Update GitHub Actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v5 → v6
actions/github-script	action	major	v7 → v9
actions/setup-python	action	major	v5 → v6
aws-actions/configure-aws-credentials	action	major	v4 → v6
pulumi/actions	action	major	v6 → v7
softprops/turnstyle	action	major	v2 → v3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

actions/github-script (actions/github-script)

v9.0.0

Compare Source

New features:

• getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
• Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

• require('@​actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@​actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@​actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
• getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
• If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

• Add ACTIONS_ORCHESTRATION_ID to user-agent string by @​Copilot in #​695
• ci: use deployment: false for integration test environments by @​salmanmkc in #​712
• feat!: add getOctokit to script context, upgrade @​actions/github v9, @​octokit/core v7, and related packages by @​salmanmkc in #​700

New Contributors

• @​Copilot made their first contribution in #​695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

v9

Compare Source

v8.0.0

Compare Source

v8: .0.0

Compare Source

What's Changed

• Update Node.js version support to 24.x by @​salmanmkc in #​637
• README for updating actions/github-script from v7 to v8 by @​sneha-krip in #​653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

• @​salmanmkc made their first contribution in #​637
• @​sneha-krip made their first contribution in #​653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

actions/setup-python (actions/setup-python)

v6.2.0

Compare Source

v6.1.0

Compare Source

What's Changed

Enhancements:

• Add support for pip-install input by @​gowridurgad in #​1201
• Add graalpy early-access and windows builds by @​timfel in #​880

Dependency and Documentation updates:

• Enhanced wording and updated example usage for allow-prereleases by @​yarikoptic in #​979
• Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @​dependabot in #​1139
• Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @​dependabot in #​1094
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @​dependabot in #​1199
• Upgrade requests from 2.32.2 to 2.32.4 by @​dependabot in #​1130
• Upgrade prettier from 3.5.3 to 3.6.2 by @​dependabot in #​1234
• Upgrade @​types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @​dependabot in #​1235

New Contributors

• @​yarikoptic made their first contribution in #​979

Full Changelog: actions/setup-python@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Breaking Changes

• Upgrade to node 24 by @​salmanmkc in #​1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

• Add support for pip-version by @​priyagupta108 in #​1129
• Enhance reading from .python-version by @​krystof-k in #​787
• Add version parsing from Pipfile by @​aradkdj in #​1067

Bug fixes:

• Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @​aparnajyothi-y in #​1183
• Change missing cache directory error to warning by @​aparnajyothi-y in #​1182
• Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @​aparnajyothi-y in #​1122
• Include python version in PyPy python-version output by @​cdce8p in #​1110
• Update docs: clarification on pip authentication with setup-python by @​priya-kinthali in #​1156

Dependency updates:

• Upgrade idna from 2.9 to 3.7 in /tests/data by @​dependabot[bot] in #​843
• Upgrade form-data to fix critical vulnerabilities #​182 & #​183 by @​aparnajyothi-y in #​1163
• Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @​aparnajyothi-y in #​1165
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in #​1181
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot[bot] in #​1095

New Contributors

• @​krystof-k made their first contribution in #​787
• @​cdce8p made their first contribution in #​1110
• @​aradkdj made their first contribution in #​1067

Full Changelog: actions/setup-python@v5...v6.0.0

v6

Compare Source

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v6.2.0

Compare Source

v6.1.3

Compare Source

Bug Fixes

• fix: allow kubelet token symlink in #​1805

v6.1.2

Compare Source

Bug Fixes

• additional filesystem checks (#​1799) (c39f282)

v6.1.1

Compare Source

What's Changed

• chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @​dependabot[bot] in #​1722
• chore(deps-dev): bump @​types/node from 25.5.0 to 25.5.2 by @​dependabot[bot] in #​1723
• chore(deps-dev): bump @​smithy/property-provider from 4.2.12 to 4.2.13 by @​dependabot[bot] in #​1724
• chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @​dependabot[bot] in #​1726
• chore(deps): bump @​smithy/node-http-handler from 4.5.1 to 4.5.2 by @​dependabot[bot] in #​1725
• chore(deps): bump @​aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @​dependabot[bot] in #​1727
• chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @​dependabot[bot] in #​1728
• chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @​dependabot[bot] in #​1729
• chore(deps-dev): bump @​types/node from 25.5.2 to 25.6.0 by @​dependabot[bot] in #​1730
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.24 to 3.972.25 by @​dependabot[bot] in #​1733
• chore(deps): bump @​aws-sdk/client-sts from 3.1025.0 to 3.1030.0 by @​dependabot[bot] in #​1732
• chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 by @​dependabot[bot] in #​1734
• chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by @​dependabot[bot] in #​1736
• chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by @​dependabot[bot] in #​1737
• chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1740
• chore(deps-dev): bump @​smithy/property-provider from 4.2.13 to 4.2.14 by @​dependabot[bot] in #​1741
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.25 to 3.972.28 by @​dependabot[bot] in #​1742
• chore(deps): bump @​aws-sdk/client-sts from 3.1030.0 to 3.1033.0 by @​dependabot[bot] in #​1743
• chore(deps-dev): bump @​biomejs/biome from 2.4.11 to 2.4.12 by @​dependabot[bot] in #​1739
• chore(deps-dev): bump @​biomejs/biome from 2.4.12 to 2.4.13 by @​dependabot[bot] in #​1747
• chore(deps): bump postcss from 8.5.6 to 8.5.12 by @​dependabot[bot] in #​1752
• chore(deps): bump @​smithy/node-http-handler from 4.6.0 to 4.6.1 by @​dependabot[bot] in #​1750
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.28 to 3.972.32 by @​dependabot[bot] in #​1751
• chore(deps): bump @​aws-sdk/client-sts from 3.1033.0 to 3.1038.0 by @​dependabot[bot] in #​1749
• chore: release 6.1.1 by @​lehmanmj in #​1757

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

v6.1.0

Compare Source

Features

• add skip cleanup option (#​1716) (11b1c58), closes #​1545
• Support usage of AWS Profiles (#​1696) (a7f0c82)

v6.0.0

Compare Source

⚠ BREAKING CHANGES

• Update action to use node24 Note this requires GitHub action runner version v2.327.1 or later (#​1632) (a7a2c11)

Features

• add support to define transitive tag keys (#​1316) (232435c) (930ebd9)

Bug Fixes

• properly output aws-account-id and authenticated-arn when using role-chaining (#​1633) (7ceaf96)

v6

Compare Source

v5.1.1

Compare Source

Miscellaneous Chores

• release 5.1.1 (56d6a58)
• various dependency updates

v5.1.0

Compare Source

Features

• Add global timeout support (#​1487) (1584b8b)
• add no-proxy support (#​1482) (dde9b22)
• Improve debug logging in retry logic (#​1485) (97ef425)

Bug Fixes

• properly expose getProxyForUrl (introduced in #​1482) (#​1486) (cea4298)

v5.0.0

Compare Source

⚠ BREAKING CHANGES

• Cleanup input handling. Changes invalid boolean input behavior (see #​1445)

Features

• add skip OIDC option (#​1458) (8c45f6b)
• Cleanup input handling. Changes invalid boolean input behavior (see #​1445) (74b3e27)
• support account id allowlist (#​1456) (c4be498)

v5

Compare Source

pulumi/actions (pulumi/actions)

v7.0.0

Compare Source

What's Changed

• minor style fixups for CONTRIBUTING.md by @​tgummerer in #​1396
• Allow downloading PR artifacts by @​iwahbe in #​1397
• Bump Node runtime from 20 to 24 by @​nelsonfigueroa in #​1404
• Bump TypeScript and jest toolchain by @​nelsonfigueroa in #​1405
• chore: update ESLint stack and migrate to flat config by @​nelsonfigueroa in #​1406

New Contributors

• @​iwahbe made their first contribution in #​1397
• @​nelsonfigueroa made their first contribution in #​1404

Full Changelog: pulumi/actions@v6...v7.0.0

v7

Compare Source

softprops/turnstyle (softprops/turnstyle)

v3.2.4

Compare Source

Bug fixes 🐛

• Fix runtime input parsing and GitHub API throttling by @​chenrui333 in #​140
• Resolve workflows by ref path for more reliable workflow discovery by @​chenrui333 in #​141
• Improve workflow run discovery and rerun ordering so active predecessors are not missed in busy repositories by @​chenrui333 in #​142

v3.2.3

Compare Source

maintenance release with updated dependencies

v3.2.2

Compare Source

What's Changed

Other Changes 🔄

• chore(deps): bump the npm group with 5 updates by @​dependabot[bot] in #​126
• chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 in the npm group by @​dependabot[bot] in #​125

Full Changelog: softprops/turnstyle@v3.2.1...v3.2.2

v3.2.1

Compare Source

maintenance release with updated dependencies

Full Changelog: softprops/turnstyle@v3.2.0...v3.2.1

v3.2.0

Compare Source

What's Changed

Exciting New Features 🎉

• feat: filter grouping multiple workflows by queue-name by @​cdiaz-nex in #​120

Other Changes 🔄

• chore(deps): bump the npm group with 5 updates by @​dependabot[bot] in #​122

Full Changelog: softprops/turnstyle@v3...v3.2.0

v3.1.0

Compare Source

What's Changed

Exciting New Features 🎉

• feat: filter workflows by queue-name by @​cdiaz-nex in #​117

New Contributors

• @​cdiaz-nex made their first contribution in #​117

Full Changelog: softprops/turnstyle@v3...v3.1.0

v3.0.0

Compare Source

• Upgrade Node.js version to 24 in action
  Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

v3

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.