files:

  • agent-build
    • .deps/builder_inputs.toml
    • .deps/resolved/linux-aarch64_3.13.txt
    • .deps/resolved/linux-x86_64_3.13.txt
    • .deps/resolved/macos-aarch64_3.13.txt
    • .deps/resolved/macos-x86_64_3.13.txt
    • .deps/resolved/windows-x86_64_3.13.txt
@dd-octo-sts
Copy link
Copy Markdown
Contributor

dd-octo-sts Bot commented May 4, 2026

Validation Report

All 20 validations passed.

Show details
Validation Description Status
agent-reqs Verify check versions match the Agent requirements file ✅
ci Validate CI configuration and Codecov settings ✅
codeowners Validate every integration has a CODEOWNERS entry ✅
config Validate default configuration files against spec.yaml ✅
dep Verify dependency pins are consistent and Agent-compatible ✅
http Validate integrations use the HTTP wrapper correctly ✅
imports Validate check imports do not use deprecated modules ✅
integration-style Validate check code style conventions ✅
jmx-metrics Validate JMX metrics definition files and config ✅
labeler Validate PR labeler config matches integration directories ✅
legacy-signature Validate no integration uses the legacy Agent check signature ✅
license-headers Validate Python files have proper license headers ✅
licenses Validate third-party license attribution list ✅
metadata Validate metadata.csv metric definitions ✅
models Validate configuration data models match spec.yaml ✅
openmetrics Validate OpenMetrics integrations disable the metric limit ✅
package Validate Python package metadata and naming ✅
readmes Validate README files have required sections ✅
saved-views Validate saved view JSON file structure and fields ✅
version Validate version consistency between package and changelog ✅

View full run

@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented May 4, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aiuto aiuto aiuto left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dev/testing dev/tooling ecosystems/review-requested product/review-requested qa/skip-qa Automatically skip this PR for the next QA renovate/actions Renovate update of GitHub actions team/agent-build team/agent-integrations

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aiuto