chore(deps): update github-actions (major) by renovate[bot] · Pull Request #9 · anolishq/anolis-projects

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

`v4.1.0`

Compare Source

Add support for partial checkout filters

actions/setup-python (actions/setup-python)

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancements:

Add support for pip-install input by @gowridurgad in #1201
Add graalpy early-access and windows builds by @timfel in #880

Dependency and Documentation updates:

Enhanced wording and updated example usage for allow-prereleases by @yarikoptic in #979
Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @dependabot in #1139
Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @dependabot in #1094
Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @dependabot in #1199
Upgrade requests from 2.32.2 to 2.32.4 by @dependabot in #1130
Upgrade prettier from 3.5.3 to 3.6.2 by @dependabot in #1234
Upgrade @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @dependabot in #1235

New Contributors

@yarikoptic made their first contribution in #979

Full Changelog: actions/setup-python@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Add support for pip-version by @priyagupta108 in #1129
Enhance reading from .python-version by @krystof-k in #787
Add version parsing from Pipfile by @aradkdj in #1067

Bug fixes:

Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @aparnajyothi-y in #1183
Change missing cache directory error to warning by @aparnajyothi-y in #1182
Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @aparnajyothi-y in #1122
Include python version in PyPy python-version output by @cdce8p in #1110
Update docs: clarification on pip authentication with setup-python by @priya-kinthali in #1156

Dependency updates:

Upgrade idna from 2.9 to 3.7 in /tests/data by @dependabot[bot] in #843
Upgrade form-data to fix critical vulnerabilities #182 & #183 by @aparnajyothi-y in #1163
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @aparnajyothi-y in #1165
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1181
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #1095

New Contributors

@krystof-k made their first contribution in #787
@cdce8p made their first contribution in #1110
@aradkdj made their first contribution in #1067

Full Changelog: actions/setup-python@v5...v6.0.0

`v6`

Compare Source

`v5.6.0`

Compare Source

What's Changed

Workflow updates related to Ubuntu 20.04 by @aparnajyothi-y in #1065
Fix for Candidate Not Iterable Error by @aparnajyothi-y in #1082
Upgrade semver and @types/semver by @dependabot in #1091
Upgrade prettier from 2.8.8 to 3.5.3 by @dependabot in #1046
Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in #1081

Full Changelog: actions/setup-python@v5...v5.6.0

`v5.5.0`

Compare Source

What's Changed

Enhancements:

Support free threaded Python versions like '3.13t' by @colesbury in #973
Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @action/cache from 4.0.0 to 4.0.3 by @priya-kinthali in #1056
Add support for .tool-versions file in setup-python by @mahabaleshwars in #1043

Bug fixes:

Fix architecture for pypy on Linux ARM64 by @mayeut in #1011
This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1016
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1015

New Contributors

@colesbury made their first contribution in #973
@mahabaleshwars made their first contribution in #1043

Full Changelog: actions/setup-python@v5...v5.5.0

`v5.4.0`

Compare Source

What's Changed

Enhancements:

Update cache error message by @aparnajyothi-y in #968
Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @priya-kinthali in #985
Configure Dependabot settings by @HarithaVattikuti in #1008

Documentation changes:

Readme update - recommended permissions by @benwells in #1009
Improve Advanced Usage examples by @lrq3000 in #645

Dependency updates:

Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #1012
Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @dependabot in #895
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #1014
Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in #1020
Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @dependabot in #1019
Upgrade @actions/cache to ^4.0.0 by @priyagupta108 in #1007

New Contributors

@benwells made their first contribution in #1009
@HarithaVattikuti made their first contribution in #1008
@lrq3000 made their first contribution in #645

Full Changelog: actions/setup-python@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #941
Upgrade IA publish by @Jcambass in #943

Bug Fixes:

Normalise Line Endings to Ensure Cross-Platform Consistency by @priya-kinthali in #938
Revise isGhes logic by @jww3 in #963
Bump pillow from 7.2 to 10.2.0 by @aparnajyothi-y in #956

Enhancements:

Enhance workflows and documentation updates by @priya-kinthali in #965
Bump default versions to latest by @jeffwidman in #905

New Contributors

@Jcambass made their first contribution in #941
@jww3 made their first contribution in #963

Full Changelog: actions/setup-python@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Bug fixes:

Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @priyagupta108 in #916
This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
Add arch to cache key by @Zxilly in #896
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.

Documentation changes:

Fix display of emojis in contributors doc by @sciencewhiz in #899
Documentation update for caching poetry dependencies by @gowridurgad in #908

Dependency updates:

Bump @iarna/toml version from 2.2.5 to 3.0.0 by @priya-kinthali in #912
Bump pyinstaller from 3.6 to 5.13.1 by @aparnajyothi-y in #923

New Contributors

@sciencewhiz made their first contribution in #899
@priyagupta108 made their first contribution in #916
@Zxilly made their first contribution in #896
@aparnajyothi-y made their first contribution in #923

Full Changelog: actions/setup-python@v5...v5.2.0

`v5.1.1`

Compare Source

What's Changed

Bug fixes:

fix(ci): update all failing workflows by @mayeut in #863
This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

Documentation update for cache by @gowridurgad in #873

Dependency updates:

Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @dependabot in #893

New Contributors

@gowridurgad made their first contribution in #873

Full Changelog: actions/setup-python@v5...v5.1.1

`v5.1.0`

Compare Source

What's Changed

Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @Shegox in #766.
Dependency updates by @dependabot and @HarithaVattikuti in #817
Documentation changes for version in README by @basnijholt in #776
Documentation changes for link in README by @ukd1 in #793
Documentation changes for link in Advanced Usage by @Jamim in #782
Documentation changes for avoiding rate limit issues on GHES by @priya-kinthali in #835

New Contributors

@basnijholt made their first contribution in #776
@ukd1 made their first contribution in #793
@Jamim made their first contribution in #782
@Shegox made their first contribution in #766
@priya-kinthali made their first contribution in #835

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

softprops/action-gh-release (softprops/action-gh-release)

`v3.0.0`

Compare Source

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24.
Use v3 on GitHub-hosted runners and self-hosted fleets that already support the
Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on
v2.6.2.

What's Changed

Other Changes 🔄

Move the action runtime and bundle target to Node 24
Update @types/node to the Node 24 line and allow future Dependabot updates
Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

`v3`

Compare Source

`v2.6.2`

Compare Source

What's Changed

Other Changes 🔄

chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in #775
chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by @dependabot[bot] in #777
chore(deps): bump vite from 8.0.0 to 8.0.5 by @dependabot[bot] in #781

Full Changelog: softprops/action-gh-release@v2...v2.6.2

`v2.6.1`

Compare Source

2.6.1 is a patch release focused on restoring linked discussion thread creation when
discussion_category_name is set. It fixes #764, where the draft-first publish flow
stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: preserve discussion category on publish by @chenrui333 in #765

`v2.6.0`

Compare Source

2.6.0 is a minor release centered on previous_tag support for generate_release_notes,
which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range.
It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync,
a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where
GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Exciting New Features 🎉

feat: support previous_tag for generate_release_notes by @pocesar in #372

Bug fixes 🐛

fix: recover concurrent asset metadata 404s by @chenrui333 in #760

Other Changes 🔄

docs: clarify reused draft release behavior by @chenrui333 in #759
docs: clarify working_directory input by @chenrui333 in #761
ci: verify dist bundle freshness by @chenrui333 in #762
fix: clarify immutable prerelease uploads by @chenrui333 in #763

`v2.5.3`

Compare Source

2.5.3 is a patch release focused on the remaining path-handling and release-selection bugs uncovered after 2.5.2.
It fixes #639, #571, #280, #614, #311, #403, and #368.
It also adds documentation clarifications for #541, #645, #542, #393, and #411,
where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: prefer token input over GITHUB_TOKEN by @chenrui333 in #751
fix: clean up duplicate drafts after canonicalization by @chenrui333 in #753
fix: support Windows-style file globs by @chenrui333 in #754
fix: normalize refs-tag inputs by @chenrui333 in #755
fix: expand tilde file paths by @chenrui333 in #756

Other Changes 🔄

docs: clarify token precedence by @chenrui333 in #752
docs: clarify GitHub release limits by @chenrui333 in #758
documentation clarifications for empty-token handling, preserve_order, and special-character asset filename behavior

Full Changelog: softprops/action-gh-release@v2...v2.5.3

`v2.5.2`

Compare Source

2.5.2 is a patch release focused on the remaining release-creation and prerelease regressions in the 2.5.x bug-fix cycle.
It fixes #705, fixes #708, fixes #740, fixes #741, and fixes #722.
Regression testing covers the shared-tag race, prerelease event behavior, dotfile asset labels,
same-filename concurrent uploads, and blocked-tag cleanup behavior.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: canonicalize releases after concurrent create by @chenrui333 in #746
fix: preserve prereleased events for prereleases by @chenrui333 in #748
fix: restore dotfile asset labels by @chenrui333 in #749
fix: handle upload already_exists races across workflows by @api2062 in #745
fix: clean up orphan drafts when tag creation is blocked by @chenrui333 in #750

New Contributors

@api2062 made their first contribution in #745

Full Changelog: softprops/action-gh-release@v2...v2.5.2

`v2.5.1`

Compare Source

2.5.1 is a patch release focused on regressions introduced in 2.5.0 and on release lookup reliability.
It fixes #713, addresses #703, and fixes #724. Regression testing shows that
current master no longer reproduces the finalize-race behavior reported in #704 and #709.

What's Changed

Bug fixes 🐛

fix: fetch correct asset URL after finalization; test; some refactoring by @pzhlkj6612 in #738
fix: release marked as 'latest' despite make_latest: false by @Boshen in #715
fix: use getReleaseByTag API instead of iterating all releases by @kim-em in #725

Other Changes 🔄

dependency updates, including the ESM/runtime compatibility refresh in #731

New Contributors

@autarch made their first contribution in #716
@pzhlkj6612 made their first contribution in #738
@Boshen made their first contribution in #715
@kim-em made their first contribution in #725

Full Changelog: softprops/action-gh-release@v2...v2.5.1

`v2.5.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat: mark release as draft until all artifacts are uploaded by @dumbmoron in #692

Other Changes 🔄

chore(deps): bump the npm group across 1 directory with 5 updates by @dependabot[bot] in #697
chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the github-actions group by @dependabot[bot] in #689

New Contributors

@dumbmoron made their first contribution in #692

Full Changelog: softprops/action-gh-release@v2.4.2...v2.5.0

`v2.4.2`

Compare Source

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in #684

Other Changes 🔄

dependency updates

New Contributors

@BeryJu made their first contribution in #684

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

`v2.4.1`

Compare Source

What's Changed

Other Changes 🔄

fix(util): support brace expansion globs containing commas in parseInputFiles by @Copilot in #672
fix: gracefully fallback to body when body_path cannot be read by @Copilot in #671

Full Changelog: softprops/action-gh-release@v2...v2.4.1

`v2.4.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat(action): respect working_directory for files globs by @stephenway in #667

Other Changes 🔄

chore(deps): bump the npm group with 2 updates by @dependabot[bot] in #668

Full Changelog: softprops/action-gh-release@v2.3.4...v2.4.0

`v2.3.4`

Compare Source

What's Changed

Bug fixes 🐛

fix(action): handle 422 already_exists race condition by @stephenway in #665

Other Changes 🔄

chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 in the github-actions group by @dependabot[bot] in #656
chore(deps): bump @types/node from 20.19.11 to 20.19.13 in the npm group by @dependabot[bot] in #655
chore(deps): bump vite from 7.0.0 to 7.1.5 by @dependabot[bot] in #657
chore(deps): bump the npm group across 1 directory with 2 updates by @dependabot[bot] in #662
chore(deps): bump the npm group with 3 updates by @dependabot[bot] in #666

Full Changelog: softprops/action-gh-release@v2...v2.3.4

`v2.3.3`

Compare Source

What's Changed

Exciting New Features 🎉

feat: add input option overwrite_files by @asfernandes in #343

Other Changes 🔄

dependency updates

New Contributors

@asfernandes made their first contribution in #343

Full Changelog: softprops/action-gh-release@v2...v2.3.3

`v2.3.2`

Compare Source

fix: revert fs readableWebStream change

`v2.3.1`

Compare Source

What's Changed

Bug fixes 🐛

fix: fix file closing issue by @WailGree in #629

New Contributors

@WailGree made their first contribution in #629

Full Changelog: softprops/action-gh-release@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

Migrate from jest to vitest
Replace mime with mime-types
Bump to use node 24
Dependency updates

Full Changelog: softprops/action-gh-release@v2.2.2...v2.3.0

`v2.2.2`

Compare Source

What's Changed

Bug fixes 🐛

fix: updating release draft status from true to false by @galargh in #316

Other Changes 🔄

chore: simplify ref_type test by @steinybot in #598
fix(docs): clarify the default for tag_name by @muzimuzhi in #599
test(release): add unit tests when searching for a release by @rwaskiewicz in #603
dependency updates

New Contributors

@steinybot made their first contribution in #598
@muzimuzhi made their first contribution in #599
@galargh made their first contribution in #316
@rwaskiewicz made their first contribution in #603

Full Changelog: softprops/action-gh-release@v2.2.1...v2.2.2

`v2.2.1`

Compare Source

What's Changed

Bug fixes 🐛

fix: big file uploads by @xen0n in #562

Other Changes 🔄

chore(deps): bump @types/node from 22.10.1 to 22.10.2 by @dependabot in #559
chore(deps): bump @types/node from 22.10.2 to 22.10.5 by @dependabot in #569
chore: update error and warning messages for not matching files in files field by @ytimocin in #568

New Contributors

[@ytimoc

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update github-actions

1df6c9f

CameronBrooks11 merged commit b614e38 into main May 24, 2026
1 check passed

CameronBrooks11 deleted the renovate/major-github-actions branch May 24, 2026 18:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github-actions (major)#9

chore(deps): update github-actions (major)#9
CameronBrooks11 merged 1 commit into
mainfrom
renovate/major-github-actions

renovate Bot commented May 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented May 22, 2026

Release Notes

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

What's Changed

New Contributors

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

What's Changed

Breaking Changes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

What's Changed

What's Changed

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Enhancements:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug Fixes:

Enhancements:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

New Contributors

What's Changed

Other Changes 🔄

What's Changed

Other Changes 🔄

What's Changed

Bug fixes 🐛

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

What's Changed

Bug fixes 🐛

Other Changes 🔄

What's Changed

Bug fixes 🐛

New Contributors

What's Changed

Bug fixes 🐛

Other Changes 🔄

New Contributors

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

What's Changed

Other Changes 🔄

What's Changed

Exciting New Features 🎉

Other Changes 🔄