chore(deps): update github-actions deps (major) by elastic-renovate-prod[bot] · Pull Request #37 · elastic/opentelemetry-collector

elastic-renovate-prod · 2026-03-03T22:20:26Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	`v4.2.3` -> `v5.0.5`
actions/checkout	action	major	`v4.2.2` -> `v6.0.2`
actions/create-github-app-token	action	major	`v2.0.6` -> `v3.1.1`
actions/download-artifact	action	major	`v4.3.0` -> `v8.0.1`
actions/github-script	action	major	`v7.0.1` -> `v9.0.0`
actions/setup-go	action	major	`v5.5.0` -> `v6.4.0`
actions/setup-go	action	major	`v5` -> `v6`
actions/stale	action	major	`v9.1.0` -> `v10.2.0`
actions/upload-artifact	action	major	`v4.6.2` -> `v7.0.1`
codecov/codecov-action	action	major	`5.4.3` -> `6.0.0`
docker/setup-buildx-action	action	major	`v3.11.1` -> `v4.0.0`
docker/setup-qemu-action	action	major	`v3.6.0` -> `v4.0.0`
github/codeql-action	action	major	`v3.29.5` -> `v4.35.2`
goreleaser/goreleaser-action	action	major	`v6.3.0` -> `v7.2.1`
sigstore/cosign-installer	action	major	`v3.9.2` -> `v4.1.1`
streetsidesoftware/cspell-action	action	major	`v7.2.0` -> `v8.4.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/cache (actions/cache)

What's Changed

Add release instructions and update maintainer docs by @Link- in https://github.com/actions/cache/pull/1696
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in https://github.com/actions/cache/pull/1697
Fix workflow permissions and cleanup workflow names / formatting by @Link- in https://github.com/actions/cache/pull/1699
docs: Update examples to use the latest version by @XZTDean in https://github.com/actions/cache/pull/1690
Fix proxy integration tests by @Link- in https://github.com/actions/cache/pull/1701
Fix cache key in examples.md for bun.lock by @RyPeck in https://github.com/actions/cache/pull/1722
Update dependencies & patch security vulnerabilities by @Link- in https://github.com/actions/cache/pull/1738

New Contributors

@XZTDean made their first contribution in https://github.com/actions/cache/pull/1690
@RyPeck made their first contribution in https://github.com/actions/cache/pull/1722

Full Changelog: actions/cache@v5...v5.0.4

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

`v5.0.2`: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

`v5.0.1`

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

v5.0.1

What's Changed

fix: update @actions/cache for Node.js 24 punycode deprecation by @salmanmkc in https://github.com/actions/cache/pull/1685
prepare release v5.0.1 by @salmanmkc in https://github.com/actions/cache/pull/1686

v5.0.0

What's Changed

Upgrade to use node24 by @salmanmkc in https://github.com/actions/cache/pull/1630
Prepare v5.0.0 release by @salmanmkc in https://github.com/actions/cache/pull/1684

Full Changelog: actions/cache@v5...v5.0.1

`v5.0.0`

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Upgrade to use node24 by @salmanmkc in https://github.com/actions/cache/pull/1630
Prepare v5.0.0 release by @salmanmkc in https://github.com/actions/cache/pull/1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

`v4.3.0`

Compare Source

What's Changed

Add note on runner versions by @GhadimiR in https://github.com/actions/cache/pull/1642
Prepare v4.3.0 release by @Link- in https://github.com/actions/cache/pull/1655

New Contributors

@GhadimiR made their first contribution in https://github.com/actions/cache/pull/1642

Full Changelog: actions/cache@v4...v4.3.0

`v4.2.4`

Compare Source

What's Changed

Update README.md by @nebuk89 in https://github.com/actions/cache/pull/1620
Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in https://github.com/actions/cache/pull/1634
Prepare release 4.2.4 by @Link- in https://github.com/actions/cache/pull/1636

New Contributors

@nebuk89 made their first contribution in https://github.com/actions/cache/pull/1620

Full Changelog: actions/cache@v4...v4.2.4

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in https://github.com/actions/checkout/pull/2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in https://github.com/actions/checkout/pull/2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in https://github.com/actions/checkout/pull/2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in https://github.com/actions/checkout/pull/2248

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in https://github.com/actions/checkout/pull/2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in https://github.com/actions/checkout/pull/2226

`v4.3.1`

Compare Source

Port v6 cleanup to v4 by @ericsciple in https://github.com/actions/checkout/pull/2305

`v4.3.0`

Compare Source

docs: update README.md by @motss in https://github.com/actions/checkout/pull/1971
Add internal repos for checking out multiple repositories by @mouismail in https://github.com/actions/checkout/pull/1977
Documentation update - add recommended permissions to Readme by @benwells in https://github.com/actions/checkout/pull/2043
Adjust positioning of user email note and permissions heading by @joshmgross in https://github.com/actions/checkout/pull/2044
Update README.md by @nebuk89 in https://github.com/actions/checkout/pull/2194
Update CODEOWNERS for actions by @TingluoHuang in https://github.com/actions/checkout/pull/2224
Update package dependencies by @salmanmkc in https://github.com/actions/checkout/pull/2236

actions/create-github-app-token (actions/create-github-app-token)

`v3.1.1`

Compare Source

Bug Fixes

improve error message when app identifier is empty (#362) (07e2b76), closes #249

`v3.1.0`

Compare Source

Bug Fixes

deps: bump p-retry from 7.1.1 to 8.0.0 (#357) (3bbe07d)

Features

add client-id input and deprecate app-id (#353) (e6bd4e6)
update permission inputs (#358) (076e948)

`v3.0.0`

Compare Source

feat!: node 24 support (#275) (2e564a0)
fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (4451bcb)

Bug Fixes

remove custom proxy handling (#143) (dce0ab0)

BREAKING CHANGES

Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

`v2.2.2`

Compare Source

Bug Fixes

deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

`v2.1.1`

Compare Source

Bug Fixes

revert "use node24 as runner" (#278) (5204204), closes actions/create-github-app-token#267

`v2.1.0`

Compare Source

Features

use node24 as runner (#267) (a1cbe0f)

actions/download-artifact (actions/download-artifact)

`v8.0.1`

Compare Source

What's Changed

Support for CJK characters in the artifact name by @danwkennedy in https://github.com/actions/download-artifact/pull/471
Add a regression test for artifact name + content-type mismatches by @danwkennedy in https://github.com/actions/download-artifact/pull/472

Full Changelog: actions/download-artifact@v8...v8.0.1

`v8.0.0`

Compare Source

v8 - What's new

[!IMPORTANT]
actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in https://github.com/actions/download-artifact/pull/460
Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in https://github.com/actions/download-artifact/pull/461

Full Changelog: actions/download-artifact@v7...v8.0.0

`v7.0.0`

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Update GHES guidance to include reference to Node 20 version by @patrikpolyak in https://github.com/actions/download-artifact/pull/440
Download Artifact Node24 support by @salmanmkc in https://github.com/actions/download-artifact/pull/415
fix: update @actions/artifact to fix Node.js 24 punycode deprecation by @salmanmkc in https://github.com/actions/download-artifact/pull/451
prepare release v7.0.0 for Node.js 24 support by @salmanmkc in https://github.com/actions/download-artifact/pull/452

New Contributors

@patrikpolyak made their first contribution in https://github.com/actions/download-artifact/pull/440
@salmanmkc made their first contribution in https://github.com/actions/download-artifact/pull/415

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

`v6.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README for download-artifact v5 changes by @yacaovsnc in https://github.com/actions/download-artifact/pull/417
Update README with artifact extraction details by @yacaovsnc in https://github.com/actions/download-artifact/pull/424
Readme: spell out the first use of GHES by @danwkennedy in https://github.com/actions/download-artifact/pull/431
Bump @actions/artifact to v4.0.0
Prepare v6.0.0 by @danwkennedy in https://github.com/actions/download-artifact/pull/438

New Contributors

@danwkennedy made their first contribution in https://github.com/actions/download-artifact/pull/431

Full Changelog: actions/download-artifact@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Update README.md by @nebuk89 in https://github.com/actions/download-artifact/pull/407
BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in https://github.com/actions/download-artifact/pull/416

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

By name: name: my-artifact → extracted to path/ (direct)
By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

By name: name: my-artifact → extracted to path/ (unchanged)
By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:

You download artifacts by name
You download multiple artifacts by ID
You already use merge-multiple: true as a workaround

⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

### Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

@nebuk89 made their first contribution in https://github.com/actions/download-artifact/pull/407

Full Changelog: actions/download-artifact@v4...v5.0.0

actions/github-script (actions/github-script)

`v9.0.0`

Compare Source

New features:

getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in https://github.com/actions/github-script/pull/695
ci: use deployment: false for integration test environments by @salmanmkc in https://github.com/actions/github-script/pull/712
feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in https://github.com/actions/github-script/pull/700

New Contributors

@Copilot made their first contribution in https://github.com/actions/github-script/pull/695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

`v8.0.0`

Compare Source

`v7.1.0`

Compare Source

What's Changed

Upgrade husky to v9 by @benelan in https://github.com/actions/github-script/pull/482
Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/github-script/pull/485
Upgrade IA Publish by @Jcambass in https://github.com/actions/github-script/pull/486
Fix workflow status badges by @joshmgross in https://github.com/actions/github-script/pull/497
Update usage of actions/upload-artifact by @joshmgross in https://github.com/actions/github-script/pull/512
Clear up package name confusion by @joshmgross in https://github.com/actions/github-script/pull/514
Update dependencies with npm audit fix by @joshmgross in https://github.com/actions/github-script/pull/515
Specify that the used script is JavaScript by @timotk in https://github.com/actions/github-script/pull/478
chore: Add Dependabot for NPM and Actions by @nschonni in https://github.com/actions/github-script/pull/472
Define permissions in workflows and update actions by @joshmgross in https://github.com/actions/github-script/pull/531
chore: Add Dependabot for .github/actions/install-dependencies by @nschonni in https://github.com/actions/github-script/pull/532
chore: Remove .vscode settings by @nschonni in https://github.com/actions/github-script/pull/533
ci: Use github/setup-licensed by @nschonni in https://github.com/actions/github-script/pull/473
make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @iamstarkov in https://github.com/actions/github-script/pull/508
Remove octokit README updates for v7 by @joshmgross in https://github.com/actions/github-script/pull/557
docs: add "exec" usage examples by @neilime in https://github.com/actions/github-script/pull/546
Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @dependabot[bot] inhttps://github.com/actions/github-script/pull/5633
Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @dependabot[bot] inhttps://github.com/actions/github-script/pull/5755
Clearly document passing inputs to the script by @joshmgross in https://github.com/actions/github-script/pull/603
Update README.md by @nebuk89 in https://github.com/actions/github-script/pull/610

New Contributors

@benelan made their first contribution in https://github.com/actions/github-script/pull/482
@Jcambass made their first contribution in https://github.com/actions/github-script/pull/485
@timotk made their first contribution in https://github.com/actions/github-script/pull/478
@iamstarkov made their first contribution in https://github.com/actions/github-script/pull/508
@neilime made their first contribution in https://github.com/actions/github-script/pull/546
@nebuk89 made their first contribution in https://github.com/actions/github-script/pull/610

Full Changelog: actions/github-script@v7...v7.1.0

actions/setup-go (actions/setup-go)

`v6.4.0`

Compare Source

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in https://github.com/actions/setup-go/pull/721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in https://github.com/actions/setup-go/pull/727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in https://github.com/actions/setup-go/pull/724
Fix Microsoft build of Go link by @gdams in https://github.com/actions/setup-go/pull/734

New Contributors

@gdams made their first contribution in https://github.com/actions/setup-go/pull/721

Full Changelog: actions/setup-go@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in https://github.com/actions/setup-go/pull/705
Fix golang download url to go.dev by @178inaba in https://github.com/actions/setup-go/pull/469

Full Changelog: actions/setup-go@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Enhancements

Example for restore-only cache in documentation by @aparnajyothi-y in https://github.com/actions/setup-go/pull/696
Update Node.js version in action.yml by @ccoVeille in https://github.com/actions/setup-go/pull/691
Documentation update of actions/checkout by @deining in https://github.com/actions/setup-go/pull/683

Dependency updates

Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot in https://github.com/actions/setup-go/pull/682
Upgrade @actions/cache to v5 by @salmanmkc in https://github.com/actions/setup-go/pull/695
Upgrade actions/checkout from 5 to 6 by @dependabot in https://github.com/actions/setup-go/pull/686
Upgrade qs from 6.14.0 to 6.14.1 by @dependabot in https://github.com/actions/setup-go/pull/703

New Contributors

@ccoVeille made their first contribution in https://github.com/actions/setup-go/pull/691
@deining made their first contribution in https://github.com/actions/setup-go/pull/683

Full Changelog: actions/setup-go@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in https://github.com/actions/setup-go/pull/665
Add support for .tool-versions file and update workflow by @priya-kinthali in https://github.com/actions/setup-go/pull/673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in https://github.com/actions/setup-go/pull/674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in https://github.com/actions/setup-go/pull/617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in https://github.com/actions/setup-go/pull/641
Upgrade semver and @types/semver by @dependabot in https://github.com/actions/setup-go/pull/652

New Contributors

@nicholasngai made their first contribution in https://github.com/actions/setup-go/pull/665
@priya-kinthali made their first contribution in https://github.com/actions/setup-go/pull/673
@mahabaleshwars made their first contribution in https://github.com/actions/setup-go/pull/674

Full Changelog: actions/setup-go@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in https://github.com/actions/setup-go/pull/460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in https://github.com/actions/setup-go/pull/624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] inhttps://github.com/actions/setup-go/pull/5899
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] inhttps://github.com/actions/setup-go/pull/5911
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] inhttps://github.com/actions/setup-go/pull/5900
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] inhttps://github.com/actions/setup-go/pull/5944
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] inhttps://github.com/actions/setup-go/pull/5388
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] inhttps://github.com/actions/setup-go/pull/6033
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in https://github.com/actions/setup-go/pull/618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] inhttps://github.com/actions/setup-go/pull/6311

New Contributors

@matthewhughes934 made their first contribution in https://github.com/actions/setup-go/pull/618
@salmanmkc made their first contribution in https://github.com/actions/setup-go/pull/624

Full Changelog: actions/setup-go@v5...v6.0.0

`v5.6.0`

Compare Source

What's Changed

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @aparnajyothi-y in https://github.com/actions/setup-go/pull/689

Full Changelog: actions/setup-go@v5...v5.6.0

actions/stale (actions/stale)

`v10.2.0`

Compare Source

What's Changed

Bug Fix

Fix checking state cache (fix #1136) and switch to Octokit helper methods by @itchyny in https://github.com/actions/stale/pull/1152

Dependency Updates

Upgrade js-yaml from 4.1.0 to 4.1.1 by @dependabot in https://github.com/actions/stale/pull/1304
Upgrade lodash from 4.17.21 to 4.17.23 by @dependabot in https://github.com/actions/stale/pull/1313
Upgrade actions/cache from 4.0.3 to 5.0.2 and actions/github from 5.1.1 to 7.0.0 by @chiranjib-swain in https://github.com/actions/stale/pull/1312

New Contributors

@itchyny made their first contribution in https://github.com/actions/stale/pull/1152

Full Changelog: actions/stale@v10...v10.2.0

`v10.1.1`

Compare Source

What's Changed

Bug Fix

Add Missing Input Reading for only-issue-types by @Bibo-Joshi in https://github.com/actions/stale/pull/1298

Improvement

Improves error handling when rate limiting is disabled on GHES. by @chiranjib-swain in https://github.com/actions/stale/pull/1300

Dependency Upgrades

Upgrade eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot in https://github.com/actions/stale/pull/1276
Upgrade @types/node from 20.10.3 to 24.2.0 and document breaking changes in v10 by @dependabot in https://github.com/actions/stale/pull/1280
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in https://github.com/actions/stale/pull/1291
Upgrade actions/checkout from 4 to 6 by @dependabot in https://github.com/actions/stale/pull/1306

New Contributors

@chiranjib-swain made their first contribution in https://github.com/actions/stale/pull/1300

Full Changelog: actions/stale@v10...v10.1.1

`v10.1.0`

Compare Source

What's Changed

Add only-issue-types option to filter issues by type by @Bibo-Joshi in https://github.com/actions/stale/pull/1255

New Contributors

@Bibo-Joshi made their first contribution in https://github.com/actions/stale/pull/1255

Full Changelog: actions/stale@v10...v10.1.0

`v10.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in https://github.com/actions/stale/pull/1279
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

Enhancement

Introducing sort-by option by @suyashgaonkar in https://github.com/actions/stale/pull/1254

Dependency Upgrades

Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot[bot] inhttps://github.com/actions/stale/pull/11866
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot[bot] inhttps://github.com/actions/stale/pull/12011
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/stale/pull/1226
Upgrade @action/cache from 4.0.2 to 4.0.3 by @suyashgaonkar in https://github.com/actions/stale/pull/1233
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] inhttps://github.com/actions/stale/pull/12511
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in https://github.com/actions/stale/pull/1277

Documentation changes

Changelog update for recent releases by @suyashgaonkar in https://github.com/actions/stale/pull/1224
Permissions update in Readme by @ghadimir in https://github.com/actions/stale/pull/1248

New Contributors

@suyashgaonkar made their first contribution in [https://github.com/Updates to CHANGELOG.MD for recent releases actions/stale#1224](https://redirect.github

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

elastic-renovate-prod Bot added dependencies renovatebot labels Mar 3, 2026

elastic-renovate-prod Bot force-pushed the renovate/major-github-actions-deps branch 4 times, most recently from 424d58f to 48fe132 Compare March 9, 2026 18:19

elastic-renovate-prod Bot force-pushed the renovate/major-github-actions-deps branch 3 times, most recently from cc42f97 to b55da35 Compare March 16, 2026 10:19

elastic-renovate-prod Bot force-pushed the renovate/major-github-actions-deps branch 3 times, most recently from 30cbbfe to 5942647 Compare March 20, 2026 22:20

elastic-renovate-prod Bot force-pushed the renovate/major-github-actions-deps branch 5 times, most recently from 1126ef3 to a2be27b Compare March 30, 2026 06:20

elastic-renovate-prod Bot force-pushed the renovate/major-github-actions-deps branch 5 times, most recently from 8f6c6ed to 1cfdec2 Compare April 11, 2026 10:20

elastic-renovate-prod Bot force-pushed the renovate/major-github-actions-deps branch 3 times, most recently from 84b436f to 69a9a2e Compare April 18, 2026 22:20

chore(deps): update github-actions deps

0399ef7

elastic-renovate-prod Bot force-pushed the renovate/major-github-actions-deps branch from 69a9a2e to 0399ef7 Compare April 26, 2026 22:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github-actions deps (major)#37

chore(deps): update github-actions deps (major)#37
elastic-renovate-prod[bot] wants to merge 1 commit intomainfrom
renovate/major-github-actions-deps

elastic-renovate-prod Bot commented Mar 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

elastic-renovate-prod Bot commented Mar 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

v5.0.2: v.5.0.2

v5.0.2

What's Changed

v5.0.1

What's Changed

v5.0.0

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Bug Fixes

Bug Fixes

Features

Bug Fixes

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

What's Changed

v8 - What's new

Direct downloads

Enforced checks (breaking)

ESM

What's Changed

v7 - What's new

Node.js 24

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v5.0.0

🚨 Breaking Change

What Changed

Migration Guide

✅ No Action Needed If:

⚠️ Action Required If:

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

What's Changed

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

What's Changed

Bug Fix

Dependency Updates

elastic-renovate-prod Bot commented Mar 3, 2026 •

edited

Loading

`v5.0.2`: v.5.0.2