Skip to content

chore(deps): update github actions#595

Merged
AlexanderBarabanov merged 6 commits into
masterfrom
renovate/github-actions
Jun 5, 2026
Merged

chore(deps): update github actions#595
AlexanderBarabanov merged 6 commits into
masterfrom
renovate/github-actions

Conversation

@oep-renovate
Copy link
Copy Markdown
Contributor

@oep-renovate oep-renovate Bot commented Jun 1, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v6.0.2v6.0.3
actions/create-github-app-token action minor v3.1.1v3.2.0
astral-sh/setup-uv action minor v8.1.0v8.2.0
ghcr.io/renovatebot/renovate (source) minor 43.160.243.212.4
github/codeql-action action minor v4.35.4v4.36.2
renovatebot/renovate minor 43.160.743.212.4
step-security/harden-runner action patch v2.19.0v2.19.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

v3.2.0

Compare Source

Features
Bug Fixes
astral-sh/setup-uv (astral-sh/setup-uv)

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates
renovatebot/renovate (ghcr.io/renovatebot/renovate)

v43.212.4

Compare Source

Bug Fixes

v43.212.3

Compare Source

Bug Fixes
  • json-schema: don't restrict templateable and allowedValues option to an enum (#​43802) (65dd0d4)
Miscellaneous Chores

v43.212.2

Compare Source

Bug Fixes
  • datasource/npm: tolerate non-string time entries in packument (#​43779) (8bbce59)

v43.212.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.56.3 (main) (#​43797) (1a5025e)
Documentation
  • getting-started: reword the Mend Renovate Self-Hosted section (#​43790) (23eaa82)
Miscellaneous Chores

v43.212.0

Compare Source

Features
Miscellaneous Chores

v43.211.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.56.2 (main) (#​43752) (12b6f16)
Miscellaneous Chores

v43.210.2

Compare Source

Bug Fixes
  • datasource: replace getJsonUnchecked in npm/Node/PyPI/Go (#​43699) (c908d07)
Miscellaneous Chores

v43.210.1

Compare Source

Bug Fixes
Build System

v43.210.0

Compare Source

Features
Miscellaneous Chores
Code Refactoring
Continuous Integration
  • linter: detect schema suffixes even when using schema-utils (#​43768) (a2b1a4c)

v43.209.5

Compare Source

Bug Fixes
Miscellaneous Chores
Code Refactoring
  • datasource/bitbucket: add schema validation for request (#​43673) (06a8bdf)
  • nuget: replace getJsonUnchecked with schema validated getJson (#​43700) (be4d2e0)
  • terraform: replace getJsonUnchecked with schema validated getJson (#​43759) (783cbee)
Tests
  • workers/repository: simplify config hash tests for onboarding (#​43757) (27a65eb)

v43.209.4

Compare Source

Bug Fixes
  • datasource: replace getJsonUnchecked in Java, Gradle, Dart, and Flutter (#​43697) (ef557ac)
Miscellaneous Chores
Continuous Integration

v43.209.3

Compare Source

Bug Fixes
  • workers/repository: correctly render schedule for vulnerability alerts (#​43743) (bcecdad)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.10.22 (main) (#​43754) (00baa5c)

v43.209.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.55.6 (main) (#​43751) (160e9f9)

v43.209.1

Compare Source

Bug Fixes
Documentation
Miscellaneous Chores

v43.209.0

Compare Source

Features
Documentation
  • ensure that config in documentation is error and warning free (#​43727) (128f446)

v43.208.2

Compare Source

Bug Fixes
Tests

v43.208.1

Compare Source

Bug Fixes
  • config-validator: correctly warn when no files are being validated (#​43732) (16c4b93)
  • validation: allow globs and regexes in cacheTtlOverride (#​43734) (a9a47c3)
Miscellaneous Chores
  • deps: update github/codeql-action action to v4.36.1 (main) (#​43733) (4a50ea0)

v43.208.0

Compare Source

[!NOTE]
This may lead to recreation of PRs due to the change in title.

Features

v43.207.4

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.55.4 (main) (#​43720) (a65e279)

v43.207.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.55.2 (main) (#​43717) (c17741f)

v43.207.2

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update devcontainers/ci action to v0.3.1900000450 (main) (#​43714) (0d78978)

v43.207.1

Compare Source

Bug Fixes

v43.207.0

Compare Source

Features

v43.206.1

Compare Source

Bug Fixes
Documentation
Build System

v43.206.0

Compare Source

Features

v43.205.3

Compare Source

Documentation
Tests
Build System

v43.205.2

Compare Source

Build System

v43.205.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.55.1 (main) (#​43694) (b69b637)
Miscellaneous Chores

v43.205.0

Compare Source

Features
Bug Fixes
  • autoreplace: handle digest-only update without replaceString (#​42840) (2d0d32c)
Miscellaneous Chores
  • deps: update containerbase/internal-tools action to v4.6.36 (main) (#​43690) (a9db3a3)

v43.204.1

Compare Source

Bug Fixes
  • workers/repository: skip pending-version check when re-extracted dep lacks resolved version (#​43348) (0ab2acf), closes #​41629
Miscellaneous Chores

v43.204.0

Compare Source

Features
Documentation

v43.203.0

Compare Source

Features
Documentation
Miscellaneous Chores

v43.202.1

Compare Source

Miscellaneous Chores
  • deps: update dependency protobufjs@​8.0.1 to v8.4.2 (main) (#​43671) (27dd08d)
Build System

v43.202.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.55.0 (main) (#​43669) (f3ed6fb)

v43.201.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.54.2 (main) (#​43668) (05bd161)

v43.201.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.54.1 (main) (#​43667) (7b74cba)
Miscellaneous Chores
  • deps: update dependency protobufjs@​8.0.1 to v8.4.1 (main) (#​43666) (0b6059d)

v43.201.1

Compare Source

Miscellaneous Chores
Build System

v43.201.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.54.0 (main) (#​43662) (7929cc5)
Build System

v43.200.1

Compare Source

Bug Fixes

v43.200.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.53.0 (main) (#​43655) (675baee)
Miscellaneous Chores
Continuous Integration

v43.199.0

Compare Source

Features
Miscellaneous Chores

v43.198.0

Compare Source

Features
Documentation
  • docs: remove usage of prettier-ignore in site generation (#​43632) (3ecf715)
Continuous Integration
  • normalize admonition indentation using mkdocs-admonition (#​43630) (e839b18)

v43.197.0

Compare Source

Features
Bug Fixes
  • config-migration: always reset migration info (#​43628) (c116326)
  • lookup: try to find a release for changelog by newVersion if not found by newValue (#​38894) (950f9a4)
  • versioning/maven: do not insert hyphens in right range boundaries with transition (#​43626) (86a9fe5)
Documentation
Miscellaneous Chores
Continuous Integration

v43.196.1

Compare Source

Bug Fixes

v43.196.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.52.0 (main) (#​43617) (07402e7)
Build System

v43.195.13

Compare Source

Build System

v43.195.12

Compare Source

Build System

v43.195.11

Compare Source

Build System

v43.195.10

Compare Source

Bug Fixes

v43.195.9

Compare Source

Documentation
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.10.19 (main) (#​43604) (c1f0a4d)
  • renovate: group depName=node together (#​43596) (88d7436)
Build System
Continuous Integration

v43.195.8

Compare Source

Documentation
Miscellaneous Chores

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • On day 1 of the month (* * 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@oep-renovate oep-renovate Bot requested a review from a team as a code owner June 1, 2026 03:17
@github-actions github-actions Bot added the build Related to build scripts label Jun 1, 2026
@oep-renovate oep-renovate Bot force-pushed the renovate/github-actions branch from 99d4503 to 690c2db Compare June 2, 2026 03:11
mgumowsk
mgumowsk previously approved these changes Jun 2, 2026
@mgumowsk mgumowsk enabled auto-merge June 2, 2026 06:55
@oep-renovate oep-renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 484c552 to 402f869 Compare June 4, 2026 16:34
Signed-off-by: oep-renovate[bot] <212772560+oep-renovate[bot]@users.noreply.github.com>
@oep-renovate oep-renovate Bot force-pushed the renovate/github-actions branch from 402f869 to 615906a Compare June 5, 2026 03:10
Signed-off-by: Barabanov, Alexander <alexander.barabanov@intel.com>
Signed-off-by: Barabanov, Alexander <alexander.barabanov@intel.com>
Signed-off-by: Barabanov, Alexander <alexander.barabanov@intel.com>
Signed-off-by: Barabanov, Alexander <alexander.barabanov@intel.com>
Signed-off-by: Barabanov, Alexander <alexander.barabanov@intel.com>
@mgumowsk mgumowsk added this pull request to the merge queue Jun 5, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jun 5, 2026
@AlexanderBarabanov AlexanderBarabanov added this pull request to the merge queue Jun 5, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jun 5, 2026
@AlexanderBarabanov AlexanderBarabanov added this pull request to the merge queue Jun 5, 2026
Merged via the queue into master with commit 292f628 Jun 5, 2026
52 of 54 checks passed
@AlexanderBarabanov AlexanderBarabanov deleted the renovate/github-actions branch June 5, 2026 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build Related to build scripts

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants