chore(deps): update github actions (major) by renovate[bot] · Pull Request #1527 · kubewarden/kubewarden-controller

renovate · 2026-02-28T02:14:21Z

This PR contains the following updates:

Package	Type	Update	Change
actions/attest-build-provenance	action	major	`v3.2.0` → `v4.1.0`
actions/create-github-app-token	action	major	`v2.2.2` → `v3.0.0`
actions/download-artifact	action	major	`v7.0.0` → `v8.0.1`
actions/upload-artifact	action	major	`v6.0.0` → `v7.0.0`
docker/login-action	action	major	`v3.7.0` → `v4.0.0`
release-drafter/release-drafter	action	major	`v6.4.0` → `v7.1.1`

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

`v4.1.0`

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Update RELEASE.md docs by @bdehamer in #836
Bump actions/attest from 4.0.0 to 4.1.0 by @bdehamer in #838
- Bump @actions/attest from 3.0.0 to 3.1.0 by @bdehamer in actions/attest#362
- Bump @actions/attest from 3.1.0 to 3.2.0 by @bdehamer in actions/attest#365
- Add new subject-version input for inclusion in storage record by @bdehamer in actions/attest#364
- Add storage record content to README by @bdehamer in actions/attest#366

Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Prepare v4 release by @bdehamer in #835

Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0

actions/create-github-app-token (actions/create-github-app-token)

`v3.0.0`

Compare Source

feat!: node 24 support (#275) (2e564a0)
fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (4451bcb)

Bug Fixes

remove custom proxy handling (#143) (dce0ab0)

BREAKING CHANGES

Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

actions/download-artifact (actions/download-artifact)

`v8.0.1`

Compare Source

What's Changed

Support for CJK characters in the artifact name by @danwkennedy in #471
Add a regression test for artifact name + content-type mismatches by @danwkennedy in #472

Full Changelog: actions/download-artifact@v8...v8.0.1

`v8.0.0`

Compare Source

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461

Full Changelog: actions/download-artifact@v7...v8.0.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

docker/login-action (docker/login-action)

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

release-drafter/release-drafter (release-drafter/release-drafter)

`v7.1.1`

Compare Source

What's Changed

Bug Fixes

fix: remove disable-releaser and disable-autolabeler from action.yaml (#1564) @cchanche

Full Changelog: release-drafter/release-drafter@v7.1.0...v7.1.1

`v7.1.0`

Compare Source

What's Changed

New

feat: filter previous releases by range with semver (#1445) @cchanche
feat: support advanced substitutions in replacers (#1517) @cchanche

Bug Fixes

fix: support pull_request_target event in autolabeler (#1560) @jmeridth
fix: empty template when prs all are excluded by labels (#1429) @Bledai
fix: fall back to org .github repo when config not found in current repo (#1554) @jetersen

Maintenance

ci: make sure PRs have a type label (#1557) @cchanche

Documentation

docs: update README with pull_request_target example (#1561) @jmeridth

Full Changelog: release-drafter/release-drafter@v7.0.0...v7.1.0

`v7.0.0`

Compare Source

What's Changed

Breaking

feat: new major version (#1475) @cchanche

Bug Fixes

fix: JSON schema too strict with required fields (#1535) @jetersen

Maintenance

chore(deps): update vitest to 4.1.0 (#1544) @renovate[bot]
chore(deps): update linters (#1549) @renovate[bot]
chore(deps): update dependency nock to 14.0.11 (#1548) @renovate[bot]
chore(deps): update dependency @graphql-codegen/near-operation-file-preset to 5.0.0 (#1545) @renovate[bot]
chore(deps): update dependency @types/node to 24.12.0 (#1543) @renovate[bot]
chore(deps): update dependency @graphql-codegen/cli to 6.2.1 (#1542) @renovate[bot]
chore(deps): update vite (#1541) @renovate[bot]
chore(deps): update linters (#1540) @renovate[bot]
build(deps): bump actions/stale from 9 to 10 (#1527) @dependabot[bot]

Documentation

docs: fix v7 docs (#1532) @cchanche

Other changes

chore: migrate from ESLint + Prettier to Biome (#1552) @jetersen
ci: fix licensed (#1533) @cchanche

Dependency Updates

fix(deps): update dependency compare-versions to 6.1.1 (#1547) @renovate[bot]
fix(deps): update dependency zod to 4.3.6 (#1551) @renovate[bot]
fix(deps): update dependency semver to 7.7.4 (#1550) @renovate[bot]

Full Changelog: release-drafter/release-drafter@v6.4.0...v7.0.0

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-02-28T02:19:53Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.00%. Comparing base (4784bd3) to head (e961965).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1527      +/-   ##
==========================================
- Coverage   80.01%   80.00%   -0.02%     
==========================================
  Files         127      127              
  Lines       16573    16573              
==========================================
- Hits        13261    13259       -2     
- Misses       3312     3314       +2

Flag	Coverage Δ
rust-tests	`80.00% <ø> (-0.02%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

viccuad · 2026-03-02T07:53:52Z

This needs a bit of thought, may break release job.

flavio · 2026-03-02T08:41:16Z

Agreed, given we're about to start tagging the RC1, maybe it's a good time to give them a chance...

I wonder if we should update our usage of the actions/attest-build-provenance action, according to the changelog:

Note

As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

Maybe we should follow the advice

viccuad

Given that we use globs for upload, I believe this will definitely break the release.

flavio · 2026-03-10T09:37:48Z

@copilot :

Note

As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

Change the code to use actions/attest instead.

Copilot · 2026-03-10T09:37:57Z

@flavio I've opened a new pull request, #1574, to work on those changes. Once the pull request is ready, I'll request review from you.

flavio · 2026-03-11T07:16:52Z

copilot switched to the attest action. We now have to double check the other actions that got major bumps

renovate bot added the area/dependencies label Feb 28, 2026

renovate bot requested a review from a team as a code owner February 28, 2026 02:14

github-project-automation bot added this to Kubewarden Admission Controller Feb 28, 2026

github-project-automation bot moved this to Pending review in Kubewarden Admission Controller Feb 28, 2026

github-actions bot added the kind/chore label Feb 28, 2026

renovate bot force-pushed the renovate/major-github-actions branch from fac135d to 16019f3 Compare March 2, 2026 07:55

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 5f7866a to 36dc860 Compare March 2, 2026 09:34

viccuad requested changes Mar 2, 2026

View reviewed changes

viccuad moved this from Pending review to Todo in Kubewarden Admission Controller Mar 2, 2026

renovate bot force-pushed the renovate/major-github-actions branch 17 times, most recently from cf4aabb to 9fec299 Compare March 6, 2026 09:19

renovate bot force-pushed the renovate/major-github-actions branch 10 times, most recently from c1e7608 to f033c54 Compare March 9, 2026 18:45

Copilot AI mentioned this pull request Mar 10, 2026

chore(deps): replace actions/attest-build-provenance with actions/attest #1574

Merged

Copilot AI review requested due to automatic review settings March 20, 2026 13:51

renovate bot force-pushed the renovate/major-github-actions branch from 0da121f to 41712fe Compare March 20, 2026 13:51

renovate bot review requested due to automatic review settings March 20, 2026 13:51

chore(deps): update github actions

e961965

Copilot AI review requested due to automatic review settings March 20, 2026 15:35

renovate bot force-pushed the renovate/major-github-actions branch from 41712fe to e961965 Compare March 20, 2026 15:35

renovate bot review requested due to automatic review settings March 20, 2026 15:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github actions (major)#1527

chore(deps): update github actions (major)#1527
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-github-actions

renovate bot commented Feb 28, 2026 •

edited

Loading

Uh oh!

codecov bot commented Feb 28, 2026 •

edited

Loading

Uh oh!

viccuad commented Mar 2, 2026

Uh oh!

flavio commented Mar 2, 2026

Uh oh!

viccuad left a comment

Uh oh!

flavio commented Mar 10, 2026

Uh oh!

Copilot AI commented Mar 10, 2026

Uh oh!

flavio commented Mar 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate bot commented Feb 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

Bug Fixes

BREAKING CHANGES

What's Changed

v8 - What's new

Direct downloads

Enforced checks (breaking)

ESM

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

What's Changed

Bug Fixes

What's Changed

New

Bug Fixes

Maintenance

Documentation

What's Changed

Breaking

Bug Fixes

Maintenance

Documentation

Other changes

Dependency Updates

Configuration

Uh oh!

codecov bot commented Feb 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

viccuad commented Mar 2, 2026

Uh oh!

flavio commented Mar 2, 2026

Uh oh!

viccuad left a comment

Choose a reason for hiding this comment

Uh oh!

flavio commented Mar 10, 2026

Uh oh!

Copilot AI commented Mar 10, 2026

Uh oh!

flavio commented Mar 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate bot commented Feb 28, 2026 •

edited

Loading

codecov bot commented Feb 28, 2026 •

edited

Loading