fix(deps): update all dependencies #1569

bootc-bot · 2025-09-01T00:39:06Z

This PR contains the following updates:

Package	Type	Update	Change
EmbarkStudios/cargo-deny-action	action	major	`v1` -> `v2`
actions/checkout	action	major	`v3` -> `v5`
actions/checkout	action	major	`v4` -> `v5`
actions/create-github-app-token	action	major	`v1` -> `v2`
actions/download-artifact	action	major	`v4.1.8` -> `v5.0.0`
actions/setup-python	action	major	`v4` -> `v5`
actions/upload-pages-artifact	action	major	`v3` -> `v4`
comfy-table	dependencies	minor	`7.1.4` -> `7.2.0`
dialoguer	dependencies	minor	`0.11.0` -> `0.12.0`
indexmap	dependencies	minor	`2.10.0` -> `2.11.0`
ocidir	dependencies	minor	`0.4.0` -> `0.5.0`
python	uses-with	minor	`3.11` -> `3.13`
quay.io/fedora/fedora-bootc	container	major	`41` -> `44`
quickcheck	dev-dependencies	pin	`1` -> `=1.0.3`
tempfile (source)	workspace.dependencies	minor	`3.20.0` -> `3.21.0`
uuid	dependencies	minor	`1.17.0` -> `1.18.0`

Release Notes

EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)

`v2`

Compare Source

actions/checkout (actions/checkout)

`v5`

Compare Source

`v4`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

actions/create-github-app-token (actions/create-github-app-token)

`v2`

Compare Source

actions/download-artifact (actions/download-artifact)

`v5.0.0`

Compare Source

What's Changed

Update README.md by @nebuk89 in #407
BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in #416

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

By name: name: my-artifact → extracted to path/ (direct)
By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

By name: name: my-artifact → extracted to path/ (unchanged)
By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:

You download artifacts by name
You download multiple artifacts by ID
You already use merge-multiple: true as a workaround

⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

##### Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

@nebuk89 made their first contribution in #407

Full Changelog: actions/download-artifact@v4...v5.0.0

`v4.3.0`

Compare Source

What's Changed

feat: implement new artifact-ids input by @GrantBirki in #401
Fix workflow example for downloading by artifact ID by @joshmgross in #402
Prep for v4.3.0 release by @robherley in #404

New Contributors

@GrantBirki made their first contribution in #401

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

`v4.2.1`

Compare Source

What's Changed

Add unit tests by @GhadimiR in #392
Fix bug introduced in 4.2.0 by @GhadimiR in #391

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

`v4.2.0`

Compare Source

What's Changed

Update README.md by @lkfortuna in #384
Bump artifact version, do digest check by @GhadimiR in #383

New Contributors

@lkfortuna made their first contribution in #384
@GhadimiR made their first contribution in #383

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

`v4.1.9`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #354
docs: small migration fix by @froblesmartin in #370
Update MIGRATION.md by @andyfeller in #372
Update artifact package to 2.2.2 by @yacaovsnc in #380

New Contributors

@Jcambass made their first contribution in #354
@froblesmartin made their first contribution in #370
@andyfeller made their first contribution in #372
@yacaovsnc made their first contribution in #380

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

actions/setup-python (actions/setup-python)

`v5`

Compare Source

actions/upload-pages-artifact (actions/upload-pages-artifact)

`v4`

Compare Source

nukesor/comfy-table (comfy-table)

`v7.2.0`

Compare Source

Chore

Switch to Rust 2024 edition. This bumps the MSRV to 1.85 and thereby no longer supports the wasm32-wasi target.

Fix

Also update the crossterm dependency to 0.29 for windows !181.

console-rs/dialoguer (dialoguer)

`v0.12.0`

Compare Source

indexmap-rs/indexmap (indexmap)

`v2.11.0`

Compare Source

Added insert_sorted_by and insert_sorted_by_key methods to IndexMap,
IndexSet, and VacantEntry, like customizable versions of insert_sorted.
Added is_sorted, is_sorted_by, and is_sorted_by_key methods to
IndexMap and IndexSet, as well as their Slice counterparts.
Added sort_by_key and sort_unstable_by_key methods to IndexMap and
IndexSet, as well as parallel counterparts.
Added replace_index methods to IndexMap, IndexSet, and VacantEntry
to replace the key (or set value) at a given index.
Added optional sval serialization support.

actions/python-versions (python)

`v3.13.7`: 3.13.7

Compare Source

Python 3.13.7

`v3.13.6`: 3.13.6

Compare Source

Python 3.13.6

`v3.13.5`: 3.13.5

Compare Source

Python 3.13.5

`v3.13.4`: 3.13.4

Compare Source

Python 3.13.4

`v3.13.3`: 3.13.3

Compare Source

Python 3.13.3

`v3.13.2`: 3.13.2

Compare Source

Python 3.13.2

`v3.13.1`: 3.13.1

Compare Source

Python 3.13.1

`v3.13.0`: 3.13.0

Compare Source

Python 3.13.0

`v3.12.11`: 3.12.11

Compare Source

Python 3.12.11

`v3.12.10`: 3.12.10

Compare Source

Python 3.12.10

`v3.12.9`: 3.12.9

Compare Source

Python 3.12.9

`v3.12.8`: 3.12.8

Compare Source

Python 3.12.8

`v3.12.7`: 3.12.7

Compare Source

Python 3.12.7

`v3.12.6`: 3.12.6

Compare Source

Python 3.12.6

`v3.12.5`: 3.12.5

Compare Source

Python 3.12.5

`v3.12.4`: 3.12.4

Compare Source

Python 3.12.4

`v3.12.3`: 3.12.3

Compare Source

Python 3.12.3

`v3.12.2`: 3.12.2

Compare Source

Python 3.12.2

`v3.12.1`: 3.12.1

Compare Source

Python 3.12.1

`v3.12.0`: 3.12.0

Compare Source

Python 3.12.0

Stebalien/tempfile (tempfile)

`v3.21.0`

Compare Source

Updated windows-sys requirement to allow version 0.60.x

uuid-rs/uuid (uuid)

`v1.18.0`

Compare Source

What's Changed

Fix up mismatched_lifetime_syntaxes lint by @KodrAus in #837
Conversions between Timestamp and std::time::SystemTime by @dcormier in #835
Wrap the error type used in time conversions by @KodrAus in #838
Prepare for 1.18.0 release by @KodrAus in #839

New Contributors

@dcormier made their first contribution in #835

Full Changelog: uuid-rs/uuid@v1.17.0...v1.18.0

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Signed-off-by: Platform Engineering Bot <[email protected]>

bootc-bot · 2025-09-01T01:38:18Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

fix(deps): update all dependencies

981f6c3

Signed-off-by: Platform Engineering Bot <[email protected]>

bootc-bot bot requested a review from cgwalters September 1, 2025 00:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all dependencies #1569

fix(deps): update all dependencies #1569

Uh oh!

bootc-bot bot commented Sep 1, 2025

Uh oh!

bootc-bot bot commented Sep 1, 2025

Uh oh!

Uh oh!

fix(deps): update all dependencies #1569

Are you sure you want to change the base?

fix(deps): update all dependencies #1569

Uh oh!

Conversation

bootc-bot bot commented Sep 1, 2025

Release Notes

What's Changed

v5.0.0

🚨 Breaking Change

What Changed

Migration Guide

✅ No Action Needed If:

⚠️ Action Required If:

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Chore

Fix

v3.13.7: 3.13.7

v3.13.6: 3.13.6

v3.13.5: 3.13.5

v3.13.4: 3.13.4

v3.13.3: 3.13.3

v3.13.2: 3.13.2

v3.13.1: 3.13.1

v3.13.0: 3.13.0

v3.12.11: 3.12.11

v3.12.10: 3.12.10

v3.12.9: 3.12.9

v3.12.8: 3.12.8

v3.12.7: 3.12.7

v3.12.6: 3.12.6

v3.12.5: 3.12.5

v3.12.4: 3.12.4

v3.12.3: 3.12.3

v3.12.2: 3.12.2

v3.12.1: 3.12.1

v3.12.0: 3.12.0

What's Changed

New Contributors

Configuration

Uh oh!

bootc-bot bot commented Sep 1, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

`v3.13.7`: 3.13.7

`v3.13.6`: 3.13.6

`v3.13.5`: 3.13.5

`v3.13.4`: 3.13.4

`v3.13.3`: 3.13.3

`v3.13.2`: 3.13.2

`v3.13.1`: 3.13.1

`v3.13.0`: 3.13.0

`v3.12.11`: 3.12.11

`v3.12.10`: 3.12.10

`v3.12.9`: 3.12.9

`v3.12.8`: 3.12.8

`v3.12.7`: 3.12.7

`v3.12.6`: 3.12.6

`v3.12.5`: 3.12.5

`v3.12.4`: 3.12.4

`v3.12.3`: 3.12.3

`v3.12.2`: 3.12.2

`v3.12.1`: 3.12.1

`v3.12.0`: 3.12.0