chore(deps): update all non-major github action dependencies by renovate[bot] · Pull Request #360 · cds-snc/forms-api

renovate · 2026-05-16T06:11:08Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	minor	`v4` → `v4.3.1`
actions/setup-python	action	minor	`v5` → `v5.6.0`
github/codeql-action	action	patch	`v3.35.3` → `v3.35.4`	`v3.35.5`

Review

Updates have been tested and work
If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

Release Notes

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

`v4.1.0`

Compare Source

Add support for partial checkout filters

actions/setup-python (actions/setup-python)

`v5.6.0`

Compare Source

What's Changed

Workflow updates related to Ubuntu 20.04 by @aparnajyothi-y in #1065
Fix for Candidate Not Iterable Error by @aparnajyothi-y in #1082
Upgrade semver and @types/semver by @dependabot in #1091
Upgrade prettier from 2.8.8 to 3.5.3 by @dependabot in #1046
Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in #1081

Full Changelog: actions/setup-python@v5...v5.6.0

`v5.5.0`

Compare Source

What's Changed

Enhancements:

Support free threaded Python versions like '3.13t' by @colesbury in #973
Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @action/cache from 4.0.0 to 4.0.3 by @priya-kinthali in #1056
Add support for .tool-versions file in setup-python by @mahabaleshwars in #1043

Bug fixes:

Fix architecture for pypy on Linux ARM64 by @mayeut in #1011
This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1016
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1015

New Contributors

@colesbury made their first contribution in #973
@mahabaleshwars made their first contribution in #1043

Full Changelog: actions/setup-python@v5...v5.5.0

`v5.4.0`

Compare Source

What's Changed

Enhancements:

Update cache error message by @aparnajyothi-y in #968
Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @priya-kinthali in #985
Configure Dependabot settings by @HarithaVattikuti in #1008

Documentation changes:

Readme update - recommended permissions by @benwells in #1009
Improve Advanced Usage examples by @lrq3000 in #645

Dependency updates:

Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #1012
Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @dependabot in #895
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #1014
Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in #1020
Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @dependabot in #1019
Upgrade @actions/cache to ^4.0.0 by @priyagupta108 in #1007

New Contributors

@benwells made their first contribution in #1009
@HarithaVattikuti made their first contribution in #1008
@lrq3000 made their first contribution in #645

Full Changelog: actions/setup-python@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #941
Upgrade IA publish by @Jcambass in #943

Bug Fixes:

Normalise Line Endings to Ensure Cross-Platform Consistency by @priya-kinthali in #938
Revise isGhes logic by @jww3 in #963
Bump pillow from 7.2 to 10.2.0 by @aparnajyothi-y in #956

Enhancements:

Enhance workflows and documentation updates by @priya-kinthali in #965
Bump default versions to latest by @jeffwidman in #905

New Contributors

@Jcambass made their first contribution in #941
@jww3 made their first contribution in #963

Full Changelog: actions/setup-python@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Bug fixes:

Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @priyagupta108 in #916
This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
Add arch to cache key by @Zxilly in #896
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.

Documentation changes:

Fix display of emojis in contributors doc by @sciencewhiz in #899
Documentation update for caching poetry dependencies by @gowridurgad in #908

Dependency updates:

Bump @iarna/toml version from 2.2.5 to 3.0.0 by @priya-kinthali in #912
Bump pyinstaller from 3.6 to 5.13.1 by @aparnajyothi-y in #923

New Contributors

@sciencewhiz made their first contribution in #899
@priyagupta108 made their first contribution in #916
@Zxilly made their first contribution in #896
@aparnajyothi-y made their first contribution in #923

Full Changelog: actions/setup-python@v5...v5.2.0

`v5.1.1`

Compare Source

What's Changed

Bug fixes:

fix(ci): update all failing workflows by @mayeut in #863
This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

Documentation update for cache by @gowridurgad in #873

Dependency updates:

Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @dependabot in #893

New Contributors

@gowridurgad made their first contribution in #873

Full Changelog: actions/setup-python@v5...v5.1.1

`v5.1.0`

Compare Source

What's Changed

Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @Shegox in #766.
Dependency updates by @dependabot and @HarithaVattikuti in #817
Documentation changes for version in README by @basnijholt in #776
Documentation changes for link in README by @ukd1 in #793
Documentation changes for link in Advanced Usage by @Jamim in #782
Documentation changes for avoiding rate limit issues on GHES by @priya-kinthali in #835

New Contributors

@basnijholt made their first contribution in #776
@ukd1 made their first contribution in #793
@Jamim made their first contribution in #782
@Shegox made their first contribution in #766
@priya-kinthali made their first contribution in #835

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

github/codeql-action (github/codeql-action)

`v3.35.4`

Compare Source

Update default CodeQL bundle version to 2.25.4. #3881

Configuration

📅 Schedule: (in timezone America/Montreal)

Branch creation
- "every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added Dependencies Renovate labels May 16, 2026

chore(deps): update all non-major github action dependencies

99bd530

renovate Bot force-pushed the renovate/all-non-major-github-action branch from d80a4fd to 99bd530 Compare May 19, 2026 18:03

craigzour approved these changes May 20, 2026

View reviewed changes

craigzour merged commit abe7afe into main May 20, 2026
7 checks passed

craigzour deleted the renovate/all-non-major-github-action branch May 20, 2026 13:26

cds-snc-release-bot Bot mentioned this pull request May 20, 2026

chore: GCForms API release v1.8.1 #362

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major github action dependencies#360

chore(deps): update all non-major github action dependencies#360
craigzour merged 1 commit into
mainfrom
renovate/all-non-major-github-action

renovate Bot commented May 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 16, 2026

Review

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Enhancements:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug Fixes:

Enhancements:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant