chore(deps): update github actions (#58)

renovate[bot] · web-flow · commit 042269db0a58 · 2025-12-08T09:36:23.000+08:00
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more [here](https://redirect.github.com/renovatebot/renovate/discussions/37842). This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action) | action | minor | `v2` -> `v2.20.0` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | pinDigest | -> `08c6903` | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | pinDigest | -> `634f93c` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | minor | `v4` -> `v4.6.2` | | danhellem/github-actions-issue-to-work-item | action | pinDigest | -> `8d0ead9` | | [ni/python-actions](https://redirect.github.com/ni/python-actions) | action | minor | `v0.1.0` -> `v0.5.1` | --- ### Release Notes <details> <summary>EnricoMi/publish-unit-test-result-action (EnricoMi/publish-unit-test-result-action)</summary> ### [`v2.20.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.20.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.19.0...v2.20.0) Adds the following improvements: - Add action typing [#&#8203;653](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/653) - Isolate PIP cache used by composite actions [#&#8203;668](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/668) - Fix for empty `<system-out>` and `<system-err>` [#&#8203;667](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/667) - Deprecate `github_token_actor` option, auto-detect actor [#&#8203;661](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/661) - Use and recommend `!cancelled()` instead of `always()` [#&#8203;659](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/659) - Add `deprecationMessage` to `action.yml` for deprecated inputs ([#&#8203;654](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/654)) - Resolve regex library warnings [#&#8203;660](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/660) **Full Changelog**: <EnricoMi/publish-unit-test-result-action@v2.19.0...v2.20.0> ### [`v2.19.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.19.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.18.0...v2.19.0) Adds the following improvements: - Add option to verify SSL/TLS connection ([#&#8203;638](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/638)) - Mention composite replacement in `README.md` ([#&#8203;647](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/647)) - Quote `$PYTHON_BIN` in deprecated composite action ([#&#8203;646](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/646)) ### [`v2.18.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.18.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.17.1...v2.18.0) Adds the following improvements: - Support Python 3.13 ([#&#8203;632](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/632)) - Upgrade dependencies ([#&#8203;566](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/566)) - Use unicode emojis (instead of markdown) ([#&#8203;631](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/631)) ### [`v2.17.1`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.17.1) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.17.0...v2.17.1) Fixes the following issue: - Fix failing check run creation when no path or error message exists ([#&#8203;621](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/621)) ### [`v2.17.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.17.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.16.1...v2.17.0) Adds the following improvements: - Avoid escaped quotes in Windows PowerShell action, fixes syntax error in some self-hosted Windows runners ([#&#8203;603](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/603)) - Upgrade dependencies to latest versions to fix four vulnerabilities ([#&#8203;606](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/606)) ### [`v2.16.1`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.16.1) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.16.0...v2.16.1) Fixes quoting issue in Windows bash action ([#&#8203;587](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/587)) ### [`v2.16.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.16.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.15.1...v2.16.0) This improves dependencies: - Pin dependencies based on Python version ([#&#8203;585](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/585)) - Upgrade dependencies to latest version ([#&#8203;585](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/585)) ### [`v2.15.1`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.15.1) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.15.0...v2.15.1) This fixes a typo in the windows action ([#&#8203;580](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/580)). ### [`v2.15.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.15.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.14.0...v2.15.0) This release deprecates composite action `uses: EnricoMi/publish-unit-test-result-action/composite@v2` ([#&#8203;576](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/576)) Instead, use either of - Linux (Bash shell): `uses: EnricoMi/publish-unit-test-result-action/linux@v2` - macOS (Bash shell): `uses: EnricoMi/publish-unit-test-result-action/macos@v2` - Windows (PowerShell): `uses: EnricoMi/publish-unit-test-result-action/windows@v2` - Windows (Bash shell): `uses: EnricoMi/publish-unit-test-result-action/windows/bash@v2` Or continue to use the Docker action `uses: EnricoMi/publish-unit-test-result-action@v2`. Adds the following features: - OS-specific composite actions, supports Windows PowerShell ([#&#8203;576](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/576)) - Fix grouping lines in GitHub actions output ([#&#8203;577](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/577)) ### [`v2.14.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.14.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.13.0...v2.14.0) Adds the following features: - Publish JSON even when `check_run` is false ([#&#8203;568](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/568)) - Quote vars in composite action to support values with spaces ([#&#8203;571](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/571)) - Uprade actions/cache to 4 in composite action ([#&#8203;574](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/574)) ### [`v2.13.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.13.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.12.0...v2.13.0) Adds the following features: - Upgrade lxml to 5.1.0 ([#&#8203;433](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/433)) - Rework how composite action checks and installs `virtualenv` / `venv` package, and activates virtual environment ([#&#8203;558](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/558)) ### [`v2.12.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.12.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.11.0...v2.12.0) Adds the following features: - Add option to disable status checks ([#&#8203;532](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/532)) - Fix `action_fail_on_inconclusive`, which was not working ([#&#8203;543](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/543)) - Improve emoji for passed tests (changed from to ✅) ([#&#8203;542](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/542)) - Remove link from emojis in summary markdown ([#&#8203;540](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/540)) - Handle incomplete / none JSON elements ([#&#8203;530](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/530)) - Action warns about usage of absolute paths ([#&#8203;519](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/519)) - Upgrade dependencies ([#&#8203;523](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/523)) ### [`v2.11.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.11.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.10.0...v2.11.0) Adds the following features: - Reduce output from `action_fail` ([#&#8203;511](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/511)) - Support running as ARM images ([#&#8203;512](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/512), [#&#8203;513](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/513), [#&#8203;514](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/514)) - Use virtualenv in composite action to isolate package installation ([#&#8203;501](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/501)) - Update urllib3 and charset-normalizer dependencies ([#&#8203;507](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/507)) ### [`v2.10.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.10.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.9.0...v2.10.0) Adds the following features: - Allow for adding or removing test file path prefix ([#&#8203;495](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/495)) - Support for Windows with Python 3.11, and macOS 13 by upgrading lxml from 4.9.1 to 4.9.3 ([#&#8203;387](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/387)) ### [`v2.9.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.9.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.8.0...v2.9.0) Adds the following features: - Upgrade PyGithub dependency - Move to PyGithub implementation of retry and throttling logic ([#&#8203;469](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/469)) ### [`v2.8.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.8.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.7.0...v2.8.0) Adds the following features: - Add `github_token_actor` option to support Github App installation or App user token ([#&#8203;460](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/460)) - Upgrade dependencies, drop Python 3.6 ([#&#8203;457](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/457)) This release removes support for Python 3.6. Please use action version 2.7 with Python 3.6. ``` uses: EnricoMi/publish-unit-test-result-action@v2.7 ``` ### [`v2.7.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.7.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.6.2...v2.7.0) Adds the following features: - Add test time to case annotation (test failures and errors) ([#&#8203;439](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/439)) - Allow to publish job summary for pull\_request event on fork ([#&#8203;441](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/441)) - Links in comments point to README.md version that matches the used action ([#&#8203;432](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/432)) ### [`v2.6.2`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.6.2) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.6.1...v2.6.2) Fixes the following issues: - Publish comment on the pull request of the event, or on the pull request of the commit otherwise ([#&#8203;438](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/438)) In contrast to [v2.6.1](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.6.1), the action falls back to the commit's pull requests when the event does not provide a PR. ### [`v2.6.1`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.6.1) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.6.0...v2.6.1) Fixes the following issues: - Publish comments only to the pull request that triggered the action (not all commit's pull requests) ([#&#8203;428](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/428)) This means that the action only publishes pull request comments on `pull_request` events (and `workflow_run` events triggered from `pull_request` events). The action running on either pull request used to overwrite the other pull request's results. This is not useful since different pull requests that share a commit may have different results. ### [`v2.6.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.6.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.5.0...v2.6.0) Adds the following features: - Reduce likelihood of secondary rate limit errors ([#&#8203;425](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/425)) ### [`v2.5.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.5.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.4.2...v2.5.0) Adds the following features: - Add support for Dart and Mocha JSON test results ([#&#8203;404](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/404)) - Speed up composite action by caching PIP packages ([#&#8203;418](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/418), [#&#8203;422](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/422)) - Speed up package installation by always installing wheel package - Pin versions of all transient dependencies so that composite action always uses the same versions ([#&#8203;421](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/421)) - Speed up parsing large TRX files by adding lookup index ([#&#8203;417](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/417)) - Restrict XSLT permissions used for non-JUnit XML files ([#&#8203;415](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/415)) - Add explicit number typing to XSLT ([#&#8203;416](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/416)) ### [`v2.4.2`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.4.2) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.4.1...v2.4.2) Fixes the following issues: - Fix list of added/removed tests when test list is spread over multiple annotations ([#&#8203;407](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/407)) - Log detected file types only if there actually are files - Remove deprecation comment from composite action.yaml ### [`v2.4.1`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.4.1) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.3.0...v2.4.1) Adds the following features: - Auto-detect file format, re-introduce the FILES option ([#&#8203;395](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/395)) - Add option to parse XML with huge tree option ([#&#8203;400](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/400)) ### [`v2.3.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.3.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.2.0...v2.3.0) Adds the following features: - Add suite logs as annotations ([#&#8203;392](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/392)) - Add `action_fail` option to fail publish action on test failures ([#&#8203;378](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/378)) - Fix action example that fetches all artifacts from triggering workflow ([`84dbe97`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/commit/84dbe97e32cee14268d9642598ea2e5991d25417)) - Upgrade all dependencies except lxml to latest ([#&#8203;394](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/394)) ### [`v2.2.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.2.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.1.0...v2.2.0) Adds the following features: - Add option to write test cases to JSON file ([#&#8203;366](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/366)) ### [`v2.1.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.1.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2...v2.1.0) Adds the following features: - Include test case stdout and stderr in annotation details ([#&#8203;358](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/358)) - Use GHA env file to set output, fall back to stdout command ([#&#8203;360](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/360)) </details> <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v4.6.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.2) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.1...v4.6.2) ##### What's Changed - Update to use artifact 2.3.2 package & prepare for new upload-artifact release by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;685](https://redirect.github.com/actions/upload-artifact/pull/685) ##### New Contributors - [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their first contribution in [#&#8203;685](https://redirect.github.com/actions/upload-artifact/pull/685) **Full Changelog**: <actions/upload-artifact@v4...v4.6.2> ### [`v4.6.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.0...v4.6.1) #### What's Changed - Update to use artifact 2.2.2 package by [@&#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in [#&#8203;673](https://redirect.github.com/actions/upload-artifact/pull/673) **Full Changelog**: <actions/upload-artifact@v4...v4.6.1> ### [`v4.6.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.5.0...v4.6.0) #### What's Changed - Expose env vars to control concurrency and timeout by [@&#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in [#&#8203;662](https://redirect.github.com/actions/upload-artifact/pull/662) **Full Changelog**: <actions/upload-artifact@v4...v4.6.0> ### [`v4.5.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.5.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0) #### What's Changed - fix: deprecated `Node.js` version in action by [@&#8203;hamirmahal](https://redirect.github.com/hamirmahal) in [#&#8203;578](https://redirect.github.com/actions/upload-artifact/pull/578) - Add new `artifact-digest` output by [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in [#&#8203;656](https://redirect.github.com/actions/upload-artifact/pull/656) #### New Contributors - [@&#8203;hamirmahal](https://redirect.github.com/hamirmahal) made their first contribution in [#&#8203;578](https://redirect.github.com/actions/upload-artifact/pull/578) - [@&#8203;bdehamer](https://redirect.github.com/bdehamer) made their first contribution in [#&#8203;656](https://redirect.github.com/actions/upload-artifact/pull/656) **Full Changelog**: <actions/upload-artifact@v4.4.3...v4.5.0> ### [`v4.4.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.3) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3) #### What's Changed - Undo indirect dependency updates from [#&#8203;627](https://redirect.github.com/actions/upload-artifact/issues/627) by [@&#8203;joshmgross](https://redirect.github.com/joshmgross) in [#&#8203;632](https://redirect.github.com/actions/upload-artifact/pull/632) **Full Changelog**: <actions/upload-artifact@v4.4.2...v4.4.3> ### [`v4.4.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.2) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2) #### What's Changed - Bump `@actions/artifact` to 2.1.11 by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;627](https://redirect.github.com/actions/upload-artifact/pull/627) - Includes fix for relative symlinks not resolving properly **Full Changelog**: <actions/upload-artifact@v4.4.1...v4.4.2> ### [`v4.4.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1) #### What's Changed - Add a section about hidden files by [@&#8203;joshmgross](https://redirect.github.com/joshmgross) in [#&#8203;607](https://redirect.github.com/actions/upload-artifact/pull/607) - Add workflow file for publishing releases to immutable action package by [@&#8203;Jcambass](https://redirect.github.com/Jcambass) in [#&#8203;621](https://redirect.github.com/actions/upload-artifact/pull/621) - Update [@&#8203;actions/artifact](https://redirect.github.com/actions/artifact) to latest version, includes symlink and timeout fixes by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;625](https://redirect.github.com/actions/upload-artifact/pull/625) #### New Contributors - [@&#8203;Jcambass](https://redirect.github.com/Jcambass) made their first contribution in [#&#8203;621](https://redirect.github.com/actions/upload-artifact/pull/621) **Full Changelog**: <actions/upload-artifact@v4.4.0...v4.4.1> ### [`v4.4.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0) ##### Notice: Breaking Changes ⚠️ We will no longer include hidden files and folders by default in the `upload-artifact` action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, `include-hidden-files`, to continue to do so. See ["Notice of upcoming deprecations and breaking changes in GitHub Actions runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/) changelog and [this issue](https://redirect.github.com/actions/upload-artifact/issues/602) for more details. ##### What's Changed - Exclude hidden files by default by [@&#8203;joshmgross](https://redirect.github.com/joshmgross) in [#&#8203;598](https://redirect.github.com/actions/upload-artifact/pull/598) **Full Changelog**: <actions/upload-artifact@v4.3.6...v4.4.0> ### [`v4.3.6`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.6) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6) ##### What's Changed - Revert to [@&#8203;actions/artifact](https://redirect.github.com/actions/artifact) 2.1.8 by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;594](https://redirect.github.com/actions/upload-artifact/pull/594) **Full Changelog**: <actions/upload-artifact@v4...v4.3.6> ### [`v4.3.5`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.5) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5) ##### What's Changed - Bump [@&#8203;actions/artifact](https://redirect.github.com/actions/artifact) to v2.1.9 by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;588](https://redirect.github.com/actions/upload-artifact/pull/588) - Fixed artifact upload chunk timeout logic [#&#8203;1774](https://redirect.github.com/actions/toolkit/pull/1774) - Use lazy stream to prevent issues with open file limits [#&#8203;1771](https://redirect.github.com/actions/toolkit/pull/1771) **Full Changelog**: <actions/upload-artifact@v4.3.4...v4.3.5> ### [`v4.3.4`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.4) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4) ##### What's Changed - Update [@&#8203;actions/artifact](https://redirect.github.com/actions/artifact) version, bump dependencies by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;584](https://redirect.github.com/actions/upload-artifact/pull/584) **Full Changelog**: <actions/upload-artifact@v4.3.3...v4.3.4> ### [`v4.3.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.3) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3) #### What's Changed - updating `@actions/artifact` dependency to v2.1.6 by [@&#8203;eggyhead](https://redirect.github.com/eggyhead) in [#&#8203;565](https://redirect.github.com/actions/upload-artifact/pull/565) **Full Changelog**: <actions/upload-artifact@v4.3.2...v4.3.3> ### [`v4.3.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.2) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2) #### What's Changed - Update release-new-action-version.yml by [@&#8203;konradpabjan](https://redirect.github.com/konradpabjan) in [#&#8203;516](https://redirect.github.com/actions/upload-artifact/pull/516) - Minor fix to the migration readme by [@&#8203;andrewakim](https://redirect.github.com/andrewakim) in [#&#8203;523](https://redirect.github.com/actions/upload-artifact/pull/523) - Update readme with v3/v2/v1 deprecation notice by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;561](https://redirect.github.com/actions/upload-artifact/pull/561) - updating `@actions/artifact` dependency to v2.1.5 and `@actions/core` to v1.0.1 by [@&#8203;eggyhead](https://redirect.github.com/eggyhead) in [#&#8203;562](https://redirect.github.com/actions/upload-artifact/pull/562) #### New Contributors - [@&#8203;andrewakim](https://redirect.github.com/andrewakim) made their first contribution in [#&#8203;523](https://redirect.github.com/actions/upload-artifact/pull/523) **Full Changelog**: <actions/upload-artifact@v4.3.1...v4.3.2> ### [`v4.3.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.0...v4.3.1) - Bump [@&#8203;actions/artifacts](https://redirect.github.com/actions/artifacts) to latest version to include [updated GHES host check](https://redirect.github.com/actions/toolkit/pull/1648) ### [`v4.3.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.2.0...v4.3.0) #### What's Changed - Reorganize upload code in prep for merge logic & add more tests by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;504](https://redirect.github.com/actions/upload-artifact/pull/504) - Add sub-action to merge artifacts by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;505](https://redirect.github.com/actions/upload-artifact/pull/505) **Full Changelog**: <actions/upload-artifact@v4...v4.3.0> ### [`v4.2.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.2.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.1.0...v4.2.0) #### What's Changed - Ability to overwrite an Artifact by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;501](https://redirect.github.com/actions/upload-artifact/pull/501) **Full Changelog**: <actions/upload-artifact@v4...v4.2.0> ### [`v4.1.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.1.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.0.0...v4.1.0) #### What's Changed - Add migrations docs by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;482](https://redirect.github.com/actions/upload-artifact/pull/482) - Update README.md by [@&#8203;samuelwine](https://redirect.github.com/samuelwine) in [#&#8203;492](https://redirect.github.com/actions/upload-artifact/pull/492) - Support artifact-url output by [@&#8203;konradpabjan](https://redirect.github.com/konradpabjan) in [#&#8203;496](https://redirect.github.com/actions/upload-artifact/pull/496) - Update readme to reflect new 500 artifact per job limit by [@&#8203;robherley](https://redirect.github.com/robherley) in [#&#8203;497](https://redirect.github.com/actions/upload-artifact/pull/497) #### New Contributors - [@&#8203;samuelwine](https://redirect.github.com/samuelwine) made their first contribution in [#&#8203;492](https://redirect.github.com/actions/upload-artifact/pull/492) **Full Changelog**: <actions/upload-artifact@v4...v4.1.0> </details> <details> <summary>ni/python-actions (ni/python-actions)</summary> ### [`v0.5.1`](https://redirect.github.com/ni/python-actions/releases/tag/v0.5.1): ni/python-actions v0.5.1 [Compare Source](https://redirect.github.com/ni/python-actions/compare/v0.5.0...v0.5.1) ##### What's Changed - update-project-version: Add workaround for chained PRs to PR description text ([#&#8203;21](https://redirect.github.com/ni/python-actions/pull/21)) **Full Changelog**: <ni/python-actions@v0.5.0...v0.5.1> ### [`v0.5.0`](https://redirect.github.com/ni/python-actions/releases/tag/v0.5.0): ni/python-actions v0.5.0 [Compare Source](https://redirect.github.com/ni/python-actions/compare/v0.4.1...v0.5.0) ##### What's Changed - `setup-poetry`: - Change default Poetry version to 2.1.4 ([#&#8203;18](https://redirect.github.com/ni/python-actions/pull/18)) - `update-project-version`: - Show project names and versions ([#&#8203;20](https://redirect.github.com/ni/python-actions/pull/20)) - The PR body now contains a table showing the project names, versions, and pyproject.toml paths - When updating a single project, the PR title now says shows the project name and version, e.g. "chore: Update project nitypes to v1.2.3" - Change how branch name is shown ([#&#8203;20](https://redirect.github.com/ni/python-actions/pull/20)) - The branch name is now shown in brackets at the beginning of the PR title, e.g. "\[releases/1.2] chore: Update project nitypes to v1.2.3" - The branch name is no longer shown for main/master branches. - tests: - The actions are now tested on macOS ([#&#8203;15](https://redirect.github.com/ni/python-actions/pull/15)) **Full Changelog**: <ni/python-actions@v0.4.1...v0.5.0> ### [`v0.4.1`](https://redirect.github.com/ni/python-actions/releases/tag/v0.4.1): ni/python-actions v0.4.1 [Compare Source](https://redirect.github.com/ni/python-actions/compare/v0.4.0...v0.4.1) ##### What's Changed - `check-project-version`: Set `expected-version` to `release.tag_name` for release events ([#&#8203;14](https://redirect.github.com/ni/python-actions/pull/14)) ##### New Contributors - [@&#8203;mjohanse-emr](https://redirect.github.com/mjohanse-emr) made their first contribution in [#&#8203;14](https://redirect.github.com/ni/python-actions/pull/14) **Full Changelog**: <ni/python-actions@v0.4.0...v0.4.1> ### [`v0.4.0`](https://redirect.github.com/ni/python-actions/releases/tag/v0.4.0): ni/python-actions v0.4.0 [Compare Source](https://redirect.github.com/ni/python-actions/compare/v0.3.1...v0.4.0) ##### What's Changed - `setup-python`, `setup-poetry`: Support PyPy and free-threading ([#&#8203;11](https://redirect.github.com/ni/python-actions/pull/11)) - To use PyPy, set the `python-version` input to `pypy3.10`, `pypy3.11`, etc. - To use CPython with free-threading, add a `t` suffix to the `python-version` input (e.g. `3.13t`). - Note: free-threading is only available with Python 3.13 and later. - Note: installing Poetry with free-threading does not work yet, because the `cryptography` and `cffi` packages do not yet support free-threading. - The `python-version` output now reflects the the PyPy language+implementation versions (e.g. `pypy3.11.11-v7.3.19`) and has a `t` suffix for free-threaded builds (e.g. `3.13.4t`) - The `ni/setup-python` action now uses the `pythonVersion` environment variable to pass the Python version to `ni/setup-poetry`. **Full Changelog**: <ni/python-actions@v0.3.1...v0.4.0> ### [`v0.3.1`](https://redirect.github.com/ni/python-actions/releases/tag/v0.3.1): ni/python-actions v0.3.1 [Compare Source](https://redirect.github.com/ni/python-actions/compare/v0.3.0...v0.3.1) ##### What's Changed - `setup-poetry`: Log debug info on failure ([#&#8203;12](https://redirect.github.com/ni/python-actions/pull/12)) **Full Changelog**: <ni/python-actions@v0.3.0...v0.3.1> ### [`v0.3.0`](https://redirect.github.com/ni/python-actions/releases/tag/v0.3.0): ni/python-actions v0.3.0 [Compare Source](https://redirect.github.com/ni/python-actions/compare/v0.2.0...v0.3.0) ##### What's Changed - `update-project-version`: Add `token` input ([#&#8203;9](https://redirect.github.com/ni/python-actions/pull/9)) - The default GITHUB\_TOKEN cannot trigger PR workflows, so the generated pull request will not run any status checks. You can work around this by using `token` to specify a token that is saved in a repo/org secret. - `setup-poetry`: Add `use-cache` input ([#&#8203;8](https://redirect.github.com/ni/python-actions/pull/8)) - If you run into caching problems, you can disable caching by specifying `use-cache: false`. **Full Changelog**: <ni/python-actions@v0.2.0...v0.3.0> ### [`v0.2.0`](https://redirect.github.com/ni/python-actions/releases/tag/v0.2.0): ni/python-actions v0.2.0 [Compare Source](https://redirect.github.com/ni/python-actions/compare/v0.1.0...v0.2.0) ##### What's Changed - Add the `check-project-version` action ([#&#8203;5](https://redirect.github.com/ni/python-actions/pull/5)) - The `check-project-version` action uses Poetry to get the version of a Python project and checks that it matches an expected version. - You can use this action in your project's publish workflow to verify that the project version matches the GitHub release tag. - By default, this action checks against `github.ref_name`, which is the GitHub release tag for GitHub release events. - Add the `update-project-version` action ([#&#8203;5](https://redirect.github.com/ni/python-actions/pull/5)) - The `update-project-version action` uses Poetry to update the version of a Python project and creates a pull request to modify its pyproject.toml file. - You can use this action in your project's publish workflow to update the version number for the next release or pre-release. - You can specify `version-rule` and `use-dev-suffix` to customize the versioning scheme. - `version-rule` specifies the rule for updating the version number. For example, `major` will update 1.0.0 -> 2.0.0, while `patch` will update 1.0.0 -> 1.0.1. See [the docs for poetry version](https://python-poetry.org/docs/cli/#version) for the list of rules and their behavior. - `use-dev-suffix` specifies whether to use development versions like 1.0.0.dev0. ##### New Contributors - [@&#8203;renovate](https://redirect.github.com/renovate) made their first contribution in [#&#8203;2](https://redirect.github.com/ni/python-actions/pull/2) **Full Changelog**: <ni/python-actions@v0.1.0...v0.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone US/Central, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/ni/nisync-python).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -10,11 +10,11 @@ jobs:
       - ubuntu-latest
     steps:
       - name: Check out repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Set up Python
-        uses: ni/python-actions/setup-python@v0.1.0
+        uses: ni/python-actions/setup-python@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
       - name: Set up Poetry
-        uses: ni/python-actions/setup-poetry@v0.1.0
+        uses: ni/python-actions/setup-poetry@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
       - name: Check Poetry version
         run: poetry --version
       - name: Install dependencies
diff --git a/.github/workflows/report_test_results.yml b/.github/workflows/report_test_results.yml
@@ -16,16 +16,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Download test results
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           path: test_results
           pattern: test_results_*
           merge-multiple: true
       - name: List downloaded files
         run: ls -lR
       - name: Publish test results
-        uses: EnricoMi/publish-unit-test-result-action@v2
+        uses: EnricoMi/publish-unit-test-result-action@34d7c956a59aed1bfebf31df77b8de55db9bbaaf # v2.21.0
         with:
           files: "test_results/*.xml"
diff --git a/.github/workflows/run_acceptance_tests.yml b/.github/workflows/run_acceptance_tests.yml
@@ -21,13 +21,13 @@ jobs:
     timeout-minutes: 90
     steps:
       - name: Check out repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Install dependencies
         run: poetry install
       - name: Run acceptance tests for PXIe-6674T
         run: poetry run pytest --resource_name="6674T" --junitxml=test_results/acceptance-${{ matrix.configuration }}.xml
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: test_results_acceptance_${{ matrix.configuration }}
           path: test_results/*.xml
diff --git a/.github/workflows/run_unit_tests.yml b/.github/workflows/run_unit_tests.yml
@@ -17,13 +17,13 @@ jobs:
       fail-fast: false
     steps:
       - name: Check out repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Set up Python ${{ matrix.python-version }}
-        uses: ni/python-actions/setup-python@v0.1.0
+        uses: ni/python-actions/setup-python@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Set up Poetry
-        uses: ni/python-actions/setup-poetry@v0.1.0
+        uses: ni/python-actions/setup-poetry@9768589f3e50672173dad75a6fc181e4a85d33fa # v0.7.0
       - name: Check Poetry version
         run: poetry --version
       - name: Install main package dependencies
@@ -35,7 +35,7 @@ jobs:
       - name: Run unit tests
         run: poetry run pytest -v --junitxml=test_results/unit-${{ matrix.os }}-py${{ matrix.python-version }}.xml
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: test_results_unit_${{ matrix.os }}_py${{ matrix.python-version }}
           path: test_results/*.xml
diff --git a/.github/workflows/sync_github_issues_to_azdo.yml b/.github/workflows/sync_github_issues_to_azdo.yml
@@ -23,7 +23,7 @@ jobs:
           else
             echo "work_item_type=Bug" >> $GITHUB_OUTPUT
           fi
-      - uses: danhellem/github-actions-issue-to-work-item@v2.5
+      - uses: danhellem/github-actions-issue-to-work-item@8d0ead9b49a65aa66dac6949b1ff149d7ef8b4de # v2.5
         env:
           ado_token: "${{ secrets.AZDO_WORK_ITEM_TOKEN }}"
           github_token: "${{ secrets.GH_REPO_TOKEN }}"
