Update actions (major) by renovate[bot] · Pull Request #24837 · DataDog/integrations-core

renovate · 2026-08-12T11:04:27Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	major	`v5.0.3` → `v6.1.0`
actions/checkout	action	major	`v6.0.2` → `v7.0.1`
actions/dependency-review-action	action	major	`v4.9.0` → `v5.0.0`
actions/github-script	action	major	`v8.0.0` → `v9.0.0`
actions/labeler	action	major	`v6.0.1` → `v7.0.0`
actions/setup-node	action	major	`v6.2.0` → `v7.0.0`
actions/setup-python	action	major	`v6.2.0` → `v7.0.0`
astral-sh/setup-uv	action	major	`v7.6.0` → `v9.0.0`	`v10.0.0`
dorny/paths-filter	action	major	`v3.0.2` → `v4.0.3`
node	uses-with	major	`20` → `24`
peter-evans/repository-dispatch	action	major	`v3.0.0` → `v4.0.1`
softprops/action-gh-release	action	major	`v2.5.0` → `v3.0.2`
suzuki-shunsuke/pinact-action	action	major	`v1.4.0` → `v3.0.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

actions/cache (actions/cache)

`v6.1.0`

Compare Source

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in #1768

Full Changelog: actions/cache@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Update packages, migrate to ESM by @Samirat in #1760

Full Changelog: actions/cache@v5...v6.0.0

`v5.1.0`

Compare Source

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in #1775

Full Changelog: actions/cache@v5...v5.1.0

`v5.0.5`

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: actions/cache@v5...v5.0.5

`v5.0.4`

Compare Source

What's Changed

Add release instructions and update maintainer docs by @Link- in #1696
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in #1697
Fix workflow permissions and cleanup workflow names / formatting by @Link- in #1699
docs: Update examples to use the latest version by @XZTDean in #1690
Fix proxy integration tests by @Link- in #1701
Fix cache key in examples.md for bun.lock by @RyPeck in #1722
Update dependencies & patch security vulnerabilities by @Link- in #1738

New Contributors

@XZTDean made their first contribution in #1690
@RyPeck made their first contribution in #1722

Full Changelog: actions/cache@v5...v5.0.4

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/dependency-review-action (actions/dependency-review-action)

`v5.0.0`: 5.0.0

Compare Source

This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.

What's Changed

Add .github/copilot-instructions.md for Copilot coding agent by @ahpook in #1067
Update Node.js runtime from 20 to 24 by @scottschreckengaust in #1084
Bump spdx-license-ids from 3.0.20 to 3.0.23 by @mongolyy in #1091
docs: bump actions/checkout from v4 to v6 in workflow examples by @Marukome0743 in #1077
fix: patched version display for advisories with non-strict semver ranges (e.g. Maven beta versions) by @tspascoal in #1076
Resolve security findings by @AshelyTC in #1094
v5.0.0 release branch by @ahpook in #1098

New Contributors

@scottschreckengaust made their first contribution in #1084
@mongolyy made their first contribution in #1091
@Marukome0743 made their first contribution in #1077

Full Changelog: actions/dependency-review-action@v4.9.0...v5.0.0

actions/github-script (actions/github-script)

`v9.0.0`

Compare Source

New features:

getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in #695
ci: use deployment: false for integration test environments by @salmanmkc in #712
feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in #700

New Contributors

@Copilot made their first contribution in #695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

actions/labeler (actions/labeler)

`v7.0.0`

Compare Source

`v6.2.0`

Compare Source

What's Changed

Bug Fix

Improve PR number validation and warning messages in input handling by @chiranjib-swain in #939

Dependency Updates

Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override by @dependabot in #943
Bump @typescript-eslint/eslint-plugin from 8.59.1 to 8.61.1 by @dependabot in #942

Full Changelog: actions/labeler@v6.1.0...v6.2.0

`v6.1.0`

Compare Source

Enhancements

Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by @bluca in #923

Bug Fixes

Improve Labeler Action documentation and permission error handling by @chiranjib-swain in #897
Preserve manually added labels during workflow runs and refine label synchronization logic by @chiranjib-swain in #917

Dependency Updates

Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by @dependabot in #877
Upgrade minimatch from 10.0.1 to 10.2.3 by @dependabot in #926
Upgrade dependencies (@actions/core, @actions/github, js-yaml, minimatch, @typescript-eslint) by @Copilot in #934

New Contributors

@chiranjib-swain made their first contribution in #897
@bluca made their first contribution in #923
@Copilot made their first contribution in #934

Full Changelog: actions/labeler@v6...v6.1.0

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

actions/setup-python (actions/setup-python)

`v7.0.0`

Compare Source

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

astral-sh/setup-uv (astral-sh/setup-uv)

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes

fix: report unexpected cache save failures @eifinger (#896)
fix: report unexpected setup failures @eifinger (#895)
fix: add timeout to fetch to prevent silent hangs @eifinger-bot (#883)
Limit GitHub tokens to github.com download URLs @zsol (#878)
increase libuv-workaround timeout to 100ms @eifinger (#880)

🚀 Enhancements

Add quiet input to suppress info-level log output @eifinger (#898)
feat: add download-from-astral-mirror input @eifinger (#897)

🧰 Maintenance

docs: update dependabot rollup biome guidance @eifinger (#902)
chore: update known checksums for 0.11.18 @github-actions[bot] (#899)
chore: update known checksums for 0.11.17 @github-actions[bot] (#892)
chore: update known checksums for 0.11.16 @github-actions[bot] (#889)
chore: update known checksums for 0.11.15 @github-actions[bot] (#885)
chore: update known checksums for 0.11.14 @github-actions[bot] (#879)
chore: update known checksums for 0.11.13 @github-actions[bot] (#877)
chore: update known checksums for 0.11.12 @github-actions[bot] (#876)
chore: update known checksums for 0.11.11 @github-actions[bot] (#873)
chore: update known checksums for 0.11.9/0.11.10 @github-actions[bot] (#871)
chore: update known checksums for 0.11.8 @github-actions[bot] (#867)
Bump setup-uv references to v8.1.0 SHA in docs @eifinger (#862)
Add update-docs.yml workflow @eifinger (#861)

⬆️ Dependency updates

chore(deps): roll up dependabot updates @eifinger (#903)
chore(deps): roll up dependabot updates @eifinger (#901)
chore(deps): bump release-drafter/release-drafter from 7.3.0 to 7.3.1 @dependabot[bot] (#900)
chore(deps): bump eifinger/actionlint-action from 1.10.1 to 1.10.2 @dependabot[bot] (#842)
chore(deps): bump github/codeql-action from 4.35.4 to 4.36.0 @dependabot[bot] (#893)
chore(deps): bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 @dependabot[bot] (#891)
chore(deps): bump release-drafter/release-drafter from 7.2.0 to 7.3.0 @dependabot[bot] (#884)
chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 @dependabot[bot] (#888)
chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 @dependabot[bot] (#881)
chore(deps): bump github/codeql-action from 4.32.2 to 4.35.3 @dependabot[bot] (#875)
chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 @dependabot[bot] (#866)
chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 @dependabot[bot] (#864)
chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 @dependabot[bot] (#863)

`v8.1.0`: 🌈 New input `no-project`

Compare Source

Changes

This add the a new boolean input no-project.
It only makes sense to use in combination with activate-environment: true and will append --no project to the uv venv call. This is for example useful if you have a pyproject.toml file with parts unparseable by uv

🚀 Enhancements

Add input no-project in combination with activate-environment @eifinger (#856)

🧰 Maintenance

fix: grant contents:write to validate-release job @eifinger (#860)
Add a release-gate step to the release workflow @zanieb (#859)
Draft commitish releases @eifinger (#858)
Add action-types.yml to instructions @eifinger (#857)
chore: update known checksums for 0.11.7 @github-actions[bot] (#853)
Refactor version resolving @eifinger (#852)
chore: update known checksums for 0.11.6 @github-actions[bot] (#850)
chore: update known checksums for 0.11.5 @github-actions[bot] (#845)
chore: update known checksums for 0.11.4 @github-actions[bot] (#843)
Add a release workflow @zanieb (#839)
chore: update known checksums for 0.11.3 @github-actions[bot] (#836)

📚 Documentation

Update ignore-nothing-to-cache documentation @eifinger (#833)
Pin setup-uv docs to v8 @eifinger (#829)

⬆️ Dependency updates

chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 @dependabot[bot] (#855)

`v8.0.0`: 🌈 Immutable releases and secure tags

Compare Source

This is the first immutable release of `setup-uv` 🥳

All future releases are also immutable, if you want to know more about what this means checkout the docs.

This release also has two breaking changes

New format for `manifest-file`

The previously deprecated way of defining a custom version manifest to control which uv versions are available and where to download them from got removed. The functionality is still there but you have to use the new format.

No more major and minor tags

To increase security even more we will stop publishing minor tags. You won't be able to use @v8 or @v8.0 any longer. We do this because pinning to major releases opens up users to supply chain attacks like what happened to tj-actions.

[!TIP]
Use the immutable tag as a version astral-sh/setup-uv@v8.0.0
Or even better the githash astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57

🚨 Breaking changes

Remove update-major-minor-tags workflow @eifinger (#826)
Remove deprecrated custom manifest @eifinger (#813)

🧰 Maintenance

Shortcircuit latest version from manifest @eifinger (#828)
Simplify inputs.ts @eifinger (#827)
Bump release-drafter to v7.1.1 @eifinger (#825)
Refactor inputs @eifinger (#823)
Replace inline compile args with tsconfig @eifinger (#824)
chore: update known checksums for 0.11.2 @github-actions[bot] (#821)
chore: update known checksums for 0.11.1 @github-actions[bot] (#817)
chore: update known checksums for 0.11.0 @github-actions[bot] (#815)
Fix latest-version workflow check @eifinger (#812)
chore: update known checksums for 0.10.11/0.10.12 @github-actions[bot] (#811)

dorny/paths-filter (dorny/paths-filter)

`v4.0.3`

Compare Source

`v4.0.2`

Compare Source

`v4.0.1`

Compare Source

What's Changed

Support merge queue by @masaru-iritani in #255

New Contributors

@masaru-iritani made their first contribution in #255

Full Changelog: dorny/paths-filter@v4.0.0...v4.0.1

`v4.0.0`

Compare Source

Update action runtime to node24

`v3.0.4`

Compare Source

Escape multi-line filenames in list-files shell and csv output

`v3.0.3`

Compare Source

Add missing predicate-quantifier

actions/node-versions (node)

`v24.19.0`: 24.19.0

Compare Source

Node.js 24.19.0

`v24.18.1`: 24.18.1

Compare Source

Node.js 24.18.1

`v24.18.0`: 24.18.0

Compare Source

Node.js 24.18.0

`v24.17.0`: 24.17.0

Compare Source

Node.js 24.17.0

`v24.16.0`: 24.16.0

Compare Source

Node.js 24.16.0

`v24.15.0`: 24.15.0

Compare Source

Node.js 24.15.0

`v24.14.1`: 24.14.1

Compare Source

Node.js 24.14.1

`v24.14.0`: 24.14.0

Compare Source

Node.js 24.14.0

`v24.13.1`: 24.13.1

Compare Source

Node.js 24.13.1

`v24.13.0`: 24.13.0

Compare Source

Node.js 24.13.0

`v24.12.0`: 24.12.0

Compare Source

Node.js 24.12.0

`v24.11.1`: 24.11.1

Compare Source

Node.js 24.11.1

`v24.11.0`: 24.11.0

Compare Source

Node.js 24.11.0

`v24.10.0`: 24.10.0

Compare Source

Node.js 24.10.0

`v24.9.0`: 24.9.0

Compare Source

Node.js 24.9.0

`v24.8.0`: 24.8.0

Compare Source

Node.js 24.8.0

`v24.7.0`: 24.7.0

Compare Source

Node.js 24.7.0

`v24.6.0`: 24.6.0

Compare Source

Node.js 24.6.0

`v24.5.0`: 24.5.0

Compare Source

Node.js 24.5.0

`v24.4.1`: 24.4.1

Compare Source

Node.js 24.4.1

`v24.4.0`: 24.4.0

Compare Source

Node.js 24.4.0

`v24.3.0`: 24.3.0

Compare Source

Node.js 24.3.0

`v24.2.0`: 24.2.0

Compare Source

Node.js 24.2.0

`v24.1.0`: 24.1.0

Compare Source

Node.js 24.1.0

`v24.0.2`: 24.0.2

Compare Source

Node.js 24.0.2

`v24.0.1`: 24.0.1

Compare Source

Node.js 24.0.1

`v24.0.0`: 24.0.0

Compare Source

Node.js 24.0.0

`v22.23.2`: 22.23.2

Compare Source

Node.js 22.23.2

`v22.23.1`: 22.23.1

Compare Source

Node.js 22.23.1

`v22.23.0`: 22.23.0

Compare Source

Node.js 22.23.0

`v22.22.3`: 22.22.3

Compare Source

Node.js 22.22.3

`v22.22.2`: 22.22.2

Compare Source

Node.js 22.22.2

`v22.22.1`: 22.22.1

Compare Source

Node.js 22.22.1

`v22.22.0`: 22.22.0

Compare Source

Node.js 22.22.0

`v22.21.1`: 22.21.1

Compare Source

Node.js 22.21.1

`v22.21.0`: 22.21.0

Compare Source

Node.js 22.21.0

`v22.20.0`: 22.20.0

Compare Source

Node.js 22.20.0

`v22.19.0`: 22.19.0

Compare Source

Node.js 22.19.0

`v22.18.0`: 22.18.0

Compare Source

Node.js 22.18.0

`v22.17.1`: 22.17.1

Compare Source

Node.js 22.17.1

`v22.17.0`: 22.17.0

Compare Source

Node.js 22.17.0

`v22.16.0`: 22.16.0

[Compare Source](https://redirect.github.com/actions/node-versions/compare/22.15.1-1503585461

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 6am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-08-12T11:04:39Z

Warning

This PR changes Agent dependencies. Do not merge it until the wheels are promoted.

Dependency inputs changed, so the dependency resolution and wheel build workflow runs on this branch. It takes 1.5 to 3 hours and finishes by committing updated lockfiles. The wheels it builds then have to be promoted before the Agent can use them.

Steps to take, in order:

Wait for the resolution workflow to finish and commit the lockfiles to this branch.
Review the Agent build triggered by that commit (default-pipeline in GitLab), especially static_quality_gate.
Get the PR approved.

Promote the wheels:

ddev dep promote https://github.com/DataDog/integrations-core/pull/24837

Wait for dependency-wheel-promotion to turn green. Only then merge.

Merging before promotion leaves the Agent unable to install the wheels these lockfiles pin. dependency-wheel-promotion is a required check: if it is pending or red, that is intentional. Do not bypass it and do not ask for an admin merge.

Pushing again to this branch invalidates the promotion, so if you push after step 4 you have to promote again.

_{Head commit 68c94a425142009f7c0bcf7cc1b4daff53672b3e. Full process: Dependency Updates. This comment is updated automatically as promotion progresses.}

datadog-prod-us1-3 · 2026-08-12T11:05:23Z

⚠️ Warnings

🚦 3 Pipeline jobs failed

PR All | test / j47000ee / RethinkDB

See error
No files found at the provided path: rethinkdb/coverage.xml. No artifacts will be uploaded.

Resolve Dependencies and Build Wheels | Target windows-x86_64 on windows-2022

Validate Pinned Actions | pinact

See error
SHA-pinned action requires a version comment for verifiability. Action Pinning Validation Failed in GitHub Actions.

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

🚧 2 tests that failed were ignored due to quarantine

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 88.54% (-1.03%)

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: 68c94a4 | Docs | Datadog PR Page | Give us feedback!}

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2a0c67ce41

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

cit-pr-commenter-54b7da · 2026-08-12T11:50:39Z

evalya-impact-summary

evalya impact analysis

Impact analysis: 0 selected, 0 skipped (of 0 test tasks)
Publish tasks:   0 (always emitted)
Diff (41 files):
  .github/actions/tag-job/action.yml
  .github/workflows/add-milestone.yml
  .github/workflows/build-ddev.yml
  .github/workflows/cache-shared-deps.yml
  .github/workflows/claim-pypi-name.yaml
  .github/workflows/codeql-analysis.yml
  .github/workflows/compute-matrix.yml
  .github/workflows/datadog-static-analysis.yml
  .github/workflows/days-since-last-pin.yml
  .github/workflows/dependency-review.yml
  .github/workflows/dependency-wheel-promotion-gate.yaml
  .github/workflows/dependency-wheel-promotion.yaml
  .github/workflows/docs.yml
  .github/workflows/labeler-reusable.yml
  .github/workflows/master-windows.yml
  .github/workflows/master.yml
  .github/workflows/measure-disk-usage-master.yml
  .github/workflows/measure-disk-usage.yml
  .github/workflows/pr-all-windows.yml
  .github/workflows/pr-all.yml
  ... and 21 more

Debug a specific task: evalya plan impact --path <path> --task <task>

Learn more about CI impact filtering

dd-octo-sts · 2026-08-12T14:46:25Z

Validation Report

All 21 validations passed.

Show details

Validation	Description	Status
`agent-reqs`	Verify check versions match the Agent requirements file	✅
`ci`	Validate CI configuration and code coverage settings	✅
`codeowners`	Validate every integration has a CODEOWNERS entry	✅
`config`	Validate default configuration files against spec.yaml	✅
`dep`	Verify dependency pins are consistent and Agent-compatible	✅
`http`	Validate integrations use the HTTP wrapper correctly	✅
`imports`	Validate check imports do not use deprecated modules	✅
`integration-style`	Validate check code style conventions	✅
`jmx-metrics`	Validate JMX metrics definition files and config	✅
`labeler`	Validate PR labeler config matches integration directories	✅
`legacy-signature`	Validate no integration uses the legacy Agent check signature	✅
`license-headers`	Validate Python files have proper license headers	✅
`licenses`	Validate third-party license attribution list	✅
`metadata`	Validate metadata.csv metric definitions	✅
`models`	Validate configuration data models match spec.yaml	✅
`openmetrics`	Validate OpenMetrics integrations disable the metric limit	✅
`package`	Validate Python package metadata and naming	✅
`qa-label`	Validate the pull request declares whether it needs QA for the next Agent release	✅
`readmes`	Validate README files have required sections	✅
`saved-views`	Validate saved view JSON file structure and fields	✅
`version`	Validate version consistency between package and changelog	✅

View full run

aiuto

It feels like the actions versions should be refactored into a common include, so you can update them with a single file change.

renovate Bot added qa/skip-qa Automatically skip this PR for the next QA renovate/actions Renovate update of GitHub actions labels Aug 12, 2026

renovate Bot requested a review from a team as a code owner August 12, 2026 11:04

renovate Bot added qa/skip-qa Automatically skip this PR for the next QA renovate/actions Renovate update of GitHub actions labels Aug 12, 2026

temporal-github-worker-1 Bot added ecosystems/review-requested product/review-requested labels Aug 12, 2026

dd-octo-sts Bot added dev/testing dev/tooling team/agent-integrations labels Aug 12, 2026

chatgpt-codex-connector Bot reviewed Aug 12, 2026

View reviewed changes

Comment thread .github/workflows/validate-pinned-actions.yml

dd-octo-sts Bot requested a review from a team as a code owner August 12, 2026 12:55

dd-octo-sts Bot added the team/agent-build label Aug 12, 2026

Update actions

68c94a4

renovate Bot force-pushed the renovate/major-actions branch from 6ad3724 to 68c94a4 Compare August 12, 2026 14:44

aiuto approved these changes Aug 12, 2026

View reviewed changes

Navigation Menu

Uh oh!

Update actions (major) - #24837

Update actions (major)#24837
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-actions

renovate Bot commented Aug 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 12, 2026 •

edited

Loading

Uh oh!

datadog-prod-us1-3 Bot commented Aug 12, 2026 •

edited by datadog-datadog-prod-us1 Bot

Loading

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

cit-pr-commenter-54b7da Bot commented Aug 12, 2026 •

edited

Loading

Uh oh!

dd-octo-sts Bot commented Aug 12, 2026

Uh oh!

aiuto left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Aug 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

v5.0.0: 5.0.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Bug Fix

Dependency Updates

Enhancements

Bug Fixes

Dependency Updates

New Contributors

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Changes

New inputs

quiet

download-from-astral-mirror

Bugfixes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v8.1.0: 🌈 New input no-project

Changes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v8.0.0: 🌈 Immutable releases and secure tags

This is the first immutable release of setup-uv 🥳

New format for manifest-file

No more major and minor tags

🚨 Breaking changes

🧰 Maintenance

What's Changed

New Contributors

v24.19.0: 24.19.0

v24.18.1: 24.18.1

v24.18.0: 24.18.0

v24.17.0: 24.17.0

v24.16.0: 24.16.0

v24.15.0: 24.15.0

v24.14.1: 24.14.1

v24.14.0: 24.14.0

v24.13.1: 24.13.1

v24.13.0: 24.13.0

v24.12.0: 24.12.0

v24.11.1: 24.11.1

v24.11.0: 24.11.0

renovate Bot commented Aug 12, 2026 •

edited

Loading

`v5.0.0`: 5.0.0

`v8.2.0`: 🌈 New inputs `quiet` and `download-from-astral-mirror`

`v8.1.0`: 🌈 New input `no-project`

`v8.0.0`: 🌈 Immutable releases and secure tags

This is the first immutable release of `setup-uv` 🥳

New format for `manifest-file`

`v24.19.0`: 24.19.0

`v24.18.1`: 24.18.1

`v24.18.0`: 24.18.0

`v24.17.0`: 24.17.0

`v24.16.0`: 24.16.0

`v24.15.0`: 24.15.0

`v24.14.1`: 24.14.1

`v24.14.0`: 24.14.0

`v24.13.1`: 24.13.1

`v24.13.0`: 24.13.0

`v24.12.0`: 24.12.0

`v24.11.1`: 24.11.1

`v24.11.0`: 24.11.0

`v24.10.0`: 24.10.0

`v24.9.0`: 24.9.0

`v24.8.0`: 24.8.0

`v24.7.0`: 24.7.0

`v24.6.0`: 24.6.0

`v24.5.0`: 24.5.0

`v24.4.1`: 24.4.1

`v24.4.0`: 24.4.0

`v24.3.0`: 24.3.0

`v24.2.0`: 24.2.0

`v24.1.0`: 24.1.0

`v24.0.2`: 24.0.2

`v24.0.1`: 24.0.1

`v24.0.0`: 24.0.0

`v22.23.2`: 22.23.2

`v22.23.1`: 22.23.1

`v22.23.0`: 22.23.0

`v22.22.3`: 22.22.3

`v22.22.2`: 22.22.2

`v22.22.1`: 22.22.1

`v22.22.0`: 22.22.0

`v22.21.1`: 22.21.1

`v22.21.0`: 22.21.0

`v22.20.0`: 22.20.0

`v22.19.0`: 22.19.0

`v22.18.0`: 22.18.0

`v22.17.1`: 22.17.1

`v22.17.0`: 22.17.0

`v22.16.0`: 22.16.0

github-actions Bot commented Aug 12, 2026 •

edited

Loading

datadog-prod-us1-3 Bot commented Aug 12, 2026 •

edited by datadog-datadog-prod-us1 Bot

Loading