chore(deps): update github-actions #3991

renovate-bot · 2024-11-01T02:23:58Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	digest	`9a9194f` -> `cbb7224`
actions/checkout	action	minor	`v4.1.7` -> `v4.2.2`
actions/setup-go	action	minor	`v5.0.2` -> `v5.2.0`
actions/setup-java	action	minor	`v4.2.1` -> `v4.5.0`
actions/setup-node	action	minor	`v4.0.3` -> `v4.1.0`
actions/setup-node	action	digest	`1e60f62` -> `39370e3`
actions/upload-artifact	action	minor	`v4.3.5` -> `v4.4.3`
geekyeggo/delete-artifact	action	minor	`v5.0.0` -> `v5.1.0`
github/codeql-action	action	minor	`v3.25.15` -> `v3.27.9`
google-github-actions/auth	action	patch	`v2.1.3` -> `v2.1.7`
ianlewis/todo-issue-reopener	action	minor	`v1.2.1` -> `v1.4.0`
sigstore/cosign-installer	action	minor	`v3.5.0` -> `v3.7.0`
softprops/action-gh-release	action	minor	`v2.0.8` -> `v2.2.0`
thehanimo/pr-title-checker	action	patch	`v1.4.2` -> `v1.4.3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in https://github.com/actions/checkout/pull/1180
Dependency updates by @dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/setup-go (actions/setup-go)

`v5.2.0`

Compare Source

What's Changed

Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @Shegox in https://github.com/actions/setup-go/pull/496

New Contributors

@Shegox made their first contribution in https://github.com/actions/setup-go/pull/496

Full Changelog: actions/setup-go@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/setup-go/pull/500
Upgrade IA Publish by @Jcambass in https://github.com/actions/setup-go/pull/502
Add architecture to cache key by @Zxilly in https://github.com/actions/setup-go/pull/493
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Enhance workflows and Upgrade micromatch Dependency by @priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

Revise isGhes logic by @jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

@Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
@Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
@jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
@priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

actions/setup-java (actions/setup-java)

`v4.5.0`

Compare Source

What's Changed

Upgrade IA Publish by @Jcambass in #686

Bug fixes:

Improve archive extraction on windows runners without powershell core and Update micromatch dependency by @priyagupta108 in #689
Update workflows for GraalVM and Version Enhancements by @mahabaleshwars in #699
Refine isGhes logic by @jww3 in #697

New Contributors:

@priyagupta108 made their first contribution in https://github.com/actions/setup-java/pull/689
@jww3 made their first contribution in https://github.com/actions/setup-java/pull/697

Full Changelog: actions/setup-java@v4...v4.5.0

`v4.4.0`

Compare Source

What's Changed

Add-ons :

Add support for Oracle GraalVM by @fniephaus in https://github.com/actions/setup-java/pull/501

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'graalvm'
     java-version: '21'

Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/setup-java/pull/684

Bug fixes :

Add architecture to cache key by @Zxilly in https://github.com/actions/setup-java/pull/664
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Resolve check failures by @aparnajyothi-y in https://github.com/actions/setup-java/pull/687

What's Changed

  Bug fixes:

Fix macos latest check failures by @HarithaVattikuti in https://github.com/actions/setup-java/pull/634
Fix dragonwell distribution parsing issues by @Accelerator1996 in https://github.com/actions/setup-java/pull/643

Documentation changes

Update advanced documentation for java-version-file by @mahabaleshwars in https://github.com/actions/setup-java/pull/622

Dependency updates:

Bump undici from 5.28.3 to 5.28.4 and other dependency updates by @dependabot in https://github.com/actions/setup-java/pull/616

Full Changelog: actions/setup-java@v4...v4.2.2

actions/setup-node (actions/setup-node)

`v4.1.0`

Compare Source

`v4.0.4`

Compare Source

actions/upload-artifact (actions/upload-artifact)

`v4.4.3`

Compare Source

What's Changed

Undo indirect dependency updates from #627 by @joshmgross in https://github.com/actions/upload-artifact/pull/632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

`v4.4.2`

Compare Source

What's Changed

Bump @actions/artifact to 2.1.11 by @robherley in https://github.com/actions/upload-artifact/pull/627
- Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

`v4.4.1`

Compare Source

What's Changed

Add a section about hidden files by @joshmgross in https://github.com/actions/upload-artifact/pull/607
Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/upload-artifact/pull/621
Update @actions/artifact to latest version, includes symlink and timeout fixes by @robherley in https://github.com/actions/upload-artifact/pull/625

New Contributors

@Jcambass made their first contribution in https://github.com/actions/upload-artifact/pull/621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

`v4.4.0`

Compare Source

`v4.3.6`

Compare Source

geekyeggo/delete-artifact (geekyeggo/delete-artifact)

`v5.1.0`

Compare Source

Mark deprecated token parameter as optional.
Bump undici dependency.

github/codeql-action (github/codeql-action)

`v3.27.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.8`

Compare Source

`v3.27.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
Update default CodeQL bundle version to 2.20.0. #2636

See the full CHANGELOG.md for more information.

`v3.27.6`

Compare Source

`v3.27.5`

Compare Source

`v3.27.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024

Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

See the full CHANGELOG.md for more information.

`v3.27.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024

The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
Update default CodeQL bundle version to 2.19.3. #2576

See the full CHANGELOG.md for more information.

`v3.27.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024

Bump the minimum CodeQL bundle version to 2.14.6. #2549
Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
Update default CodeQL bundle version to 2.19.2. #2552

See the full CHANGELOG.md for more information.