chore(deps): update all-ci-updates #631

renovate · 2025-02-05T10:26:11Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	`v3.2.2` -> `v3.4.0`
actions/checkout	action	patch	`v4.2.0` -> `v4.2.2`
actions/setup-go	action	minor	`v5.2.0` -> `v5.3.0`
actions/setup-go	action	minor	`v5.0.2` -> `v5.3.0`
actions/upload-artifact	action	minor	`v4.4.3` -> `v4.6.0`
codecov/codecov-action	action	minor	`v5.1.2` -> `v5.3.1`
fossas/fossa-action	action	minor	`v1.4.0` -> `v1.5.0`
github/codeql-action	action	patch	`v3.28.0` -> `v3.28.8`
golangci/golangci-lint-action	action	minor	`v6.1.1` -> `v6.3.0`
peak-scale/github-actions	action	minor	`v0.1.0` -> `v0.2.0`
sigstore/cosign-installer	action	minor	`v3.7.0` -> `v3.8.0`
wagoid/commitlint-github-action	action	minor	`v6.1.2` -> `v6.2.1`
zgosalvez/github-actions-ensure-sha-pinned-actions	action	patch	`v3.0.19` -> `v3.0.20`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/cache (actions/cache)

`v3.4.0`

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

@actions/core: 1.11.1
@actions/io: 1.1.3
@vercel/ncc: 0.38.3

Full Changelog: actions/cache@v3...v3.4.0

What's Changed

Reduced download segment size to 128 MB and timeout to 10 minutes by @kotewar in https://github.com/actions/cache/pull/1129

Full Changelog: actions/cache@v3...v3.3.1

`v3.3.0`

Compare Source

What's Changed

Bug: Permission is missing in cache delete example by @kotokaze in https://github.com/actions/cache/pull/1123
Add lookup-only option by @cdce8p in https://github.com/actions/cache/pull/1041

New Contributors

@kotokaze made their first contribution in https://github.com/actions/cache/pull/1123

Full Changelog: actions/cache@v3...v3.3.0

`v3.2.6`

Compare Source

What's Changed

Updated branch in Force deletion of caches by @t-dedah in https://github.com/actions/cache/pull/1108
Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners by @pdotl in https://github.com/actions/cache/pull/1118

Full Changelog: actions/cache@v3...v3.2.6

`v3.2.5`

Compare Source

What's Changed

Rewrite readmes by @jsoref in https://github.com/actions/cache/pull/1085
Fixed typos and formatting in docs by @kotewar in https://github.com/actions/cache/pull/1076
Fixing paths for OSes by @kotewar in https://github.com/actions/cache/pull/1101
Release patch version update by @Phantsure in https://github.com/actions/cache/pull/1105

New Contributors

@jsoref made their first contribution in https://github.com/actions/cache/pull/1085

Full Changelog: actions/cache@v3...v3.2.5

`v3.2.4`

Compare Source

What's Changed

Update json5 package version by @vsvipul in https://github.com/actions/cache/pull/1065
Cache recipes for cache, restore and save actions by @kotewar in https://github.com/actions/cache/pull/1055
Add gnu tar and zstd as pre-requisites for windows self-hosted runners by @pdotl in https://github.com/actions/cache/pull/1068
Fix a whitespace typo by @kurtmckee in https://github.com/actions/cache/pull/1074
📝 #1045 update using the set-output command is deprecated by @siguikesse in https://github.com/actions/cache/pull/1046
Fix referenced output key in save action readme by @ruudk in https://github.com/actions/cache/pull/1061
Update workflows to use reusable-workflows by @jongwooo in https://github.com/actions/cache/pull/1066
Introduce add-to-project step & rename workflow files by @pallavx in https://github.com/actions/cache/pull/1077
chore: Fix syntax error typo by @vHeemstra in https://github.com/actions/cache/pull/1081
Update caching-strategies.md by @kpfleming in https://github.com/actions/cache/pull/1084
Added another usage hint to foresee #1072 by @maybeec in https://github.com/actions/cache/pull/1089
Add fail-on-cache-miss option by @cdce8p in https://github.com/actions/cache/pull/1036

New Contributors

@kurtmckee made their first contribution in https://github.com/actions/cache/pull/1074
@siguikesse made their first contribution in https://github.com/actions/cache/pull/1046
@ruudk made their first contribution in https://github.com/actions/cache/pull/1061
@pallavx made their first contribution in https://github.com/actions/cache/pull/1077
@vHeemstra made their first contribution in https://github.com/actions/cache/pull/1081
@kpfleming made their first contribution in https://github.com/actions/cache/pull/1084
@maybeec made their first contribution in https://github.com/actions/cache/pull/1089
@cdce8p made their first contribution in https://github.com/actions/cache/pull/1036

Full Changelog: actions/cache@v3...v3.2.4

`v3.2.3`

Compare Source

What's Changed

Add Mint example by @uhooi in https://github.com/actions/cache/pull/1051
Fixed broken link by @kotewar in https://github.com/actions/cache/pull/1057
Add support to opt-in enable cross-os caching on windows by @Phantsure in https://github.com/actions/cache/pull/1056
Release support for cross-os caching as opt-in feature by @Phantsure in https://github.com/actions/cache/pull/1060

New Contributors

@uhooi made their first contribution in https://github.com/actions/cache/pull/1051

Full Changelog: actions/cache@v3...v3.2.3

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

actions/setup-go (actions/setup-go)

`v5.3.0`

Compare Source

What's Changed

Use the new cache service: upgrade @actions/cache to ^4.0.0 by @Link- in https://github.com/actions/setup-go/pull/531
Configure Dependabot settings by @HarithaVattikuti in https://github.com/actions/setup-go/pull/530
Document update - permission section by @HarithaVattikuti in https://github.com/actions/setup-go/pull/533
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in https://github.com/actions/setup-go/pull/534

New Contributors

@Link- made their first contribution in https://github.com/actions/setup-go/pull/531

Full Changelog: actions/setup-go@v5...v5.3.0

actions/upload-artifact (actions/upload-artifact)

`v4.6.0`

Compare Source

What's Changed

Expose env vars to control concurrency and timeout by @yacaovsnc in https://github.com/actions/upload-artifact/pull/662

Full Changelog: actions/upload-artifact@v4...v4.6.0

`v4.5.0`

Compare Source

codecov/codecov-action (codecov/codecov-action)

`v5.3.1`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

`v5.3.0`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

`v5.2.0`

Compare Source

What's Changed

Fix typo in README by @tserg in https://github.com/codecov/codecov-action/pull/1747
Th/add commands by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1745
use correct audience when requesting oidc token by @juho9000 in https://github.com/codecov/codecov-action/pull/1744
build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1742
build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1743
chore(deps): bump wrapper to 0.0.32 by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1740
feat: add disable-telem feature by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1739
fix: remove erroneous linebreak in readme by @Vampire in https://github.com/codecov/codecov-action/pull/1734

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

fossas/fossa-action (fossas/fossa-action)

`v1.5.0`

Compare Source

What's Changed

Adding team and policy by @saramaebee in https://github.com/fossas/fossa-action/pull/44
Generate attribution report by @dylmye in https://github.com/fossas/fossa-action/pull/53, https://github.com/fossas/fossa-action/pull/57
Add config option - Fixes #55 by @nficca in https://github.com/fossas/fossa-action/pull/59
Screaming snake cases the examples in the readme by @pieterocp, @csasarak in https://github.com/fossas/fossa-action/pull/58
Add a PR template. by @csasarak in https://github.com/fossas/fossa-action/pull/43
Clarify action as a starting point by @jssblck in https://github.com/fossas/fossa-action/pull/51
Dependabot configuration to update actions in workflow by @spatten in https://github.com/fossas/fossa-action/pull/47
Bump actions/setup-node from 3 to 4 by @dependabot in https://github.com/fossas/fossa-action/pull/48
Bump actions/upload-artifact from 3 to 4 by @dependabot in https://github.com/fossas/fossa-action/pull/49
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/fossas/fossa-action/pull/50

New Contributors

@saramaebee made their first contribution in https://github.com/fossas/fossa-action/pull/44
@dependabot made their first contribution in https://github.com/fossas/fossa-action/pull/48
@jssblck made their first contribution in https://github.com/fossas/fossa-action/pull/51
@dylmye made their first contribution in https://github.com/fossas/fossa-action/pull/53
@nficca made their first contribution in https://github.com/fossas/fossa-action/pull/59
@pieterocp made their first contribution in https://github.com/fossas/fossa-action/pull/58

Full Changelog: fossas/fossa-action@v1.4.0...v1.5.0

github/codeql-action (github/codeql-action)

`v3.28.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.8 - 29 Jan 2025

Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #2744

See the full CHANGELOG.md for more information.

`v3.28.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.7 - 29 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.6 - 27 Jan 2025

Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #2726

See the full CHANGELOG.md for more information.

`v3.28.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

Update default CodeQL bundle version to 2.20.3. #2717

See the full CHANGELOG.md for more information.

`v3.28.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

Update default CodeQL bundle version to 2.20.2. #2707
Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710
Uploading debug artifacts for CodeQL analysis is temporarily disabled. #2712

See the full CHANGELOG.md for more information.

`v3.28.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

golangci/golangci-lint-action (golangci/golangci-lint-action)

`v6.3.0`

Compare Source

What's Changed

Changes

chore: use new assets file by @ldez in https://github.com/golangci/golangci-lint-action/pull/1154

Documentation

docs: update README options version from required to optional by @otakakot in https://github.com/golangci/golangci-lint-action/pull/1145

Dependencies

build(deps-dev): bump the dev-dependencies group with 4 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1146
build(deps): bump the dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1147
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1148
build(deps): bump @types/node from 22.10.7 to 22.10.10 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1149
build(deps): bump undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1150
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1152
build(deps): bump @types/node from 22.10.10 to 22.13.0 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1153

New Contributors

@otakakot made their first contribution in https://github.com/golangci/golangci-lint-action/pull/1145

Full Changelog: golangci/golangci-lint-action@v6.2.0...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Changes

chore: use new build tag syntax by @alexandear in https://github.com/golangci/golangci-lint-action/pull/1133
feat: support linux arm64 public preview by @ldez in https://github.com/golangci/golangci-lint-action/pull/1144

Documentation

docs: update local development instructions by @dmitris in https://github.com/golangci/golangci-lint-action/pull/1125

Dependencies

build(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1112
build(deps): bump the dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1113
build(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1114
build(deps): bump @types/node from 22.7.4 to 22.7.5 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1115
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1117
build(deps): bump @types/node from 22.7.5 to 22.7.7 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1118
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1119
build(deps): bump @types/node from 22.7.7 to 22.8.1 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1120
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1122
build(deps): bump the dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1123
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1126
build(deps): bump @types/node from 22.8.7 to 22.9.0 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1127
build(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1128
build(deps): bump @types/node from 22.9.0 to 22.9.3 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1130
build(deps): bump @types/node from 22.9.3 to 22.10.1 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1131
build(deps-dev): bump the dev-dependencies group across 1 directory with 4 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1132
build(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1134
build(deps): bump @actions/cache from 3.3.0 to 4.0.0 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1135
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1136
build(deps): bump @types/node from 22.10.1 to 22.10.2 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1137
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1138
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1139
build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1141
build(deps): bump @types/node from 22.10.2 to 22.10.5 in the dependencies group by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1142
build(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1143

New Contributors

@dmitris made their first contribution in https://github.com/golangci/golangci-lint-action/pull/1125
@alexandear made their first contribution in https://github.com/golangci/golangci-lint-action/pull/1133

Full Changelog: golangci/golangci-lint-action@v6.1.1...v6.2.0

peak-scale/github-actions (peak-scale/github-actions)

What's Changed

Bump yaml from 2.6.1 to 2.7.0 by @dependabot in https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/205

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v3...v3.0.20

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update all-ci-updates

f28cc96

oliverbaehler approved these changes Feb 5, 2025

View reviewed changes

oliverbaehler merged commit 4defe32 into main Feb 5, 2025
17 checks passed

oliverbaehler deleted the renovate/all-ci-updates branch February 5, 2025 11:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all-ci-updates #631

chore(deps): update all-ci-updates #631

renovate bot commented Feb 5, 2025

chore(deps): update all-ci-updates #631

chore(deps): update all-ci-updates #631

Conversation

renovate bot commented Feb 5, 2025

Release Notes

⚠️ Important Changes

Minor changes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

CodeQL Action Changelog

3.28.8 - 29 Jan 2025

CodeQL Action Changelog

3.28.7 - 29 Jan 2025

CodeQL Action Changelog

3.28.6 - 27 Jan 2025

CodeQL Action Changelog

3.28.5 - 24 Jan 2025

CodeQL Action Changelog

3.28.4 - 23 Jan 2025

CodeQL Action Changelog

3.28.3 - 22 Jan 2025

CodeQL Action Changelog

3.28.2 - 21 Jan 2025

CodeQL Action Changelog

3.28.1 - 10 Jan 2025

What's Changed

Changes

Documentation

Dependencies

New Contributors

What's Changed

Changes

Documentation

Dependencies

New Contributors

What's Changed

Configuration