Update github-actions (major) by renovate[bot] · Pull Request #3443 · phpstan/phpstan-src

renovate · 2024-09-16T01:19:22Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@actions/core (source)	`^1.11.1` → `^3.0.0`	dependencies	major
@actions/github (source)	`^6.0.1` → `^9.0.0`	dependencies	major
@types/node (source)	`^22.15.29` → `^24.0.0`	devDependencies	major
WyriHaximus/github-action-get-previous-tag	`v1.4.0` → `v2.0.0`	action	major
actions/cache	`v4.3.0` → `v5.0.4`	action	major
actions/checkout	`v4.3.1` → `v6.0.2`	action	major
actions/checkout	`v5.0.1` → `v6.0.2`	action	major
actions/download-artifact	`v4.3.0` → `v8.0.1`	action	major
actions/github-script	`v7.1.0` → `v8.0.0`	action	major
actions/setup-node	`v4.4.0` → `v6.3.0`	action	major
actions/upload-artifact	`v4.6.2` → `v7.0.0`	action	major
actions/upload-artifact	`v4` → `v7`	action	major
astral-sh/setup-uv	`v7.3.0` → `v8.0.0`	action	major
crazy-max/ghaction-import-gpg	`v6.3.0` → `v7.0.0`	action	major
dorny/paths-filter	`v3.0.2` → `v4.0.1`	action	major
node	`20` → `24`	uses-with	major
node	`16` → `24`	uses-with	major
peter-evans/create-or-update-comment	`v4.0.0` → `v5.0.0`	action	major
peter-evans/create-pull-request	`v6.1.0` → `v8.1.0`	action	major
peter-evans/repository-dispatch	`v3.0.0` → `v4.0.1`	action	major
stefanzweifel/git-auto-commit-action	`v5.2.0` → `v7.1.0`	action	major
typescript (source)	`^5.8.3` → `^6.0.0`	devDependencies	major

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/toolkit (@actions/core)

`v3.0.0`

Breaking change: Package is now ESM-only
- CommonJS consumers must use dynamic import() instead of require()

`v2.0.3`

Bump @actions/http-client to 3.0.2

`v2.0.1`

Bump @actions/exec from 1.1.1 to 2.0.0 #2199

`v2.0.0`

Add support for Node 24 #2110
Bump @actions/http-client from 2.0.1 to 3.0.0

actions/toolkit (@actions/github)

`v9.1.0`

Append actions_orchestration_id to user-agent when the ACTIONS_ORCHESTRATION_ID environment variable is set #2364

`v9.0.0`

Breaking change: Package is now ESM-only
- CommonJS consumers must use dynamic import() instead of require()
- Example: const { getOctokit, context } = await import('@actions/github')
Fix TypeScript compilation by migrating to ESM, enabling proper imports from @octokit/core/types

`v8.0.1`

Update undici to 6.23.0
Update @actions/http-client to 3.0.2

`v8.0.0`

Update @octokit dependencies
- @octokit/core ^7.0.6
- @octokit/plugin-paginate-rest ^14.0.0
- @octokit/plugin-rest-endpoint-methods ^17.0.0
- @octokit/request ^10.0.7
- @octokit/request-error ^7.1.0
Breaking change: Minimum Node.js version is now 20 (previously 18)

`v7.0.0`

Update to v3.0.1 of @actions/http-client

WyriHaximus/github-action-get-previous-tag (WyriHaximus/github-action-get-previous-tag)

`v2.0.0`

Compare Source

Migration

Migrating from prefix to pattern going from this:

prefix: foo-bar

To:

pattern: foo-bar*

Note the astrix (*) at the end. That was always added by default in the previous version. And is the default for pattern. But if you specify your own pattern and it used be a prefix, you MUST add the astrix (*) at the end. It's not suffixed by default anymore because we want to give you full controll over the pattern (after refs/tags/) so you can do things like semver (v*[0-9].*[0-9].*[0-9]) with it without us meddling with it.

v2.0.0

Total issues resolved: 0
Total pull requests resolved: 11
Total contributors: 4

Bug 🐞

76: Fix errors thanks to @WyriHaximus
74: Test Get Previous Tag against GitHub Action for expected order of tags thanks to @WyriHaximus
73: Switch to centralized Release Management workflow thanks to @WyriHaximus
56: Fixed a problem with sorting of tags thanks to @epm-marcus

Dependencies 📦

72: chore(deps): update actions/checkout action to v6 thanks to @renovate-runner[bot]
67: chore(deps): update haya14busa/action-update-semver action to v1.5.1 thanks to @renovate-runner[bot]
63: chore(deps): update actions/create-release action to v1.1.4 thanks to @renovate-runner[bot]
55: chore(deps): update actions/checkout action to v4 thanks to @renovate[bot]

Feature 🏗

75: Support tag pattern matching thanks to @WyriHaximus

Enhancement ✨

78: Upgrade to node24 thanks to @WyriHaximus
77: Absolve prefix into pattern thanks to @WyriHaximus

actions/cache (actions/cache)

`v5.0.4`

Compare Source

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

`v6.0.0`

Compare Source

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Update actions checkout to use node 24 by @salmanmkc in #2226
Prepare v5.0.0 release by @salmanmkc in #2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

actions/download-artifact (actions/download-artifact)

`v8.0.1`

Compare Source

What's Changed

Support for CJK characters in the artifact name by @danwkennedy in #471
Add a regression test for artifact name + content-type mismatches by @danwkennedy in #472

Full Changelog: actions/download-artifact@v8...v8.0.1

`v8.0.0`

Compare Source

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461

Full Changelog: actions/download-artifact@v7...v8.0.0

`v7.0.0`

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #440
Download Artifact Node24 support by @salmanmkc in #415
fix: update @actions/artifact to fix Node.js 24 punycode deprecation by @salmanmkc in #451
prepare release v7.0.0 for Node.js 24 support by @salmanmkc in #452

New Contributors

@patrikpolyak made their first contribution in #440
@salmanmkc made their first contribution in #415

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

`v6.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README for download-artifact v5 changes by @yacaovsnc in #417
Update README with artifact extraction details by @yacaovsnc in #424
Readme: spell out the first use of GHES by @danwkennedy in #431
Bump @actions/artifact to v4.0.0
Prepare v6.0.0 by @danwkennedy in #438

New Contributors

@danwkennedy made their first contribution in #431

Full Changelog: actions/download-artifact@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Update README.md by @nebuk89 in #407
BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in #416

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

By name: name: my-artifact → extracted to path/ (direct)
By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

By name: name: my-artifact → extracted to path/ (unchanged)
By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:

You download artifacts by name
You download multiple artifacts by ID
You already use merge-multiple: true as a workaround

⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

### Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

@nebuk89 made their first contribution in #407

Full Changelog: actions/download-artifact@v4...v5.0.0

actions/github-script (actions/github-script)

`v8.0.0`

Compare Source

actions/setup-node (actions/setup-node)

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v6.0.0`

Compare Source

`v5.0.0`

Compare Source

astral-sh/setup-uv (astral-sh/setup-uv)

`v8.0.0`: 🌈 Immutable releases and secure tags

Compare Source

This is the first immutable release of `setup-uv` 🥳

All future releases are also immutable, if you want to know more about what this means checkout the docs.

This release also has two breaking changes

New format for `manifest-file`

The previously deprecated way of defining a custom version manifest to control which uv versions are available and where to download them from got removed. The functionality is still there but you have to use the new format.

No more major and minor tags

To increase security even more we will stop publishing minor tags. You won't be able to use @v8 or @v8.0 any longer. We do this because pinning to major releases opens up users to supply chain attacks like what happened to tj-actions.

[!TIP]
Use the immutable tag as a version astral-sh/setup-uv@v8.0.0
Or even better the githash astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57

🚨 Breaking changes

Remove update-major-minor-tags workflow @eifinger (#826)
Remove deprecrated custom manifest @eifinger (#813)

🧰 Maintenance

Shortcircuit latest version from manifest @eifinger (#828)
Simplify inputs.ts @eifinger (#827)
Bump release-drafter to v7.1.1 @eifinger (#825)
Refactor inputs @eifinger (#823)
Replace inline compile args with tsconfig @eifinger (#824)
chore: update known checksums for 0.11.2 @github-actions[bot] (#821)
chore: update known checksums for 0.11.1 @github-actions[bot] (#817)
chore: update known checksums for 0.11.0 @github-actions[bot] (#815)
Fix latest-version workflow check @eifinger (#812)
chore: update known checksums for 0.10.11/0.10.12 @github-actions[bot] (#811)

`v7.6.0`: 🌈 Fetch uv from Astral's mirror by default

Compare Source

Changes

We now default to download uv from releases.astral.sh.
This means by default we don't hit the GitHub API at all and shouldn't see any rate limits and timeouts any more.

🚀 Enhancements

Fetch uv from Astral's mirror by default @zsol (#809)

🧰 Maintenance

Switch to ESM for source and test, use CommonJS for dist @eifinger (#806)
chore: update known checksums for 0.10.10 @github-actions[bot] (#804)

⬆️ Dependency updates

chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 @dependabot[bot] (#808)
Bump deps @eifinger (#805)

`v7.5.0`: 🌈 Use `astral-sh/versions` as version provider

Compare Source

No more rate-limits

This release addresses a long-standing source of timeouts and rate-limit failures in setup-uv.

Previously, the action resolved version identifiers like 0.5.x by iterating over available uv releases via the GitHub API to find the best match. In contrast, latest and exact versions such as 0.5.0 skipped version resolution entirely and downloaded uv directly.

The manifest-file input was an earlier attempt to improve this. It allows providing an url to a file that lists available versions, checksums, and even custom download URLs. The action also shipped with such a manifest.
However, because that bundled file could become outdated whenever new uv releases were published, the action still had to fall back to the GitHub API in many cases.

This release solves the problem by sourcing version data from Astral’s versions repository via the raw content endpoint:

https://raw.githubusercontent.com/astral-sh/versions/refs/heads/main/v1/uv.ndjson

By using the raw endpoint instead of the GitHub API, version resolution no longer depends on API authentication and is much less likely to run into rate limits or timeouts.

[!TIP]
The next section is only interesting for users of the manifest-file input

The manifest-file input lets you override that source with your own URL, for example to test custom uv builds or alternate download locations.

The manifest file must be in NDJSON format, where each line is a JSON object representing a version and its artifacts. For example:

{"version":"0.10.7","artifacts":[{"platform":"x86_64-unknown-linux-gnu","variant":"default","url":"https://example.com/uv-x86_64-unknown-linux-gnu.tar.gz","archive_format":"tar.gz","sha256":"..."}]}
{"version":"0.10.6","artifacts":[{"platform":"x86_64-unknown-linux-gnu","variant":"default","url":"https://example.com/uv-x86_64-unknown-linux-gnu.tar.gz","archive_format":"tar.gz","sha256":"..."}]}

[!WARNING]
The old format still works but is deprecated. A warning will be logged when you use it.

Changes

docs: replace copilot instructions with AGENTS.md @eifinger (#794)

🚀 Enhancements

Use astral-sh/versions as primary version provider @eifinger (#802)

📚 Documentation

docs: add cross-client dependabot rollup skill @eifinger (#793)

`v7.4.0`: 🌈 Add riscv64 architecture support to platform detection

Compare Source

Changes

Thank you @luhenry for adding support for riscv64 arch

🚀 Enhancements

Add riscv64 architecture support to platform detection @luhenry (#791)

🧰 Maintenance

Delete .github/workflows/dependabot-build.yml @eifinger (#789)
Harden Dependabot build workflow @eifinger (#788)
Fix: check PR author instead of event sender for Dependabot detection @eifinger-bot (#787)
chore: update known checksums for 0.10.9 @github-actions[bot] (#783)
Add workflow to auto-build dist on Dependabot PRs @eifinger-bot (#782)
chore: update known checksums for 0.10.8 @github-actions[bot] (#779)
chore: update known checksums for 0.10.7 @github-actions[bot] (#775)

⬆️ Dependency updates

chore(deps): bump versions @eifinger (#792)
Bump actions/setup-node from 6.2.0 to 6.3.0 @dependabot[bot] (#790)
Bump eifinger/actionlint-action from 1.10.0 to 1.10.1 @dependabot[bot] (#778)

`v7.3.1`: 🌈 fall back to VERSION_CODENAME when VERSION_ID is not available

Compare Source

Changes

This release adds support for running in containers like debian:testing or debian:unstable

🐛 Bug fixes

fix: fall back to VERSION_CODENAME when VERSION_ID is not available @eifinger-bot (#774)

🧰 Maintenance

chore: update known checksums for 0.10.6 @github-actions[bot] (#771)
chore: update known checksums for 0.10.5 @github-actions[bot] (#770)
chore: update known checksums for 0.10.4 @github-actions[bot] (#768)
chore: update known checksums for 0.10.3 @github-actions[bot] (#767)
chore: update known checksums for 0.10.2 @github-actions[bot] (#765)
chore: update known checksums for 0.10.1 @github-actions[bot] (#764)

⬆️ Dependency updates

Bump github/codeql-action from 4.31.9 to 4.32.2 @dependabot[bot] (#766)
Bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 @dependabot[bot] (#763)

crazy-max/ghaction-import-gpg (crazy-max/ghaction-import-gpg)

`v7.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #241
Switch to ESM and update config/test wiring by @crazy-max in #239
Bump @actions/core from 1.11.1 to 3.0.0 in #232
Bump @actions/exec from 1.1.1 to 3.0.0 in #242
Bump brace-expansion from 1.1.11 to 1.1.12 in #221
Bump minimatch from 3.1.2 to 3.1.5 in #240
Bump openpgp from 6.1.0 to 6.3.0 in #233

Full Changelog: crazy-max/ghaction-import-gpg@v6.3.0...v7.0.0

dorny/paths-filter (dorny/paths-filter)

`v4.0.1`

Compare Source

What's Changed

Support merge queue by @masaru-iritani in #255

New Contributors

@masaru-iritani made their first contribution in #255

Full Changelog: dorny/paths-filter@v4.0.0...v4.0.1

`v4.0.0`

Compare Source

Update action runtime to node24

`v3.0.3`

Compare Source

Add missing predicate-quantifier

actions/node-versions (node)

`v24.14.1`: 24.14.1

Compare Source

Node.js 24.14.1

`v24.14.0`: 24.14.0

Compare Source

Node.js 24.14.0

`v24.13.1`: 24.13.1

Compare Source

Node.js 24.13.1

`v24.13.0`: 24.13.0

Compare Source

Node.js 24.13.0

`v24.12.0`: 24.12.0

Compare Source

Node.js 24.12.0

`v24.11.1`: 24.11.1

Compare Source

Node.js 24.11.1

`v24.11.0`: 24.11.0

Compare Source

Node.js 24.11.0

`v24.10.0`: 24.10.0

Compare Source

Node.js 24.10.0

`v24.9.0`: 24.9.0

Compare Source

Node.js 24.9.0

`v24.8.0`: 24.8.0

Compare Source

Node.js 24.8.0

`v24.7.0`: 24.7.0

Compare Source

Node.js 24.7.0

`v24.6.0`: 24.6.0

Compare Source

Node.js 24.6.0

`v24.5.0`: 24.5.0

Compare Source

Node.js 24.5.0

`v24.4.1`: 24.4.1

Compare Source

Node.js 24.4.1

`v24.4.0`: 24.4.0

Compare Source

Node.js 24.4.0

`v24.3.0`: 24.3.0

Compare Source

Node.js 24.3.0

`v24.2.0`: 24.2.0

Compare Source

Node.js 24.2.0

`v24.1.0`: 24.1.0

Compare Source

Node.js 24.1.0

`v24.0.2`: 24.0.2

Compare Source

Node.js 24.0.2

`v24.0.1`: 24.0.1

Compare Source

Node.js 24.0.1

`v24.0.0`: 24.0.0

Compare Source

Node.js 24.0.0

`v22.22.2`: 22.22.2

Compare Source

Node.js 22.22.2

`v22.22.1`: 22.22.1

Compare Source

Node.js 22.22.1

`v22.22.0`: 22.22.0

[Compare Source](https://re

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Oct 6, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Oct 7, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Oct 7, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Oct 8, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Oct 9, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Oct 14, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Oct 14, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Oct 26, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 6, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 6, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 7, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 8, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 8, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 9, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 11, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 11, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 15, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 17, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 19, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 19, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 20, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 23, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 25, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 25, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 27, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 28, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 29, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 29, 2024

renovate bot changed the title ~~Update peter-evans/create-pull-request action to v7~~ chore(deps): update peter-evans/create-pull-request action to v7 Nov 30, 2024

renovate bot changed the title ~~chore(deps): update peter-evans/create-pull-request action to v7~~ Update peter-evans/create-pull-request action to v7 Nov 30, 2024

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Mar 23, 2025

renovate bot force-pushed the renovate/major-github-actions branch from 51bdc83 to 1eaaf59 Compare April 5, 2025 09:29

renovate bot changed the base branch from 1.12.x to 2.1.x April 5, 2025 09:29

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Jun 7, 2025

renovate bot force-pushed the renovate/major-github-actions branch from 1eaaf59 to 1ab52c2 Compare June 10, 2025 18:52

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Jun 11, 2025

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Jul 17, 2025

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Jul 17, 2025

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Jul 17, 2025

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Jul 17, 2025

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Jul 21, 2025

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Jul 27, 2025

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 3611d5a to 0fb003e Compare August 1, 2025 05:37

renovate bot force-pushed the renovate/major-github-actions branch from 0fb003e to 3cf0f31 Compare August 6, 2025 00:59

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Aug 6, 2025

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from dc8b0b6 to 399b0c7 Compare August 11, 2025 13:57

renovate bot force-pushed the renovate/major-github-actions branch from 399b0c7 to c165e50 Compare August 29, 2025 16:39

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Aug 30, 2025

renovate bot force-pushed the renovate/major-github-actions branch 3 times, most recently from 233c811 to abc384f Compare September 4, 2025 16:25

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Sep 4, 2025

renovate bot force-pushed the renovate/major-github-actions branch from abc384f to 84bb0d2 Compare September 6, 2025 11:31

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Sep 7, 2025

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Sep 11, 2025

renovate bot changed the title ~~chore(deps): update github-actions (major)~~ Update github-actions (major) Sep 13, 2025

renovate bot changed the title ~~Update github-actions (major)~~ chore(deps): update github-actions (major) Sep 16, 2025

Update github-actions

87741dd

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update github-actions (major)#3443

Update github-actions (major)#3443
renovate[bot] wants to merge 1 commit into2.1.xfrom
renovate/major-github-actions

renovate bot commented Sep 16, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Sep 16, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Migration

v2.0.0

Bug 🐞

Dependencies 📦

Feature 🏗

Enhancement ✨

What's Changed

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

v8 - What's new

Direct downloads

Enforced checks (breaking)

ESM

What's Changed

v7 - What's new

Node.js 24

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v5.0.0

🚨 Breaking Change

What Changed

Migration Guide

✅ No Action Needed If:

⚠️ Action Required If:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v8.0.0: 🌈 Immutable releases and secure tags

This is the first immutable release of setup-uv 🥳

New format for manifest-file

No more major and minor tags

🚨 Breaking changes

🧰 Maintenance

v7.6.0: 🌈 Fetch uv from Astral's mirror by default

Changes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v7.5.0: 🌈 Use astral-sh/versions as version provider

No more rate-limits

Changes

🚀 Enhancements

📚 Documentation

v7.4.0: 🌈 Add riscv64 architecture support to platform detection

Changes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v7.3.1: 🌈 fall back to VERSION_CODENAME when VERSION_ID is not available

Changes

🐛 Bug fixes

🧰 Maintenance

⬆️ Dependency updates

What's Changed

renovate bot commented Sep 16, 2024 •

edited

Loading

`v8.0.0`: 🌈 Immutable releases and secure tags

This is the first immutable release of `setup-uv` 🥳

New format for `manifest-file`

`v7.6.0`: 🌈 Fetch uv from Astral's mirror by default

`v7.5.0`: 🌈 Use `astral-sh/versions` as version provider

`v7.4.0`: 🌈 Add riscv64 architecture support to platform detection

`v7.3.1`: 🌈 fall back to VERSION_CODENAME when VERSION_ID is not available

`v24.14.1`: 24.14.1

`v24.14.0`: 24.14.0

`v24.13.1`: 24.13.1

`v24.13.0`: 24.13.0

`v24.12.0`: 24.12.0

`v24.11.1`: 24.11.1

`v24.11.0`: 24.11.0

`v24.10.0`: 24.10.0

`v24.9.0`: 24.9.0

`v24.8.0`: 24.8.0

`v24.7.0`: 24.7.0

`v24.6.0`: 24.6.0

`v24.5.0`: 24.5.0

`v24.4.1`: 24.4.1

`v24.4.0`: 24.4.0

`v24.3.0`: 24.3.0

`v24.2.0`: 24.2.0

`v24.1.0`: 24.1.0

`v24.0.2`: 24.0.2

`v24.0.1`: 24.0.1

`v24.0.0`: 24.0.0

`v22.22.2`: 22.22.2

`v22.22.1`: 22.22.1

`v22.22.0`: 22.22.0