Skip to content

[deps]: Update github-action minor - #8021

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-action-minor
Open

[deps]: Update github-action minor#8021
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-action-minor

Conversation

@renovate

@renovate renovate Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
actions/checkout action minor v6.0.2v6.1.0
actions/setup-dotnet action minor v5.1.0v5.4.0
actions/setup-node action minor v6.4.0v6.5.0
actions/stale action minor v10.3.0v10.4.0
anchore/scan-action action minor v7.3.2v7.4.0
docker/build-push-action action minor v7.2.0v7.3.0
docker/build-push-action action minor v7.0.0v7.3.0
docker/login-action action minor v4.2.0v4.6.0
docker/setup-buildx-action action minor v4.1.0v4.2.0
docker/setup-buildx-action action minor v4.0.0v4.2.0
docker/setup-qemu-action action minor v4.1.0v4.2.0
docker/setup-qemu-action action minor v4.0.0v4.2.0
github/codeql-action action minor v4.36.2v4.37.4 v4.37.6 (+1)
github/codeql-action action minor v4.31.10v4.37.4 v4.37.6 (+1)
launchdarkly/find-code-references action minor v2.14.0v2.16.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/checkout (actions/checkout)

v6.1.0

Compare Source

v6.0.3

Compare Source

actions/setup-dotnet (actions/setup-dotnet)

v5.4.0

Compare Source

What's Changed
Enhancements
Documentation
Bug Fixes
Dependency Updates
New Contributors

Full Changelog: actions/setup-dotnet@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

Enhancements
Dependency Updates
Bug Fixes

New Contributors

Full Changelog: actions/setup-dotnet@v5...v5.3.0

v5.2.0

Compare Source

What's changed

Enhancements
Dependency Updates

Full Changelog: actions/setup-dotnet@v5...v5.2.0

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

actions/stale (actions/stale)

v10.4.0

Compare Source

What's Changed

Bug Fix
Dependency Updates
  • Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by @​dependabot in #​1342

New Contributors

Full Changelog: actions/stale@v10.3.0...v10.4.0

anchore/scan-action (anchore/scan-action)

v7.4.0

Compare Source

v7.4.0
⬆️ Dependencies
docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

docker/login-action (docker/login-action)

v4.6.0

Compare Source

v4.5.2

Compare Source

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.0

Compare Source

v4.3.0

Compare Source

Full Changelog: docker/login-action@v4.2.0...v4.3.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

docker/setup-qemu-action (docker/setup-qemu-action)

v4.2.0

Compare Source

github/codeql-action (github/codeql-action)

v4.37.4

Compare Source

v4.37.3

Compare Source

No user facing changes.

v4.37.2

Compare Source

  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007

v4.37.1

Compare Source

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019

v4.37.0

Compare Source

  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973

v4.36.3

Compare Source

No user facing changes.

launchdarkly/find-code-references (launchdarkly/find-code-references)

v2.16.0

Compare Source

Added:
  • debug logging for HTTP response status codes
  • auth header for GitHub Action runs
Fixed:
  • filepattern alias contents are now concatenated once per alias rather than once per flag key, fixing out-of-memory failures on large repositories
Changed:
  • updated dependencies

Version 2.15.0 was never released. Its Docker images exist on Docker Hub from an incomplete release run, but there is no 2.15.0 tag, release, or changelog entry. Use 2.16.0 instead.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every 2nd week starting on the 2 week of the year before 4am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner July 20, 2026 03:17
@renovate renovate Bot added the hold Hold this PR or item until later; DO NOT MERGE label Jul 20, 2026
@renovate
renovate Bot requested a review from dani-garcia July 20, 2026 03:17
@renovate renovate Bot added the hold Hold this PR or item until later; DO NOT MERGE label Jul 20, 2026
@bitwarden-bot bitwarden-bot changed the title [deps]: Update github-action minor [PM-40597] [deps]: Update github-action minor Jul 20, 2026
@bitwarden-bot

Copy link
Copy Markdown
Collaborator

Internal tracking:

@codecov

codecov Bot commented Jul 20, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.77%. Comparing base (42d286e) to head (3875b70).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #8021      +/-   ##
==========================================
+ Coverage   63.35%   67.77%   +4.42%     
==========================================
  Files        2337     2337              
  Lines      101412   101412              
  Branches     9159     9159              
==========================================
+ Hits        64248    68732    +4484     
+ Misses      34951    30371    -4580     
- Partials     2213     2309      +96     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot changed the title [PM-40597] [deps]: Update github-action minor [deps]: Update github-action minor Jul 20, 2026
@renovate
renovate Bot force-pushed the renovate/github-action-minor branch from fdac124 to 7d54324 Compare July 20, 2026 14:30
@renovate
renovate Bot force-pushed the renovate/github-action-minor branch from 7d54324 to 3875b70 Compare August 8, 2026 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

hold Hold this PR or item until later; DO NOT MERGE

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant