Skip to content

Update GitHub actions (major)#111

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-github-actions
Open

Update GitHub actions (major)#111
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-github-actions

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2025

This PR contains the following updates:

Package Type Update Change
actions/attest-build-provenance action major v3.2.0v4.1.0
actions/cache action major v4.3.0v5.0.3
actions/checkout action major v5.0.1v6.0.2
actions/upload-artifact action major v4.6.2v7.0.0
gradle/actions action major v4.4.4v5.0.2

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.1.0

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0

v4.0.0

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0

actions/cache (actions/cache)

v5.0.3

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

actions/checkout (actions/checkout)

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

actions/upload-artifact (actions/upload-artifact)

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

Compare Source

v5.0.0

Compare Source

gradle/actions (gradle/actions)

v5.0.2

Compare Source

Summary

This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.

What's Changed

Full Changelog: gradle/actions@v5.0.1...v5.0.2

v5.0.1

Compare Source

What's Changed
  • Bump npm code dependency versions
  • Bump Gradle versions used in sample builds
  • Bump dependencies versions in Gradle sample builds
  • Bump GitHub actions used for build and test
  • Update known wrapper checksums to include Gradle 9.2+

Full Changelog: gradle/actions@v5.0.0...v5.0.1

v5.0.0

Compare Source

What's Changed
Breaking Changes

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency upgrades

Full Changelog: gradle/actions@v4...v5.0.0


Configuration

📅 Schedule: Branch creation - "after 7am every weekday,before 8pm every weekday" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner October 1, 2025 13:04
@renovate renovate bot added the dependencies label Oct 1, 2025
@hashicorp-vault-sonar-prod
Copy link

hashicorp-vault-sonar-prod bot commented Oct 1, 2025

Renovate Jira issue ID: BUILD-9291

@sonarqubecloud
Copy link

sonarqubecloud bot commented Oct 1, 2025

@matemoln matemoln enabled auto-merge (rebase) November 14, 2025 15:00
@matemoln matemoln disabled auto-merge November 14, 2025 15:00
@matemoln matemoln enabled auto-merge (squash) November 14, 2025 15:00
@renovate renovate bot changed the title Update gradle/actions action to v5 Update GitHub actions to v5 (major) Nov 14, 2025
@renovate renovate bot force-pushed the renovate/major-github-actions branch from ebdfd1c to 37ce227 Compare November 14, 2025 15:02
@matemoln matemoln disabled auto-merge November 14, 2025 15:03
@renovate renovate bot force-pushed the renovate/major-github-actions branch from 37ce227 to 011e206 Compare December 8, 2025 11:09
@renovate renovate bot changed the title Update GitHub actions to v5 (major) Update GitHub actions (major) Dec 8, 2025
@julien-carsique-sonarsource julien-carsique-sonarsource removed their assignment Dec 8, 2025
@renovate renovate bot force-pushed the renovate/major-github-actions branch from 011e206 to 1b71b99 Compare December 11, 2025 10:51
@renovate renovate bot force-pushed the renovate/major-github-actions branch from 1b71b99 to 407cea1 Compare January 8, 2026 09:49
@renovate renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 8c490f9 to 4b1d33e Compare February 9, 2026 09:07
@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 9, 2026

@renovate renovate bot force-pushed the renovate/major-github-actions branch from 40b1344 to e7ebce6 Compare March 11, 2026 11:07
@sonarqubecloud
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants