deps: Update dependencies for github (major) by renovate-bot · Pull Request #960 · GoogleCloudPlatform/cloud-sql-go-connector

renovate-bot · 2025-03-24T15:42:08Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4.3.0` → `v6.0.2`
actions/setup-go	action	major	`v5.5.0` → `v6.4.0`
actions/upload-artifact	action	major	`v4.6.2` → `v7.0.1`
github/codeql-action	action	major	`v3.30.9` → `v4.35.2`
google-github-actions/auth	action	major	`v2.1.13` → `v3.0.0`
google-github-actions/get-secretmanager-secrets	action	major	`v2.2.5` → `v3.0.0`

Release Notes

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Update actions checkout to use node 24 by @salmanmkc in #2226
Prepare v5.0.0 release by @salmanmkc in #2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

actions/setup-go (actions/setup-go)

`v6.4.0`

Compare Source

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in #721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in #724
Fix Microsoft build of Go link by @gdams in #734

New Contributors

@gdams made their first contribution in #721

Full Changelog: actions/setup-go@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in #705
Fix golang download url to go.dev by @178inaba in #469

Full Changelog: actions/setup-go@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Enhancements

Example for restore-only cache in documentation by @aparnajyothi-y in #696
Update Node.js version in action.yml by @ccoVeille in #691
Documentation update of actions/checkout by @deining in #683

Dependency updates

Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot in #682
Upgrade @actions/cache to v5 by @salmanmkc in #695
Upgrade actions/checkout from 5 to 6 by @dependabot in #686
Upgrade qs from 6.14.0 to 6.14.1 by @dependabot in #703

New Contributors

@ccoVeille made their first contribution in #691
@deining made their first contribution in #683

Full Changelog: actions/setup-go@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in #665
Add support for .tool-versions file and update workflow by @priya-kinthali in #673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in #674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in #617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #641
Upgrade semver and @types/semver by @dependabot in #652

New Contributors

@nicholasngai made their first contribution in #665
@priya-kinthali made their first contribution in #673
@mahabaleshwars made their first contribution in #674

Full Changelog: actions/setup-go@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in #460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in #624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #589
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #591
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in #590
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #594
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in #538
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in #603
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in #618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #631

New Contributors

@matthewhughes934 made their first contribution in #618
@salmanmkc made their first contribution in #624

Full Changelog: actions/setup-go@v5...v6.0.0

`v5.6.0`

Compare Source

What's Changed

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @aparnajyothi-y in #689

Full Changelog: actions/setup-go@v5...v5.6.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v6.0.0`

Compare Source

`v5.0.0`

Compare Source

github/codeql-action (github/codeql-action)

`v4.35.2`

Compare Source

The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
Update default CodeQL bundle version to 2.25.2. #3823

`v4.35.1`

Compare Source

Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

`v4.35.0`

Compare Source

Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
Update default CodeQL bundle version to 2.25.1. #3773

`v4.34.1`

Compare Source

Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

`v4.34.0`

Compare Source

Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
Update default CodeQL bundle version to 2.25.0. #3585

`v4.33.0`

Compare Source

Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

To opt out of this change:
- Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
- User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
- User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557
The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559
Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563
Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564
A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. #3570

`v4.32.6`

Compare Source

Update default CodeQL bundle version to 2.24.3. #3548

`v4.32.5`

Compare Source

Repositories owned by an organization can now set up the github-codeql-disable-overlay custom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the name github-codeql-disable-overlay and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to true to disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507
Added an experimental change so that when improved incremental analysis fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. #3487
The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. #3515
Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. #3516
Added an experimental change which lowers the minimum disk space requirement for improved incremental analysis, enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. #3498
Added an experimental change which allows the start-proxy action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. #3512
The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. #3503, #3504

`v4.32.4`

Compare Source

Update default CodeQL bundle version to 2.24.2. #3493
Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when private package registries are configured. This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. #3473
When the CodeQL Action is run with debugging enabled in Default Setup and private package registries are configured, the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. #3486
Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. #3485
Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a nightly CodeQL CLI release instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. #3484

`v4.32.3`

Compare Source

Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #3466

`v4.32.2`

Compare Source

`v4.32.1`

Compare Source

A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #3422
Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #3421

`v4.32.0`

Compare Source

Update default CodeQL bundle version to 2.24.0. #3425

`v4.31.11`

Compare Source

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
Improved error handling throughout the CodeQL Action. #3415
Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

`v4.31.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

`v4.31.9`

Compare Source

`v4.31.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

`v4.31.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v4.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

`v4.31.2`

Compare Source

`v4.31.1`

Compare Source

`v4.31.0`

Compare Source

`v4.30.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

Update default CodeQL bundle version to 2.23.3. #3205
Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

`v4.30.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.30.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.7 - 06 Oct 2025

[v4+ only] The CodeQL Action now runs on Node.js v24. #3169

See the full CHANGELOG.md for more information.

`v3.35.2`

Compare Source

The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
Update default CodeQL bundle version to 2.25.2. #3823

`v3.35.1`

Compare Source

Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

`v3.35.0`

Compare Source

Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
Update default CodeQL bundle version to 2.25.1. #3773

`v3.34.1`

Compare Source

Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

`v3.34.0`

Compare Source

Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
Update default CodeQL bundle version to 2.25.0. #3585

`v3.33.0`

Compare Source

Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562
To opt out of this change:
- Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
- User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
- User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557
The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559
Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563
Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564
A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. #3570

`v3.32.6`

Compare Source

Update default CodeQL bundle version to 2.24.3. #3548

`v3.32.5`

Compare Source

Repositories owned by an organization can now set up the github-codeql-disable-overlay custom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the name github-codeql-disable-overlay and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to true to disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507
Added an experimental change so that when improved incremental analysis fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. #3487
The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. #3515
Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. #3516
Added an experimental change which lowers the minimum disk space requirement for improved incremental analysis, enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. #3498
Added an experimental change which allows the start-proxy action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. #3512
The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. #3503, #3504

`v3.32.4`

Compare Source

Update default CodeQL bundle version to 2.24.2. #3493
Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when private package registries are configured. This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. #3473
When the CodeQL Action is run with debugging enabled in Default Setup and private package registries are configured, the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. #3486
Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. #3485
Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a nightly CodeQL CLI release instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. #3484

`v3.32.3`

Compare Source

Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #3466

`v3.32.2`

Compare Source

Update default CodeQL bundle version to 2.24.1. #3460

`v3.32.1`

Compare Source

A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #3422
Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #3421

`v3.32.0`

Compare Source

Update default CodeQL bundle version to 2.24.0. #3425

`v3.31.11`

Compare Source

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
Improved error handling throughout the CodeQL Action. #3415
Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

`v3.31.10`

[Compare Source](https://redirect.github.com/github/codeql-action/compare/v

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

kgala2 · 2025-05-20T16:57:10Z

/gcbrun

dpebot · 2025-05-20T17:54:12Z

/gcbrun

dpebot · 2025-05-20T21:02:22Z

/gcbrun

hessjcg · 2025-05-20T22:22:31Z

I don't think we can do this major version upgrade of golangci lint right now. We would need to significantly rewrite our lint rules.

dpebot · 2025-07-28T16:13:58Z

/gcbrun

dpebot · 2025-08-11T16:02:14Z

/gcbrun

dpebot · 2025-08-12T22:44:41Z

/gcbrun

dpebot · 2025-08-12T23:31:52Z

/gcbrun

dpebot · 2025-08-12T23:55:00Z

/gcbrun

dpebot · 2025-08-12T23:55:21Z

/gcbrun

dpebot · 2025-08-31T12:27:56Z

/gcbrun

dpebot · 2025-09-03T05:43:58Z

/gcbrun

dpebot · 2026-02-05T19:43:34Z

/gcbrun

dpebot · 2026-02-13T15:40:11Z

/gcbrun

dpebot · 2026-02-20T17:07:10Z

/gcbrun

dpebot · 2026-02-26T04:03:45Z

/gcbrun

dpebot · 2026-02-26T19:04:44Z

/gcbrun

dpebot · 2026-03-02T16:09:31Z

/gcbrun

dpebot · 2026-03-05T21:14:43Z

/gcbrun

dpebot · 2026-03-16T11:46:59Z

/gcbrun

dpebot · 2026-03-20T14:36:51Z

/gcbrun

dpebot · 2026-03-20T19:09:02Z

/gcbrun

dpebot · 2026-03-27T16:04:17Z

/gcbrun

dpebot · 2026-03-27T19:48:59Z

/gcbrun

dpebot · 2026-03-30T06:29:28Z

/gcbrun

dpebot · 2026-04-16T05:21:17Z

/gcbrun

dpebot · 2026-04-16T21:04:39Z

/gcbrun

renovate-bot requested a review from a team as a code owner March 24, 2025 15:42

blunderbuss-gcf bot assigned jackwotherspoon Mar 24, 2025

renovate-bot changed the title ~~deps: Update golangci/golangci-lint-action action to v7~~ deps: Update golangci/golangci-lint-action action to v8 May 4, 2025

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from bf7db21 to 7a3b74f Compare May 4, 2025 21:00

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 7a3b74f to f386bd6 Compare May 20, 2025 17:32

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from f386bd6 to 76db7d6 Compare May 20, 2025 21:02

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 76db7d6 to b08241a Compare July 28, 2025 16:13

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from b08241a to 03c39c2 Compare August 11, 2025 16:02

renovate-bot changed the title ~~deps: Update golangci/golangci-lint-action action to v8~~ deps: Update dependencies for github (major) Aug 11, 2025

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 03c39c2 to a0fa1e8 Compare August 12, 2025 22:44

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from a0fa1e8 to 77b90a0 Compare August 12, 2025 23:31

renovate-bot changed the title ~~deps: Update dependencies for github (major)~~ deps: Update actions/checkout action to v5 Aug 12, 2025

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 77b90a0 to 4a1afe8 Compare August 12, 2025 23:54

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 4a1afe8 to e0998d2 Compare August 12, 2025 23:55

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from e0998d2 to 6344d1e Compare August 31, 2025 12:27

renovate-bot changed the title ~~deps: Update actions/checkout action to v5~~ deps: Update dependencies for github (major) Aug 31, 2025

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 6344d1e to 42805fb Compare September 3, 2025 05:43

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 42805fb to af6741f Compare September 4, 2025 06:03

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 8426acd to f2974e3 Compare February 13, 2026 15:40

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from f2974e3 to 2b99e92 Compare February 20, 2026 17:07

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 2b99e92 to 659484b Compare February 26, 2026 04:03

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 659484b to e1ba8bb Compare February 26, 2026 19:04

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from e1ba8bb to 643c9b2 Compare March 2, 2026 16:09

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 643c9b2 to ed441cd Compare March 5, 2026 21:14

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from ed441cd to b1fd39d Compare March 16, 2026 11:46

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from b1fd39d to 62c47ff Compare March 20, 2026 14:36

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 62c47ff to 1d415d1 Compare March 20, 2026 19:08

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 1d415d1 to 5ea9005 Compare March 27, 2026 16:04

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 5ea9005 to ba703f0 Compare March 27, 2026 19:48

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from ba703f0 to a64c7b3 Compare March 30, 2026 06:29

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from a64c7b3 to 01015b3 Compare April 16, 2026 05:21

deps: Update dependencies for github

0f12caf

renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 01015b3 to 0f12caf Compare April 16, 2026 21:04

Conversation

renovate-bot commented Mar 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

What's Changed

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

CodeQL Action Changelog

4.31.10 - 12 Jan 2026

CodeQL Action Changelog

4.31.8 - 11 Dec 2025

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

CodeQL Action Changelog

4.30.9 - 17 Oct 2025

CodeQL Action Changelog

4.30.8 - 10 Oct 2025

CodeQL Action Changelog

4.30.7 - 06 Oct 2025

Configuration

Uh oh!

kgala2 commented May 20, 2025

Uh oh!

dpebot commented May 20, 2025

Uh oh!

dpebot commented May 20, 2025

Uh oh!

hessjcg commented May 20, 2025

Uh oh!

dpebot commented Jul 28, 2025

Uh oh!

dpebot commented Aug 11, 2025

Uh oh!

dpebot commented Aug 12, 2025

Uh oh!

dpebot commented Aug 12, 2025

Uh oh!

dpebot commented Aug 12, 2025

Uh oh!

dpebot commented Aug 12, 2025

Uh oh!

dpebot commented Aug 31, 2025

Uh oh!

dpebot commented Sep 3, 2025

Uh oh!

dpebot commented Feb 5, 2026

renovate-bot commented Mar 24, 2025 •

edited

Loading