Merged
Conversation
Contributor
Author
|
db96808 to
eb135da
Compare
eb135da to
693c0fa
Compare
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v7.0.0→v8.0.0v7→v82.331.0→2.332.0v6.0.0→v7.0.0v6→v7v0.164.3→v0.165.0v1.3.0→v1.4.0v1.0.2→v1.1.0v1.290.0→v1.293.0v1.72.0→v1.73.0v0.13.7→v0.14.0v5.7.0→v5.8.0v5.16.5→v5.17.0d62b90e→e7be49av1.9.0→v1.10.0v0.19.2→v0.20.1v1.55.0→v1.56.0v3.13.0→v3.14.0v3.13.0→v3.14.0v3.13.0→v3.14.0v3.13.0→v3.14.0v3.13.0→v3.14.0v3.13.0→v3.14.0v3.13.0→v3.14.0v3.13.0→v3.14.0v4.26.0→v4.27.0v3.223.0→v3.224.0v2.23.0→v2.24.7v0.4.0→v0.5.0v1.17.0→v1.18.0v0.50.0→v0.51.042d3e9b→a57be143.223.0→3.224.0v1.55.0→v1.56.0v3.13.0→v3.14.0799cc02→b3b98e0Release Notes
actions/download-artifact (actions/download-artifact)
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter tofalse.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
actions/runner (actions/runner)
v2.332.0Compare Source
What's Changed
Run /./instead ofRun ./by @ericsciple in #4218New Contributors
Full Changelog: actions/runner@v2.331.0...v2.332.0
Note: Actions Runner follows a progressive release policy, so the latest release might not be available to your enterprise, organization, or repository yet.
To confirm which version of the Actions Runner you should expect, please view the download instructions for your enterprise, organization, or repository.
See https://docs.github.com/en/enterprise-cloud@latest/actions/hosting-your-own-runners/adding-self-hosted-runners
Windows x64
We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.
The following snipped needs to be run on
powershell:Windows arm64
We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.
The following snipped needs to be run on
powershell:OSX x64
OSX arm64 (Apple silicon)
Linux x64
Linux arm64
Linux arm
Using your self hosted runner
For additional details about configuring, running, or shutting down the runner please check out our product docs.
SHA-256 Checksums
The SHA-256 checksums for the packages included in this build are shown below:
actions/upload-artifact (actions/upload-artifact)
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
cirruslabs/cirrus-cli (cirruslabs/cirrus-cli)
v0.165.0Compare Source
What's Changed
Full Changelog: cirruslabs/cirrus-cli@v0.164.3...v0.165.0
ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)
v1.4.0Compare Source
What's Changed
Full Changelog: ProtonMail/go-crypto@v1.3.0...v1.4.0
alexkohler/prealloc (github.com/alexkohler/prealloc)
v1.1.0Compare Source
v1.0.3Compare Source
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/ec2)
v1.293.0General Highlights
Module Highlights
github.com/aws/aws-sdk-go-v2/service/backupgateway: v1.26.0github.com/aws/aws-sdk-go-v2/service/ec2: v1.293.0github.com/aws/aws-sdk-go-v2/service/ecs: v1.73.0github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.9.10github.com/aws/aws-sdk-go-v2/service/marketplaceentitlementservice: v1.36.0github.com/aws/aws-sdk-go-v2/service/marketplacemetering: v1.36.0github.com/aws/aws-sdk-go-v2/service/securityhub: v1.68.0v1.292.0Module Highlights
github.com/aws/aws-sdk-go-v2/service/batch: v1.60.2github.com/aws/aws-sdk-go-v2/service/ec2: v1.292.0github.com/aws/aws-sdk-go-v2/service/neptune: v1.44.0github.com/aws/aws-sdk-go-v2/service/wafv2: v1.71.0v1.291.0Module Highlights
github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.55.0github.com/aws/aws-sdk-go-v2/service/ec2: v1.291.0github.com/aws/aws-sdk-go-v2/service/elasticsearchservice: v1.38.0github.com/aws/aws-sdk-go-v2/service/elementalinference: v1.0.0github.com/aws/aws-sdk-go-v2/service/medialive: v1.93.0github.com/aws/aws-sdk-go-v2/service/observabilityadmin: v1.10.0github.com/aws/aws-sdk-go-v2/service/opensearch: v1.58.0github.com/aws/aws-sdk-go-v2/service/partnercentralselling: v1.15.0daixiang0/gci (github.com/daixiang0/gci)
v0.14.0Compare Source
AST Support is Coming!
See details in #241
Other Changes
New Contributors
Full Changelog: daixiang0/gci@v0.13.7...v0.14.0
go-git/go-billy (github.com/go-git/go-billy/v5)
v5.8.0Compare Source
What's Changed
Full Changelog: go-git/go-billy@v5.7.0...v5.8.0
go-git/go-git (github.com/go-git/go-git/v5)
v5.17.0Compare Source
What's Changed
Full Changelog: go-git/go-git@v5.16.5...v5.17.0
kisielk/errcheck (github.com/kisielk/errcheck)
v1.10.0Compare Source
What's Changed
New Contributors
Full Changelog: kisielk/errcheck@v1.9.0...v1.10.0
prometheus/procfs (github.com/prometheus/procfs)
v0.20.1Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/procfs@v0.20.0...v0.20.1
v0.20.0Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/procfs@v0.19.2...v0.20.0
pulumi/pulumi-aws-native (github.com/pulumi/pulumi-aws-native/sdk)
v1.56.0Compare Source
Changelog
9a35b1eAutomated SDK generation @ aws-cloudformation-user-guide19dc52c(#2853)pulumi/pulumi-azure-native-sdk (github.com/pulumi/pulumi-azure-native-sdk/authorization/v3)
v3.14.0Compare Source
pulumi/pulumi-kubernetes (github.com/pulumi/pulumi-kubernetes/sdk/v4)
v4.27.0Compare Source
pulumi/pulumi (github.com/pulumi/pulumi/sdk/v3)
v3.224.0Compare Source
3.224.0 (2026-02-26)
Features
[backend/diy] Add zstd compression option for DIY backend state files
#21877
[engine] Automatically make invoke outputs secret when there is a secret input, and the invoke provider does not support secrets
[cli/package] Support source-based packages in
pulumi schema check, not just schema files#21897
Bug Fixes
[pkg] Correct the schema for "pulumi:pulumi:StackReference"
#21895
[programgen/nodejs] Correct the semantics of singleOrNone in generated files
#21947
[sdk/python] Fix
StepEventMetadata.from_jsonreadingdetailed_diff(snake_case) instead ofdetailedDiff(camelCase), andPolicyEvent.from_jsonreadingresource_urninstead ofresourceUrn, causing both fields to always beNone#21714
[sdk/python] Convert integer component inputs to
int#21944
[sdk/python] Fix crash in forked processes using automation API
#21937
[engine] Fix panic when a new component resource in the program is not targeted
#21957
Miscellaneous
[sdk] Update java, dotnet & yaml
#21961
[sdk/python] Improve the performance of
contains_unknownsfor large objects#21893
securego/gosec (github.com/securego/gosec/v2)
v2.24.7Compare Source
Changelog
bb17e42Ignore nosec comments in action integration workflow to generate some warnings (#1573)e1502adAdd a workflow for action integration test (#1571)f8691bdfix(sarif): avoid invalid null relationships in SARIF output (#1569)ade1d0echore: migrate gosec container image references to GHCR (#1567)v2.24.6Compare Source
Changelog
88835e8Update gorelease to use the latest cosign bundle argument (#1565)v2.24.5Compare Source
v2.24.4Compare Source
v2.24.3Compare Source
v2.24.2Compare Source
v2.24.1Compare Source
v2.24.0Compare Source
Changelog
271492bfix: G704 false positive on const URL (#1551)1341aeafix(G705): eliminate false positive for non-HTTP io.Writer (#1550)f2262c8G120: avoid false positive when MaxBytesReader is applied in middleware (#1547)5b580c7Fix G602 regression coverage for issue #1545 and stabilize G117 TOML test dependency (#1546)eba2d15taint: skipcontext.Contextarguments during taint propagation to fix false positives (#1543)a6381c1test: add missing rules to formatter report tests (#1540)fea9725chore(deps): update all dependencies (#1541)f3e2facRegenrate the TLS config rule (#1539)200461fImprove documentation (#1538)078a62aExpand analyzer-core test coverage for orchestration, go/analysis adapter logic, and taint integration (#1537)ffdc620Add unit tests for CLI orchestration, TLS config generation, and SSA cache behavior (#1536)c13a486Add G707 taint analyzer for SMTP command/header injection (#1535)f61ed31Add G123 analyzer for tls.VerifyPeerCertificate resumption bypass risk (#1534)b568aa1Add G122 SSA analyzer for filepath.Walk/WalkDir symlink TOCTOU race risks (#1532)1735e5afix(G602): avoid false positives for range-over-array indexing (#1531)caf93d0Improve taint analyzer performance with shared SSA cache, parallel analyzer execution, and CI regression guard (#1530)bd11fbe](https://redirect.github.com/securego/gosec/commit/bd11fbe2bacb0abf1e541df8bConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.