ci(deps): update github actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v4.1.7 -> v5.0.0
actions/checkout	action	major	v4 -> v5
actions/create-github-app-token	action	major	v1.10.4 -> v2.1.4
actions/github-script	action	major	v7.0.1 -> v8.0.0
actions/setup-java	action	major	v4 -> v5
actions/setup-node	action	major	v4 -> v6
actions/stale	action	major	v9.0.0 -> v10.1.0
amannn/action-semantic-pull-request	action	major	v5.5.3 -> v6.1.1

---

Release Notes

actions/checkout (actions/checkout)

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in https://github.com/actions/checkout/pull/2226
• Prepare v5.0.0 release by @​salmanmkc in https://github.com/actions/checkout/pull/2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in https://github.com/actions/checkout/pull/1971
• Add internal repos for checking out multiple repositories by @​mouismail in https://github.com/actions/checkout/pull/1977
• Documentation update - add recommended permissions to Readme by @​benwells in https://github.com/actions/checkout/pull/2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in https://github.com/actions/checkout/pull/2044
• Update README.md by @​nebuk89 in https://github.com/actions/checkout/pull/2194
• Update CODEOWNERS for actions by @​TingluoHuang in https://github.com/actions/checkout/pull/2224
• Update package dependencies by @​salmanmkc in https://github.com/actions/checkout/pull/2236
• Prepare release v4.3.0 by @​salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

• @​motss made their first contribution in https://github.com/actions/checkout/pull/1971
• @​mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
• @​benwells made their first contribution in https://github.com/actions/checkout/pull/2043
• @​nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
• @​salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

actions/create-github-app-token (actions/create-github-app-token)

v2.1.4

Compare Source

Bug Fixes

• deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#​257) (bef1eaf)

v2.1.3

Compare Source

Bug Fixes

• deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#​254) (f3d5ec2)

v2.1.2

Compare Source

Bug Fixes

• deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#​256) (5d7307b)

v2.1.1

Compare Source

Bug Fixes

• revert "use node24 as runner" (#​278) (5204204), closes actions/create-github-app-token#267

v2.1.0

Compare Source

Features

• use node24 as runner (#​267) (a1cbe0f)

v2.0.6

Compare Source

Bug Fixes

• replace - with _ (#​246) (3336784)

v2.0.5

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 3 updates (#​240) (d64d7d7)

v2.0.4

Compare Source

Bug Fixes

• permission input handling (#​243) (2950cbc)

v2.0.3

Compare Source

Bug Fixes

• README: use v2 in examples (#​234) (9ba274d), closes #​232
• use core.getBooleanInput() to retrieve boolean input values (#​223) (c3c17c7)

v2.0.2

Compare Source

Bug Fixes

• improve log messages for token creation (#​226) (eaef294)

v2.0.1

Compare Source

Bug Fixes

• deps: bump the production-dependencies group across 1 directory with 2 updates (#​228) (2411bfc)

v2.0.0

Compare Source

• feat!: remove deprecated inputs (#​213) (5cc811b)

BREAKING CHANGES

• Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

v1.12.0

Compare Source

Features

• permissions (#​168) (0e0aa99)

v1.11.7

Compare Source

Bug Fixes

• deps: bump undici from 5.28.4 to 7.5.0 (#​214) (a24b46a)

v1.11.6

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#​210) (1ff1dea)

v1.11.5

Compare Source

Bug Fixes

• deps: bump @​octokit/request from 9.2.0 to 9.2.2 (#​209) (8cedd97), closes #​740 #​738 #​740 #​737 #​738 #​736 #​735 #​734 #​733 #​732
• deps: bump @​octokit/request-error from 6.1.6 to 6.1.7 (#​208) (415f6a5), closes #​494 #​491 #​490 #​488 #​486 #​487 #​485 #​484

v1.11.4

Compare Source

Bug Fixes

• deps: bump @​octokit/endpoint from 10.1.1 to 10.1.3 (#​207) (d30def8), closes #​507 #​514 #​512 #​511 #​509 #​508 #​507 #​506 #​505 #​504

v1.11.3

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 3 updates (#​203) (8e85a3c), closes #​665 #​665 #​663 #​662 #​661 #​659 #​660 #​658 #​656 #​657 #​655 #​731 nodejs/undici#4016 nodejs/undici#4017 nodejs/undici#4018 nodejs/undici#4008 nodejs/undici#3991 nodejs/undici#4001 nodejs/undici#3980 nodejs/undici#4003 nodejs/undici#3965 nodejs/undici#4002 nodejs/undici#4006 nodejs/undici#3956 nodejs/undici#3964 nodejs/undici#3447 #​3966 nodejs/undici#3967 nodejs/undici#3971 nodejs/undici#3954 nodejs/undici#3972 nodejs/undici#3974 nodejs/undici#3976 #​3975 nodejs/undici#3977 nodejs/undici#3978 nodejs/undici#3981 nodejs/undici#3983 nodejs/undici#3986 #​4021 #​4018 #​4017 #​4016 #​4008 #​4007 #​4006 #​3965

v1.11.2

Compare Source

Bug Fixes

• deps: bump @​octokit/request from 9.1.3 to 9.1.4 in the production-dependencies group (#​196) (b4192a5), closes #​730 #​730 #​729 #​727 #​726 #​723 #​724 #​722 #​721 #​720 #​719
• deps: bump undici from 6.19.8 to 7.2.0 (#​198) (29aa051), closes nodejs/undici#3958 nodejs/undici#3955 nodejs/undici#3962 nodejs/undici#3921 nodejs/undici#3923 nodejs/undici#3925 nodejs/undici#3926 nodejs/undici#3924 nodejs/undici#3933 nodejs/undici#3916 nodejs/undici#3930 nodejs/undici#3938 #​3937 nodejs/undici#3940 nodejs/undici#3931 nodejs/undici#3941 nodejs/undici#3911 nodejs/undici#3888 nodejs/undici#3939 nodejs/undici#3947 nodejs/undici#3945 nodejs/undici#3916 nodejs/undici#3893 nodejs/undici#3902 #​3901 nodejs/undici#3903 nodejs/undici#3905 nodejs/undici#3900 nodejs/undici#3913 nodejs/undici#3910 nodejs/undici#3909 nodejs/undici#3906 nodejs/undici#3922 #​3962 #​3955 #​3958 #​3945 #​3947 #​3939 #​3888 #​3911 #​3941

v1.11.1

Compare Source

What's Changed

Bug Fixes

• deps: bump the production-dependencies group across 1 directory with 3 updates by @​dependabot in #​193

Full Changelog: actions/create-github-app-token@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Features

• Allow repositories input to be comma or newline-separated by @​peter-evans in #​169

New Contributors

• @​peter-evans made their first contribution in #​169

Full Changelog: actions/create-github-app-token@v1.10.4...v1.11.0

actions/github-script (actions/github-script)

v8.0.0

Compare Source

v7.1.0

Compare Source

What's Changed

• Upgrade husky to v9 by @​benelan in #​482
• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​485
• Upgrade IA Publish by @​Jcambass in #​486
• Fix workflow status badges by @​joshmgross in #​497
• Update usage of actions/upload-artifact by @​joshmgross in #​512
• Clear up package name confusion by @​joshmgross in #​514
• Update dependencies with npm audit fix by @​joshmgross in #​515
• Specify that the used script is JavaScript by @​timotk in #​478
• chore: Add Dependabot for NPM and Actions by @​nschonni in #​472
• Define permissions in workflows and update actions by @​joshmgross in #​531
• chore: Add Dependabot for .github/actions/install-dependencies by @​nschonni in #​532
• chore: Remove .vscode settings by @​nschonni in #​533
• ci: Use github/setup-licensed by @​nschonni in #​473
• make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @​iamstarkov in #​508
• Remove octokit README updates for v7 by @​joshmgross in #​557
• docs: add "exec" usage examples by @​neilime in #​546
• Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @​dependabot[bot] in #​563
• Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @​dependabot[bot] in #​575
• Clearly document passing inputs to the script by @​joshmgross in #​603
• Update README.md by @​nebuk89 in #​610

New Contributors

• @​benelan made their first contribution in #​482
• @​Jcambass made their first contribution in #​485
• @​timotk made their first contribution in #​478
• @​iamstarkov made their first contribution in #​508
• @​neilime made their first contribution in #​546
• @​nebuk89 made their first contribution in #​610

Full Changelog: actions/github-script@v7...v7.1.0

actions/setup-java (actions/setup-java)

v5

Compare Source

actions/setup-node (actions/setup-node)

v6

Compare Source

v5

Compare Source

actions/stale (actions/stale)

v10.1.0

Compare Source

What's Changed

• Add only-issue-types option to filter issues by type by @​Bibo-Joshi in #​1255

New Contributors

• @​Bibo-Joshi made their first contribution in #​1255

Full Changelog: actions/stale@v10...v10.1.0

v10.0.0

Compare Source

What's Changed

Breaking Changes

• Upgrade to node 24 by @​salmanmkc in #​1279
  Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

Enhancement

• Introducing sort-by option by @​suyashgaonkar in #​1254

Dependency Upgrades

• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot[bot] in #​1186
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot[bot] in #​1201
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in #​1226
• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​suyashgaonkar in #​1233
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in #​1251
• Upgrade form-data to bring in fix for critical vulnerability by @​gowridurgad in #​1277

Documentation changes

• Changelog update for recent releases by @​suyashgaonkar in #​1224
• Permissions update in Readme by @​ghadimir in #​1248

New Contributors

• @​suyashgaonkar made their first contribution in #​1224
• @​GhadimiR made their first contribution in #​1248
• @​gowridurgad made their first contribution in #​1277
• @​salmanmkc made their first contribution in #​1279

Full Changelog: actions/stale@v9...v10.0.0

v9.1.0

Compare Source

What's Changed

• Documentation update by @​Marukome0743 in #​1116
• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​1179
• Update undici from 5.28.2 to 5.28.4 by @​dependabot in #​1150
• Update actions/checkout from 3 to 4 by @​dependabot in #​1091
• Update actions/publish-action from 0.2.2 to 0.3.0 by @​dependabot in #​1147
• Update ts-jest from 29.1.1 to 29.2.5 by @​dependabot in #​1175
• Update @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in #​1191
• Update @​types/jest from 29.5.11 to 29.5.14 by @​dependabot in #​1193
• Update @​actions/cache from 3.2.2 to 4.0.0 by @​dependabot in #​1194

New Contributors

• @​Marukome0743 made their first contribution in #​1116
• @​Jcambass made their first contribution in #​1179

Full Changelog: actions/stale@v9...v9.1.0

amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)

v6.1.1

Compare Source

Bug Fixes

• Parse headerPatternCorrespondence properly (#​295) (800da4c)

v6.1.0

Compare Source

Features

• Support providing regexps for types (#​292) (a30288b)

Bug Fixes

• Remove trailing whitespace from "unknown release type" error message (#​291) (afa4edb)

v6.0.1

Compare Source

Bug Fixes

• Actually execute action (#​289) (58e4ab4)

v6.0.0

Compare Source

⚠ BREAKING CHANGES

• Upgrade action to use Node.js 24 and ESM (#​287)

Features

• Upgrade action to use Node.js 24 and ESM (#​287) (bc0c9a7)

---

Configuration

📅 Schedule: Branch creation - On day 1 of the month ( * * 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[HapagLloydTechnicalUser]

Auto approve Renovate PR (organization rule)

[github-actions]

Hey @renovate[bot]! 👋

Thank you for your contribution to the project. Please refer to the contribution rules for a quick overview of the process.

Make sure that this PR clearly explains:

• the problem being solved
• the best way a reviewer and you can test your changes

With submitting this PR you confirm that you hold the rights of the code added and agree that it will published under this LICENSE.

The following ChatOps commands are supported:

• /help: notifies a maintainer to help you out

Simply add a comment with the command in the first line. If you need to pass more information, separate it with a blank line from the command.

This message was generated automatically. You are welcome to improve it.