Skip to content

Conversation

bootc-bot[bot]
Copy link
Contributor

@bootc-bot bootc-bot bot commented Sep 8, 2025

This PR contains the following updates:

Package Type Update Change
EmbarkStudios/cargo-deny-action action major v1 -> v2
actions/checkout action major v3 -> v5
actions/checkout action major v4 -> v5
actions/create-github-app-token action major v1 -> v2
actions/download-artifact action major v4.1.8 -> v5.0.0
actions/labeler action major v5 -> v6
actions/setup-python action major v4 -> v6
actions/upload-pages-artifact action major v3 -> v4
dialoguer dependencies minor 0.11.0 -> 0.12.0
python uses-with minor 3.11 -> 3.13
quay.io/fedora/fedora-bootc container major 41 -> 44
quickcheck dev-dependencies pin 1 -> =1.0.3

Release Notes

EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)

v2

Compare Source

actions/checkout (actions/checkout)

v5

Compare Source

v4

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

v2

Compare Source

actions/download-artifact (actions/download-artifact)

v5.0.0

Compare Source

What's Changed
v5.0.0
🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

  • By name: name: my-artifact → extracted to path/ (direct)
  • By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

  • By name: name: my-artifact → extracted to path/ (unchanged)
  • By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)
Migration Guide
✅ No Action Needed If:
  • You download artifacts by name
  • You download multiple artifacts by ID
  • You already use merge-multiple: true as a workaround
⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

##### Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path
New Contributors

Full Changelog: actions/download-artifact@v4...v5.0.0

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

v4.2.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

v4.1.9

Compare Source

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

actions/labeler (actions/labeler)

v6

Compare Source

actions/setup-python (actions/setup-python)

v6

Compare Source

v5

Compare Source

actions/upload-pages-artifact (actions/upload-pages-artifact)

v4

Compare Source

console-rs/dialoguer (dialoguer)

v0.12.0

Compare Source

actions/python-versions (python)

v3.13.7: 3.13.7

Compare Source

Python 3.13.7

v3.13.6: 3.13.6

Compare Source

Python 3.13.6

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0

v3.12.11: 3.12.11

Compare Source

Python 3.12.11

v3.12.10: 3.12.10

Compare Source

Python 3.12.10

v3.12.9: 3.12.9

Compare Source

Python 3.12.9

v3.12.8: 3.12.8

Compare Source

Python 3.12.8

v3.12.7: 3.12.7

Compare Source

Python 3.12.7

v3.12.6: 3.12.6

Compare Source

Python 3.12.6

v3.12.5: 3.12.5

Compare Source

Python 3.12.5

v3.12.4: 3.12.4

Compare Source

Python 3.12.4

v3.12.3: 3.12.3

Compare Source

Python 3.12.3

v3.12.2: 3.12.2

Compare Source

Python 3.12.2

v3.12.1: 3.12.1

Compare Source

Python 3.12.1

v3.12.0: 3.12.0

Compare Source

Python 3.12.0


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
@bootc-bot bootc-bot bot requested a review from cgwalters September 8, 2025 00:34
Copy link
Contributor

@p5 p5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Most look sane, though there's still some tweaks required.

Hoping deps will be split into GHA, Rust and Docker after #1591

runs-on: ubuntu-latest
container:
image: quay.io/fedora/fedora-bootc:41
image: quay.io/fedora/fedora-bootc:44
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will make a PR tomorrow to ignore dependency updates to this one too. Renovate struggles with Fedora versions


[dev-dependencies]
quickcheck = "1"
quickcheck = "=1.0.3"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this should be prevented after #1591

@bootc-bot
Copy link
Contributor Author

bootc-bot bot commented Sep 8, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@bootc-bot bootc-bot bot changed the title fix(deps): update all dependencies fix(deps): update all dependencies - autoclosed Sep 8, 2025
@bootc-bot bootc-bot bot closed this Sep 8, 2025
@bootc-bot bootc-bot bot deleted the bootc-renovate/all branch September 8, 2025 12:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant