Skip to content

Conversation

@oep-renovate
Copy link
Contributor

@oep-renovate oep-renovate bot commented Nov 21, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v5.0.0 -> v6.0.0
actions/create-github-app-token action minor v2.1.4 -> v2.2.0
actions/download-artifact action major v5.0.0 -> v6.0.0
actions/setup-go action minor v6.0.0 -> v6.1.0
actions/upload-artifact action major v4.6.2 -> v5.0.0
astral-sh/setup-uv action patch v7.1.0 -> v7.1.4
debian container digest 7e49091 -> b4aa902
docker/login-action action minor v3.3.0 -> v3.6.0
github/codeql-action action minor v4.30.8 -> v4.31.5
octokit/graphql-action action major v2.3.2 -> v3.0.0
open-edge-platform/geti-ci action digest 60c5b06 -> 829f714
renovatebot/github-action action major v43.0.17 -> v44.0.4
sigstore/cosign-installer action major v3.10.0 -> v4.0.0
step-security/harden-runner action patch v2.13.1 -> v2.13.2

Release Notes

actions/checkout (actions/checkout)

v6.0.0

Compare Source

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

actions/create-github-app-token (actions/create-github-app-token)

v2.2.0

Compare Source

Bug Fixes
Features
actions/download-artifact (actions/download-artifact)

v6.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

actions/setup-go (actions/setup-go)

v6.1.0

Compare Source

What's Changed
Enhancements
Dependency updates
New Contributors

Full Changelog: actions/setup-go@v6...v6.1.0

actions/upload-artifact (actions/upload-artifact)

v5.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

astral-sh/setup-uv (astral-sh/setup-uv)

v7.1.4: 🌈 Fix libuv closing bug on Windows

Compare Source

Changes

This release fixes the bug Assertion failed: !(handle->flags & UV_HANDLE_CLOSING) on Windows runners

🐛 Bug fixes
🧰 Maintenance

v7.1.3: 🌈 Support act

Compare Source

Changes

This bug fix release adds support for https://github.com/nektos/act
It was previously broken because of a too new undici version and TS transpilation target.

Compatibility with act is now automatically tested.

🐛 Bug fixes
🧰 Maintenance
📚 Documentation

v7.1.2: 🌈 Speed up extraction on Windows

Compare Source

Changes

@​lazka fixed a bug that caused extracting uv to take up to 30s. Thank you!

🐛 Bug fixes
🧰 Maintenance
⬆️ Dependency updates

v7.1.1: 🌈 Fix empty workdir detection and lowest resolution strategy

Compare Source

Changes

This release fixes a bug where the working-directory input was not used to detect an empty work dir. It also fixes the lowest resolution strategy resolving to latest when only a lower bound was specified.

Special thanks to @​tpgillam for the first contribution!

🐛 Bug fixes
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
docker/login-action (docker/login-action)

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Compare Source

Full Changelog: docker/login-action@v3.3.0...v3.4.0

github/codeql-action (github/codeql-action)

v4.31.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025
  • Update default CodeQL bundle version to 2.23.6. #​3321

See the full CHANGELOG.md for more information.

v4.31.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025
  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #​3288

See the full CHANGELOG.md for more information.

v4.31.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.2 - 30 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.1 - 30 Oct 2025
  • The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

See the full CHANGELOG.md for more information.

v4.31.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.0 - 24 Oct 2025
  • Bump minimum CodeQL bundle version to 2.17.6. #​3223
  • When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #​3222

See the full CHANGELOG.md for more information.

v4.30.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025
  • Update default CodeQL bundle version to 2.23.3. #​3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #​3204

See the full CHANGELOG.md for more information.

octokit/graphql-action (octokit/graphql-action)

v3.0.0

Compare Source

Bug Fixes
BREAKING CHANGES
  • deps: Switch to ESM
  • deps: Require Node 20+
  • deps: Update runner to Node 24
renovatebot/github-action (renovatebot/github-action)

v44.0.4

Compare Source

Documentation
  • update references to actions/checkout to v5 (304fd04)
  • update references to ghcr.io/renovatebot/renovate to v42.19.3 (433f522)
  • update references to renovatebot/github-action to v44.0.3 (dc2e960)
Miscellaneous Chores
Build System
  • deps: lock file maintenance (8a373e9)
Continuous Integration
  • deps: update actions/checkout action to v4.3.1 (3180f03)
  • deps: update renovate docker tag to v42.12.1 (cddf456)
  • deps: update renovate docker tag to v42.13.0 (ba10ad3)
  • deps: update renovate docker tag to v42.13.3 (8dc1742)
  • deps: update renovate docker tag to v42.13.4 (fca6d36)
  • deps: update renovate docker tag to v42.13.5 (c302ccc)
  • deps: update renovate docker tag to v42.14.1 (a32bad8)
  • deps: update renovate docker tag to v42.14.2 (7cd0b77)
  • deps: update renovate docker tag to v42.14.3 (a1252fe)
  • deps: update renovate docker tag to v42.14.4 (89d46e0)
  • deps: update renovate docker tag to v42.15.0 (99d3e68)
  • deps: update renovate docker tag to v42.16.0 (f3fed10)
  • deps: update renovate docker tag to v42.16.1 (b499602)
  • deps: update renovate docker tag to v42.17.0 (0745ba0)
  • deps: update renovate docker tag to v42.17.1 (58fd621)
  • deps: update renovate docker tag to v42.18.0 (6752f0f)
  • deps: update renovate docker tag to v42.19.0 (8744329)
  • deps: update renovate docker tag to v42.19.2 (8962db8)
  • deps: update renovate docker tag to v42.19.3 (760eaea)

v44.0.3

Compare Source

Documentation
  • update references to ghcr.io/renovatebot/renovate to v42.11.0 (1fee7b4)
  • update references to renovatebot/github-action to v44.0.2 (04d158c)
Miscellaneous Chores
  • deps: update dependency esbuild to v0.26.0 (9165c1c)
  • deps: update dependency esbuild to v0.27.0 (a4ef38d)
  • deps: update dependency typescript-eslint to v8.46.3 (a6d386d)
  • deps: update linters to v9.39.1 (6977a66)
  • deps: update pnpm to v10.21.0 (7abe8bb)
Build System
  • deps: lock file maintenance (5f1880c)
Continuous Integration
  • deps: update renovate docker tag to v42 (#​960) (871c190)
  • deps: update renovate docker tag to v42.10.2 (00bfa3e)
  • deps: update renovate docker tag to v42.10.5 (550593c)
  • deps: update renovate docker tag to v42.11.0 (64b16b7)
  • deps: update renovate docker tag to v42.5.1 (ad9b3d5)
  • deps: update renovate docker tag to v42.5.2 (b01dddf)
  • deps: update renovate docker tag to v42.5.3 (160b607)
  • deps: update renovate docker tag to v42.5.4 (879d6fa)
  • deps: update renovate docker tag to v42.6.0 (3300545)
  • deps: update renovate docker tag to v42.6.1 (5b1ce50)
  • deps: update renovate docker tag to v42.6.2 (df2e683)
  • deps: update renovate docker tag to v42.6.3 (730d1a6)
  • deps: update renovate docker tag to v42.7.0 (b2df36e)
  • deps: update renovate docker tag to v42.9.2 (fc9d3f4)

v44.0.2

Compare Source

Documentation
  • update references to ghcr.io/renovatebot/renovate to v42 (9ce6df1)
  • update references to renovatebot/github-action to v44 (03f7f69)
Build System
  • deps: lock file maintenance (80a952a)

v44.0.1

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update dependency esbuild to v0.25.12 (ddd20f2)
  • deps: update dependency globals to v16.5.0 (d95d81f)
  • deps: update linters to v9.39.0 (667e6da)

v44.0.0

Compare Source

⚠ BREAKING CHANGES
  • deps: Update ghcr.io/renovatebot/renovate Docker tag to v42 (#​961)
Features
  • deps: Update ghcr.io/renovatebot/renovate Docker tag to v42 (#​961) (375d4df)
Miscellaneous Chores
Continuous Integration
  • deps: update renovate docker tag to v41.169.3 (5aae8aa)
  • deps: update renovate docker tag to v41.169.4 (c6bfbb6)
  • deps: update renovate docker tag to v41.170.0 (a49ba8e)
  • deps: update renovate docker tag to v41.170.1 (783744c)
  • deps: update renovate docker tag to v41.171.2 (54d0959)
  • deps: update renovate docker tag to v41.171.4 (be13ca4)
  • deps: update renovate docker tag to v41.171.7 (f7f2c9e)
  • deps: update renovate docker tag to v41.172.0 (fdb23b4)
  • deps: update renovate docker tag to v41.172.1 (d99b1e8)
  • deps: update renovate docker tag to v41.173.0 (a154af9)
  • deps: update renovate docker tag to v41.173.1 (6641ca4)

v43.0.20

Compare Source

Documentation
  • update references to ghcr.io/renovatebot/renovate to v41.169.1 (1b401fa)
  • update references to renovatebot/github-action to v43.0.19 (56c595a)
Miscellaneous Chores
Build System
  • deps: lock file maintenance (390abb0)
Continuous Integration
  • deps: update renovate docker tag to v41.160.1 (af58be9)
  • deps: update renovate docker tag to v41.162.1 (6656166)
  • deps: update renovate docker tag to v41.162.2 (a52ba21)
  • deps: update renovate docker tag to v41.163.0 (d8060f9)
  • deps: update renovate docker tag to v41.163.1 (88d42bf)
  • deps: update renovate docker tag to v41.163.4 (f6eb143)
  • deps: update renovate docker tag to v41.164.0 (15c0d84)
  • deps: update renovate docker tag to v41.164.1 (9c03ce9)
  • deps: update renovate docker tag to v41.165.1 (10f7caf)
  • deps: update renovate docker tag to v41.165.2 (870b7be)
  • deps: update renovate docker tag to v41.165.3 (026965a)
  • deps: update renovate docker tag to v41.165.4 (b60902d)
  • deps: update renovate docker tag to v41.165.5 (c08796a)
  • deps: update renovate docker tag to v41.165.6 (1aeb976)
  • deps: update renovate docker tag to v41.167.0 (35c9f7e)
  • deps: update renovate docker tag to v41.167.2 (40e1beb)
  • deps: update renovate docker tag to v41.168.0 (8a94027)
  • deps: update renovate docker tag to v41.168.1 (004b5a3)
  • deps: update renovate docker tag to v41.168.3 (1b58c32)
  • deps: update renovate docker tag to v41.168.4 (5076a2c)
  • deps: update renovate docker tag to v41.168.5 (4c3d3b7)
  • deps: update renovate docker tag to v41.169.1 (de20159)

v43.0.19

Compare Source

Documentation
  • update references to ghcr.io/renovatebot/renovate to v41.159.4 (71ec32f)
  • update references to renovatebot/github-action to v43.0.18 (218c6f5)
Miscellaneous Chores
  • deps: update dependency @​types/node to v20.19.22 (b17f961)
  • deps: update dependency esbuild to v0.25.11 (c984067)
  • deps: update dependency typescript-eslint to v8.46.1 (f538ae7)
  • deps: update linters to v9.38.0 (54419a4)
  • deps: update pnpm to v10.18.3 (2280560)
Build System
  • deps: lock file maintenance (10695f9)
Continuous Integration
  • deps: update renovate docker tag to v41.154.0 (2055510)
  • deps: update renovate docker tag to v41.155.0 (11754d8)
  • deps: update renovate docker tag to v41.155.2 (153a562)
  • deps: update renovate docker tag to v41.155.4 (0223f34)
  • deps: update renovate docker tag to v41.155.5 (7d814a0)
  • deps: update renovate docker tag to v41.156.0 (f8ace4e)
  • deps: update renovate docker tag to v41.156.1 (bbf577e)
  • deps: update renovate docker tag to v41.156.2 (c3a3fe0)
  • deps: update renovate docker tag to v41.156.3 (e677a10)
  • deps: update renovate docker tag to v41.157.0 (7a91629)
  • deps: update renovate docker tag to v41.157.1 (5fdb516)
  • deps: update renovate docker tag to v41.158.0 (dcaefc7)
  • deps: update renovate docker tag to v41.158.2 (d08d77d)
  • deps: update renovate docker tag to v41.158.3 (956de3b)
  • deps: update renovate docker tag to v41.159.0 (05c5dd2)
  • deps: update renovate docker tag to v41.159.1 (24ddf8e)
  • deps: update renovate docker tag to v41.159.2 (a7c2872)
  • deps: update renovate docker tag to v41.159.3 (de00d27)
  • deps: update renovate docker tag to v41.159.4 (8a1b438)

v43.0.18

Compare Source

Documentation
  • update references to ghcr.io/renovatebot/renovate to v41.152.9 (c0e9271)
  • update references to renovatebot/github-action to v43.0.17 (ce30b19)
Miscellaneous Chores
Build System
  • deps: lock file maintenance (ba5ac50)
Continuous Integration
  • deps: update renovate docker tag to v41.146.2 (c533dc3)
  • deps: update renovate docker tag to v41.146.4 (a8cdc1a)
  • deps: update renovate docker tag to v41.146.6 (b2bce63)
  • deps: update renovate docker tag to v41.146.8 (423b25f)
  • deps: update renovate docker tag to v41.148.0 (743202d)
  • deps: update renovate docker tag to v41.148.1 (f1638c4)
  • deps: update renovate docker tag to v41.148.2 (f44c2e1)
  • deps: update renovate docker tag to v41.148.3 (a60e8e4)
  • deps: update renovate docker tag to v41.148.5 (1008ab8)
  • deps: update renovate docker tag to v41.148.6 (3886779)
  • deps: update renovate docker tag to v41.149.0 (fd43ec2)
  • deps: update renovate docker tag to v41.149.1 (66d8903)
  • deps: update renovate docker tag to v41.149.2 (b39fe85)
  • deps: update renovate docker tag to v41.150.0 (486df44)
  • deps: update renovate docker tag to v41.151.0 (7d61dd8)
  • deps: up

Configuration

📅 Schedule: Branch creation - On day 1 and 15 of the month ( * * 1,15 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@oep-renovate oep-renovate bot force-pushed the renovate/release-2.13-github-actions branch 2 times, most recently from 553bf31 to 12ff466 Compare November 25, 2025 02:48
Signed-off-by: oep-renovate[bot] <212772560+oep-renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants