🚨 Update github actions (release-v0.6) (major) by renovate[bot] · Pull Request #2885 · conforma/cli

renovate · 2025-08-28T13:17:26Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	`v4.3.0` → `v5.0.3`
actions/checkout	action	major	`v4.3.1` → `v6.0.2`
actions/create-github-app-token	action	major	`v1.12.0` → `v2.2.1`
actions/setup-go	action	major	`v5.6.0` → `v6.2.0`
actions/setup-node	action	major	`v4.4.0` → `v6.2.0`
actions/upload-artifact	action	major	`v4.6.2` → `v6.0.0`
actions/upload-pages-artifact	action	major	`v3.0.1` → `v4.0.0`
github/codeql-action	action	major	`v3.31.9` → `v4.32.0`
peter-evans/create-pull-request	action	major	`v7.0.11` → `v8.1.0`

Release Notes

actions/cache (actions/cache)

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

`v6.0.0`

Compare Source

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Update actions checkout to use node 24 by @salmanmkc in #2226
Prepare v5.0.0 release by @salmanmkc in #2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

`v2.1.1`

Compare Source

Bug Fixes

revert "use node24 as runner" (#278) (5204204), closes actions/create-github-app-token#267

`v2.1.0`

Compare Source

Features

use node24 as runner (#267) (a1cbe0f)

`v2.0.6`

Compare Source

Bug Fixes

replace - with _ (#246) (3336784)

`v2.0.5`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#240) (d64d7d7)

`v2.0.4`

Compare Source

Bug Fixes

permission input handling (#243) (2950cbc)

`v2.0.3`

Compare Source

Bug Fixes

README: use v2 in examples (#234) (9ba274d), closes #232
use core.getBooleanInput() to retrieve boolean input values (#223) (c3c17c7)

`v2.0.2`

Compare Source

Bug Fixes

improve log messages for token creation (#226) (eaef294)

`v2.0.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group across 1 directory with 2 updates (#228) (2411bfc)

`v2.0.0`

Compare Source

feat!: remove deprecated inputs (#213) (5cc811b)

BREAKING CHANGES

Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

actions/setup-go (actions/setup-go)

`v6.2.0`

Compare Source

What's Changed

Enhancements

Example for restore-only cache in documentation by @aparnajyothi-y in #696
Update Node.js version in action.yml by @ccoVeille in #691
Documentation update of actions/checkout by @deining in #683

Dependency updates

Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot in #682
Upgrade @actions/cache to v5 by @salmanmkc in #695
Upgrade actions/checkout from 5 to 6 by @dependabot in #686
Upgrade qs from 6.14.0 to 6.14.1 by @dependabot in #703

New Contributors

@ccoVeille made their first contribution in #691
@deining made their first contribution in #683

Full Changelog: actions/setup-go@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in #665
Add support for .tool-versions file and update workflow by @priya-kinthali in #673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in #674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in #617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #641
Upgrade semver and @types/semver by @dependabot in #652

New Contributors

@nicholasngai made their first contribution in #665
@priya-kinthali made their first contribution in #673
@mahabaleshwars made their first contribution in #674

Full Changelog: actions/setup-go@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in #460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in #624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #589
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #591
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in #590
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #594
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in #538
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in #603
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in #618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #631

New Contributors

@matthewhughes934 made their first contribution in #618
@salmanmkc made their first contribution in #624

Full Changelog: actions/setup-go@v5...v6.0.0

actions/setup-node (actions/setup-node)

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

actions/upload-artifact (actions/upload-artifact)

`v6.0.0`

Compare Source

`v5.0.0`

Compare Source

actions/upload-pages-artifact (actions/upload-pages-artifact)

`v4.0.0`

Compare Source

What's Changed

Potentially breaking change: hidden files (specifically dotfiles) will not be included in the artifact by @tsusdere in #102
If you need to include dotfiles in your artifact: instead of using this action, create your own artifact according to these requirements https://github.com/actions/upload-pages-artifact?tab=readme-ov-file#artifact-validation
Pin actions/upload-artifact to SHA by @heavymachinery in #127

Full Changelog: actions/upload-pages-artifact@v3.0.1...v4.0.0

github/codeql-action (github/codeql-action)

`v4.32.0`

Compare Source

Update default CodeQL bundle version to 2.24.0. #3425

`v4.31.11`

Compare Source

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
Improved error handling throughout the CodeQL Action. #3415
Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

`v4.31.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

`v4.31.9`

Compare Source

`v4.31.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

`v4.31.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v4.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

`v4.31.2`

Compare Source

`v4.31.1`

Compare Source

`v4.31.0`

Compare Source

`v4.30.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

Update default CodeQL bundle version to 2.23.3. #3205
Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

`v4.30.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.30.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.7 - 06 Oct 2025

[v4+ only] The CodeQL Action now runs on Node.js v24. #3169

See the full CHANGELOG.md for more information.

`v3.32.0`

Compare Source

Update default CodeQL bundle version to 2.24.0. #3425

`v3.31.11`

Compare Source

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
Improved error handling throughout the CodeQL Action. #3415
Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

`v3.31.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

peter-evans/create-pull-request (peter-evans/create-pull-request)

`v8.1.0`: Create Pull Request v8.1.0

Compare Source

What's Changed

README.md: bump given GitHub actions to their latest versions by @deining in #4265
build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #4273
build(deps-dev): bump the npm group with 2 updates by @dependabot[bot] in #4274
build(deps-dev): bump undici from 6.22.0 to 6.23.0 by @dependabot[bot] in #4284
Update distribution by @actions-bot in #4289
fix: Handle remote prune failures gracefully on self-hosted runners by @peter-evans in #4295
feat: add @octokit/plugin-retry to handle retriable server errors by @peter-evans in #4298

New Contributors

@deining made their first contribution in #4265

Full Changelog: peter-evans/create-pull-request@v8.0.0...v8.1.0

`v8.0.0`: Create Pull Request v8.0.0

Compare Source

What's new in v8

Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

chore: Update checkout action version to v6 by @yonas in #4258
Update actions/checkout references to @v6 in docs by @Copilot in #4259
feat: v8 by @peter-evans in #4260

New Contributors

@yonas made their first contribution in #4258
@Copilot made their first contribution in #4259

Full Changelog: peter-evans/create-pull-request@v7.0.11...v8.0.0

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2025-08-28T13:23:50Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
generative	`70.92% <ø> (ø)`
integration	`70.92% <ø> (ø)`
unit	`70.92% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate · 2025-09-25T21:06:04Z

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

renovate bot added major renovate labels Aug 28, 2025

renovate bot added the release-v0.6 label Aug 28, 2025

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch from f5c439a to 26832eb Compare September 4, 2025 06:00

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 2 times, most recently from 2b3d025 to 8a974f5 Compare September 13, 2025 01:20

renovate bot changed the title ~~🚨 Update github actions (release-v0.6) (major)~~ 🚨 Update github actions (release-v0.6) (major) - abandoned Sep 25, 2025

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch from 8a974f5 to 8cbfbca Compare October 1, 2025 08:54

renovate bot changed the title ~~🚨 Update github actions (release-v0.6) (major) - abandoned~~ 🚨 Update github actions (release-v0.6) (major) Oct 1, 2025

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 4 times, most recently from f905583 to f88a416 Compare October 14, 2025 05:44

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 2 times, most recently from 489317f to aa8727b Compare October 24, 2025 21:40

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 2 times, most recently from 5a42c06 to a7998a8 Compare October 30, 2025 20:54

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 5 times, most recently from bf912dc to ab63c5c Compare November 20, 2025 18:39

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 2 times, most recently from a81db77 to b6f0819 Compare November 24, 2025 14:32

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 4 times, most recently from 8021ff2 to bd80d84 Compare December 6, 2025 01:40

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch from bd80d84 to f0e9036 Compare December 10, 2025 01:40

github-actions bot added the size: S label Dec 10, 2025

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch from f0e9036 to 2cc9bbd Compare December 12, 2025 01:36

github-actions bot added size: M and removed size: S labels Dec 12, 2025

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 7 times, most recently from ead1ef1 to 5c13e06 Compare December 18, 2025 15:22

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 4 times, most recently from f5d72ba to 94ab9b3 Compare January 16, 2026 18:23

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch 4 times, most recently from 07bd74f to 423e8db Compare January 26, 2026 21:08

🚨 Update github actions

284775e

renovate bot force-pushed the renovate/release-v0.6-major-github-actions branch from 423e8db to 284775e Compare January 29, 2026 12:43

dheerajodha merged commit 753f194 into release-v0.6 Feb 2, 2026
8 checks passed

dheerajodha deleted the renovate/release-v0.6-major-github-actions branch February 2, 2026 13:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

🚨 Update github actions (release-v0.6) (major)#2885

🚨 Update github actions (release-v0.6) (major)#2885
dheerajodha merged 1 commit intorelease-v0.6from
renovate/release-v0.6-major-github-actions

renovate bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

codecov bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

renovate bot commented Sep 25, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

BREAKING CHANGES

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

CodeQL Action Changelog

4.31.10 - 12 Jan 2026

CodeQL Action Changelog

4.31.8 - 11 Dec 2025

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

CodeQL Action Changelog

4.30.9 - 17 Oct 2025

CodeQL Action Changelog

4.30.8 - 10 Oct 2025

CodeQL Action Changelog

4.30.7 - 06 Oct 2025

CodeQL Action Changelog

3.31.10 - 12 Jan 2026

v8.1.0: Create Pull Request v8.1.0

What's Changed

New Contributors

v8.0.0: Create Pull Request v8.0.0

What's new in v8

What's Changed

New Contributors

Configuration

Uh oh!

codecov bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

renovate bot commented Aug 28, 2025 •

edited

Loading

`v8.1.0`: Create Pull Request v8.1.0

`v8.0.0`: Create Pull Request v8.0.0

codecov bot commented Aug 28, 2025 •

edited

Loading