Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 4, 2025

This PR contains the following updates:

Package Type Update Change Pending
actions/checkout action minor v4.2.2 -> v4.3.1
actions/checkout action patch v5.0.0 -> v5.0.1
actions/setup-node action minor v4.2.0 -> v4.4.0
actions/upload-artifact action patch v4.6.1 -> v4.6.2
azure/CLI action minor v2.1.0 -> v2.2.0
azure/bicep-deploy action minor v2.1.0 -> v2.2.0
azure/login action minor v2.2.0 -> v2.3.0
docker/build-push-action action minor v6.15.0 -> v6.18.0
docker/login-action action minor v3.4.0 -> v3.6.0
docker/metadata-action action minor v5.7.0 -> v5.9.0 v5.10.0
docker/setup-buildx-action action minor v3.10.0 -> v3.11.1
googleapis/release-please-action action minor v4.3.0 -> v4.4.0
grafana/setup-k6-action action minor v1.0.0 -> v1.1.0
pnpm/action-setup action minor v4.1.0 -> v4.2.0
slackapi/slack-github-action action minor v2.0.0 -> v2.1.1
slackapi/slack-github-action action patch v2.1.0 -> v2.1.1
step-security/harden-runner action patch v2.13.0 -> v2.13.2
tj-actions/changed-files action patch v46.0.1 -> v46.0.5

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

actions/setup-node (actions/setup-node)

v4.4.0

Compare Source

What's Changed
Bug fixes:
Enhancement:
Dependency update:
New Contributors

Full Changelogactions/setup-node@v4...v4.4.0

v4.3.0

Compare Source

What's Changed
Dependency updates
New Contributors

Full Changelog: actions/setup-node@v4...v4.3.0

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

  • Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

azure/CLI (azure/CLI)

v2.2.0: GitHub Action for Azure CLI v2.2.0

Compare Source

What's Changed
New Contributors

Full Changelog: Azure/cli@v2.1.0...v2.2.0

azure/bicep-deploy (azure/bicep-deploy)

v2.2.0

Compare Source

What's Changed

Full Changelog: Azure/bicep-deploy@v2.1.0...v2.2.0

azure/login (azure/login)

v2.3.0: Azure Login Action v2.3.0

Compare Source

What's Changed

Full Changelog: Azure/login@v2.2.0...v2.3.0

docker/build-push-action (docker/build-push-action)

v6.18.0

Compare Source

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

Compare Source

[!NOTE]
Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

Compare Source

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

docker/login-action (docker/login-action)

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

Full Changelog: docker/login-action@v3.4.0...v3.5.0

docker/metadata-action (docker/metadata-action)

v5.9.0

Compare Source

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

v5.8.0

Compare Source

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.11.1

Compare Source

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Compare Source

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

googleapis/release-please-action (googleapis/release-please-action)

v4.4.0

Compare Source

Features
  • add ability to select versioning-strategy and release-as (#​1121) (ee0f5ba)
Bug Fixes
  • changelog-host parameter ignored when using manifest configuration (#​1151) (535c413)
  • bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 directory (#​1149) (3612a99)
  • bump release-please from 17.1.2 to 17.1.3 (#​1158) (66fbfe9)
grafana/setup-k6-action (grafana/setup-k6-action)

v1.1.0

Compare Source

What's Changed

Full Changelog: grafana/setup-k6-action@v1...v1.1.0

pnpm/action-setup (pnpm/action-setup)

v4.2.0

Compare Source

When there's a .npmrc file at the root of the repository, pnpm will be fetched from the registry that is specified in that .npmrc file #​179

slackapi/slack-github-action (slackapi/slack-github-action)

v2.1.1: Slack Send v2.1.1

Compare Source

What's Changed

This release fixes an issue where substituted variables might've broken valid JSON or YAML parsings when using the payload-file-path input option.

🐛 Bug fixes
  • fix: parse provided payloads before replacing templated variables in #​449 - Thanks @​zimeg!
📚 Documentation
🤖 Dependencies
🧰 Maintenance

Full Changelog: slackapi/slack-github-action@v2.1.0...v2.1.1

v2.1.0: Slack Send v2.1.0

Compare Source

What's changed

This release improves error messages from odd payload parsings. An api option is now also available in inputs to change the destination of data with the method technique.

Read more on the new site for documentation: https://tools.slack.dev/slack-github-action/

👾 Enhancements
  • feat: include an 'api' option to customize the slack api method url in #​409 - Thanks @​zimeg!
🐛 Bug fixes
  • fix: avoid erroring if conflicting techniques are set from environment variables in #​374 - Thanks @​zimeg!
  • fix: require a custom 'api' url to send to instead of absolute urls as a 'method' in #​420 - Thanks @​zimeg!
  • fix: include cause of parsing errors in action output logs in #​431 - Thanks @​zimeg!
📚 Documentation
🤖 Dependencies
🧰 Maintenance
💌 New Contributors

Full Changelog: slackapi/slack-github-action@v2.0.0...v2.1.0

step-security/harden-runner (step-security/harden-runner)

v2.13.2

Compare Source

What's Changed
  • Fixed an issue where there was a limit of 512 allowed endpoints when using block egress policy. This restriction has been removed, allowing for an unlimited number of endpoints to be configured.
  • Harden Runner now automatically detects if the agent is already pre-installed on a custom VM image used by a GitHub-hosted runner. When detected, the action will skip reinstallation and use the existing agent.

Full Changelog: step-security/harden-runner@v2.13.1...v2.13.2

v2.13.1

Compare Source

What's Changed

  • Graceful handling of HTTP errors: Improved error handling when fetching Harden Runner policies from the StepSecurity Policy Store API, ensuring more reliable execution even in case of temporary network/API issues.

  • Security updates for npm dependencies: Updated vulnerable npm package dependencies to the latest secure versions.

  • Faster enterprise agent downloads: The enterprise agent is now downloaded from GitHub Releases instead of packages.stepsecurity.io, improving download speed and reliability.

Full Changelog: step-security/harden-runner@v2.13.0...v2.13.1

tj-actions/changed-files (tj-actions/changed-files)

v46.0.5

Compare Source

🚀 Features

➖ Remove

🔄 Update

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (3dbc1e1) - (github-actions[bot])

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (b1ccff8) - (github-actions[bot])

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (050a3d3) - (github-actions[bot])

📚 Documentation

  • Update link to glob patterns (#​2590) (a892f50) - (Tonye Jack)
  • Add Jellyfrog as a contributor for code, and doc (#​2573) (f000a9b) - (allcontributors[bot])

🧪 Testing

⚙️ Miscellaneous Tasks

  • deps-dev: Bump jest from 30.0.5 to 30.1.3 (#​2655) (9a67555) - (dependabot[bot])
  • deps: Bump tj-actions/git-cliff from 2.1.0 to 2.2.0 (#​2660) (b67e30d) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.30.2 to 3.30.3 (#​2661) (62aef42) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.11 to 3.30.2 (#​2659) (e874f3c) - (dependabot[bot])
  • deps: Bump actions/setup-node from 4.4.0 to 5.0.0 (#​2656) (8c14441) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.3.0 to 24.3.1 (#​2657) (e995ac4) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.2.1 to 24.3.0 (#​2649) (3b04099) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.9 to 3.29.11 (#​2651) (e7b6c97) - (dependabot[bot])
  • deps: Bump tj-actions/git-cliff from 2.0.2 to 2.1.0 (#​2648) (765d62b) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.8 to 3.29.9 (#​2647) (2036da1) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.7 to 3.29.8 (#​2644) (239aef8) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.2.0 to 24.2.1 (#​2645) (a7d5f5f) - (dependabot[bot])
  • deps: Bump actions/checkout from 4.2.2 to 5.0.0 (#​2646) (5107f3a) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.1.0 to 24.2.0 (#​2640) (f963b3f) - (dependabot[bot])
  • deps: Bump actions/download-artifact from 4.3.0 to 5.0.0 (#​2641) (f956744) - (dependabot[bot])
  • deps: Bump yaml from 2.8.0 to 2.8.1 (#​2642) (9009bab) - (dependabot[bot])
  • deps-dev: Bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#​2643) (2ecafed) - (dependabot[bot])
  • deps: Bump tj-actions/eslint-changed-files from 25.3.1 to 25.3.2 (#​2638) (8cdfb76) - (dependabot[bot])
  • deps-dev: Bump ts-jest from 29.4.0 to 29.4.1 (#​2639) (087c158) - (dependabot[bot])
  • deps: Bump tj-actions/branch-names from 9.0.1 to 9.0.2 (#​2636) (94d97fe) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.4 to 3.29.5 (#​2635) (18b05b9) - (dependabot[bot])
  • deps: Bump tj-actions/git-cliff from 1.5.0 to 2.0.2 (#​2632) (db8d0bf) - (dependabot[bot])
  • deps: Bump tj-actions/branch-names from 8.2.1 to 9.0.1 (#​2633) (0e2e8f7) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.0.15 to 24.1.0 (#​2626) (5f2e971) - (dependabot[bot])
  • deps-dev: Bump jest from 30.0.4 to 30.0.5 (#​2627) (498cf3f) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.3 to 3.29.4 (#​2628) (8378ac8) - (dependabot[bot])
  • deps: Bump nrwl/nx-set-shas from 4.3.0 to 4.3.3 (#​2630) (4bfe3cb) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.2 to 3.29.3 (#​2625) (a0370f6) - (dependabot[bot])
  • deps: Bump codacy/codacy-analysis-cli-action from 4.4.5 to 4.4.7 (#​2620) (4662f28) - (dependabot[bot])
  • deps-dev: Bump esli

Configuration

📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested review from a team as code owners June 4, 2025 23:24
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from ec52b81 to 36faced Compare June 19, 2025 14:06
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from 36faced to 9304062 Compare June 21, 2025 11:15
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from 9304062 to c1d98fe Compare July 13, 2025 03:00
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from c1d98fe to c657179 Compare July 28, 2025 19:30
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from c657179 to 50dbc61 Compare August 4, 2025 11:45
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from 50dbc61 to eb6f118 Compare August 7, 2025 13:58
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from eb6f118 to 798c572 Compare August 10, 2025 15:35
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from f8c22c4 to 8ebc499 Compare October 11, 2025 10:29
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from 8ebc499 to 3f75c54 Compare October 26, 2025 18:54
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from 3f75c54 to 64e6b05 Compare November 5, 2025 06:34
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from 64e6b05 to 0fdc9d1 Compare November 7, 2025 20:28
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from 0fdc9d1 to e5a2ca3 Compare November 8, 2025 10:52
@renovate renovate bot force-pushed the renovate/github-actions-minor-patch branch from e5a2ca3 to 1cd281f Compare November 17, 2025 16:50
@sonarqubecloud
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants