Update [Github] Update GHA Dependencies by renovate-bot · Pull Request #176676 · llvm/llvm-project

renovate-bot · 2026-01-19T00:53:03Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
EnricoMi/publish-unit-test-result-action	action	minor	`v2.22.0` → `v2.23.0`
actions/checkout	action	patch	`v6.0.1` → `v6.0.2`
actions/setup-node	action	minor	`v6.1.0` → `v6.3.0`	`v6.4.0`
actions/setup-python	action	minor	`v6.1.0` → `v6.2.0`
actions/upload-artifact	action	patch	`v7.0.0` → `v7.0.1`
actions/upload-artifact	action	patch	`7.0.0` → `v7.0.1`
aminya/setup-cpp	action	minor	`v1.7.2` → `v1.8.0`
docker/login-action	action	minor	`v4.0.0` → `v4.1.0`
ghcr.io/llvm/ci-ubuntu-24.04-abi-tests	container	digest	`ef869c1` → `cb3aea3`
github/codeql-action	action	minor	`v4.31.9` → `v4.35.2`
hendrikmuhs/ccache-action	action	patch	`v1.2.20` → `v1.2.22`	`v1.2.23`
maxim-lobanov/setup-xcode	action	minor	`v1.6.0` → `v1.7.0`
pypa/gh-action-pypi-publish	action	minor	`v1.13.0` → `v1.14.0`
python	uses-with	minor	`3.11.9` → `3.14.4`
tj-actions/changed-files	action	patch	`v47.0.1` → `v47.0.6`
tj-actions/changed-files	action	patch	`v47.0.0` → `v47.0.6`
zizmorcore/zizmor-action	action	patch	`v0.5.2` → `v0.5.3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

EnricoMi/publish-unit-test-result-action (EnricoMi/publish-unit-test-result-action)

`v2.23.0`

Compare Source

Adds the following improvements:

Lock composite actions' versions by SHA #719
Upgrading Python dependencies #721, #727
Upgrade GitHub actions #720, #728

Full Changelog: EnricoMi/publish-unit-test-result-action@v2.22.0...v2.23.0

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

actions/setup-node (actions/setup-node)

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

actions/setup-python (actions/setup-python)

`v6.2.0`

Compare Source

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

aminya/setup-cpp (aminya/setup-cpp)

`v1.8.0`

Compare Source

What's Changed

feat: update default LLVM, Mingw, CMake, Ninja, Task, Meson by @aminya in #455
fix: default to LLVM 20.1.8 by @aminya in #460
feat: use bun as the package manager by @aminya in #454
chore(deps): update fedora docker tag to v44 in #440

Full Changelog: aminya/setup-cpp@v1.7.2...v1.8.0

docker/login-action (docker/login-action)

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

github/codeql-action (github/codeql-action)

`v4.35.2`

Compare Source

The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
Update default CodeQL bundle version to 2.25.2. #3823

`v4.35.1`

Compare Source

Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

`v4.35.0`

Compare Source

Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
Update default CodeQL bundle version to 2.25.1. #3773

`v4.34.1`

Compare Source

Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

`v4.34.0`

Compare Source

Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
Update default CodeQL bundle version to 2.25.0. #3585

`v4.33.0`

Compare Source

Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

To opt out of this change:
- Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
- User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
- User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557
The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559
Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563
Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564
A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. #3570

`v4.32.6`

Compare Source

Update default CodeQL bundle version to 2.24.3. #3548

`v4.32.5`

Compare Source

Repositories owned by an organization can now set up the github-codeql-disable-overlay custom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the name github-codeql-disable-overlay and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to true to disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507
Added an experimental change so that when improved incremental analysis fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. #3487
The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. #3515
Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. #3516
Added an experimental change which lowers the minimum disk space requirement for improved incremental analysis, enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. #3498
Added an experimental change which allows the start-proxy action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. #3512
The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. #3503, #3504

`v4.32.4`

Compare Source

Update default CodeQL bundle version to 2.24.2. #3493
Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when private package registries are configured. This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. #3473
When the CodeQL Action is run with debugging enabled in Default Setup and private package registries are configured, the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. #3486
Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. #3485
Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a nightly CodeQL CLI release instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. #3484

`v4.32.3`

Compare Source

Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #3466

`v4.32.2`

Compare Source

`v4.32.1`

Compare Source

A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #3422
Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #3421

`v4.32.0`

Compare Source

Update default CodeQL bundle version to 2.24.0. #3425

`v4.31.11`

Compare Source

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
Improved error handling throughout the CodeQL Action. #3415
Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

`v4.31.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

hendrikmuhs/ccache-action (hendrikmuhs/ccache-action)

`v1.2.22`

Compare Source

What's Changed

Bump picomatch by @dependabot[bot] in #435
Bump fast-xml-parser from 5.4.1 to 5.5.7 by @dependabot[bot] in #434

Full Changelog: hendrikmuhs/ccache-action@v1.2.21...v1.2.22

`v1.2.21`

Compare Source

What's Changed

Bump actions/checkout from 5 to 6 by @dependabot[bot] in #396
Bump @types/node from 24.10.0 to 25.2.2 by @dependabot[bot] in #417
Bump @actions/cache from 4.1.0 to 6.0.0 by @dependabot[bot] in #412
Bump @actions/core from 1.11.1 to 3.0.0 by @dependabot[bot] in #413
Bump @actions/exec from 1.1.1 to 3.0.0 by @dependabot[bot] in #414
Bump @actions/io from 2.0.0 to 3.0.2 by @dependabot[bot] in #416
refactor: add Windows ARM and macOS binaries, use a single Package class, deduplicate some common install code by @crueter in #403
Bump @types/node from 25.2.2 to 25.3.3 by @dependabot[bot] in #421
Bump jest from 30.2.0 to 30.3.0 by @dependabot[bot] in #431
Upgrade Node.js version from 20 to 24 by @janisozaur in #427
Bump @types/node from 25.3.3 to 25.5.0 by @dependabot[bot] in #430
refactor: generate metadata json file by @crueter in #422
tests: add install matrix by @crueter in #423
Bump undici from 6.23.0 to 6.24.1 by @dependabot[bot] in #429

New Contributors

@crueter made their first contribution in #403

Full Changelog: hendrikmuhs/ccache-action@v1.2...v1.2.21

maxim-lobanov/setup-xcode (maxim-lobanov/setup-xcode)

`v1.7.0`: Update Node.js to 24

Compare Source

What's Changed

Bump self used GHA by @Goooler in #82
Update validation matrix on CI by @Goooler in #83
Update action runtime to node24 and polish e2e test matrix by @Goooler in #98

New Contributors

@Goooler made their first contribution in #82

Full Changelog: maxim-lobanov/setup-xcode@v1.6.0...v1.7.0

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

`v1.14.0`

Compare Source

Audit your supply chain regularly!

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @whitequark 💰 in #397.

📝 Docs

@woodruffw 💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #388 and @him2him2 💰 brushed up some grammar in the README and SECURITY docs via #395.

🛠️ Internal Updates

@woodruffw 💰 bumped sigstore and pypi-attestations in the lock file (#391) and @webknjaz 💰 added infra for using type annotations in the project (#381).

💪 New Contributors

@him2him2 made their first contribution in #395
@whitequark made their first contribution in #397

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @webknjaz 🇺🇦

🙏 Special Thanks to @facutuesca 💰 and @woodruffw 💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

actions/python-versions (python)

`v3.14.4`: 3.14.4

Compare Source

Python 3.14.4

`v3.14.3`: 3.14.3

Compare Source

Python 3.14.3

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

`v3.13.13`: 3.13.13

Compare Source

Python 3.13.13

`v3.13.12`: 3.13.12

Compare Source

Python 3.13.12

`v3.13.11`: 3.13.11

Compare Source

Python 3.13.11

`v3.13.10`: 3.13.10

Compare Source

Python 3.13.10

`v3.13.9`: 3.13.9

Compare Source

Python 3.13.9

`v3.13.8`: 3.13.8

Compare Source

Python 3.13.8

`v3.13.7`: 3.13.7

Compare Source

Python 3.13.7

`v3.13.6`: 3.13.6

Compare Source

Python 3.13.6

`v3.13.5`: 3.13.5

Compare Source

Python 3.13.5

`v3.13.4`: 3.13.4

Compare Source

Python 3.13.4

`v3.13.3`: 3.13.3

Compare Source

Python 3.13.3

`v3.13.2`: 3.13.2

Compare Source

Python 3.13.2

`v3.13.1`: 3.13.1

Compare Source

Python 3.13.1

`v3.13.0`: 3.13.0

Compare Source

Python 3.13.0

`v3.12.13`: 3.12.13

Compare Source

Python 3.12.13

`v3.12.12`: 3.12.12

Compare Source

Python 3.12.12

`v3.12.11`: 3.12.11

Compare Source

Python 3.12.11

`v3.12.10`: 3.12.10

Compare Source

Python 3.12.10

`v3.12.9`: 3.12.9

Compare Source

Python 3.12.9

`v3.12.8`: 3.12.8

Compare Source

Python 3.12.8

`v3.12.7`: 3.12.7

Compare Source

Python 3.12.7

`v3.12.6`: 3.12.6

Compare Source

Python 3.12.6

`v3.12.5`: 3.12.5

Compare Source

Python 3.12.5

`v3.12.4`: 3.12.4

Compare Source

Python 3.12.4

`v3.12.3`: 3.12.3

Compare Source

Python 3.12.3

`v3.12.2`: 3.12.2

Compare Source

Python 3.12.2

`v3.12.1`: 3.12.1

Compare Source

Python 3.12.1

`v3.12.0`: 3.12.0

Compare Source

Python 3.12.0

`v3.11.15`: 3.11.15

Compare Source

Python 3.11.15

`v3.11.14`: 3.11.14

Compare Source

Python 3.11.14

`v3.11.13`: 3.11.13

Compare Source

Python 3.11.13

`v3.11.12`: 3.11.12

Compare Source

Python 3.11.12

`v3.11.11`: 3.11.11

Compare Source

Python 3.11.11

`v3.11.10`: 3.11.10

Compare Source

Python 3.11.10

tj-actions/changed-files (tj-actions/changed-files)

`v47.0.6`

Compare Source

What's Changed

Upgraded to v47.0.5 by @github-actions[bot] in #2816
Updated README.md by @github-actions[bot] in #2817
chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #2818
chore(deps-dev): bump @types/node from 25.3.3 to 25.3.5 by @dependabot[bot] in #2820
chore(deps): bump github/codeql-action from 4.32.5 to 4.32.6 by @dependabot[bot] in #2819
chore(deps-dev): bump @types/node from 25.3.5 to 25.5.0 by @dependabot[bot] in #2825
chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in #2824
chore(deps): bump github/codeql-action from 4.32.6 to 4.35.1 by @dependabot[bot] in #2834
chore(deps-dev): bump eslint-plugin-jest from 29.15.0 to 29.15.1 by @dependabot[bot] in #2831
chore(deps): bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #2830
chore(deps): bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 by @dependabot[bot] in #2829
chore(deps-dev): bump jest from 30.2.0 to 30.3.0 by @dependabot[bot] in #2822
chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #2849
chore(deps-dev): bump prettier from 3.8.1 to 3.8.3 by @dependabot[bot] in #2848
chore(deps-dev): bump @types/node from 25.5.0 to 25.6.0 by @dependabot[bot] in #2846
chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #2844
chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #2843
chore(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in #2837

Full Changelog: tj-actions/changed-files@v47.0.5...v47.0.6

`v47.0.5`

Compare Source

What's Changed

Upgraded to v47.0.4 by @github-actions[bot] in #2802
Updated README.md by @github-actions[bot] in #2803
Updated README.md by @github-actions[bot] in #2805
chore(deps-dev): bump @types/node from 25.2.2 to 25.3.2 by @dependabot[bot] in #2811
chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in #2810
chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #2809
chore(deps-dev): bump eslint-plugin-jest from 29.12.1 to 29.15.0 by @dependabot[bot] in #2799
chore(deps): bump github/codeql-action from 4.32.2 to 4.32.4 by @dependabot[bot] in #2806
chore(deps-dev): bump prettier from 3.7.4 to 3.8.1 by @dependabot[bot] in #2775
chore(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by @dependabot[bot] in #2774
chore(deps): bump lodash and @types/lodash by @dependabot[bot] in #2807
chore(deps-dev): bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by @dependabot[bot] in #2764
chore(deps): bump github/codeql-action from 4.32.4 to 4.32.5 by @dependabot[bot] in #2815
chore(deps-dev): bump @types/node from 25.3.2 to 25.3.3 by @dependabot[bot] in #2814

Full Changelog: tj-actions/changed-files@v47.0.4...v47.0.5

`v47.0.4`

Compare Source

What's Changed

update: release-tagger action to version 6.0.6 by @jackton1 in #2801

Full Changelog: tj-actions/changed-files@v47.0.3...v47.0.4

`v47.0.3`

Compare Source

What's Changed

chore(deps): bump github/codeql-action from 4.31.10 to 4.32.2 by @dependabot[bot] in #2790
update: release-tagger action to version 6.0.0 by @jackton1 in #2800

Full Changelog: tj-actions/changed-files@v47.0.2...v47.0.3

`v47.0.2`

Compare Source

What's Changed

chore(deps-dev): bump eslint-plugin-jest from 29.2.1 to 29.11.0 by @dependabot[bot] in #2751
chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #2741
chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #2743
chore(deps): bump @actions/core from 2.0.0 to 2.0.2 by @dependabot[bot] in #2757
Updated README.md by @github-actions[bot] in #2768
chore: update dist by @jackton1 in #2769
chore: update matrix-example.yml by @jackton1 in #2752
feat: add support for excluding symlinks and fix bug with commit not found by @jackton1 in #2770
chore(deps): bump github/codeql-action from 4.31.7 to 4.31.10 by @dependabot[bot] in #2761
Updated README.md by [@github-actions](

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 12:59 AM, only on Monday (* 0 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

llvmbot · 2026-01-19T00:53:41Z

@llvm/pr-subscribers-libcxx

@llvm/pr-subscribers-github-workflow

Author: Mend Renovate (renovate-bot)

Changes

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	`v6.1.0` → `v6.2.0`
ghcr.io/llvm/ci-ubuntu-24.04-abi-tests	container	digest	`ef869c1` → `88ce0ba`
github/codeql-action	action	patch	`v4.31.9` → `v4.31.10`
python	uses-with	minor	`3.11.9` → `3.14.2`
tj-actions/changed-files	action	patch	`v47.0.0` → `v47.0.1`

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

`v6.2.0`

Compare Source

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

`v4.31.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

</details>

<details>
<summary>actions/python-versions (python)</summary>

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

`v3.13.11`: 3.13.11

Compare Source

Python 3.13.11

`v3.13.10`: 3.13.10

Compare Source

Python 3.13.10

`v3.13.9`: 3.13.9

Compare Source

Python 3.13.9

`v3.13.8`: 3.13.8

Compare Source

Python 3.13.8

`v3.13.7`: 3.13.7

Compare Source

Python 3.13.7

`v3.13.6`: 3.13.6

Compare Source

Python 3.13.6

`v3.13.5`: 3.13.5

Compare Source

Python 3.13.5

`v3.13.4`: 3.13.4

Compare Source

Python 3.13.4

`v3.13.3`: 3.13.3

Compare Source

Python 3.13.3

`v3.13.2`: 3.13.2

Compare Source

Python 3.13.2

`v3.13.1`: 3.13.1

Compare Source

Python 3.13.1

`v3.13.0`: 3.13.0

Compare Source

Python 3.13.0

`v3.12.12`: 3.12.12

Compare Source

Python 3.12.12

`v3.12.11`: 3.12.11

Compare Source

Python 3.12.11

`v3.12.10`: 3.12.10

Compare Source

Python 3.12.10

`v3.12.9`: 3.12.9

Compare Source

Python 3.12.9

`v3.12.8`: 3.12.8

Compare Source

Python 3.12.8

`v3.12.7`: 3.12.7

Compare Source

Python 3.12.7

`v3.12.6`: 3.12.6

Compare Source

Python 3.12.6

`v3.12.5`: 3.12.5

Compare Source

Python 3.12.5

`v3.12.4`: 3.12.4

Compare Source

Python 3.12.4

`v3.12.3`: 3.12.3

Compare Source

Python 3.12.3

`v3.12.2`: 3.12.2

Compare Source

Python 3.12.2

`v3.12.1`: 3.12.1

Compare Source

Python 3.12.1

`v3.12.0`: 3.12.0

Compare Source

Python 3.12.0

`v3.11.14`: 3.11.14

Compare Source

Python 3.11.14

`v3.11.13`: 3.11.13

Compare Source

Python 3.11.13

`v3.11.12`: 3.11.12

Compare Source

Python 3.11.12

`v3.11.11`: 3.11.11

Compare Source

Python 3.11.11

`v3.11.10`: 3.11.10

Compare Source

Python 3.11.10

</details>

<details>
<summary>tj-actions/changed-files (tj-actions/changed-files)</summary>

`v47.0.1`

Compare Source

What's Changed

Upgraded to v47 by @github-actions[bot] in #2663
chore(deps-dev): bump @types/node from 24.3.1 to 24.4.0 by @dependabot[bot] in #2664
chore(deps-dev): bump ts-jest from 29.4.1 to 29.4.3 by @dependabot[bot] in #2671
chore(deps-dev): bump @vercel/ncc from 0.38.3 to 0.38.4 by @dependabot[bot] in #2670
chore(deps-dev): bump @types/uuid from 10.0.0 to 11.0.0 by @dependabot[bot] in #2668
chore(deps-dev): bump @types/node from 24.4.0 to 24.5.2 by @dependabot[bot] in #2669
chore(deps): bump github/codeql-action from 3.30.3 to 3.30.4 by @dependabot[bot] in #2675
chore(deps-dev): bump ts-jest from 29.4.3 to 29.4.4 by @dependabot[bot] in #2672
chore(deps): bump github/codeql-action from 3.30.4 to 3.30.5 by @dependabot[bot] in #2676
chore(deps-dev): bump jest from 30.1.3 to 30.2.0 by @dependabot[bot] in #2677
chore(deps-dev): bump @types/node from 24.5.2 to 24.6.1 by @dependabot[bot] in #2679
chore(deps-dev): bump @types/node from 24.6.1 to 24.6.2 by @dependabot[bot] in #2681
chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 by @dependabot[bot] in #2680
chore(deps-dev): bump @types/node from 24.6.2 to 24.9.1 by @dependabot[bot] in #2695
chore(deps): bump github/codeql-action from 3.30.6 to 4.30.9 by @dependabot[bot] in #2693
chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #2690
chore(deps): bump github/codeql-action from 4.30.9 to 4.31.2 by @dependabot[bot] in #2702
chore(deps-dev): bump @types/node from 24.9.1 to 24.9.2 by @dependabot[bot] in #2700
chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #2698
chore(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #2697
chore(deps-dev): bump @types/micromatch from 4.0.9 to 4.0.10 by @dependabot[bot] in #2699
chore(deps-dev): bump ts-jest from 29.4.4 to 29.4.5 by @dependabot[bot] in #2688
chore(deps-dev): bump @types/node from 24.9.2 to 24.10.0 by @dependabot[bot] in #2707
chore(deps): bump @octokit/rest from 22.0.0 to 22.0.1 by @dependabot[bot] in #2705
chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.1.0 by @dependabot[bot] in #2710
chore(deps-dev): bump @types/node from 24.10.0 to 24.10.1 by @dependabot[bot] in #2711
chore(deps): bump github/codeql-action from 4.31.2 to 4.31.4 by @dependabot[bot] in #2715
chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #2714
chore(deps): bump nrwl/nx-set-shas from 4.3.3 to 4.4.0 by @dependabot[bot] in #2712
chore(deps-dev): bump prettier from 3.6.2 to 3.7.1 by @dependabot[bot] in #2722
chore(deps): bump github/codeql-action from 4.31.4 to 4.31.5 by @dependabot[bot] in #2720
chore(deps-dev): bump eslint-plugin-jest from 29.1.0 to 29.2.1 by @dependabot[bot] in #2719
chore(deps-dev): bump @types/lodash from 4.17.20 to 4.17.21 by @dependabot[bot] in #2718
chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #2717
Updated README.md by @github-actions[bot] in #2723
chore(deps): bump yaml from 2.8.1 to 2.8.2 by @dependabot[bot] in #2724
chore(deps-dev): bump @types/node from 24.10.1 to 25.0.0 by @dependabot[bot] in #2738
chore(deps): bump @actions/exec from 1.1.1 to 2.0.0 by @dependabot[bot] in #2737
chore(deps-dev): bump ts-jest from 29.4.5 to 29.4.6 by @dependabot[bot] in #2727
chore(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 by @dependabot[bot] in #2735
chore(deps): bump github/codeql-action from 4.31.5 to 4.31.7 by @dependabot[bot] in #2732
chore(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #2730
chore(deps-dev): bump prettier from 3.7.1 to 3.7.4 by @dependabot[bot] in #2731
chore(deps): bump @actions/core from 1.11.1 to 2.0.0 by @dependabot[bot] in #2736
chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #2729

Full Changelog: <tj-actions/changed-files@v47...v47.0.1>

</details>

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 12:59 AM, only on Monday ( * 0 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Full diff: https://github.com/llvm/llvm-project/pull/176676.diff

7 Files Affected:

(modified) .github/workflows/gha-codeql.yml (+2-2)
(modified) .github/workflows/ids-check.yml (+1-1)
(modified) .github/workflows/libclang-abi-tests.yml (+2-2)
(modified) .github/workflows/llvm-abi-tests.yml (+2-2)
(modified) .github/workflows/llvm-bugs.yml (+1-1)
(modified) .github/workflows/release-binaries.yml (+1-1)
(modified) .github/workflows/scorecard.yml (+1-1)

diff --git a/.github/workflows/gha-codeql.yml b/.github/workflows/gha-codeql.yml
index 7ae8b47de1e5a..6c3d3666f0e94 100644
--- a/.github/workflows/gha-codeql.yml
+++ b/.github/workflows/gha-codeql.yml
@@ -29,9 +29,9 @@ jobs:
           sparse-checkout: |
             .github/
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+        uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
         with:
           languages: actions
           queries: security-extended
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+        uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
diff --git a/.github/workflows/ids-check.yml b/.github/workflows/ids-check.yml
index 7dcd9ff56d892..c89f4a9a949fc 100644
--- a/.github/workflows/ids-check.yml
+++ b/.github/workflows/ids-check.yml
@@ -30,7 +30,7 @@ jobs:
 
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
+        uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
         with:
           path: "./llvm-project"
           separator: ","
diff --git a/.github/workflows/libclang-abi-tests.yml b/.github/workflows/libclang-abi-tests.yml
index 7a6e17a5b40b3..7755d3ed61689 100644
--- a/.github/workflows/libclang-abi-tests.yml
+++ b/.github/workflows/libclang-abi-tests.yml
@@ -85,7 +85,7 @@ jobs:
     needs: abi-dump-setup
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:ef869c1d087258db22c2b19b93f585d53c0d0e70952aaf02d45866ad26a200a0" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:88ce0ba4bbc162d87479933ce3e8a8aa0c9bfc45cd6d06f0c3c9150e14a8e58a" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
     strategy:
       matrix:
         name:
@@ -129,7 +129,7 @@ jobs:
     if: github.repository_owner == 'llvm'
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:ef869c1d087258db22c2b19b93f585d53c0d0e70952aaf02d45866ad26a200a0" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:88ce0ba4bbc162d87479933ce3e8a8aa0c9bfc45cd6d06f0c3c9150e14a8e58a" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
     needs:
       - abi-dump-setup
       - abi-dump
diff --git a/.github/workflows/llvm-abi-tests.yml b/.github/workflows/llvm-abi-tests.yml
index 935da79a7612b..5b175190c1f2e 100644
--- a/.github/workflows/llvm-abi-tests.yml
+++ b/.github/workflows/llvm-abi-tests.yml
@@ -73,7 +73,7 @@ jobs:
     needs: abi-dump-setup
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:ef869c1d087258db22c2b19b93f585d53c0d0e70952aaf02d45866ad26a200a0" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b"
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:88ce0ba4bbc162d87479933ce3e8a8aa0c9bfc45cd6d06f0c3c9150e14a8e58a" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b"
     strategy:
       matrix:
         name:
@@ -133,7 +133,7 @@ jobs:
     if: github.repository_owner == 'llvm'
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:ef869c1d087258db22c2b19b93f585d53c0d0e70952aaf02d45866ad26a200a0" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:88ce0ba4bbc162d87479933ce3e8a8aa0c9bfc45cd6d06f0c3c9150e14a8e58a" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b
     needs:
       - abi-dump-setup
       - abi-dump
diff --git a/.github/workflows/llvm-bugs.yml b/.github/workflows/llvm-bugs.yml
index 627b5e48da2b6..e10bd0cb7d7d8 100644
--- a/.github/workflows/llvm-bugs.yml
+++ b/.github/workflows/llvm-bugs.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-24.04
     if: github.repository == 'llvm/llvm-project'
     steps:
-      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: 24
           check-latest: true
diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml
index 3cbcb6b87964d..678556584174b 100644
--- a/.github/workflows/release-binaries.yml
+++ b/.github/workflows/release-binaries.yml
@@ -217,7 +217,7 @@ jobs:
     # get changed unexpectedly.
     - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
       with:
-        python-version: '3.11.9'
+        python-version: '3.14.2'
 
     # For some reason this is needed on Windows or else the build system can't find python3.lib.
     - name: Setup Python library path
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index aa19cbf8d8f72..fb3666d84cb3d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,6 +57,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
         with:
           sarif_file: results.sarif

github-actions · 2026-01-22T17:40:54Z

🪟 Windows x64 Test Results

135379 tests passed
5112 tests skipped

✅ The build succeeded and all tests passed.

github-actions · 2026-01-22T17:40:54Z

🐧 Linux x64 Test Results

202661 tests passed
5705 tests skipped

✅ The build succeeded and all tests passed.

ldionne

The libc++ parts are fine.

boomanaiden154

LGTM.

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action) | action | minor | `v2.22.0` → `v2.23.0` | | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v6.0.1` → `v6.0.2` | | | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | minor | `v6.1.0` → `v6.3.0` | `v6.4.0` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | minor | `v6.1.0` → `v6.2.0` | | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | patch | `v7.0.0` → `v7.0.1` | | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | patch | `7.0.0` → `v7.0.1` | | | [aminya/setup-cpp](https://redirect.github.com/aminya/setup-cpp) | action | minor | `v1.7.2` → `v1.8.0` | | | [docker/login-action](https://redirect.github.com/docker/login-action) | action | minor | `v4.0.0` → `v4.1.0` | | | ghcr.io/llvm/ci-ubuntu-24.04-abi-tests | container | digest | `ef869c1` → `cb3aea3` | | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | minor | `v4.31.9` → `v4.35.2` | | | [hendrikmuhs/ccache-action](https://redirect.github.com/hendrikmuhs/ccache-action) | action | patch | `v1.2.20` → `v1.2.22` | `v1.2.23` | | [maxim-lobanov/setup-xcode](https://redirect.github.com/maxim-lobanov/setup-xcode) | action | minor | `v1.6.0` → `v1.7.0` | | | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) | action | minor | `v1.13.0` → `v1.14.0` | | | [tj-actions/changed-files](https://redirect.github.com/tj-actions/changed-files) | action | patch | `v47.0.1` → `v47.0.6` | | | [tj-actions/changed-files](https://redirect.github.com/tj-actions/changed-files) | action | patch | `v47.0.0` → `v47.0.6` | | | [zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action) | action | patch | `v0.5.2` → `v0.5.3` | | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/160328) for more information. --- ### Release Notes <details> <summary>EnricoMi/publish-unit-test-result-action (EnricoMi/publish-unit-test-result-action)</summary> ### [`v2.23.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.23.0) [Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.22.0...v2.23.0) Adds the following improvements: - Lock composite actions' versions by SHA [#719](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/pull/719) - Upgrading Python dependencies [#721](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/pull/721), [#727](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/pull/727) - Upgrade GitHub actions [#720](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/pull/720), [#728](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/pull/728) **Full Changelog**: <https://github.com/EnricoMi/publish-unit-test-result-action/compare/v2.22.0...v2.23.0> </details> <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://redirect.github.com/ericsciple) in [#2356](https://redirect.github.com/actions/checkout/pull/2356) </details> <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v6.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.3.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.2.0...v6.3.0) #### What's Changed ##### Enhancements: - Support parsing `devEngines` field by [@susnux](https://redirect.github.com/susnux) in [#1283](https://redirect.github.com/actions/setup-node/pull/1283) > When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node. ##### Dependency updates: - Fix npm audit issues by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1491](https://redirect.github.com/actions/setup-node/pull/1491) - Replace uuid with crypto.randomUUID() by [@trivikr](https://redirect.github.com/trivikr) in [#1378](https://redirect.github.com/actions/setup-node/pull/1378) - Upgrade minimatch from 3.1.2 to 3.1.5 by [@dependabot](https://redirect.github.com/dependabot) in [#1498](https://redirect.github.com/actions/setup-node/pull/1498) ##### Bug fixes: - Remove hardcoded bearer for mirror-url [@marco-ippolito](https://redirect.github.com/marco-ippolito) in [#1467](https://redirect.github.com/actions/setup-node/pull/1467) - Scope test lockfiles by package manager and update cache tests by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1495](https://redirect.github.com/actions/setup-node/pull/1495) #### New Contributors - [@susnux](https://redirect.github.com/susnux) made their first contribution in [#1283](https://redirect.github.com/actions/setup-node/pull/1283) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.3.0> ### [`v6.2.0`](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0) </details> <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.2.0`](https://redirect.github.com/actions/setup-python/compare/v6.1.0...v6.2.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.1.0...v6.2.0) </details> <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v7.0.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7...v7.0.1) ##### What's Changed - Update the readme with direct upload details by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#795](https://redirect.github.com/actions/upload-artifact/pull/795) - Readme: bump all the example versions to v7 by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#796](https://redirect.github.com/actions/upload-artifact/pull/796) - Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://redirect.github.com/yacaovsnc) in [#797](https://redirect.github.com/actions/upload-artifact/pull/797) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7...v7.0.1> </details> <details> <summary>aminya/setup-cpp (aminya/setup-cpp)</summary> ### [`v1.8.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.8.0) [Compare Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.7.2...v1.8.0) #### What's Changed - feat: update default LLVM, Mingw, CMake, Ninja, Task, Meson by [@aminya](https://redirect.github.com/aminya) in [#455](https://redirect.github.com/aminya/setup-cpp/pull/455) - fix: default to LLVM 20.1.8 by [@aminya](https://redirect.github.com/aminya) in [#460](https://redirect.github.com/aminya/setup-cpp/pull/460) - feat: use bun as the package manager by [@aminya](https://redirect.github.com/aminya) in [#454](https://redirect.github.com/aminya/setup-cpp/pull/454) - chore(deps): update fedora docker tag to v44 in [#440](https://redirect.github.com/aminya/setup-cpp/pull/440) **Full Changelog**: <https://github.com/aminya/setup-cpp/compare/v1.7.2...v1.8.0> </details> <details> <summary>docker/login-action (docker/login-action)</summary> ### [`v4.1.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.1.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v4...v4.1.0) - Fix scoped Docker Hub cleanup path when registry is omitted by [@crazy-max](https://redirect.github.com/crazy-max) in [#945](https://redirect.github.com/docker/login-action/pull/945) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.1020.0 in [#930](https://redirect.github.com/docker/login-action/pull/930) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.77.0 to 0.86.0 in [#932](https://redirect.github.com/docker/login-action/pull/932) [#936](https://redirect.github.com/docker/login-action/pull/936) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#952](https://redirect.github.com/docker/login-action/pull/952) - Bump fast-xml-parser from 5.3.4 to 5.3.6 in [#942](https://redirect.github.com/docker/login-action/pull/942) - Bump flatted from 3.3.3 to 3.4.2 in [#944](https://redirect.github.com/docker/login-action/pull/944) - Bump glob from 10.3.12 to 10.5.0 in [#940](https://redirect.github.com/docker/login-action/pull/940) - Bump handlebars from 4.7.8 to 4.7.9 in [#949](https://redirect.github.com/docker/login-action/pull/949) - Bump http-proxy-agent and https-proxy-agent to 8.0.0 in [#937](https://redirect.github.com/docker/login-action/pull/937) - Bump lodash from 4.17.23 to 4.18.1 in [#958](https://redirect.github.com/docker/login-action/pull/958) - Bump minimatch from 3.1.2 to 3.1.5 in [#941](https://redirect.github.com/docker/login-action/pull/941) - Bump picomatch from 4.0.3 to 4.0.4 in [#948](https://redirect.github.com/docker/login-action/pull/948) - Bump undici from 6.23.0 to 6.24.1 in [#938](https://redirect.github.com/docker/login-action/pull/938) **Full Changelog**: <https://github.com/docker/login-action/compare/v4.0.0...v4.1.0> </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.35.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.35.1...v4.35.2) - The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) - The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. [#3789](https://redirect.github.com/github/codeql-action/pull/3789) - Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. [#3794](https://redirect.github.com/github/codeql-action/pull/3794) - Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. [#3807](https://redirect.github.com/github/codeql-action/pull/3807) - Update default CodeQL bundle version to [2.25.2](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2). [#3823](https://redirect.github.com/github/codeql-action/pull/3823) ### [`v4.35.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.35.0...v4.35.1) - Fix incorrect minimum required Git version for [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158): it should have been 2.36.0, not 2.11.0. [#3781](https://redirect.github.com/github/codeql-action/pull/3781) ### [`v4.35.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.34.1...v4.35.0) - Reduced the minimum Git version required for [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) from 2.38.0 to 2.11.0. [#3767](https://redirect.github.com/github/codeql-action/pull/3767) - Update default CodeQL bundle version to [2.25.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1). [#3773](https://redirect.github.com/github/codeql-action/pull/3773) ### [`v4.34.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.34.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.34.0...v4.34.1) - Downgrade default CodeQL bundle version to [2.24.3](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3) due to issues with a small percentage of Actions and JavaScript analyses. [#3762](https://redirect.github.com/github/codeql-action/pull/3762) ### [`v4.34.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.34.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.33.0...v4.34.0) - Added an experimental change which disables TRAP caching when [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. [#3569](https://redirect.github.com/github/codeql-action/pull/3569) - We are rolling out improved incremental analysis to C/C++ analyses that use build mode `none`. We expect this rollout to be complete by the end of April 2026. [#3584](https://redirect.github.com/github/codeql-action/pull/3584) - Update default CodeQL bundle version to [2.25.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0). [#3585](https://redirect.github.com/github/codeql-action/pull/3585) ### [`v4.33.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.33.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.6...v4.33.0) - Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. [#3562](https://redirect.github.com/github/codeql-action/pull/3562) To opt out of this change: - **Repositories owned by an organization:** Create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings. For more information, see [Managing custom properties for repositories in your organization](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). Alternatively, if you are using an advanced setup workflow, you can set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true` in your workflow. - **User-owned repositories using default setup:** Switch to an advanced setup workflow and set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true` in your workflow. - **User-owned repositories using advanced setup:** Set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true` in your workflow. - Fixed [a bug](https://redirect.github.com/github/codeql-action/issues/3555) which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. [#3557](https://redirect.github.com/github/codeql-action/pull/3557) - The CodeQL Action now loads [custom repository properties](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization) on GitHub Enterprise Server, enabling the customization of features such as `github-codeql-disable-overlay` that was previously only available on GitHub.com. [#3559](https://redirect.github.com/github/codeql-action/pull/3559) - Once [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. [#3563](https://redirect.github.com/github/codeql-action/pull/3563) - Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". [#3564](https://redirect.github.com/github/codeql-action/pull/3564) - A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. [#3570](https://redirect.github.com/github/codeql-action/pull/3570) ### [`v4.32.6`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.5...v4.32.6) - Update default CodeQL bundle version to [2.24.3](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3). [#3548](https://redirect.github.com/github/codeql-action/pull/3548) ### [`v4.32.5`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.4...v4.32.5) - Repositories owned by an organization can now set up the `github-codeql-disable-overlay` custom repository property to disable [improved incremental analysis for CodeQL](https://redirect.github.com/github/roadmap/issues/1158). First, create a custom repository property with the name `github-codeql-disable-overlay` and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to `true` to disable improved incremental analysis. For more information, see [Managing custom properties for repositories in your organization](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature is not yet available on GitHub Enterprise Server. [#3507](https://redirect.github.com/github/codeql-action/pull/3507) - Added an experimental change so that when [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. [#3487](https://redirect.github.com/github/codeql-action/pull/3487) - The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. [#3515](https://redirect.github.com/github/codeql-action/pull/3515) - Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. [#3516](https://redirect.github.com/github/codeql-action/pull/3516) - Added an experimental change which lowers the minimum disk space requirement for [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158), enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. [#3498](https://redirect.github.com/github/codeql-action/pull/3498) - Added an experimental change which allows the `start-proxy` action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. [#3512](https://redirect.github.com/github/codeql-action/pull/3512) - The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. [#3503](https://redirect.github.com/github/codeql-action/pull/3503), [#3504](https://redirect.github.com/github/codeql-action/pull/3504) ### [`v4.32.4`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.3...v4.32.4) - Update default CodeQL bundle version to [2.24.2](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.2). [#3493](https://redirect.github.com/github/codeql-action/pull/3493) - Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. [#3473](https://redirect.github.com/github/codeql-action/pull/3473) - When the CodeQL Action is run [with debugging enabled in Default Setup](https://docs.github.com/en/code-security/how-tos/scan-code-for-vulnerabilities/troubleshooting/troubleshooting-analysis-errors/logs-not-detailed-enough#creating-codeql-debugging-artifacts-for-codeql-default-setup) and [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries), the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. [#3486](https://redirect.github.com/github/codeql-action/pull/3486) - Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. [#3485](https://redirect.github.com/github/codeql-action/pull/3485) - Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a [nightly CodeQL CLI release](https://redirect.github.com/dsp-testing/codeql-cli-nightlies) instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. [#3484](https://redirect.github.com/github/codeql-action/pull/3484) ### [`v4.32.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.2...v4.32.3) - Added experimental support for testing connections to [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. [#3466](https://redirect.github.com/github/codeql-action/pull/3466) ### [`v4.32.2`](https://redirect.github.com/github/codeql-action/compare/v4.32.1...v4.32.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.1...v4.32.2) ### [`v4.32.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.0...v4.32.1) - A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [#3422](https://redirect.github.com/github/codeql-action/pull/3422) - Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [#3421](https://redirect.github.com/github/codeql-action/pull/3421) ### [`v4.32.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.11...v4.32.0) - Update default CodeQL bundle version to [2.24.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#3425](https://redirect.github.com/github/codeql-action/pull/3425) ### [`v4.31.11`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.10...v4.31.11) - When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#3409](https://redirect.github.com/github/codeql-action/pull/3409) - Improved error handling throughout the CodeQL Action. [#3415](https://redirect.github.com/github/codeql-action/pull/3415) - Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#3318](https://redirect.github.com/github/codeql-action/pull/3318) - The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#3403](https://redirect.github.com/github/codeql-action/pull/3403) ### [`v4.31.10`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.9...v4.31.10) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.10 - 12 Jan 2026 - Update default CodeQL bundle version to 2.23.9. [#3393](https://redirect.github.com/github/codeql-action/pull/3393) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.10/CHANGELOG.md) for more information. </details> <details> <summary>hendrikmuhs/ccache-action (hendrikmuhs/ccache-action)</summary> ### [`v1.2.22`](https://redirect.github.com/hendrikmuhs/ccache-action/releases/tag/v1.2.22) [Compare Source](https://redirect.github.com/hendrikmuhs/ccache-action/compare/v1.2.21...v1.2.22) #### What's Changed - Bump picomatch by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#435](https://redirect.github.com/hendrikmuhs/ccache-action/pull/435) - Bump fast-xml-parser from 5.4.1 to 5.5.7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#434](https://redirect.github.com/hendrikmuhs/ccache-action/pull/434) **Full Changelog**: <https://github.com/hendrikmuhs/ccache-action/compare/v1.2.21...v1.2.22> ### [`v1.2.21`](https://redirect.github.com/hendrikmuhs/ccache-action/releases/tag/v1.2.21) [Compare Source](https://redirect.github.com/hendrikmuhs/ccache-action/compare/v1.2.20...v1.2.21) ##### What's Changed - Bump actions/checkout from 5 to 6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#396](https://redirect.github.com/hendrikmuhs/ccache-action/pull/396) - Bump [@types/node](https://redirect.github.com/types/node) from 24.10.0 to 25.2.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#417](https://redirect.github.com/hendrikmuhs/ccache-action/pull/417) - Bump [@actions/cache](https://redirect.github.com/actions/cache) from 4.1.0 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#412](https://redirect.github.com/hendrikmuhs/ccache-action/pull/412) - Bump [@actions/core](https://redirect.github.com/actions/core) from 1.11.1 to 3.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#413](https://redirect.github.com/hendrikmuhs/ccache-action/pull/413) - Bump [@actions/exec](https://redirect.github.com/actions/exec) from 1.1.1 to 3.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#414](https://redirect.github.com/hendrikmuhs/ccache-action/pull/414) - Bump [@actions/io](https://redirect.github.com/actions/io) from 2.0.0 to 3.0.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#416](https://redirect.github.com/hendrikmuhs/ccache-action/pull/416) - refactor: add Windows ARM and macOS binaries, use a single Package class, deduplicate some common install code by [@crueter](https://redirect.github.com/crueter) in [#403](https://redirect.github.com/hendrikmuhs/ccache-action/pull/403) - Bump [@types/node](https://redirect.github.com/types/node) from 25.2.2 to 25.3.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#421](https://redirect.github.com/hendrikmuhs/ccache-action/pull/421) - Bump jest from 30.2.0 to 30.3.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#431](https://redirect.github.com/hendrikmuhs/ccache-action/pull/431) - Upgrade Node.js version from 20 to 24 by [@janisozaur](https://redirect.github.com/janisozaur) in [#427](https://redirect.github.com/hendrikmuhs/ccache-action/pull/427) - Bump [@types/node](https://redirect.github.com/types/node) from 25.3.3 to 25.5.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#430](https://redirect.github.com/hendrikmuhs/ccache-action/pull/430) - refactor: generate metadata json file by [@crueter](https://redirect.github.com/crueter) in [#422](https://redirect.github.com/hendrikmuhs/ccache-action/pull/422) - tests: add install matrix by [@crueter](https://redirect.github.com/crueter) in [#423](https://redirect.github.com/hendrikmuhs/ccache-action/pull/423) - Bump undici from 6.23.0 to 6.24.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#429](https://redirect.github.com/hendrikmuhs/ccache-action/pull/429) ##### New Contributors - [@crueter](https://redirect.github.com/crueter) made their first contribution in [#403](https://redirect.github.com/hendrikmuhs/ccache-action/pull/403) **Full Changelog**: <https://github.com/hendrikmuhs/ccache-action/compare/v1.2...v1.2.21> </details> <details> <summary>maxim-lobanov/setup-xcode (maxim-lobanov/setup-xcode)</summary> ### [`v1.7.0`](https://redirect.github.com/maxim-lobanov/setup-xcode/releases/tag/v1.7.0): Update Node.js to 24 [Compare Source](https://redirect.github.com/maxim-lobanov/setup-xcode/compare/v1.6.0...v1.7.0) #### What's Changed - Bump self used GHA by [@Goooler](https://redirect.github.com/Goooler) in [#82](https://redirect.github.com/maxim-lobanov/setup-xcode/pull/82) - Update validation matrix on CI by [@Goooler](https://redirect.github.com/Goooler) in [#83](https://redirect.github.com/maxim-lobanov/setup-xcode/pull/83) - Update action runtime to node24 and polish e2e test matrix by [@Goooler](https://redirect.github.com/Goooler) in [#98](https://redirect.github.com/maxim-lobanov/setup-xcode/pull/98) #### New Contributors - [@Goooler](https://redirect.github.com/Goooler) made their first contribution in [#82](https://redirect.github.com/maxim-lobanov/setup-xcode/pull/82) **Full Changelog**: <https://github.com/maxim-lobanov/setup-xcode/compare/v1.6.0...v1.7.0> </details> <details> <summary>pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)</summary> ### [`v1.14.0`](https://redirect.github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.0) [Compare Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.13.0...v1.14.0) <p align="right"><i>Audit your supply chain regularly!</i></p> #### ✨ What's Changed The main change in this release is that `verbose` and `print-hash` inputs are now on by default. This was contributed by [@whitequark](https://redirect.github.com/whitequark)[💰](https://redirect.github.com/sponsors/whitequark) in [#397](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/397). #### 📝 Docs [@woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw) updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in [#388](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/388) and [@him2him2](https://redirect.github.com/him2him2)[💰](https://redirect.github.com/sponsors/him2him2) brushed up some grammar in the README and SECURITY docs via [#395](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/395). #### 🛠️ Internal Updates [@woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw) bumped `sigstore` and `pypi-attestations` in the lock file ([#391](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/391)) and [@webknjaz](https://redirect.github.com/webknjaz)[💰][GH Sponsors URL] added infra for using type annotations in the project ([#381](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/381)). #### 💪 New Contributors - [@him2him2](https://redirect.github.com/him2him2) made their first contribution in [#395](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/395) - [@whitequark](https://redirect.github.com/whitequark) made their first contribution in [#397](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/397) **🪞 Full Diff**: <https://github.com/pypa/gh-action-pypi-publish/compare/v1.13.0...v1.14.0> **🧔‍♂️ Release Manager:** [@webknjaz](https://redirect.github.com/sponsors/webknjaz) [🇺🇦](https://stand-with-ukraine.pp.ua) **🙏 Special Thanks** to [@facutuesca](https://redirect.github.com/facutuesca)[💰](https://redirect.github.com/sponsors/facutuesca) and [@woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw) for helping maintain this project when [I][GH Sponsors URL] can't! **💬 Discuss** [on Bluesky 🦋](https://bsky.app/profile/webknjaz.me/post/3mivwsz3qzk2e), [on Mastodon 🐘](https://mastodon.social/@webknjaz/116363779997051422) and [on GitHub][release discussion]. [![GH Sponsors badge]][GH Sponsors URL] [GH Sponsors badge]: https://img.shields.io/badge/%40webknjaz-transparent?logo=githubsponsors&logoColor=%23EA4AAA&label=Sponsor&color=2a313c [GH Sponsors URL]: https://redirect.github.com/sponsors/webknjaz [release discussion]: https://redirect.github.com/pypa/gh-action-pypi-publish/discussions/404 </details> <details> <summary>actions/python-versions (python)</summary> ### [`v3.14.4`](https://redirect.github.com/actions/python-versions/releases/tag/3.14.4-24114161919): 3.14.4 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.14.3-21673711214...3.14.4-24114161919) Python 3.14.4 ### [`v3.14.3`](https://redirect.github.com/actions/python-versions/releases/tag/3.14.3-21673711214): 3.14.3 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.14.2-20014991423...3.14.3-21673711214) Python 3.14.3 ### [`v3.14.2`](https://redirect.github.com/actions/python-versions/releases/tag/3.14.2-20014991423): 3.14.2 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.14.1-19879739908...3.14.2-20014991423) Python 3.14.2 ### [`v3.14.1`](https://redirect.github.com/actions/python-versions/releases/tag/3.14.1-19879739908): 3.14.1 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.14.0-18313368925...3.14.1-19879739908) Python 3.14.1 ### [`v3.14.0`](https://redirect.github.com/actions/python-versions/releases/tag/3.14.0-18313368925): 3.14.0 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.13-24114113768...3.14.0-18313368925) Python 3.14.0 ### [`v3.13.13`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.13-24114113768): 3.13.13 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.12-21673645133...3.13.13-24114113768) Python 3.13.13 ### [`v3.13.12`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.12-21673645133): 3.13.12 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.11-20014977833...3.13.12-21673645133) Python 3.13.12 ### [`v3.13.11`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.11-20014977833): 3.13.11 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.10-19879712315...3.13.11-20014977833) Python 3.13.11 ### [`v3.13.10`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.10-19879712315): 3.13.10 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.9-18515951191...3.13.10-19879712315) Python 3.13.10 ### [`v3.13.9`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.9-18515951191): 3.13.9 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.8-18331000654...3.13.9-18515951191) Python 3.13.9 ### [`v3.13.8`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.8-18331000654): 3.13.8 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.7-16980743123...3.13.8-18331000654) Python 3.13.8 ### [`v3.13.7`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.7-16980743123): 3.13.7 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.6-16792117939...3.13.7-16980743123) Python 3.13.7 ### [`v3.13.6`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.6-16792117939): 3.13.6 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.5-15601068749...3.13.6-16792117939) Python 3.13.6 ### [`v3.13.5`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.5-15601068749): 3.13.5 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.4-15433317575...3.13.5-15601068749) Python 3.13.5 ### [`v3.13.4`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.4-15433317575): 3.13.4 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.3-14344076652...3.13.4-15433317575) Python 3.13.4 ### [`v3.13.3`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.3-14344076652): 3.13.3 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.2-13708744326...3.13.3-14344076652) Python 3.13.3 ### [`v3.13.2`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.2-13708744326): 3.13.2 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.1-13437882550...3.13.2-13708744326) Python 3.13.2 ### [`v3.13.1`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.1-13437882550): 3.13.1 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.0-13707372259...3.13.1-13437882550) Python 3.13.1 ### [`v3.13.0`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.0-13707372259): 3.13.0 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.13-22652080177...3.13.0-13707372259) Python 3.13.0 ### [`v3.12.13`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.13-22652080177): 3.12.13 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.12-18393146713...3.12.13-22652080177) Python 3.12.13 ### [`v3.12.12`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.12-18393146713): 3.12.12 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.11-15433310049...3.12.12-18393146713) Python 3.12.12 ### [`v3.12.11`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.11-15433310049): 3.12.11 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.10-14343898437...3.12.11-15433310049) Python 3.12.11 ### [`v3.12.10`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.10-14343898437): 3.12.10 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.9-13149478207...3.12.10-14343898437) Python 3.12.10 ### [`v3.12.9`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.9-13149478207): 3.12.9 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.8-12154062663...3.12.9-13149478207) Python 3.12.9 ### [`v3.12.8`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.8-12154062663): 3.12.8 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.7-11128208086...3.12.8-12154062663) Python 3.12.8 ### [`v3.12.7`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.7-11128208086): 3.12.7 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.6-10765725458...3.12.7-11128208086) Python 3.12.7 ### [`v3.12.6`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.6-10765725458): 3.12.6 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.5-10375840348...3.12.6-10765725458) Python 3.12.6 ### [`v3.12.5`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.5-10375840348): 3.12.5 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.4-9947065640...3.12.5-10375840348) Python 3.12.5 ### [`v3.12.4`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.4-9947065640): 3.12.4 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.3-11057844995...3.12.4-9947065640) Python 3.12.4 ### [`v3.12.3`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.3-11057844995): 3.12.3 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.2-11057786931...3.12.3-11057844995) Python 3.12.3 ### [`v3.12.2`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.2-11057786931): 3.12.2 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.1-11057762749...3.12.2-11057786931) Python 3.12.2 ### [`v3.12.1`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.1-11057762749): 3.12.1 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.12.0-11057302691...3.12.1-11057762749) Python 3.12.1 ### [`v3.12.0`](https://redirect.github.com/actions/python-versions/releases/tag/3.12.0-11057302691): 3.12.0 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.11.15-22631496413...3.12.0-11057302691) Python 3.12.0 ### [`v3.11.15`](https://redirect.github.com/actions/python-versions/releases/tag/3.11.15-22631496413): 3.11.15 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.11.14-18393181605...3.11.15-22631496413) Python 3.11.15 ### [`v3.11.14`](https://redirect.github.com/actions/python-versions/releases/tag/3.11.14-18393181605): 3.11.14 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.11.13-15433298024...3.11.14-18393181605) Python 3.11.14 ### [`v3.11.13`](https://redirect.github.com/actions/python-versions/releases/tag/3.11.13-15433298024): 3.11.13 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.11.12-14343939122...3.11.13-15433298024) Python 3.11.13 ### [`v3.11.12`](https://redirect.github.com/actions/python-versions/releases/tag/3.11.12-14343939122): 3.11.12 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.11.11-12160100664...3.11.12-14343939122) Python 3.11.12 ### [`v3.11.11`](https://redirect.github.com/actions/python-versions/releases/tag/3.11.11-12160100664): 3.11.11 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.11.10-10765870205...3.11.11-12160100664) Python 3.11.11 ### [`v3.11.10`](https://redirect.github.com/actions/python-versions/releases/tag/3.11.10-10765870205): 3.11.10 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.11.9-9947079978...3.11.10-10765870205) Python 3.11.10 </details> <details> <summary>tj-actions/changed-files (tj-actions/changed-files)</summary> ### [`v47.0.6`](https://redirect.github.com/tj-actions/changed-files/releases/tag/v47.0.6) [Compare Source](https://redirect.github.com/tj-actions/changed-files/compare/v47.0.5...v47.0.6) #### What's Changed - Upgraded to v47.0.5 by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2816](https://redirect.github.com/tj-actions/changed-files/pull/2816) - Updated README.md by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2817](https://redirect.github.com/tj-actions/changed-files/pull/2817) - chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2818](https://redirect.github.com/tj-actions/changed-files/pull/2818) - chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 25.3.3 to 25.3.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2820](https://redirect.github.com/tj-actions/changed-files/pull/2820) - chore(deps): bump github/codeql-action from 4.32.5 to 4.32.6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2819](https://redirect.github.com/tj-actions/changed-files/pull/2819) - chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 25.3.5 to 25.5.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2825](https://redirect.github.com/tj-actions/changed-files/pull/2825) - chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2824](https://redirect.github.com/tj-actions/changed-files/pull/2824) - chore(deps): bump github/codeql-action from 4.32.6 to 4.35.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2834](https://redirect.github.com/tj-actions/changed-files/pull/2834) - chore(deps-dev): bump eslint-plugin-jest from 29.15.0 to 29.15.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2831](https://redirect.github.com/tj-actions/changed-files/pull/2831) - chore(deps): bump yaml from 2.8.2 to 2.8.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2830](https://redirect.github.com/tj-actions/changed-files/pull/2830) - chore(deps): bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2829](https://redirect.github.com/tj-actions/changed-files/pull/2829) - chore(deps-dev): bump jest from 30.2.0 to 30.3.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2822](https://redirect.github.com/tj-actions/changed-files/pull/2822) - chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2849](https://redirect.github.com/tj-actions/changed-files/pull/2849) - chore(deps-dev): bump prettier from 3.8.1 to 3.8.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2848](https://redirect.github.com/tj-actions/changed-files/pull/2848) - chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 25.5.0 to 25.6.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2846](https://redirect.github.com/tj-actions/changed-files/pull/2846) - chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2844](https://redirect.github.com/tj-actions/changed-files/pull/2844) - chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2843](https://redirect.github.com/tj-actions/changed-files/pull/2843) - chore(deps): bump lodash from 4.17.23 to 4.18.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2837](https://redirect.github.com/tj-actions/changed-files/pull/2837) **Full Changelog**: <https://github.com/tj-actions/changed-files/compare/v47.0.5...v47.0.6> ### [`v47.0.5`](https://redirect.github.com/tj-actions/changed-files/releases/tag/v47.0.5) [Compare Source](https://redirect.github.com/tj-actions/changed-files/compare/v47.0.4...v47.0.5) #### What's Changed - Upgraded to v47.0.4 by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2802](https://redirect.github.com/tj-actions/changed-files/pull/2802) - Updated README.md by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2803](https://redirect.github.com/tj-actions/changed-files/pull/2803) - Updated README.md by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2805](https://redirect.github.com/tj-actions/changed-files/pull/2805) - chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 25.2.2 to 25.3.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2811](https://redirect.github.com/tj-actions/changed-files/pull/2811) - chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2810](https://redirect.github.com/tj-actions/changed-files/pull/2810) - chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2809](https://redirect.github.com/tj-actions/changed-files/pull/2809) - chore(deps-dev): bump eslint-plugin-jest from 29.12.1 to 29.15.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2799](https://redirect.github.com/tj-actions/changed-files/pull/2799) - chore(deps): bump github/codeql-action from 4.32.2 to 4.32.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2806](https://redirect.github.com/tj-actions/changed-files/pull/2806) - chore(deps-dev): bump prettier from 3.7.4 to 3.8.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2775](https://redirect.github.com/tj-actions/changed-files/pull/2775) - chore(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2774](https://redirect.github.com/tj-actions/changed-files/pull/2774) - chore(deps): bump lodash and [@types/lodash](https://redirect.github.com/types/lodash) by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2807](https://redirect.github.com/tj-actions/changed-files/pull/2807) - chore(deps-dev): bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2764](https://redirect.github.com/tj-actions/changed-files/pull/2764) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2815](https://redirect.github.com/tj-actions/changed-files/pull/2815) - chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 25.3.2 to 25.3.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2814](https://redirect.github.com/tj-actions/changed-files/pull/2814) **Full Changelog**: <https://github.com/tj-actions/changed-files/compare/v47.0.4...v47.0.5> ### [`v47.0.4`](https://redirect.github.com/tj-actions/changed-files/releases/tag/v47.0.4) [Compare Source](https://redirect.github.com/tj-actions/changed-files/compare/v47.0.3...v47.0.4) #### What's Changed - update: release-tagger action to version 6.0.6 by [@jackton1](https://redirect.github.com/jackton1) in [#2801](https://redirect.github.com/tj-actions/changed-files/pull/2801) **Full Changelog**: <https://github.com/tj-actions/changed-files/compare/v47.0.3...v47.0.4> ### [`v47.0.3`](https://redirect.github.com/tj-actions/changed-files/releases/tag/v47.0.3) [Compare Source](https://redirect.github.com/tj-actions/changed-files/compare/v47.0.2...v47.0.3) #### What's Changed - chore(deps): bump github/codeql-action from 4.31.10 to 4.32.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2790](https://redirect.github.com/tj-actions/changed-files/pull/2790) - update: release-tagger action to version 6.0.0 by [@jackton1](https://redirect.github.com/jackton1) in [#2800](https://redirect.github.com/tj-actions/changed-files/pull/2800) **Full Changelog**: <https://github.com/tj-actions/changed-files/compare/v47.0.2...v47.0.3> ### [`v47.0.2`](https://redirect.github.com/tj-actions/changed-files/releases/tag/v47.0.2) [Compare Source](https://redirect.github.com/tj-actions/changed-files/compare/v47.0.1...v47.0.2) #### What's Changed - chore(deps-dev): bump eslint-plugin-jest from 29.2.1 to 29.11.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2751](https://redirect.github.com/tj-actions/changed-files/pull/2751) - chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2741](https://redirect.github.com/tj-actions/changed-files/pull/2741) - chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2743](https://redirect.github.com/tj-actions/changed-files/pull/2743) - chore(deps): bump [@actions/core](https://redirect.github.com/actions/core) from 2.0.0 to 2.0.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2757](https://redirect.github.com/tj-actions/changed-files/pull/2757) - Updated README.md by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2768](https://redirect.github.com/tj-actions/changed-files/pull/2768) - chore: update dist by [@jackton1](https://redirect.github.com/jackton1) in [#2769](https://redirect.github.com/tj-actions/changed-files/pull/2769) - chore: update matrix-example.yml by [@jackton1](https://redirect.github.com/jackton1) in [#2752](https://redirect.github.com/tj-actions/changed-files/pull/2752) - feat: add support for excluding symlinks and fix bug with commit not found by [@jackton1](https://redirect.github.com/jackton1) in [#2770](https://redirect.github.com/tj-actions/changed-files/pull/2770) - chore(deps): bump github/codeql-action from 4.31.7 to 4.31.10 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2761](https://redirect.github.com/tj-actions/changed-files/pull/2761) - Updated README.md by [@github-actions]( </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Between 12:00 AM and 12:59 AM, only on Monday (`* 0 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/llvm/llvm-project).  --------- Co-authored-by: Aiden Grossman <agrossman154@yahoo.com>

forking-renovate Bot assigned boomanaiden154 Jan 19, 2026

llvmbot added the github:workflow label Jan 19, 2026

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Jan 19, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Jan 19, 2026

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Jan 21, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Jan 21, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from 2b51bd2 to d653fce Compare January 22, 2026 08:04

llvmbot added the libc++ libc++ C++ Standard Library. Not GNU libstdc++. Not libc++abi. label Jan 22, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 2 times, most recently from b94b031 to b04a594 Compare January 22, 2026 17:15

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 3 times, most recently from 4826f49 to 5722113 Compare January 26, 2026 14:09

ldionne approved these changes Jan 26, 2026

View reviewed changes

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Jan 26, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Jan 26, 2026

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Jan 27, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Jan 27, 2026

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Jan 27, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Jan 27, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 2 times, most recently from 3f4399c to 82d46b4 Compare January 29, 2026 18:59

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Jan 30, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Jan 30, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 3 times, most recently from 7014768 to 49dc888 Compare February 2, 2026 19:17

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from b11fb73 to f5f8f3a Compare March 16, 2026 23:00

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Mar 17, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Mar 17, 2026

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Mar 18, 2026

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Mar 18, 2026

renovate-bot changed the title ~~Update [Github] Update GHA Dependencies~~ chore(deps): update [github] update gha dependencies Mar 19, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from f5f8f3a to 8b04f93 Compare March 19, 2026 09:11

renovate-bot changed the title ~~chore(deps): update [github] update gha dependencies~~ Update [Github] Update GHA Dependencies Mar 19, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from 8b04f93 to 5d53c71 Compare April 16, 2026 03:58

github-advanced-security AI found potential problems Apr 16, 2026

View reviewed changes

Comment thread .github/workflows/libclang-python-tests.yml Fixed

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 3 times, most recently from 050ad8c to f58991c Compare April 16, 2026 22:38

github-advanced-security AI found potential problems Apr 16, 2026

View reviewed changes

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 7 times, most recently from 4e0670b to dcb6541 Compare April 21, 2026 16:47

Update [Github] Update GHA Dependencies

2a042de

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from dcb6541 to 2a042de Compare April 21, 2026 18:49

boomanaiden154 reviewed Apr 21, 2026

View reviewed changes

Comment thread .github/workflows/release-binaries.yml Outdated

Apply suggestion from @boomanaiden154

67826fc

boomanaiden154 approved these changes Apr 21, 2026

View reviewed changes

boomanaiden154 merged commit d4e2850 into llvm:main Apr 21, 2026
67 of 72 checks passed

Conversation

renovate-bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

What's Changed

CodeQL Action Changelog

4.31.10 - 12 Jan 2026

What's Changed

What's Changed

New Contributors

v1.7.0: Update Node.js to 24

What's Changed

New Contributors

✨ What's Changed

📝 Docs

🛠️ Internal Updates

💪 New Contributors

v3.14.4: 3.14.4

v3.14.3: 3.14.3

v3.14.2: 3.14.2

v3.14.1: 3.14.1

v3.14.0: 3.14.0

v3.13.13: 3.13.13

v3.13.12: 3.13.12

v3.13.11: 3.13.11

v3.13.10: 3.13.10

v3.13.9: 3.13.9

v3.13.8: 3.13.8

v3.13.7: 3.13.7

v3.13.6: 3.13.6

v3.13.5: 3.13.5

v3.13.4: 3.13.4

v3.13.3: 3.13.3

v3.13.2: 3.13.2

v3.13.1: 3.13.1

v3.13.0: 3.13.0

v3.12.13: 3.12.13

v3.12.12: 3.12.12

v3.12.11: 3.12.11

v3.12.10: 3.12.10

v3.12.9: 3.12.9

v3.12.8: 3.12.8

v3.12.7: 3.12.7

v3.12.6: 3.12.6

v3.12.5: 3.12.5

v3.12.4: 3.12.4

v3.12.3: 3.12.3

v3.12.2: 3.12.2

v3.12.1: 3.12.1

v3.12.0: 3.12.0

v3.11.15: 3.11.15

v3.11.14: 3.11.14

v3.11.13: 3.11.13

v3.11.12: 3.11.12

v3.11.11: 3.11.11

v3.11.10: 3.11.10

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

llvmbot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

CodeQL Action Changelog

4.31.10 - 12 Jan 2026

v3.14.2: 3.14.2

v3.14.1: 3.14.1

v3.14.0: 3.14.0

v3.13.11: 3.13.11

v3.13.10: 3.13.10

v3.13.9: 3.13.9

renovate-bot commented Jan 19, 2026 •

edited

Loading

`v1.7.0`: Update Node.js to 24

`v3.14.4`: 3.14.4

`v3.14.3`: 3.14.3

`v3.14.2`: 3.14.2

`v3.14.1`: 3.14.1

`v3.14.0`: 3.14.0

`v3.13.13`: 3.13.13

`v3.13.12`: 3.13.12

`v3.13.11`: 3.13.11

`v3.13.10`: 3.13.10

`v3.13.9`: 3.13.9

`v3.13.8`: 3.13.8

`v3.13.7`: 3.13.7

`v3.13.6`: 3.13.6

`v3.13.5`: 3.13.5

`v3.13.4`: 3.13.4

`v3.13.3`: 3.13.3

`v3.13.2`: 3.13.2

`v3.13.1`: 3.13.1

`v3.13.0`: 3.13.0

`v3.12.13`: 3.12.13

`v3.12.12`: 3.12.12

`v3.12.11`: 3.12.11

`v3.12.10`: 3.12.10

`v3.12.9`: 3.12.9

`v3.12.8`: 3.12.8

`v3.12.7`: 3.12.7

`v3.12.6`: 3.12.6

`v3.12.5`: 3.12.5

`v3.12.4`: 3.12.4

`v3.12.3`: 3.12.3

`v3.12.2`: 3.12.2

`v3.12.1`: 3.12.1

`v3.12.0`: 3.12.0

`v3.11.15`: 3.11.15

`v3.11.14`: 3.11.14

`v3.11.13`: 3.11.13

`v3.11.12`: 3.11.12

`v3.11.11`: 3.11.11

`v3.11.10`: 3.11.10

llvmbot commented Jan 19, 2026 •

edited

Loading

`v3.14.2`: 3.14.2

`v3.14.1`: 3.14.1

`v3.14.0`: 3.14.0

`v3.13.11`: 3.13.11

`v3.13.10`: 3.13.10

`v3.13.9`: 3.13.9

`v3.13.8`: 3.13.8

`v3.13.7`: 3.13.7

`v3.13.6`: 3.13.6

`v3.13.5`: 3.13.5

`v3.13.4`: 3.13.4

`v3.13.3`: 3.13.3

`v3.13.2`: 3.13.2

`v3.13.1`: 3.13.1

`v3.13.0`: 3.13.0

`v3.12.12`: 3.12.12

`v3.12.11`: 3.12.11

`v3.12.10`: 3.12.10

`v3.12.9`: 3.12.9

`v3.12.8`: 3.12.8

`v3.12.7`: 3.12.7

`v3.12.6`: 3.12.6

`v3.12.5`: 3.12.5

`v3.12.4`: 3.12.4

`v3.12.3`: 3.12.3

`v3.12.2`: 3.12.2

`v3.12.1`: 3.12.1

`v3.12.0`: 3.12.0

`v3.11.14`: 3.11.14

`v3.11.13`: 3.11.13

`v3.11.12`: 3.11.12

`v3.11.11`: 3.11.11

`v3.11.10`: 3.11.10