Skip to content

chore(deps): update github actions#743

Merged
AlexanderBarabanov merged 1 commit intomainfrom
renovate/github-actions
Apr 9, 2026
Merged

chore(deps): update github actions#743
AlexanderBarabanov merged 1 commit intomainfrom
renovate/github-actions

Conversation

@oep-renovate
Copy link
Copy Markdown
Contributor

@oep-renovate oep-renovate Bot commented Apr 1, 2026

This PR contains the following updates:

Package Type Update Change
actions/configure-pages action major v5.0.0v6.0.0
actions/deploy-pages action major v4.0.5v5.0.0
astral-sh/setup-uv action major v7.6.0v8.0.0
github/codeql-action action minor v4.33.0v4.35.1
pypa/cibuildwheel action patch v3.4.0v3.4.1
renovatebot/github-action action patch v46.1.5v46.1.8
step-security/harden-runner action patch v2.16.0v2.16.1

Release Notes

actions/configure-pages (actions/configure-pages)

v6.0.0

Compare Source

Changelog

See details of all code changes since previous release.

actions/deploy-pages (actions/deploy-pages)

v5.0.0

Compare Source

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

astral-sh/setup-uv (astral-sh/setup-uv)

v8.0.0: 🌈 Immutable releases and secure tags

Compare Source

This is the first immutable release of setup-uv 🥳

All future releases are also immutable, if you want to know more about what this means checkout the docs.

This release also has two breaking changes

New format for manifest-file

The previously deprecated way of defining a custom version manifest to control which uv versions are available and where to download them from got removed. The functionality is still there but you have to use the new format.

No more major and minor tags

To increase security even more we will stop publishing minor tags. You won't be able to use @v8 or @v8.0 any longer. We do this because pinning to major releases opens up users to supply chain attacks like what happened to tj-actions.

[!TIP]
Use the immutable tag as a version astral-sh/setup-uv@v8.0.0
Or even better the githash astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57

🚨 Breaking changes
🧰 Maintenance
github/codeql-action (github/codeql-action)

v4.35.1

Compare Source

v4.35.0

Compare Source

v4.34.1

Compare Source

  • Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #​3762

v4.34.0

Compare Source

  • Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #​3569
  • We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #​3584
  • Update default CodeQL bundle version to 2.25.0. #​3585
pypa/cibuildwheel (pypa/cibuildwheel)

v3.4.1

Compare Source

  • ⚠️ Building for the experimental CPython 3.13 free-threading variant is now deprecated. That functionality will be removed in the next minor release. The enable option cpython-freethreading is therefore also deprecated. Builds specifying enable = "all" no longer select cpython-freethreading. CPython 3.14 free-threading support remains available without the enable flag. (#​2787)
  • 🐛 iOS builds will no longer skip repair-wheel-command if it's defined in config (#​2761)
  • 🐛 Fix bug causing uv to fail when environments define PYTHON_VERSION or UV_PYTHON, conflicting with our venvs (#​2795)
  • ✨ cibuildwheel prints the selected build identifiers at the start of the build. (#​2785)
  • 🔐 The GitHub Action now references other actions with a full SHA (#​2744)
renovatebot/github-action (renovatebot/github-action)

v46.1.8

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.7 (784cabc)
Miscellaneous Chores
  • configure pnpm (42adbac)
  • deps: update dependency conventional-changelog-conventionalcommits to v9.3.1 (0dd322f)
  • deps: update dependency typescript-eslint to v8.57.2 (91d6038)
  • deps: update pnpm to v10.33.0 (10556c1)
  • deps: update pnpm/action-setup action to v5 (#​1022) (97c4175)
  • update lodash to v4.18.1 (8a6b3d7)
  • update lodash-es to v4.18.1 (b99db03)
Build System
  • deps: lock file maintenance (768a348)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.100.0 (9cf5ad2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.1 (b404d85)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.2 (7045453)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.4 (b48791f)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.7 (e606f42)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.0 (4ec3adc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.10 (a064167)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.11 (5bae778)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.2 (9d053ec)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.3 (641d4cb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.6 (e59ffc6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.8 (234aba7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.103.0 (36d2aba)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.0 (4cea95b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.1 (5274e54)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.2 (2ef116f)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.3 (db16b25)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.4 (a45eeac)

v46.1.7

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.6 (3afa29f)
Miscellaneous Chores
  • deps: update dependency typescript-eslint to v8.57.1 (3a47fac)
  • deps: update node.js to v24.14.1 (28bb013)
Build System
  • deps: lock file maintenance (be2fc08)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.86.1 (8795f0b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.86.2 (9853f69)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.87.0 (f43553b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.87.1 (266e52c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.0 (15d8db4)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.1 (b711f08)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.2 (06c1ac0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.3 (4509fbc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.4 (8dd874b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.5 (908aecf)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.6 (1a40ecc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.8 (82662d1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.1 (40328d7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.4 (977b086)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.5 (398a399)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.6 (a416aeb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.92.1 (8c59289)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.95.0 (5312d97)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.96.0 (6016202)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.98.0 (d4812c2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.99.0 (47f20b6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.99.1 (dadfa2f)

v46.1.6

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.5 (f73dab3)
Miscellaneous Chores
  • deps: update actions/cache action to v5.0.4 (5d78527)
  • deps: update commitlint monorepo to v20.4.4 (797b143)
  • deps: update commitlint monorepo to v20.5.0 (1f1c4d0)
  • deps: update dependency esbuild to v0.27.4 (f5e1677)
  • deps: update dependency lint-staged to v16.3.3 (a40b316)
  • deps: update dependency lint-staged to v16.3.4 (db5bf53)
  • deps: update dependency lint-staged to v16.4.0 (24e6832)
  • deps: update dependency typescript-eslint to v8.57.0 (5c3cd2d)
  • deps: update pnpm to v10.32.0 (f8ce6e7)
  • deps: update pnpm to v10.32.1 (75912db)
Build System
  • deps: lock file maintenance (f21c5d7)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.76.3 (c2bf9c6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.76.4 (85642ee)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.76.5 (5455749)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.77.0 (85690d1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.77.2 (ac501fb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.77.3 (0ef243b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.77.7 (c8dff7c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.77.8 (79f4351)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.78.0 (8235b3d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.80.0 (d443207)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.82.0 (a397fd4)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.83.0 (c026742)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.83.1 (2efa726)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.84.0 (c7f12c5)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.84.1 (d9cd99e)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.84.2 (72d5379)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.85.0 (12252d0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.86.0 (6bf1d8f)
step-security/harden-runner (step-security/harden-runner)

v2.16.1

Compare Source

What's Changed

Enterprise tier: Added support for direct IP addresses in the allow list
Community tier: Migrated Harden Runner telemetry to a new endpoint

Full Changelog: step-security/harden-runner@v2.16.0...v2.16.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • On day 1 of the month (* * 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@oep-renovate oep-renovate Bot requested a review from a team as a code owner April 1, 2026 03:13
@oep-renovate oep-renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 1ed335c to 706eabe Compare April 4, 2026 03:09
Signed-off-by: oep-renovate[bot] <212772560+oep-renovate[bot]@users.noreply.github.com>
@oep-renovate oep-renovate Bot force-pushed the renovate/github-actions branch from 706eabe to da616aa Compare April 6, 2026 03:15
@AlexanderBarabanov AlexanderBarabanov merged commit 1a3cfe8 into main Apr 9, 2026
23 checks passed
@AlexanderBarabanov AlexanderBarabanov deleted the renovate/github-actions branch April 9, 2026 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant