Skip to content

chore(deps): update github actions (major) - #13

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-actions
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-actions

Conversation

@renovate

@renovate renovate Bot commented Sep 10, 2023 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/cache action major v3 → v6
actions/checkout action major v3 → v7
crazy-max/ghaction-github-labeler action major v4 → v6
deno uses-with major v1.x → 2.x
denoland/setup-deno action major v1 → v2.0.5
github/codeql-action action major v2 → v4

Release Notes

actions/cache

v6.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v5.0.2: v.5.0.2

Compare Source

v5.0.2
What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

v5.0.1

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.


v5.0.1
What's Changed
v5.0.0
What's Changed

Full Changelog: actions/cache@v5...v5.0.1

v5.0.0

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.


What's Changed

Full Changelog: actions/cache@v4.3.0...v5.0.0

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Full Changelog: actions/cache@v4.2.1...v4.2.2

v4.2.1

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

New Contributors

Full Changelog: actions/cache@v4.2.0...v4.2.1

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v4.1.2...v4.2.0

v4.1.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.1.1...v4.1.2

v4.1.1

Compare Source

What's Changed

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.0.2...v4.1.0

v4.0.2

Compare Source

What's Changed

Full Changelog: actions/cache@v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.0.1

v4.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v3...v4.0.0

actions/checkout

v7.0.1

Compare Source

v7.0.0

Compare Source

  • Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
  • Various dependency updates

v6.1.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.1.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v5.0.1...v5.1.0

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.4.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v4.3.1...v4.4.0

v4.3.1

Compare Source

v4.3.0

Compare Source

v4.2.2

Compare Source

v4.2.1

Compare Source

v4.2.0

Compare Source

v4.1.7

Compare Source

v4.1.6

Compare Source

v4.1.5

Compare Source

v4.1.4

Compare Source

v4.1.3

Compare Source

v4.1.2

Compare Source

  • Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

v4.1.0

Compare Source

v4.0.0

Compare Source

crazy-max/ghaction-github-labeler

v6.0.0

Compare Source

Full Changelog: crazy-max/ghaction-github-labeler@v5.3.0...v6.0.0

v5.3.0

Compare Source

Full Changelog: crazy-max/ghaction-github-labeler@v5.2.0...v5.3.0

v5.2.0

Compare Source

  • Load yaml files using the failsafe schema option by @​pjpires in #​226
  • Bump cross-spawn from 7.0.3 to 7.0.6 in #​223
  • Bump undici from 5.28.4 to 5.28.5 in #​225

Full Changelog: crazy-max/ghaction-github-labeler@v5.1.0...v5.2.0

v5.1.0

Compare Source

Full Changelog: crazy-max/ghaction-github-labeler@v5.0.0...v5.1.0

v5.0.0

Compare Source

Full Changelog: crazy-max/ghaction-github-labeler@v4.2.0...v5.0.0

denoland/deno (deno)

v2.9.8

Compare Source

2.9.8 / 2026.10.21
  • fix(compile): check read permission for dynamically imported local files
    (#​36925)
  • fix(completions): complete script paths for bare deno run in zsh (#​36976)
  • fix(core): keep op contexts alive until the isolate is disposed (#​37026)
  • fix(coverage): skip the V8 code cache while collecting coverage (#​36901)
  • fix(ext/fetch): bump hyper-util to 0.1.21 and hyper to 1.11.1 to cancel idle
    interval when pool empties (#​36968)
  • fix(ext/napi): check napi_create_dataview bounds for overflow (#​36962)
  • fix(ext/napi): ignore the callback return value while an exception is pending
    (#​36942)
  • fix(ext/node): align X.509v1 certificate handling with OpenSSL (#​36933)
  • fix(ext/node): mock.reset() restores mock.method() implementations (#​36886)
  • fix(ext/node): support assert message functions and format arguments (#​36944)
  • fix(npm): validate package link names (#​37047)
  • fix(tls): distrust compromised eMudhra certificate authorities (#​37046)
  • fix: bump rand 0.9.x to patched version

v2.9.7

Compare Source

2.9.7 / 2026.09.16
  • fix(audit): honor configured CA stores (#​36728)
  • fix(cache): make HTTP authority paths unambiguous (#​36356)
  • fix(cli): accept all valid sys permission descriptors (#​36753)
  • fix(cli): don't duplicate passthrough args for deno deploy/sandbox (#​36722)
  • fix(cli): generate valid bash completions (#​36736)
  • fix(cli): preserve double dash before the entrypoint (#​36835)
  • fix(cli): restore optional-value semantics for deno bundle --sourcemap
    (#​36723)
  • fix(completions): keep the dash on short flags in zsh completions (#​36720)
  • fix(desktop): complete deferred window close and fix NAPI symbol export on
    Linux (#​36718)
  • fix(ext/http): extract traceparent from Deno.serve regardless of header name
    case (#​36840)
  • fix(ext/node): allow repeated child process signals (#​36644)
  • fix(ext/node): check resolved IP against net deny list in tcp_wrap bind
    (#​36482)
  • fix(ext/node): don't panic on prime sizes below 2 bits (#​36400)
  • fix(ext/node): improve node:dns error codes and lookupService/setLocalAddress
    compat (#​36552)
  • fix(ext/node): normalize resourceUsage maxRSS on macOS (#​36784)
  • fix(install): validate lockfile tarball registry paths (#​36473)
  • fix(lsp): resolve the newest prerelease of jsr packages that have no stable
    release (#​36655)
  • fix(net): check permissions for multicast membership (#​36529)
  • fix(node): align IncomingMessage header map prototypes (#​36438)
  • fix(node): preserve AsyncLocalStorage exit context (#​36464)
  • fix(npm): correct the pnpm lockfile import against real-world lockfiles
    (#​36727)
  • fix(npm): validate lockfile tarball origins (#​36430)
  • fix(permissions): fold unix socket paths for case-insensitive filesystems
    (#​36553)
  • fix(permissions): parse unix: net rules as POSIX paths (#​36785)
  • fix(process): clear supplementary groups before changing identity (#​36433)
  • fix(sqlite): refuse symlink database paths (#​36357)
  • fix(transpile): don't report diagnostics from bundled assets in declaration
    emit (#​36716)
  • fix(web): avoid flushing compression streams on every write (#​36744)
  • fix: add missing property desktop.app.identifier (#​36774)
  • fix: hash source contents for V8 code cache (#​36743)
  • fix: point JSON schema $id values at the maintained GitHub raw endpoint
    (#​36747)
  • fix: toplevel fetch/cron leak its spans (#​36757)
  • fix: validate --ignore-scripts package selectors (#​36742)
  • perf(core): drop dead module-graph retention (#​36683)
  • perf(core): make extension op tables const in static memory (#​36696)
  • perf(core): split OpCtx into shared OpCommonCtx + borrowed op declarations
    (#​36693)
  • perf(ext/node): Buffer hex paths via native Uint8Array toHex/setFromHex
    (#​36531)

v2.9.6

Compare Source

2.9.6 / 2026.08.27
  • feat(compressible): add support for 'text/x-component' content type (#​36450)
  • feat(desktop): clipboard api (#​35750)
  • feat(desktop): support checked, icon, and tooltip on menu items (#​36649)
  • fix(bundle): isolate esbuild downloads from workspace registries (#​36467)
  • fix(cache): combine duplicate headers for Vary matching (#​36476)
  • fix(cli_parser): remove orphaned sync-types parser
  • fix(core): cap adaptive buffer initial allocations (#​36432)
  • fix(core): make Unix pipe fd ownership explicit (#​36353)
  • fix(core): make user timer waker state thread-safe (#​36495)
  • fix(coverage): compare a range against a line in V8's units (#​36613)
  • fix(crypto): preserve RSA-OAEP label bytes (#​36441)
  • fix(desktop): keep dots in the app name when resolving the runtime library
    (#​36006)
  • fix(desktop): keep the macOS bundle signature valid unless an update is
    applied (#​36574)
  • fix(desktop): never block the JS thread on the error-report dialog (#​36575)
  • fix(desktop): propagate deno.json version and license into packaged installers
    (#​36577)
  • fix(desktop): run Vite-based HMR dev servers inside the desktop runtime
    (#​36488)
  • fix(desktop): transport binding args and results as DesktopValue so Uint8Array
    survives (#​36573)
  • fix(ext/fetch): enforce permissions for proxy transports (#​36217)
  • fix(ext/fetch): only retry transport errors on pooled connections (#​36415)
  • fix(ext/fetch): raise default HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE to 256KB
    (#​36558)
  • fix(ext/http): keep request body readable after response is sent (#​36629)
  • fix(ext/http): route invalid async responses to onError (#​36437)
  • fix(ext/napi): don't invoke napi_wrap finalizer twice at teardown (#​36556)
  • fix(ext/napi): run JS-calling finalizers safely, NULL string result, and
    Float16Array (#​36572)
  • fix(ext/napi): surface OS error and path on addon load failure (#​36630)
  • fix(ext/napi): track pending finalizers by identity (#​36551)
  • fix(ext/napi): wake the event loop at the next uv_timer deadline (#​36559)
  • fix(ext/net): skip unsupported DNS records in ANY queries (#​36650)
  • fix(ext/node): accept string ports in dns.lookupService (#​36546)
  • fix(ext/node): build the proxied request target with the URL parser (#​36557)
  • fix(ext/node): do not resume client TLS sessions unless requested (#​36592)
  • fix(ext/node): fix perf_hooks detail.req.url proxied path duplication (#​36407)
  • fix(ext/node): handle readv short reads (#​36211)
  • fix(ext/node): require sys permission for inspector.open (#​36465)
  • fix(ext/node_sqlite): invalidate sessions on database close (#​36633)
  • fix(ext/tls): avoid panic for mismatched client certificate and key (#​36457)
  • fix(ext/web): clean up abort handlers when listeners are removed (#​36226)
  • fix(ext/web): close transfer MessagePort when a transferred readable is
    cancelled (#​36270)
  • fix(ext/web): snapshot SharedArrayBuffer input in TextDecoder.decode()
    (#​36611)
  • fix(fetch): require an initial multipart boundary (#​36470)
  • fix(ffi): validate struct return buffers (#​36373)
  • fix(fmt): honor .editorconfig when formatting from stdin (#​36267)
  • fix(fs): require write permission for creating opens (#​36497)
  • fix(fs): use a private FsFile constructor token (#​36439)
  • fix(glob): retain valid gitignore rules after parse errors (#​36478)
  • fix(http): preserve keep-alive after reading request body (#​36690)
  • fix(http): truncate streaming responses to content length (#​36496)
  • fix(lsp): restrict registry completion endpoint schemes (#​36477)
  • fix(node): check reads during require resolution (#​36461)
  • fix(node): match domain uncaught exception handling (#​36475)
  • fix(node): preserve v8 deserializer view offsets (#​36460)
  • fix(node): validate Brotli encoder operations (#​36530)
  • fix(node): validate raw outgoing HTTP headers (#​36471)
  • fix(node/crypto): preserve binary key export passphrases (#​36443)
  • fix(node_crypto): apply RFC 7748 scalar decoding for X448 (#​36466)
  • fix(node_crypto): size cipher updates by byte length (#​36459)
  • fix(node_

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 12pm on Sunday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update actions/checkout action to v4 chore(deps): update github actions (major) Sep 10, 2023
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 1a95c55 to ed02ce9 Compare September 10, 2023 14:04
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from ed02ce9 to dccccfe Compare September 22, 2023 19:57
@renovate renovate Bot changed the title chore(deps): update github actions (major) chore(deps): update crazy-max/ghaction-github-labeler action to v5 Oct 17, 2023
@renovate renovate Bot changed the title chore(deps): update crazy-max/ghaction-github-labeler action to v5 chore(deps): update github actions (major) Oct 19, 2023
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from dccccfe to cb1fe7d Compare October 19, 2023 12:58
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from cb1fe7d to 6648104 Compare December 13, 2023 16:58
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 6648104 to 7407e4b Compare December 22, 2023 03:28
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 7407e4b to df48150 Compare January 8, 2024 14:38
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from df48150 to 4587d44 Compare January 17, 2024 16:58
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 4587d44 to a6e5a7a Compare January 26, 2024 14:47
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from a6e5a7a to 821de0c Compare February 2, 2024 19:03
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from e144691 to 1b657c7 Compare February 15, 2024 13:05
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 0f45d32 to 9b9341e Compare February 23, 2024 10:59
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 3eb7ead to 51bbd7f Compare February 29, 2024 20:19
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 3 times, most recently from 00339e5 to 5fe6c0e Compare March 19, 2024 17:17
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 5fe6c0e to 65f04a8 Compare March 22, 2024 12:58
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 65f04a8 to d34bdf9 Compare April 5, 2024 16:50
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 6addd2b to e9a53ad Compare April 17, 2024 15:01
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 6acae41 to c763644 Compare April 22, 2024 21:38
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 3 times, most recently from e83042f to 3d92a38 Compare July 26, 2024 16:52
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 3d92a38 to b7f919a Compare August 6, 2024 19:04
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 3 times, most recently from 35dc9f9 to ab4afde Compare August 19, 2024 17:27
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from a20f34d to b0e6317 Compare August 24, 2024 03:34
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from b0e6317 to c9be356 Compare August 29, 2024 12:50
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from b556bd4 to cd4f2fe Compare September 19, 2024 11:43
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from c1303bb to bf531af Compare September 30, 2024 13:39
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 3 times, most recently from 1c621d6 to dbcbf06 Compare October 8, 2024 19:18
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from dbcbf06 to be0f267 Compare October 14, 2024 20:17
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 3bbb569 to 81217c3 Compare October 23, 2024 17:41
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 4 times, most recently from 440272e to 21de3d1 Compare November 14, 2024 16:25
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch from 21de3d1 to 0805117 Compare November 20, 2024 17:39
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 6409221 to c3b704b Compare December 5, 2024 19:14
@renovate
renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 5e30ae4 to 69954b0 Compare December 12, 2024 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants