Skip to content

chore(deps): update github actions dependencies#331

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

chore(deps): update github actions dependencies#331
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
actions/cache action minor v6.0.0v6.1.0 OpenSSF Scorecard
astral-sh/ruff-action action minor v4.0.0v4.1.0 OpenSSF Scorecard
docker/build-push-action action minor v7.2.0v7.3.0 OpenSSF Scorecard
docker/login-action action minor v4.2.0v4.4.0 OpenSSF Scorecard
docker/setup-buildx-action action minor v4.1.0v4.2.0 OpenSSF Scorecard
docker/setup-qemu-action action minor v4.1.0v4.2.0 OpenSSF Scorecard
github/codeql-action action minor v4.36.2v4.37.0 OpenSSF Scorecard
step-security/harden-runner action minor v2.19.4v2.20.0 OpenSSF Scorecard

Release Notes

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

astral-sh/ruff-action (astral-sh/ruff-action)

v4.1.0: 🌈 Skip Astral mirror and support uv.lock

Compare Source

Changes

Among some minor bugfixes this release adds the option to skip the astral-sh mirror and download directly from GitHub releases. Useful if the Astral mirror can't or shouldn't be used.

Also big thanks to @​somaz94 for adding support for reading the desired ruff version from uv.lock.
This works automatically if you haven't overridden the version discovery by using the inputs version or version-file

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

docker/login-action (docker/login-action)

v4.4.0

Compare Source

v4.3.0

Compare Source

Full Changelog: docker/login-action@v4.2.0...v4.3.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

docker/setup-qemu-action (docker/setup-qemu-action)

v4.2.0

Compare Source

github/codeql-action (github/codeql-action)

v4.37.0

Compare Source

  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@​ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973

v4.36.3

Compare Source

No user facing changes.

step-security/harden-runner (step-security/harden-runner)

v2.20.0

Compare Source

What's Changed
  • Support for block policy for MacOS and Windows GitHub-hosted runners
  • Support for Bitrise MacOS GitHub Actions runners
  • HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added lifecycle Update or deprecate something renovate labels Jul 5, 2026
@renovate renovate Bot requested a review from freinold July 5, 2026 22:51
@renovate renovate Bot added lifecycle Update or deprecate something renovate labels Jul 5, 2026
@renovate renovate Bot force-pushed the renovate/github-actions branch from de2c688 to 89c4dd6 Compare July 7, 2026 15:15
@renovate renovate Bot force-pushed the renovate/github-actions branch from 89c4dd6 to eee36bf Compare July 8, 2026 13:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lifecycle Update or deprecate something renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants