Update github actions by renovate[bot] · Pull Request #182 · open-telemetry/opentelemetry-python-genai

renovate · 2026-06-30T00:55:17Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4` → `v4.3.1`
actions/create-github-app-token	action	minor	`v2.0.6` → `v2.2.2`
actions/setup-python	action	minor	`v6.2.0` → `v6.3.0`
actions/setup-python	action	minor	`v5` → `v5.6.0`
astral-sh/setup-uv	action	minor	`v8.1.0` → `v8.2.0`
pypa/gh-action-pypi-publish	action	pinDigest	→ `cef2210`
python	uses-with	minor	`3.10` → `3.14`

Release Notes

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

`v4.3.0`

Compare Source

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

`v4.1.0`

Compare Source

Add support for partial checkout filters

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.2`

Compare Source

Bug Fixes

deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

Features

use node24 as runner (#267) (a1cbe0f)

actions/setup-python (actions/setup-python)

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

astral-sh/setup-uv (astral-sh/setup-uv)

`v8.2.0`: 🌈 New inputs `quiet` and `download-from-astral-mirror`

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes

fix: report unexpected cache save failures @eifinger (#896)
fix: report unexpected setup failures @eifinger (#895)
fix: add timeout to fetch to prevent silent hangs @eifinger-bot (#883)
Limit GitHub tokens to github.com download URLs @zsol (#878)
increase libuv-workaround timeout to 100ms @eifinger (#880)

🚀 Enhancements

Add quiet input to suppress info-level log output @eifinger (#898)
feat: add download-from-astral-mirror input @eifinger (#897)

🧰 Maintenance

docs: update dependabot rollup biome guidance @eifinger (#902)
chore: update known checksums for 0.11.18 @github-actions[bot] (#899)
chore: update known checksums for 0.11.17 @github-actions[bot] (#892)
chore: update known checksums for 0.11.16 @github-actions[bot] (#889)
chore: update known checksums for 0.11.15 @github-actions[bot] (#885)
chore: update known checksums for 0.11.14 @github-actions[bot] (#879)
chore: update known checksums for 0.11.13 @github-actions[bot] (#877)
chore: update known checksums for 0.11.12 @github-actions[bot] (#876)
chore: update known checksums for 0.11.11 @github-actions[bot] (#873)
chore: update known checksums for 0.11.9/0.11.10 @github-actions[bot] (#871)
chore: update known checksums for 0.11.8 @github-actions[bot] (#867)
Bump setup-uv references to v8.1.0 SHA in docs @eifinger (#862)
Add update-docs.yml workflow @eifinger (#861)

⬆️ Dependency updates

chore(deps): roll up dependabot updates @eifinger (#903)
chore(deps): roll up dependabot updates @eifinger (#901)
chore(deps): bump release-drafter/release-drafter from 7.3.0 to 7.3.1 @dependabot[bot] (#900)
chore(deps): bump eifinger/actionlint-action from 1.10.1 to 1.10.2 @dependabot[bot] (#842)
chore(deps): bump github/codeql-action from 4.35.4 to 4.36.0 @dependabot[bot] (#893)
chore(deps): bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 @dependabot[bot] (#891)
chore(deps): bump release-drafter/release-drafter from 7.2.0 to 7.3.0 @dependabot[bot] (#884)
chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 @dependabot[bot] (#888)
chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 @dependabot[bot] (#881)
chore(deps): bump github/codeql-action from 4.32.2 to 4.35.3 @dependabot[bot] (#875)
chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 @dependabot[bot] (#866)
chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 @dependabot[bot] (#864)
chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 @dependabot[bot] (#863)