deps: update github-actions - #251
Open
kjoremiljo-renovate[bot] wants to merge 1 commit into
Open
Conversation
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
from
April 24, 2026 08:57
3e6162b to
820070d
Compare
kjoremiljo-renovate
Bot
changed the title
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
5 times, most recently
from
April 30, 2026 08:55
531fc45 to
1760bdf
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
4 times, most recently
from
May 13, 2026 20:41
0aed92f to
d99cb21
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
4 times, most recently
from
May 19, 2026 23:32
eaa05fe to
5a4a9cc
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
4 times, most recently
from
June 9, 2026 15:24
7581b21 to
e226cd3
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
3 times, most recently
from
June 17, 2026 03:19
e659b42 to
a730a27
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
3 times, most recently
from
June 30, 2026 20:46
d5fa959 to
0473d17
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
3 times, most recently
from
July 9, 2026 18:43
d59153c to
3540c5c
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
from
July 13, 2026 00:47
3540c5c to
fb7fa6f
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
3 times, most recently
from
July 15, 2026 09:43
cbf92ff to
1061e3e
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
3 times, most recently
from
July 28, 2026 15:53
b740fda to
a2a2615
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
from
July 29, 2026 19:35
a2a2615 to
db10fc8
Compare
kjoremiljo-renovate
Bot
force-pushed
the
ok-renovate/github-actions
branch
from
August 5, 2026 07:01
db10fc8 to
593ed9f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v5.1.0→v6.1.0v6.0.2→v7.0.1v5.0.0→v7.0.1v3.1.1→v3.2.0v8.0.0→v9.0.0v8.0.0→v9.0.0v7.6.0→v9.0.0v7.1.2→v9.0.0v6→v9.0.0v2.0.1→v2.1.6v2.3.4→v2.6.3v6.1.0→v6.2.3v4.3.1→v6.2.3v6.3.0→v7.0.0v4.0.1→v4.0.2v4.0.3v4.2.0→v5.0.0v4.0.0→v4.0.15.1.22→5.2.2v7.0.8→v8.1.1Release Notes
actions/cache (actions/cache)
v6.1.0Compare Source
What's Changed
Full Changelog: actions/cache@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Full Changelog: actions/cache@v5...v6.0.0
actions/checkout (actions/checkout)
v7.0.1Compare Source
v7.0.0Compare Source
v6.1.0Compare Source
What's Changed
allow-unsafe-pr-checkoutto v6 by @aiqiaoy in #2500https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change
Full Changelog: actions/checkout@v6.0.3...v6.1.0
v6.0.3Compare Source
actions/create-github-app-token (actions/create-github-app-token)
v3.2.0Compare Source
Features
repositoriesinput (#372) (85eb8dd)Bug Fixes
actions/github-script (actions/github-script)
v9.0.0Compare Source
New features:
getOctokitfactory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients withgetOctokitfor details and examples.ACTIONS_ORCHESTRATION_IDenvironment variable is automatically appended to the user-agent string for request tracing.Breaking changes:
require('@​actions/github')no longer works in scripts. The upgrade to@actions/githubv9 (ESM-only) meansrequire('@​actions/github')will fail at runtime. If you previously used patterns likeconst { getOctokit } = require('@​actions/github')to create secondary clients, use the new injectedgetOctokitfunction instead — it's available directly in the script context with no imports needed.getOctokitis now an injected function parameter. Scripts that declareconst getOctokit = ...orlet getOctokit = ...will get aSyntaxErrorbecause JavaScript does not allowconst/letredeclaration of function parameters. Use the injectedgetOctokitdirectly, or usevar getOctokit = ...if you need to redeclare it.@actions/githubinternals beyond the standardgithub/octokitclient, you may need to update those references for v9 compatibility.What's Changed
New Contributors
Full Changelog: actions/github-script@v8.0.0...v9.0.0
astral-sh/setup-uv (astral-sh/setup-uv)
v9.0.0: 🌈 Changeprune-cachedefault tofalseCompare Source
Changes
This release disables the default cache cache pruning to ease the load on the PyPi infrastructure.
Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #967
Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.
🚨 Breaking changes
prune-cachedefault tofalse@charliermarsh (#967)🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
v8.3.2: 🌈 update known checksums for 0.11.28Compare Source
Changes
Just a maintenance release
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
v8.3.1: 🌈 update known checksums for 0.11.27Compare Source
Changes
Just a maintenance release
🧰 Maintenance
📚 Documentation
v8.3.0: 🌈 Support uv.lock as a version-file sourceCompare Source
Changes
Thanks to @somaz94 you can now use the pinned version of uv itself in
uv.lock. It gets picked up automatically.If you have pinned another version of uv in your
uv.lockyou can use the inputsversionorversion-sourceto override this.🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
v8.2.0: 🌈 New inputsquietanddownload-from-astral-mirrorCompare Source
Changes
This release brings two new inputs and a few bug fixes.
New inputs
Lets talk about the new inputs first.
quiet
Pretty simple. It turns of all
infologgings. Useful if you use this in a composite action and are not interested in all the details.In the upcoming releases we will add log groups to fully implement support for "less noise"
download-from-astral-mirror
In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting
download-from-astral-mirror: falseallows you to do that.Bugfixes
When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.
We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.
🐛 Bug fixes
🚀 Enhancements
download-from-astral-mirrorinput @eifinger (#897)🧰 Maintenance
⬆️ Dependency updates
v8.1.0: 🌈 New inputno-projectCompare Source
Changes
This add the a new boolean input
no-project.It only makes sense to use in combination with
activate-environment: trueand will append--no projectto theuv venvcall. This is for example useful if you have a pyproject.toml file with parts unparseable by uv🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
aws-actions/amazon-ecr-login (aws-actions/amazon-ecr-login)
v2.1.6Compare Source
See the changelog for details about the changes included in this release.
v2.1.5Compare Source
See the changelog for details about the changes included in this release.
v2.1.4Compare Source
See the changelog for details about the changes included in this release.
v2.1.3Compare Source
See the changelog for details about the changes included in this release.
v2.1.2Compare Source
See the changelog for details about the changes included in this release.
v2.1.1Compare Source
See the changelog for details about the changes included in this release.
v2.1.0Compare Source
See the changelog for details about the changes included in this release.
v2.0.2Compare Source
Features
2.0.2 (2026-03-13)
Bug Fixes
2.0.1 (2023-10-02)
aws-actions/amazon-ecs-deploy-task-definition (aws-actions/amazon-ecs-deploy-task-definition)
v2.6.3Compare Source
See the changelog for details about the changes included in this release.
v2.6.2Compare Source
See the changelog for details about the changes included in this release.
v2.6.1Compare Source
See the changelog for details about the changes included in this release.
v2.6.0Compare Source
See the changelog for details about the changes included in this release.
v2.5.1Compare Source
Features
maxAttemptsto allow retrying after failure (#750) (ede1821)2.5.1 (2025-12-18)
v2.5.0Compare Source
Features
maxAttemptsto allow retrying after failure (#750) (ede1821)2.5.1 (2025-12-18)
v2.4.0Compare Source
See the changelog for details about the changes included in this release.
aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)
v6.2.3Compare Source
Bug Fixes
v6.2.2Compare Source
Miscellaneous Chores
v6.2.2Compare Source
Miscellaneous Chores
v6.2.1Compare Source
Bug Fixes
v6.2.0Compare Source
Features
Bug Fixes
v6.1.3Compare Source
Bug Fixes
v6.1.2Compare Source
Bug Fixes
v6.1.1Compare Source
What's Changed
Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1
crazy-max/ghaction-import-gpg (crazy-max/ghaction-import-gpg)
v7.0.0Compare Source
Full Changelog: crazy-max/ghaction-import-gpg@v6.3.0...v7.0.0
dorny/paths-filter (dorny/paths-filter)
v4.0.2Compare Source
googleapis/release-please-action (googleapis/release-please-action)
v5.0.0Compare Source
⚠ BREAKING CHANGES
Features
Bug Fixes
v4.4.1Compare Source
Bug Fixes
v4.4.0Compare Source
Features
Bug Fixes
changelog-hostparameter ignored when using manifest configuration (#1151) (535c413)v4.3.0Compare Source
Features
hashicorp/setup-terraform (hashicorp/setup-terraform)
v4.0.1Compare Source
BUG FIXES:
peter-evans/create-pull-request (peter-evans/create-pull-request)
v8.1.1: Create Pull Request v8.1.1Compare Source
What's Changed
Configuration
📅 Schedule: (in timezone Europe/Oslo)
* * * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
ℹ️ Renovate runs on an hourly schedule, but you can manually trigger an immediate run by starting 👉 this workflow 👈