Skip to content

Update GitHub Actions#618

Open
oep-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github-actions
Open

Update GitHub Actions#618
oep-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github-actions

Conversation

@oep-renovate

@oep-renovate oep-renovate Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v6.0.3v7.0.1
actions/labeler action major v6.1.0v7.0.0
actions/setup-python action major v6.2.0v7.0.0
astral-sh/setup-uv action major v8.2.0v9.0.0
ghcr.io/renovatebot/renovate (source) minor 43.212.443.278.3
github/codeql-action action minor v4.36.2v4.37.3
pypa/gh-action-pypi-publish action patch v1.14.0v1.14.1
renovatebot/github-action action patch v46.1.14v46.1.20
renovatebot/renovate minor 43.212.443.278.3
step-security/harden-runner action minor v2.19.4v2.20.0

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

v7.0.0

Compare Source

  • Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
  • Various dependency updates

v7

Compare Source

v6.1.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

actions/labeler (actions/labeler)

v7.0.0

Compare Source

What's Changed

Enhancements:

Full Changelog: actions/labeler@v6...v7.0.0

v7

Compare Source

v6.2.0

Compare Source

What's Changed

Bug Fix
Dependency Updates

Full Changelog: actions/labeler@v6.1.0...v6.2.0

actions/setup-python (actions/setup-python)

v7.0.0

Compare Source

What's Changed
Enhancements
Bug Fix
Dependency Upgrade
New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v7

Compare Source

v6.3.0

Compare Source

What's Changed
Enhancement
Dependency update
Documentation
New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

astral-sh/setup-uv (astral-sh/setup-uv)

v9.0.0: 🌈 Change prune-cache default to false

Compare Source

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure.
Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #​967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes
🐛 Bug fixes
  • fix: fall back to distribution ID when os-release has no version field @​cxzhong (#​961)
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v8.3.2: 🌈 update known checksums for 0.11.28

Compare Source

Changes

Just a maintenance release

🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v8.3.1: 🌈 update known checksums for 0.11.27

Compare Source

Changes

Just a maintenance release

🧰 Maintenance
📚 Documentation

v8.3.0: 🌈 Support uv.lock as a version-file source

Compare Source

Changes

Thanks to @​somaz94 you can now use the pinned version of uv itself in uv.lock. It gets picked up automatically.
If you have pinned another version of uv in your uv.lock you can use the inputs version or version-source to override this.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
renovatebot/renovate (ghcr.io/renovatebot/renovate)

v43.278.3

Compare Source

Miscellaneous Chores
  • deps: update dependency vitest-mock-extended to v5 (main) (#​44786) (d6f2426)
Build System

v43.278.2

Compare Source

Bug Fixes

v43.278.1

Compare Source

Build System

v43.278.0

Compare Source

Features

v43.277.1

Compare Source

Bug Fixes
  • presets/monorepo: update react and react-native source URLs to react/react org (#​44780) (61e4c9c)
Documentation

v43.277.0

Compare Source

Features
Bug Fixes

v43.276.0

Compare Source

Features
Bug Fixes
Miscellaneous Chores

v43.275.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.11 (main) (#​44775) (381a5b4)
Miscellaneous Chores

v43.275.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.10 (main) (#​44771) (5586073)
Miscellaneous Chores

v43.275.0

Compare Source

Features

v43.274.0

Compare Source

Features
Miscellaneous Chores
  • deps: update github/codeql-action action to v4.37.2 (main) (#​44760) (2f7284f)
Code Refactoring

v43.273.0

Compare Source

Features
  • platform: get all branch update dates in a more performant manner (#​44582) (f932d52)
Code Refactoring
  • config/global: improve type restrictions for GlobalConfig.OPTIONS (#​44636) (d16dc9a)

v43.272.9

Compare Source

Bug Fixes
  • manager/dockerfile: handle single-quoted empty ARG default value (#​44522) (1f5f6da)

v43.272.8

Compare Source

Bug Fixes
  • git-submodule: handle ./ relative paths in URL resolution (#​44742) (bad5e22)

v43.272.7

Compare Source

Bug Fixes
  • gomod: pseudo-version digest updates produce no change when module is absent from go proxy (#​44477) (e5ace74)

v43.272.6

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.8 (main) (#​44747) (a00c621)
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.9 (main) (#​44748) (d2aa7e3)
Miscellaneous Chores
Tests

v43.272.5

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.7 (main) (#​44743) (1e7391f)
Miscellaneous Chores
Code Refactoring
Tests
  • linters: add linting rule to enforce v8 ignore reason declaration (#​44726) (91e068f)
Continuous Integration

v43.272.4

Compare Source

Documentation
Tests
Build System

v43.272.3

Compare Source

Bug Fixes

v43.272.2

Compare Source

Bug Fixes
  • platform/azure: evaluate policies before attempting to merge PR (#​44631) (7ac677d)
Code Refactoring

v43.272.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.6 (main) (#​44724) (37372a1)
Documentation
Miscellaneous Chores
Build System
  • deps: update dependency semantic-release to v25.0.7 (main) (#​44722) (365a407)

v43.272.0

Compare Source

Features

v43.271.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.5 (main) (#​44712) (3200bd4)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.8 (main) (#​44711) (37d4dd2)

v43.271.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.4 (main) (#​44710) (ac8e1d7)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.7 (main) (#​44709) (61d5247)
Code Refactoring
Tests
  • linters: add linting rule to enforce usage of host rules test util (#​44692) (5ad36a2)

v43.271.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.3 (main) (#​44708) (55df4c7)
Miscellaneous Chores

v43.271.0

Compare Source

Features

v43.270.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.2 (main) (#​44705) (54d839d)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.5 (main) (#​44704) (fed170a)

v43.270.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.1 (main) (#​44703) (efe4c69)
Miscellaneous Chores
  • deps: update dependency tar to v7.5.20 (main) (#​44702) (aa18088)
  • deps: update dependency tsdown to v0.22.5 (main) (#​44696) (ffa5bbb)
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.4 (main) (#​44700) (aae1338)

v43.270.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.0 (main) (#​44695) (f532fdc)

v43.269.3

Compare Source

Bug Fixes

v43.269.2

Compare Source

Bug Fixes

v43.269.1

Compare Source

Build System
  • deps: update dependency semantic-release to v25.0.6 (main) (#​44682) (1bccea4)

v43.269.0

Compare Source

Features

v43.268.6

Compare Source

Build System

v43.268.5

Compare Source

Miscellaneous Chores
Tests
Build System

v43.268.4

Compare Source

Bug Fixes
  • deps: update dependency mkdocs-material to v9.7.7 (main) (#​44669) (6dee5c4)

v43.268.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.75.7 (main) (#​44668) (c92de21)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.2 (main) (#​44666) (398d576)

v43.268.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.75.6 (main) (#​44662) (7bdb713)
Build System

v43.268.1

Compare Source

Bug Fixes
  • manager/hermit: propagate git credentials to hermit install (#​43524) (556b1be)

v43.268.0

Compare Source

Features
Bug Fixes
  • presets/workarounds: keep major-only Java Docker tags rolling (#​44603) (768fd6c)

v43.267.0

Compare Source

Features
  • datasource/docker: Identify private ECR registries across AWS partitions (#​44655) (78c9787)
  • manager/npm: read private registries from pnpm-workspace.yaml (#​44083) (e0c13b6)
Bug Fixes

v43.266.0

Compare Source

Features
Tests

v43.265.5

Compare Source

Bug Fixes
  • terraform: normalize lock file constraint order after provider update (#​44530) (2783859)

v43.265.4

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.75.5 (main) (#​44653) (4952929)
Miscellaneous Chores

v43.265.3

Compare Source

Mis

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • On day 1 of the month (* * 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@oep-renovate
oep-renovate Bot requested a review from a team as a code owner July 1, 2026 03:14
@github-actions github-actions Bot added the build Related to build scripts label Jul 1, 2026
@oep-renovate
oep-renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 92d4b96 to 7ad3fe4 Compare July 6, 2026 03:08
@tybulewicz
tybulewicz enabled auto-merge July 6, 2026 06:01
tybulewicz
tybulewicz previously approved these changes Jul 6, 2026
tybulewicz
tybulewicz previously approved these changes Jul 7, 2026
@oep-renovate
oep-renovate Bot force-pushed the renovate/github-actions branch from 4075aac to 4ed6104 Compare July 8, 2026 03:05
@oep-renovate oep-renovate Bot changed the title Update GitHub Actions chore(deps): update github actions Jul 8, 2026
tybulewicz
tybulewicz previously approved these changes Jul 8, 2026
@oep-renovate
oep-renovate Bot force-pushed the renovate/github-actions branch 8 times, most recently from 87a3491 to 159a592 Compare July 16, 2026 03:04
@oep-renovate
oep-renovate Bot force-pushed the renovate/github-actions branch 5 times, most recently from ca164bf to 2d97113 Compare July 21, 2026 03:04
@tybulewicz
tybulewicz added this pull request to the merge queue Jul 21, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jul 21, 2026
@oep-renovate oep-renovate Bot changed the title chore(deps): update github actions Update GitHub Actions Jul 21, 2026
@AlexanderBarabanov
AlexanderBarabanov added this pull request to the merge queue Jul 21, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jul 21, 2026
@AlexanderBarabanov
AlexanderBarabanov added this pull request to the merge queue Jul 21, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jul 21, 2026
@oep-renovate
oep-renovate Bot force-pushed the renovate/github-actions branch from 2d97113 to 583c8c5 Compare July 22, 2026 03:05
Signed-off-by: oep-renovate[bot] <212772560+oep-renovate[bot]@users.noreply.github.com>
@oep-renovate
oep-renovate Bot force-pushed the renovate/github-actions branch from 583c8c5 to 3856ba8 Compare July 23, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build Related to build scripts

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants