2003cf4e87
chore(deps): update actions/checkout action to v7 ( #38199 )
2026-06-22 22:46:55 +02:00
8a6697123f
chore(deps): update action dependencies ( #38191 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[crowdin/github-action](https://redirect.github.com/crowdin/github-action )
| action | patch | `v2.16.2` → `v2.16.3` |
| [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup ) |
action | patch | `v6.0.8` → `v6.0.9` |
---
### Release Notes
<details>
<summary>crowdin/github-action (crowdin/github-action)</summary>
###
[`v2.16.3`](https://redirect.github.com/crowdin/github-action/releases/tag/v2.16.3 )
[Compare
Source](https://redirect.github.com/crowdin/github-action/compare/v2.16.2...v2.16.3 )
#### What's Changed
- CLI
[4.14.3](https://redirect.github.com/crowdin/crowdin-cli/releases/tag/4.14.3 )
by [@​andrii-bodnar](https://redirect.github.com/andrii-bodnar )
**Full Changelog**:
<https://github.com/crowdin/github-action/compare/v2.16.2...v2.16.3 >
</details>
<details>
<summary>pnpm/action-setup (pnpm/action-setup)</summary>
###
[`v6.0.9`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.9 )
[Compare
Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.8...v6.0.9 )
##### What's Changed
- fix: update pnpm to v11.7.0 by
[@​zkochan](https://redirect.github.com/zkochan ) in
[#​267](https://redirect.github.com/pnpm/action-setup/pull/267 )
**Full Changelog**:
<https://github.com/pnpm/action-setup/compare/v6...v6.0.9 >
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Only on Monday (`* * * * 1`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuNSIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Co-authored-by: bircni <bircni@icloud.com >
2026-06-22 09:23:46 +00:00
6dcae57b54
chore(deps): update action dependencies ( #38027 )
2026-06-08 07:40:35 +02:00
9619d93e3b
chore(deps): update action dependencies ( #37964 )
...
This PR contains the following updates:
| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials )
| action | patch | `v6.1.1` → `v6.1.2` | `v6.1.3` |
|
[docker/build-push-action](https://redirect.github.com/docker/build-push-action )
| action | minor | `v7.1.0` → `v7.2.0` | |
| [docker/login-action](https://redirect.github.com/docker/login-action )
| action | minor | `v4.1.0` → `v4.2.0` | |
|
[docker/metadata-action](https://redirect.github.com/docker/metadata-action )
| action | minor | `v6.0.0` → `v6.1.0` | |
|
[docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action )
| action | minor | `v4.0.0` → `v4.1.0` | |
|
[docker/setup-qemu-action](https://redirect.github.com/docker/setup-qemu-action )
| action | minor | `v4.0.0` → `v4.1.0` | |
| redis | service | digest | `48e78eb` → `e74c9b9` | |
---
### Release Notes
<details>
<summary>aws-actions/configure-aws-credentials
(aws-actions/configure-aws-credentials)</summary>
###
[`v6.1.2`](https://redirect.github.com/aws-actions/configure-aws-credentials/releases/tag/v6.1.2 )
[Compare
Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v6.1.1...v6.1.2 )
##### Bug Fixes
- additional filesystem checks
([#​1799](https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1799 ))
([c39f282](https://redirect.github.com/aws-actions/configure-aws-credentials/commit/c39f282697aca8a78c522ecf1f7da9899a31432c ))
</details>
<details>
<summary>docker/build-push-action (docker/build-push-action)</summary>
###
[`v7.2.0`](https://redirect.github.com/docker/build-push-action/releases/tag/v7.2.0 )
[Compare
Source](https://redirect.github.com/docker/build-push-action/compare/v7.1.0...v7.2.0 )
- Bump [@​actions/core](https://redirect.github.com/actions/core )
from 3.0.0 to 3.0.1 in
[#​1525](https://redirect.github.com/docker/build-push-action/pull/1525 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.87.0 to 0.90.0 in
[#​1517](https://redirect.github.com/docker/build-push-action/pull/1517 )
- Bump brace-expansion from 2.0.2 to 5.0.6 in
[#​1534](https://redirect.github.com/docker/build-push-action/pull/1534 )
- Bump fast-xml-builder from 1.1.4 to 1.2.0 in
[#​1529](https://redirect.github.com/docker/build-push-action/pull/1529 )
- Bump fast-xml-parser from 5.5.7 to 5.8.0 in
[#​1521](https://redirect.github.com/docker/build-push-action/pull/1521 )
- Bump postcss from 8.5.6 to 8.5.10 in
[#​1526](https://redirect.github.com/docker/build-push-action/pull/1526 )
- Bump tar from 6.2.1 to 7.5.15 in
[#​1533](https://redirect.github.com/docker/build-push-action/pull/1533 )
**Full Changelog**:
<https://github.com/docker/build-push-action/compare/v7.1.0...v7.2.0 >
</details>
<details>
<summary>docker/login-action (docker/login-action)</summary>
###
[`v4.2.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.2.0 )
[Compare
Source](https://redirect.github.com/docker/login-action/compare/v4.1.0...v4.2.0 )
- Bump [@​actions/core](https://redirect.github.com/actions/core )
from 3.0.0 to 3.0.1 in
[#​976](https://redirect.github.com/docker/login-action/pull/976 )
- Bump
[@​aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr )
and
[@​aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public )
to 3.1050.0 in
[#​960](https://redirect.github.com/docker/login-action/pull/960 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.86.0 to 0.90.0 in
[#​970](https://redirect.github.com/docker/login-action/pull/970 )
- Bump brace-expansion from 2.0.1 to 5.0.6 in
[#​993](https://redirect.github.com/docker/login-action/pull/993 )
- Bump fast-xml-builder from 1.1.4 to 1.2.0 in
[#​985](https://redirect.github.com/docker/login-action/pull/985 )
- Bump fast-xml-parser from 5.3.6 to 5.8.0 in
[#​963](https://redirect.github.com/docker/login-action/pull/963 )
- Bump http-proxy-agent and https-proxy-agent to 9.0.0 in
[#​961](https://redirect.github.com/docker/login-action/pull/961 )
- Bump postcss from 8.5.6 to 8.5.10 in
[#​979](https://redirect.github.com/docker/login-action/pull/979 )
- Bump tar from 6.2.1 to 7.5.15 in
[#​991](https://redirect.github.com/docker/login-action/pull/991 )
- Bump vite from 7.3.1 to 7.3.3 in
[#​986](https://redirect.github.com/docker/login-action/pull/986 )
**Full Changelog**:
<https://github.com/docker/login-action/compare/v4.1.0...v4.2.0 >
</details>
<details>
<summary>docker/metadata-action (docker/metadata-action)</summary>
###
[`v6.1.0`](https://redirect.github.com/docker/metadata-action/releases/tag/v6.1.0 )
[Compare
Source](https://redirect.github.com/docker/metadata-action/compare/v6...v6.1.0 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.79.0 to 0.90.0 in
[#​613](https://redirect.github.com/docker/metadata-action/pull/613 )
- Bump brace-expansion from 1.1.12 to 5.0.6 in
[#​658](https://redirect.github.com/docker/metadata-action/pull/658 )
[#​630](https://redirect.github.com/docker/metadata-action/pull/630 )
- Bump csv-parse from 6.1.0 to 6.2.1 in
[#​617](https://redirect.github.com/docker/metadata-action/pull/617 )
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in
[#​620](https://redirect.github.com/docker/metadata-action/pull/620 )
- Bump flatted from 3.3.3 to 3.4.2 in
[#​623](https://redirect.github.com/docker/metadata-action/pull/623 )
- Bump glob from 10.3.15 to 10.5.0 in
[#​621](https://redirect.github.com/docker/metadata-action/pull/621 )
- Bump handlebars from 4.7.8 to 4.7.9 in
[#​629](https://redirect.github.com/docker/metadata-action/pull/629 )
- Bump lodash from 4.17.23 to 4.18.1 in
[#​639](https://redirect.github.com/docker/metadata-action/pull/639 )
- Bump moment-timezone from 0.6.0 to 0.6.1 in
[#​619](https://redirect.github.com/docker/metadata-action/pull/619 )
- Bump picomatch from 4.0.3 to 4.0.4 in
[#​626](https://redirect.github.com/docker/metadata-action/pull/626 )
- Bump postcss from 8.5.6 to 8.5.10 in
[#​649](https://redirect.github.com/docker/metadata-action/pull/649 )
- Bump tar from 6.2.1 to 7.5.15 in
[#​657](https://redirect.github.com/docker/metadata-action/pull/657 )
- Bump undici from 6.23.0 to 6.25.0 in
[#​614](https://redirect.github.com/docker/metadata-action/pull/614 )
- Bump vite from 7.3.1 to 7.3.2 in
[#​637](https://redirect.github.com/docker/metadata-action/pull/637 )
**Full Changelog**:
<https://github.com/docker/metadata-action/compare/v6.0.0...v6.1.0 >
</details>
<details>
<summary>docker/setup-buildx-action
(docker/setup-buildx-action)</summary>
###
[`v4.1.0`](https://redirect.github.com/docker/setup-buildx-action/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/docker/setup-buildx-action/compare/v4...v4.1.0 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.79.0 to 0.90.0 in
[#​489](https://redirect.github.com/docker/setup-buildx-action/pull/489 )
- Bump brace-expansion from 1.1.12 to 5.0.6 in
[#​547](https://redirect.github.com/docker/setup-buildx-action/pull/547 )
[#​508](https://redirect.github.com/docker/setup-buildx-action/pull/508 )
- Bump fast-xml-builder from 1.0.0 to 1.2.0 in
[#​540](https://redirect.github.com/docker/setup-buildx-action/pull/540 )
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in
[#​496](https://redirect.github.com/docker/setup-buildx-action/pull/496 )
- Bump flatted from 3.3.3 to 3.4.2 in
[#​499](https://redirect.github.com/docker/setup-buildx-action/pull/499 )
- Bump glob from 10.3.12 to 13.0.6 in
[#​495](https://redirect.github.com/docker/setup-buildx-action/pull/495 )
- Bump handlebars from 4.7.8 to 4.7.9 in
[#​504](https://redirect.github.com/docker/setup-buildx-action/pull/504 )
- Bump lodash from 4.17.23 to 4.18.1 in
[#​523](https://redirect.github.com/docker/setup-buildx-action/pull/523 )
- Bump picomatch from 4.0.3 to 4.0.4 in
[#​503](https://redirect.github.com/docker/setup-buildx-action/pull/503 )
- Bump postcss from 8.5.6 to 8.5.10 in
[#​537](https://redirect.github.com/docker/setup-buildx-action/pull/537 )
- Bump tar from 6.2.1 to 7.5.15 in
[#​545](https://redirect.github.com/docker/setup-buildx-action/pull/545 )
- Bump undici from 6.23.0 to 6.25.0 in
[#​492](https://redirect.github.com/docker/setup-buildx-action/pull/492 )
- Bump vite from 7.3.1 to 7.3.2 in
[#​520](https://redirect.github.com/docker/setup-buildx-action/pull/520 )
**Full Changelog**:
<https://github.com/docker/setup-buildx-action/compare/v4.0.0...v4.1.0 >
</details>
<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>
###
[`v4.1.0`](https://redirect.github.com/docker/setup-qemu-action/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/docker/setup-qemu-action/compare/v4...v4.1.0 )
- Add `reset` input to uninstall current emulators by
[@​crazy-max](https://redirect.github.com/crazy-max ) in
[#​21](https://redirect.github.com/docker/setup-qemu-action/pull/21 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.77.0 to 0.91.0 in
[#​250](https://redirect.github.com/docker/setup-qemu-action/pull/250 )
[#​247](https://redirect.github.com/docker/setup-qemu-action/pull/247 )
- Bump brace-expansion from 1.1.12 to 1.1.15 in
[#​265](https://redirect.github.com/docker/setup-qemu-action/pull/265 )
- Bump fast-xml-builder from 1.0.0 to 1.2.0 in
[#​286](https://redirect.github.com/docker/setup-qemu-action/pull/286 )
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in
[#​255](https://redirect.github.com/docker/setup-qemu-action/pull/255 )
- Bump flatted from 3.3.3 to 3.4.2 in
[#​257](https://redirect.github.com/docker/setup-qemu-action/pull/257 )
- Bump glob from 10.3.15 to 10.5.0 in
[#​254](https://redirect.github.com/docker/setup-qemu-action/pull/254 )
- Bump handlebars from 4.7.8 to 4.7.9 in
[#​262](https://redirect.github.com/docker/setup-qemu-action/pull/262 )
- Bump lodash from 4.17.23 to 4.18.1 in
[#​273](https://redirect.github.com/docker/setup-qemu-action/pull/273 )
- Bump postcss from 8.5.6 to 8.5.10 in
[#​285](https://redirect.github.com/docker/setup-qemu-action/pull/285 )
- Bump tar from 6.2.1 to 7.5.15 in
[#​287](https://redirect.github.com/docker/setup-qemu-action/pull/287 )
- Bump tmp from 0.2.5 to 0.2.6 in
[#​291](https://redirect.github.com/docker/setup-qemu-action/pull/291 )
- Bump undici from 6.23.0 to 6.26.0 in
[#​251](https://redirect.github.com/docker/setup-qemu-action/pull/251 )
- Bump vite from 7.3.1 to 7.3.2 in
[#​271](https://redirect.github.com/docker/setup-qemu-action/pull/271 )
**Full Changelog**:
<https://github.com/docker/setup-qemu-action/compare/v4.0.0...v4.1.0 >
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Only on Monday (`* * * * 1`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuNSIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com >
Co-authored-by: silverwind <me@silverwind.io >
2026-06-02 05:53:44 +00:00
4ee8266519
chore(deps): update action dependencies ( #37751 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup ) |
action | patch | `v6.0.5` → `v6.0.8` |
|
[renovatebot/github-action](https://redirect.github.com/renovatebot/github-action )
| action | patch | `v46.1.13` → `v46.1.14` |
---
### Release Notes
<details>
<summary>pnpm/action-setup (pnpm/action-setup)</summary>
###
[`v6.0.8`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.8 )
[Compare
Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.7...v6.0.8 )
##### What's Changed
- docs(README): fix `cache_dependency_path` type by
[@​haines](https://redirect.github.com/haines ) in
[#​257](https://redirect.github.com/pnpm/action-setup/pull/257 )
- fix: drop patchPnpmEnv so standalone+self-update works on Windows by
[@​zkochan](https://redirect.github.com/zkochan ) in
[#​258](https://redirect.github.com/pnpm/action-setup/pull/258 )
- fix: update pnpm to 11.1.1 by
[@​mungodewar](https://redirect.github.com/mungodewar ) in
[#​248](https://redirect.github.com/pnpm/action-setup/pull/248 )
##### New Contributors
- [@​mungodewar](https://redirect.github.com/mungodewar ) made
their first contribution in
[#​248](https://redirect.github.com/pnpm/action-setup/pull/248 )
**Full Changelog**:
<https://github.com/pnpm/action-setup/compare/v6.0.7...v6.0.8 >
###
[`v6.0.7`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.7 )
[Compare
Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.6...v6.0.7 )
##### What's Changed
- fix: honor devEngines.packageManager.onFail=error
([#​252](https://redirect.github.com/pnpm/action-setup/issues/252 ))
by [@​zkochan](https://redirect.github.com/zkochan ) in
[#​254](https://redirect.github.com/pnpm/action-setup/pull/254 )
- fix: restore inputs from state in post by
[@​haines](https://redirect.github.com/haines ) in
[#​255](https://redirect.github.com/pnpm/action-setup/pull/255 )
- fix: self-update bootstrap to packageManager-pinned version
([#​233](https://redirect.github.com/pnpm/action-setup/issues/233 ))
by [@​zkochan](https://redirect.github.com/zkochan ) in
[#​256](https://redirect.github.com/pnpm/action-setup/pull/256 )
##### New Contributors
- [@​haines](https://redirect.github.com/haines ) made their first
contribution in
[#​255](https://redirect.github.com/pnpm/action-setup/pull/255 )
**Full Changelog**:
<https://github.com/pnpm/action-setup/compare/v6.0.6...v6.0.7 >
###
[`v6.0.6`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.6 )
[Compare
Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.5...v6.0.6 )
##### What's Changed
- fix: bin\_dest output points to self-updated pnpm, not bootstrap by
[@​zkochan](https://redirect.github.com/zkochan ) in
[#​249](https://redirect.github.com/pnpm/action-setup/pull/249 )
**Full Changelog**:
<https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.6 >
</details>
<details>
<summary>renovatebot/github-action (renovatebot/github-action)</summary>
###
[`v46.1.14`](https://redirect.github.com/renovatebot/github-action/releases/tag/v46.1.14 )
[Compare
Source](https://redirect.github.com/renovatebot/github-action/compare/v46.1.13...v46.1.14 )
##### Documentation
- Revise Fine-grained Personal Access Tokens section
([#​1030](https://redirect.github.com/renovatebot/github-action/issues/1030 ))
([fef7882](https://redirect.github.com/renovatebot/github-action/commit/fef7882e2c7377fd438898944dd399f6d7be271e ))
- set `RENOVATE_PLATFORM_COMMIT` to `enabled`
([#​1029](https://redirect.github.com/renovatebot/github-action/issues/1029 ))
([9d07dfa](https://redirect.github.com/renovatebot/github-action/commit/9d07dfa4f7a8ee66518d1b08f33ae9814d244dda ))
- update references to renovatebot/github-action to v46.1.13
([9a41b99](https://redirect.github.com/renovatebot/github-action/commit/9a41b990c5902829643afc33fd4d5a6f536b36cf ))
##### Miscellaneous Chores
- cleanup
([8abcd0e](https://redirect.github.com/renovatebot/github-action/commit/8abcd0e9f084bb83d0df844052c4b31b39f60ef2 ))
- **deps:** update commitlint monorepo to v20.5.3
([a4e124d](https://redirect.github.com/renovatebot/github-action/commit/a4e124de37c0841853e802687889d3ddb86e4f54 ))
- **deps:** update dependency globals to v17.6.0
([d5ca6d4](https://redirect.github.com/renovatebot/github-action/commit/d5ca6d4cf379c9db32366fd12dfb619d7baffa36 ))
- **deps:** update dependency typescript-eslint to v8.59.1
([1dd2319](https://redirect.github.com/renovatebot/github-action/commit/1dd2319cb41680fb027ac17b8703e7fdb3f35e35 ))
- enable pnpm `minimumReleaseAge`
([00a8327](https://redirect.github.com/renovatebot/github-action/commit/00a83273b5ee2973abb913a7bc81e3ee6cbcebd2 ))
##### Build System
- **deps:** lock file maintenance
([f6821a2](https://redirect.github.com/renovatebot/github-action/commit/f6821a23ac87497dc0625f5c60001d5eb85d23ef ))
##### Continuous Integration
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.7
([1189f69](https://redirect.github.com/renovatebot/github-action/commit/1189f69d1f9835d1c90b27a3b0f679e21f0e1d20 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.162.0
([43d0a48](https://redirect.github.com/renovatebot/github-action/commit/43d0a48b2590acc66b04f9c04fe44d8b66210d76 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.0
([61a1654](https://redirect.github.com/renovatebot/github-action/commit/61a1654b1a1e4ce5e9bb0905af986b1357b0d427 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.1
([4226876](https://redirect.github.com/renovatebot/github-action/commit/42268768581691fe71bebc5d4a54e979b343d643 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.2
([b3318e0](https://redirect.github.com/renovatebot/github-action/commit/b3318e0a24aa6e5849ee6e2783ae9d048b8ffb3e ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.4
([09fe3e9](https://redirect.github.com/renovatebot/github-action/commit/09fe3e9361ed5b46f5871b3d3d30b89138fb8cd7 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.164.0
([5736585](https://redirect.github.com/renovatebot/github-action/commit/5736585dd1f36606bb51e36580751eb8b2f927aa ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.164.1
([8b164cc](https://redirect.github.com/renovatebot/github-action/commit/8b164cce79c2d3e1b0378b414055aa32c2e2396b ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.164.2
([44728cc](https://redirect.github.com/renovatebot/github-action/commit/44728cc6496f5d57c674def5fe4437bf43dfb744 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.165.0
([bde1da1](https://redirect.github.com/renovatebot/github-action/commit/bde1da1de34c74300c4145d5d36145ab0ac403a3 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.166.0
([#​1031](https://redirect.github.com/renovatebot/github-action/issues/1031 ))
([4b957d1](https://redirect.github.com/renovatebot/github-action/commit/4b957d1cabe8967b8d3d4d1d5e72c336f93acc2c ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.166.2
([499cfeb](https://redirect.github.com/renovatebot/github-action/commit/499cfeb9d6d64e295dbabdc03d6811302dfb44d0 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.166.3
([fe8a943](https://redirect.github.com/renovatebot/github-action/commit/fe8a9436e271c3ae9d0134419fbbbf57fe901665 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.167.0
([f8ca6db](https://redirect.github.com/renovatebot/github-action/commit/f8ca6db77039c7b2df300bf1c0008bb6ca48feb9 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.168.4
([2e15d66](https://redirect.github.com/renovatebot/github-action/commit/2e15d66203e5e5669337f080d41d707e2e30245c ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.168.5
([a87ee3d](https://redirect.github.com/renovatebot/github-action/commit/a87ee3d8ae59775aeabb41bff8b9dffa2a9850dd ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.168.6
([683e7dd](https://redirect.github.com/renovatebot/github-action/commit/683e7dd082e83899dad9e727c8b22e9c472523eb ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.169.0
([f6166e7](https://redirect.github.com/renovatebot/github-action/commit/f6166e7f7b6e4e444589ac774306a55697362bed ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.169.4
([f1f81f9](https://redirect.github.com/renovatebot/github-action/commit/f1f81f959e2f65dfc38f6a71c5720914ad73c37c ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.0
([5473f54](https://redirect.github.com/renovatebot/github-action/commit/5473f54a8f760978d6a2cec08a5e261ce8f0b35e ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.12
([b47aa13](https://redirect.github.com/renovatebot/github-action/commit/b47aa135111049a8f220c25f98f281cac991a585 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.13
([7e8834d](https://redirect.github.com/renovatebot/github-action/commit/7e8834d80efbe46cdcd336f7d8335e94bf5d85e6 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.14
([9b5f9e6](https://redirect.github.com/renovatebot/github-action/commit/9b5f9e6c8f97c2064cef2ba7b7459f424722c8f6 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.15
([98631e8](https://redirect.github.com/renovatebot/github-action/commit/98631e88b8dfa52ea1da739e21e1969f04e88051 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.16
([ab997a9](https://redirect.github.com/renovatebot/github-action/commit/ab997a9588a5a8c80507974d19166d0db4087947 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.17
([24a51e0](https://redirect.github.com/renovatebot/github-action/commit/24a51e0fd8b1677ce32e8c45c661af3f0b5680c6 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.18
([f82d2cd](https://redirect.github.com/renovatebot/github-action/commit/f82d2cd716eb8043a8f8d8458cdcff924d64e4a1 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.19
([3d684f2](https://redirect.github.com/renovatebot/github-action/commit/3d684f2e0788a79e4b276480aaf841539b1899de ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.20
([d7afc6b](https://redirect.github.com/renovatebot/github-action/commit/d7afc6be62e2f314c2e76e6310125bf53563e19d ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.3
([306f0c9](https://redirect.github.com/renovatebot/github-action/commit/306f0c9105ab6cd95a0d354b1539d51731646012 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.8
([f0eea19](https://redirect.github.com/renovatebot/github-action/commit/f0eea19bf3bb50cd26effe5e04e7d78d4c7f56b3 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.9
([f3af74e](https://redirect.github.com/renovatebot/github-action/commit/f3af74eb2fa5d6b11658e5b26cf601faf2963d37 ))
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Only on Monday (`* * * * 1`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuNSIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
2026-05-18 07:24:27 +00:00
02be228ed6
ci: add zizmor to lint-actions ( #37720 )
...
Adds [zizmor](https://docs.zizmor.sh/ ) to `make lint-actions` with
`--min-confidence=medium`. Fixes the remaining findings:
- Pin floating-tag service images in `pull-db-tests.yml` to
`tag@sha256:digest`
- Move `github.ref` / `github.ref_name` (and surrounding secrets/step
outputs for consistency) out of `run:` into `env:`
---
This PR was written with the help of Claude Opus 4.7
---------
Signed-off-by: silverwind <me@silverwind.io >
Co-authored-by: Claude (Opus 4.7) <noreply@anthropic.com >
Co-authored-by: Nicolas <bircni@icloud.com >
Co-authored-by: Giteabot <teabot@gitea.io >
2026-05-16 10:38:46 +02:00
c81eca9904
chore(deps): update action dependencies ( #37603 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/labeler](https://redirect.github.com/actions/labeler ) |
action | minor | `v6.0.1` → `v6.1.0` |
|
[aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials )
| action | patch | `v6.1.0` → `v6.1.1` |
|
[docker.elastic.co/elasticsearch/elasticsearch](https://www.elastic.co/products/elasticsearch )
([source](https://redirect.github.com/elastic/elasticsearch )) | service
| patch | `8.19.14` → `8.19.15` |
|
[renovatebot/github-action](https://redirect.github.com/renovatebot/github-action )
| action | patch | `v46.1.12` → `v46.1.13` |
---
### Release Notes
<details>
<summary>actions/labeler (actions/labeler)</summary>
###
[`v6.1.0`](https://redirect.github.com/actions/labeler/releases/tag/v6.1.0 )
[Compare
Source](https://redirect.github.com/actions/labeler/compare/v6.0.1...v6.1.0 )
#### Enhancements
- Add changed-files-labels-limit and max-files-changed configuration
options to cap the number of labels added by
[@​bluca](https://redirect.github.com/bluca ) in
[#​923](https://redirect.github.com/actions/labeler/pull/923 )
#### Bug Fixes
- Improve Labeler Action documentation and permission error handling by
[@​chiranjib-swain](https://redirect.github.com/chiranjib-swain )
in [#​897](https://redirect.github.com/actions/labeler/pull/897 )
- Preserve manually added labels during workflow runs and refine label
synchronization logic by
[@​chiranjib-swain](https://redirect.github.com/chiranjib-swain )
in [#​917](https://redirect.github.com/actions/labeler/pull/917 )
#### Dependency Updates
- Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking
changes in v6 by
[@​dependabot](https://redirect.github.com/dependabot ) in
[#​877](https://redirect.github.com/actions/labeler/pull/877 )
- Upgrade minimatch from 10.0.1 to 10.2.3 by
[@​dependabot](https://redirect.github.com/dependabot ) in
[#​926](https://redirect.github.com/actions/labeler/pull/926 )
- Upgrade dependencies
([@​actions/core](https://redirect.github.com/actions/core ),
[@​actions/github](https://redirect.github.com/actions/github ),
js-yaml, minimatch,
[@​typescript-eslint](https://redirect.github.com/typescript-eslint ))
by [@​Copilot](https://redirect.github.com/Copilot ) in
[#​934](https://redirect.github.com/actions/labeler/pull/934 )
#### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain )
made their first contribution in
[#​897](https://redirect.github.com/actions/labeler/pull/897 )
- [@​bluca](https://redirect.github.com/bluca ) made their first
contribution in
[#​923](https://redirect.github.com/actions/labeler/pull/923 )
- [@​Copilot](https://redirect.github.com/Copilot ) made their
first contribution in
[#​934](https://redirect.github.com/actions/labeler/pull/934 )
**Full Changelog**:
<https://github.com/actions/labeler/compare/v6...v6.1.0 >
</details>
<details>
<summary>aws-actions/configure-aws-credentials
(aws-actions/configure-aws-credentials)</summary>
###
[`v6.1.1`](https://redirect.github.com/aws-actions/configure-aws-credentials/releases/tag/v6.1.1 )
[Compare
Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v6.1.0...v6.1.1 )
##### What's Changed
- chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1722](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1722 )
- chore(deps-dev): bump
[@​types/node](https://redirect.github.com/types/node ) from 25.5.0
to 25.5.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1723](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1723 )
- chore(deps-dev): bump
[@​smithy/property-provider](https://redirect.github.com/smithy/property-provider )
from 4.2.12 to 4.2.13 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1724](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1724 )
- chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1726](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1726 )
- chore(deps): bump
[@​smithy/node-http-handler](https://redirect.github.com/smithy/node-http-handler )
from 4.5.1 to 4.5.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1725](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1725 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1020.0 to 3.1025.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1727](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1727 )
- chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1728](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1728 )
- chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1729](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1729 )
- chore(deps-dev): bump
[@​types/node](https://redirect.github.com/types/node ) from 25.5.2
to 25.6.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1730](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1730 )
- chore(deps-dev): bump
[@​aws-sdk/credential-provider-env](https://redirect.github.com/aws-sdk/credential-provider-env )
from 3.972.24 to 3.972.25 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1733](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1733 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1025.0 to 3.1030.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1732](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1732 )
- chore(deps-dev): bump
[@​biomejs/biome](https://redirect.github.com/biomejs/biome ) from
2.4.10 to 2.4.11 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1734](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1734 )
- chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1736](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1736 )
- chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1737](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1737 )
- chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1740](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1740 )
- chore(deps-dev): bump
[@​smithy/property-provider](https://redirect.github.com/smithy/property-provider )
from 4.2.13 to 4.2.14 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1741](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1741 )
- chore(deps-dev): bump
[@​aws-sdk/credential-provider-env](https://redirect.github.com/aws-sdk/credential-provider-env )
from 3.972.25 to 3.972.28 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1742](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1742 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1030.0 to 3.1033.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1743](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1743 )
- chore(deps-dev): bump
[@​biomejs/biome](https://redirect.github.com/biomejs/biome ) from
2.4.11 to 2.4.12 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1739](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1739 )
- chore(deps-dev): bump
[@​biomejs/biome](https://redirect.github.com/biomejs/biome ) from
2.4.12 to 2.4.13 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1747](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1747 )
- chore(deps): bump postcss from 8.5.6 to 8.5.12 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1752](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1752 )
- chore(deps): bump
[@​smithy/node-http-handler](https://redirect.github.com/smithy/node-http-handler )
from 4.6.0 to 4.6.1 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1750](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1750 )
- chore(deps-dev): bump
[@​aws-sdk/credential-provider-env](https://redirect.github.com/aws-sdk/credential-provider-env )
from 3.972.28 to 3.972.32 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1751](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1751 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1033.0 to 3.1038.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1749](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1749 )
- chore: release 6.1.1 by
[@​lehmanmj](https://redirect.github.com/lehmanmj ) in
[#​1757](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1757 )
**Full Changelog**:
<https://github.com/aws-actions/configure-aws-credentials/compare/v6...v6.1.1 >
</details>
<details>
<summary>elastic/elasticsearch
(docker.elastic.co/elasticsearch/elasticsearch)</summary>
###
[`v8.19.15`](https://redirect.github.com/elastic/elasticsearch/releases/tag/v8.19.15 ):
Elasticsearch 8.19.15
[Compare
Source](https://redirect.github.com/elastic/elasticsearch/compare/v8.19.14...v8.19.15 )
Downloads: <https://elastic.co/downloads/elasticsearch >
Release notes:
<https://www.elastic.co/guide/en/elasticsearch/reference/8.19/release-notes-8.19.15.html >
</details>
<details>
<summary>renovatebot/github-action (renovatebot/github-action)</summary>
###
[`v46.1.13`](https://redirect.github.com/renovatebot/github-action/releases/tag/v46.1.13 )
[Compare
Source](https://redirect.github.com/renovatebot/github-action/compare/v46.1.12...v46.1.13 )
##### Documentation
- update references to renovatebot/github-action to v46.1.12
([a871d4d](https://redirect.github.com/renovatebot/github-action/commit/a871d4d5460d222ef1b9b6d9c7c9a9224e582780 ))
##### Miscellaneous Chores
- **deps:** update dependency
[@​commitlint/cli](https://redirect.github.com/commitlint/cli ) to
v20.5.2
([67a74d1](https://redirect.github.com/renovatebot/github-action/commit/67a74d123d2876d138af089da96b130b49963b52 ))
- **deps:** update pnpm to v10.33.1
([5932d6c](https://redirect.github.com/renovatebot/github-action/commit/5932d6c4e6423886397f74fa3e1f43f75d08b639 ))
- **deps:** update pnpm to v10.33.2
([580c97f](https://redirect.github.com/renovatebot/github-action/commit/580c97f45b94ac6c4cf344cae6557fa67ffcf1e6 ))
##### Build System
- **deps:** lock file maintenance
([d044e7d](https://redirect.github.com/renovatebot/github-action/commit/d044e7df57b284a83ba0184247f960f00ca99d19 ))
##### Continuous Integration
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.159.1
([a7db9c3](https://redirect.github.com/renovatebot/github-action/commit/a7db9c38fdfec235881c95a3f634d0e98351a897 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.159.2
([f9133ef](https://redirect.github.com/renovatebot/github-action/commit/f9133ef80db08316ae9064a6639804e2781bf4ac ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.0
([212d525](https://redirect.github.com/renovatebot/github-action/commit/212d52574e89808037dd90d27dad2a1ea2f69f22 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.1
([e3443ce](https://redirect.github.com/renovatebot/github-action/commit/e3443ceef9af4bfb10853b55f8a23c5625289bb8 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.2
([833041b](https://redirect.github.com/renovatebot/github-action/commit/833041bb68593fa1d2e2704abedd40037914481b ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.4
([60cc865](https://redirect.github.com/renovatebot/github-action/commit/60cc8654e18da2e1d7164c13b1437fcf26a1dce8 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.5
([2c7567a](https://redirect.github.com/renovatebot/github-action/commit/2c7567a8f829497ca73badab029c722f61e0c561 ))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.6
([35caad2](https://redirect.github.com/renovatebot/github-action/commit/35caad2c6a948000e0be2215db7dcdbf0c183541 ))
</details>
---
This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuNSIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Co-authored-by: Nicolas <bircni@icloud.com >
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com >
2026-05-08 18:30:53 +00:00
b4085c7e3c
build: update pnpm to v11 ( #37591 )
...
Update to https://github.com/pnpm/pnpm/releases/tag/v11.0.0
- move all pnpm settings to `pnpm-workspace.yaml`, pnpm v11 only reads
that file
- drop redundant or no-op settings
- disable `strictDepBuilds` to avoid having to manually specify deps
with build scripts, this is equivalent to v10 where it will not execute
and warn.
- add workarounds for https://github.com/SukkaW/nolyfill/issues/119
- remove dead eslintrc entry
---
This PR was written with the help of Claude Opus 4.7
---------
Signed-off-by: silverwind <me@silverwind.io >
Co-authored-by: Claude (Opus 4.7) <noreply@anthropic.com >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-08 04:17:20 +00:00
a39af1a829
refactor: use modernc sqlite driver as default ( #37562 )
...
The mattn driver is still kept, can be enabled by
TAGS="sqlite_mattn sqlite_unlock_notify"
---------
Co-authored-by: TheFox0x7 <thefox0x7@gmail.com >
2026-05-06 18:57:59 +00:00
99cd4f6b22
Integrate renovate bot for all dependency updates ( #37050 )
...
Replaces Dependabot with Renovate. The new setup:
- One PR per ecosystem (GitHub Actions, Go modules + Makefile go-tool
pins, npm, Python via uv, Nix flake), opened weekly on Mondays with a
5-day release-age cooldown. Vulnerability PRs ship next-day via daily
cron + Renovate's `vulnerabilityAlerts` schedule bypass.
- All `uses:` action refs SHA-pinned with patch-level version comments
(same format as #36971 , which this supersedes);
`helpers:pinGitHubActionDigests` keeps future bumps in that format.
- `renovatebot/github-action` runtime image pinned via the
upstream-recommended `RENOVATE_VERSION` env + magic comment +
`customManagers:githubActionsVersions` preset, so Renovate keeps the pin
updated.
- Custom regex manager tracks the `*_PACKAGE ?= <import-path>@<version>`
lines in `Makefile` (golangci-lint, swagger, actionlint, etc.) and
groups them into the same Go PR via `matchDatasources: ["go"]`.
- Post-upgrade tasks regenerate `assets/go-licenses.json` (`make tidy`)
and the SVG sprite (`make svg`), gated by an env-level command
allowlist.
- Replaces the standalone `cron-flake-updater` workflow — Renovate's nix
manager tracks `flake.nix` inputs and produces the same `flake.lock`
bump PRs on the regular weekly schedule.
- npm and gomod-replace pins live in `renovate.json5` only;
`updates@17.16 .3` reads them from there too, so the standalone
`updates.config.ts` is gone and one source of truth covers both tools.
Fixes: https://github.com/go-gitea/gitea/issues/33386
Signed-off-by: silverwind <me@silverwind.io >
Signed-off-by: TheFox0x7 <thefox0x7@gmail.com >
Co-authored-by: Claude (Opus 4.6) <noreply@anthropic.com >
Co-authored-by: TheFox0x7 <thefox0x7@gmail.com >
Co-authored-by: Nicolas <bircni@icloud.com >
Co-authored-by: Giteabot <teabot@gitea.io >
2026-04-26 14:25:22 +00:00
cf1e4d7c42
Update GitHub Actions to latest major versions ( #36964 )
...
Update all Actions to their latest major versions:
- `actions/checkout`: v5 → v6
- `dorny/paths-filter`: v3 → v4
- `pnpm/action-setup`: v4 → v5
- `docker/setup-qemu-action`: v3 → v4
- `docker/setup-buildx-action`: v3 → v4
- `docker/build-push-action`: v6 → v7
- `docker/metadata-action`: v5 → v6
- `docker/login-action`: v3 → v4
- `crazy-max/ghaction-import-gpg`: v6 → v7
- `aws-actions/configure-aws-credentials`: v5 → v6
All updates are Node 24 runtime bumps with no workflow-breaking changes
for our usage.
Co-authored-by: Claude (Opus 4.6) <noreply@anthropic.com >
2026-03-23 14:42:36 -07:00
08254cf126
Enable docker layer caching for dry-run and nightly container builds ( #36738 )
...
Enable Docker BuildKit layer caching for the dry-run and nightly
container build workflows using GHCR registry cache.
- **Dry-run** (`pull-docker-dryrun.yml`): adds `cache-from`, read-only,
PRs can't write cache
- **Nightly** (`release-nightly.yml`): adds `cache-from` and `cache-to`
to both read and write cach
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-01 21:18:46 +00:00
36aa39fffe
Bump setup-node to v6, re-enable cache ( #36207 )
2025-12-19 02:07:34 +00:00
5f5a87f015
Bump aws-actions/configure-aws-credentials from 4 to 5 ( #36196 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps
[aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials )
from 4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws-actions/configure-aws-credentials/releases ">aws-actions/configure-aws-credentials's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.3.1...v5.0.0 ">5.0.0</a>
(2025-09-03)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>Cleanup input handling. Changes invalid boolean input behavior (see
<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1445 ">#1445</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>add skip OIDC option (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1458 ">#1458</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/8c45f6b08196feb86cfdbe431541d5571d9ab2c2 ">8c45f6b</a>)</li>
<li>Cleanup input handling. Changes invalid boolean input behavior (see
<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1445 ">#1445</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/74b3e27aa80db064b5bb8c04b22fc607e817acf7 ">74b3e27</a>)</li>
<li>support account id allowlist (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1456 ">#1456</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/c4be498953fc1da2707a50ce4b761a53af3d02af ">c4be498</a>)</li>
</ul>
<h2>v4.3.1</h2>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.3.0...v4.3.1 ">4.3.1</a>
(2025-08-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>update readme to 4.3.1 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1424 ">#1424</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/be2e7ad815e27b890489a89ce2717b0f9e26b56e ">be2e7ad</a>)</li>
</ul>
<h2>v4.3.0</h2>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.3.0...v4.3.0 ">4.3.0</a>
(2025-08-04)</h2>
<p>NOTE: This release tag originally pointed to
59b441846ad109fa4a1549b73ef4e149c4bfb53b, but a critical bug was
discovered shortly after publishing. We updated this tag to
d0834ad3a60a024346910e522a81b0002bd37fea to prevent anyone using the
4.3.0 tag from encountering the bug, and we published 4.3.1 to allow
workflows to auto update correctly.</p>
<h3>Features</h3>
<ul>
<li>dependency update and feature cleanup (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1414 ">#1414</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/59489ba544930000b7b67412c167f5fe816568cf ">59489ba</a>),
closes <a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1062 ">#1062</a>
<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1191 ">#1191</a></li>
<li>Optional environment variable output (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/c3b3ce61b02510937ff02916a4eb153874bc5085 ">c3b3ce6</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>docs:</strong> readme samples versioning (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/5b3c89504689ea1ea2b6000b23a6a2aac463662a ">5b3c895</a>)</li>
<li>the wrong example region for China partition in README (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/37fe9a740bcb30ee8cccd96feb90666c937311f2 ">37fe9a7</a>)</li>
<li>properly set proxy environment variable (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/cbea70821e4ab985ad3be0e5a93390523e257cde ">cbea708</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li>release 4.3.0 (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/3f7c2187213bafaa1ea60a850b27082cbf55dda0 ">3f7c218</a>)</li>
</ul>
<h2>v4.2.1</h2>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.2.0...v4.2.1 ">4.2.1</a>
(2025-05-14)</h2>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md ">aws-actions/configure-aws-credentials's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v5.1.0...v5.1.1 ">5.1.1</a>
(2025-11-24)</h2>
<h3>Miscellaneous Chores</h3>
<ul>
<li>release 5.1.1 (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/56d6a583f00f6bad6d19d91d53a7bc3b8143d0e9 ">56d6a58</a>)</li>
</ul>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v5.0.0...v5.1.0 ">5.1.0</a>
(2025-10-06)</h2>
<h3>Features</h3>
<ul>
<li>Add global timeout support (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1487 ">#1487</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/1584b8b0e2062557287c28fbe9b8920df434e866 ">1584b8b</a>)</li>
<li>add no-proxy support (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1482 ">#1482</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/dde9b22a8e889a0821997a21a2c5a38020ee8de3 ">dde9b22</a>)</li>
<li>Improve debug logging in retry logic (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1485 ">#1485</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/97ef425d73aa532439f54f90d0e83101a186c5a6 ">97ef425</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>properly expose getProxyForUrl (introduced in <a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1482 ">#1482</a>)
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1486 ">#1486</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/cea42985ac88b42678fbc84c18066a7f07f05176 ">cea4298</a>)</li>
</ul>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.3.1...v5.0.0 ">5.0.0</a>
(2025-09-03)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>Cleanup input handling. Changes invalid boolean input behavior (see
<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1445 ">#1445</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>add skip OIDC option (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1458 ">#1458</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/8c45f6b08196feb86cfdbe431541d5571d9ab2c2 ">8c45f6b</a>)</li>
<li>Cleanup input handling. Changes invalid boolean input behavior (see
<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1445 ">#1445</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/74b3e27aa80db064b5bb8c04b22fc607e817acf7 ">74b3e27</a>)</li>
<li>support account id allowlist (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1456 ">#1456</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/c4be498953fc1da2707a50ce4b761a53af3d02af ">c4be498</a>)</li>
</ul>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.3.0...v4.3.1 ">4.3.1</a>
(2025-08-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>update readme to 4.3.1 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1424 ">#1424</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/be2e7ad815e27b890489a89ce2717b0f9e26b56e ">be2e7ad</a>)</li>
</ul>
<h2><a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4.2.1...v4.3.0 ">4.3.0</a>
(2025-08-04)</h2>
<h3>Features</h3>
<ul>
<li>depenency update and feature cleanup (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1414 ">#1414</a>)
(<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/59489ba544930000b7b67412c167f5fe816568cf ">59489ba</a>),
closes <a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1062 ">#1062</a>
<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1191 ">#1191</a></li>
<li>Optional environment variable output (<a
href="https://github.com/aws-actions/configure-aws-credentials/commit/c3b3ce61b02510937ff02916a4eb153874bc5085 ">c3b3ce6</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/61815dcd50bd041e203e49132bacad1fd04d2708 "><code>61815dc</code></a>
chore(main): release 5.1.1 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1564 ">#1564</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/56d6a583f00f6bad6d19d91d53a7bc3b8143d0e9 "><code>56d6a58</code></a>
chore: release 5.1.1</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/4a54c24244cf4f82abd7d44e7b2024258a8aa041 "><code>4a54c24</code></a>
chore(deps-dev): bump glob from 10.4.5 to 10.5.0 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1563 ">#1563</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/b2793c943d45120be0c78ffc4b01aa0d2bf23e4b "><code>b2793c9</code></a>
chore(deps-dev): bump <code>@types/node</code> from 24.10.0 to 24.10.1
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1559 ">#1559</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/8c230bf21db64d397027b569a312fd242776d171 "><code>8c230bf</code></a>
chore: Update dist</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/f7a5b07d5348b1ac9f4d78d7547c96dfdd088440 "><code>f7a5b07</code></a>
chore(deps): bump <code>@aws-sdk/client-sts</code> from 3.928.0 to
3.933.0 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1558 ">#1558</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/730fc043828321961a659b198613a80b17bf755c "><code>730fc04</code></a>
chore(deps-dev): bump <code>@biomejs/biome</code> from 2.3.4 to 2.3.6
(<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1555 ">#1555</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/bc0dd36aec59e4fbdcedc61cb65d225ee2fa3bb6 "><code>bc0dd36</code></a>
chore(deps-dev): bump memfs from 4.50.0 to 4.51.0 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1556 ">#1556</a>)</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/f2964c7281262753f549b15ae39f1cbbb033b9e4 "><code>f2964c7</code></a>
chore: Update dist</li>
<li><a
href="https://github.com/aws-actions/configure-aws-credentials/commit/cf464951bec7e2a7af23fa7107563810acd70a4f "><code>cf46495</code></a>
chore(deps): bump <code>@aws-sdk/client-sts</code> from 3.922.0 to
3.928.0 (<a
href="https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1548 ">#1548</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws-actions/configure-aws-credentials/compare/v4...v5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-18 20:59:23 +00:00
aca6726607
Bump docker/build-push-action from 5 to 6 ( #36197 )
...
Bumps
[docker/build-push-action](https://github.com/docker/build-push-action )
from 5 to 6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/build-push-action/releases ">docker/build-push-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<ul>
<li>Export build record and generate <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/ ">build
summary</a> by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1120 ">docker/build-push-action#1120</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.24.0 to 0.26.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1132 ">docker/build-push-action#1132</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1136 ">docker/build-push-action#1136</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1138 ">docker/build-push-action#1138</a></li>
<li>Bump braces from 3.0.2 to 3.0.3 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1137 ">docker/build-push-action#1137</a></li>
</ul>
<blockquote>
<p>[!NOTE]
This major release adds support for generating <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/ ">Build
summary</a> and exporting build record for your build. You can disable
this feature by setting <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/#disable-job-summary ">
<code>DOCKER_BUILD_SUMMARY: false</code> environment variable in your
workflow</a>.</p>
</blockquote>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0 ">https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0 </a></p>
<h2>v5.4.0</h2>
<ul>
<li>Show builder information before building by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1128 ">docker/build-push-action#1128</a></li>
<li>Handle attestations correctly with provenance and sbom inputs by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1086 ">docker/build-push-action#1086</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.19.0 to 0.24.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1088 ">docker/build-push-action#1088</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1105 ">docker/build-push-action#1105</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1121 ">docker/build-push-action#1121</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1127 ">docker/build-push-action#1127</a></li>
<li>Bump undici from 5.28.3 to 5.28.4 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1090 ">docker/build-push-action#1090</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0 ">https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0 </a></p>
<h2>v5.3.0</h2>
<ul>
<li>Bump <code>@docker/actions-toolkit</code> from 0.18.0 to 0.19.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1080 ">docker/build-push-action#1080</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0 ">https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0 </a></p>
<h2>v5.2.0</h2>
<ul>
<li>Disable quotes detection for <code>outputs</code> input by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1074 ">docker/build-push-action#1074</a></li>
<li>Warn about ignored inputs by <a
href="https://github.com/favonia "><code>@favonia</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1019 ">docker/build-push-action#1019</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.14.0 to 0.18.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1070 ">docker/build-push-action#1070</a></li>
<li>Bump undici from 5.26.3 to 5.28.3 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1057 ">docker/build-push-action#1057</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0 ">https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0 </a></p>
<h2>v5.1.0</h2>
<ul>
<li>Add <code>annotations</code> input by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/992 ">docker/build-push-action#992</a></li>
<li>Add <code>secret-envs</code> input by <a
href="https://github.com/elias-lundgren "><code>@elias-lundgren</code></a>
in <a
href="https://redirect.github.com/docker/build-push-action/pull/980 ">docker/build-push-action#980</a></li>
<li>Bump <code>@babel/traverse</code> from 7.17.3 to 7.23.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/991 ">docker/build-push-action#991</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.13.0-rc.1 to
0.14.0 in <a
href="https://redirect.github.com/docker/build-push-action/pull/990 ">docker/build-push-action#990</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1006 ">docker/build-push-action#1006</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0 ">https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/build-push-action/commit/263435318d21b8e681c14492fe198d362a7d2c83 "><code>2634353</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1381 ">#1381</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li><a
href="https://github.com/docker/build-push-action/commit/c0432d2e016ab17a336cee48256683e74d5c4c9e "><code>c0432d2</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/0bb1f27d6b9fc90993f41febd9b53ee89397d3f8 "><code>0bb1f27</code></a>
set builder driver and endpoint attributes for dbc summary support</li>
<li><a
href="https://github.com/docker/build-push-action/commit/5f9dbf956c8481ecf630d0e53941d9d3afaa53bb "><code>5f9dbf9</code></a>
chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.61.0 to
0.62.1</li>
<li><a
href="https://github.com/docker/build-push-action/commit/0788c444d8b4d67580213712e34a148cae3a6c4e "><code>0788c44</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1375 ">#1375</a>
from crazy-max/remove-gcr</li>
<li><a
href="https://github.com/docker/build-push-action/commit/aa179ca4f405fed7a76dad90a23bd02d6f2a8d2d "><code>aa179ca</code></a>
e2e: remove GCR</li>
<li><a
href="https://github.com/docker/build-push-action/commit/1dc73863535b631f98b2378be8619f83b136f4a0 "><code>1dc7386</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1364 ">#1364</a>
from crazy-max/history-export-cmd</li>
<li><a
href="https://github.com/docker/build-push-action/commit/9c9803f36437c54a2bf7b2c9a4a9011c2a812d71 "><code>9c9803f</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/db1f6c46e8d64f89ec10010e409681bcf7951c05 "><code>db1f6c4</code></a>
DOCKER_BUILD_EXPORT_LEGACY env var to opt-in for legacy export</li>
<li><a
href="https://github.com/docker/build-push-action/commit/721e8c79de660781840d3a69a11e39e1e836ef8e "><code>721e8c7</code></a>
Bump <code>@docker/actions-toolkit</code> from 0.59.0 to 0.61.0</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/build-push-action/compare/v5...v6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-18 20:09:24 +00:00
4c06c98dda
Add explicit permissions to all actions workflows ( #36140 )
...
Explicitely specify all workflow
[`permissions`](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#permissions ).
This will fix [26 CodeQL
alerts](https://github.com/go-gitea/gitea/security/code-scanning?query=permissions+is%3Aopen+branch%3Amain+ ).
2025-12-12 16:48:29 +00:00
87b855bd15
Bump actions/checkout to v6 ( #36136 )
...
https://github.com/actions/checkout#checkout-v6
Result of `perl -p -i -e
's#actions\/checkout\@v5#actions/checkout\@v6#g' .github/workflows/*`
2025-12-12 16:44:53 +01:00
685c8c314f
Add cache to container build ( #35697 )
...
add mount cache directives to container builds, which speeds up local
builds bypassing node and go package download entirely on second build
and caching go compilation.
drop job level split on regular/rootless, which allows to reuse the
previously made stage for rootless, skipping duplicate builds in CI.
---------
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com >
2025-11-02 09:42:25 +00:00
96102c69e7
Bump setup-go to v6 ( #35660 )
2025-10-14 14:28:05 -04:00
912515e63a
Bump actions/checkout to v5 ( #35644 )
2025-10-12 18:01:42 +00:00
4d43d85941
Bump setup-node to v5 ( #35448 )
...
See https://github.com/actions/setup-node/releases/tag/v5.0.0
Caching is now enabled by default when `packageManager` is present in
package.json, and we have that. `cache-dependency-path` is unneccesary
because the action will automatically detect it.
2025-09-10 16:11:14 +00:00
361e59fd53
Switch to pnpm ( #35274 )
...
Co-authored-by: 6543 <6543@obermui.de >
Co-authored-by: silverwind <me@silverwind.io >
2025-09-04 01:17:14 +00:00
ed8d4dc37a
rename nightly docker tag for main branch ( #35344 )
...
fixes https://github.com/go-gitea/gitea/issues/35338
2025-08-24 13:40:50 +08:00
dcc9206a59
Raise minimum Node.js version to 20, test on 24 ( #34713 )
...
- Node.js 18 is now EOL, so raise minimum version to current LTS v20
- Test on 24
- Change devcontainers to use LTS version (currently 22),
[ref](https://github.com/devcontainers/features/tree/main/src/node )
2025-06-13 13:40:39 -04:00
921d3a394d
feat: add riscv64 support ( #34199 )
2025-04-14 16:32:54 +00:00
4a3ab5a2cd
fix( #33711 ): cross-publish docker images to ghcr.io ( #34148 )
...
This PR will cross-publish the release, rc, and nightly images from
`docker.io` to `ghcr.io` as docker hub has imposed rate-limiting
Signed-off-by: Allen Conlon <software@conlon.dev >
2025-04-10 19:39:37 +00:00
566f5356db
use dedicated runners for release artifacts ( #32811 )
...
GH runners are having trouble, so switch the remaining release jobs to
use dedicated runners.
2024-12-12 12:02:59 -05:00
9880c1372e
Bump CI,Flake and Snap to Node 22 ( #32487 )
...
Node 22 is LTS since 2024-10-29. Updated it everywhere.
---------
Co-authored-by: techknowlogick <techknowlogick@gitea.com >
2024-11-13 21:39:55 +00:00
90f4cf51a3
align s3 files with docker naming ( #31050 )
...
docker images have `-nightly`, this will append the same to binaries
uploaded to s3.
2024-05-22 23:34:52 +00:00
9a0b449c4f
Remove disk-clean workflow ( #30741 )
...
The jobs in the workflow runs in parallel. The `disk-clean` job actually
does nothing, i.e. it will not clean the disk for `nightly-binary`,
`nightly-docker-rootful`, `nightly-docker-rootless`
2024-04-28 05:47:48 +00:00
acfe29fc2b
Enable npm cache on setup-node action ( #30577 )
...
Enable npm dependency cache in
[setup-node](https://github.com/actions/setup-node ). This should work
reliably and across branches as well.
2024-04-19 03:29:08 +00:00
caceb43313
feat: bump dessant/lock-threads and actions/setup-go to use nodejs20 runtime ( #28565 )
...
Update more actions to use nodejs20 runtime and also update the docs for
checkout action usage.
similar to:
- #27836
- #27096
---------
Signed-off-by: Rui Chen <rui@chenrui.dev >
2023-12-21 13:31:04 +08:00
0a710133cd
Bump workflows in github actions ( #27836 )
...
All major version upgrades are related to using Node v20 as default
runtime
2023-10-30 15:56:43 +08:00
d98c863884
actions/setup-go use go-version-file ( #27651 )
...
These changes will allow not to specify the version of go in every
pipeline.
2023-10-17 10:24:54 +00:00
dc7cf7a984
fully replace drone with actions ( #27556 )
...
this builds binaries and docker images for tags
2023-10-11 06:39:32 +00:00
65eea1d536
switch to using official AWS step in release nightly ( #27532 )
...
`jakejarvis/s3-sync-action@master` is out of date, and using official
actions is always recommended
2023-10-09 10:12:19 +00:00
72b66032e4
change runner for binary
2023-10-07 00:14:45 -04:00
e820d9966d
move re-useable workflow
2023-10-06 15:22:10 -04:00
1683f1587c
use hosted runners for nightly actions ( #27485 )
...
I'm temporarily unable to properly evaluate actuated runners, and so I'm
switching back to hosted runners until I am able to focus on that again.
---------
Co-authored-by: silverwind <me@silverwind.io >
2023-10-06 15:13:47 -04:00
5e039b0580
Upgrading the actions/checkout@4 ( #27096 )
...
as title
..Upgrading the actions/checkout@4
Signed-off-by: puni9869 <punitinani1@hotmail.com >
Co-authored-by: silverwind <me@silverwind.io >
2023-09-16 15:06:27 +00:00
5d755ac6ae
bump all nightly builds to 16gb
2023-09-13 10:43:03 -04:00
3bebcb2e9c
bump rootful to 16gb
2023-09-12 15:26:41 -04:00
2abbc43dff
setup go in the nightly release pipeline
2023-09-12 13:36:15 -04:00
c892ab0600
Speed up nightly builds ( #27045 )
...
* Rootless/ful docker images build separately
* Vendor go modules outside docker to speed up the build
Thanks to Alex Ellis for these suggestions (and actuated runner build
time)
2023-09-12 13:33:45 -04:00
e6b68c579b
Use Actuated.dev runner for nightly builds
2023-09-12 12:15:05 -04:00
1772814605
Lock go to 1.21 on CI ( #26433 )
...
To prevent unwanted surprises with new minor versions of go, lock the
version to minor version using [semver tilde
syntax](https://github.com/npm/node-semver#tilde-ranges-123-12-1 ). We
were already getting 1.21.0 since yesterday, so use that version now as
minimum.
2023-08-10 21:53:44 +00:00
feda506321
Use Actions git context instead of dynamically created buildkit one ( #25381 )
...
The [docker/build-push-action@v2
action](https://github.com/docker/build-push-action ) by default ignores
the checkout created using the actions/checkout@v2 action. When you pass
a git build context to docker build, it wouldn't include the .git
directory.
By passing `context: .` to the build step then it'll use the Actions git
context which includes the git fetch from the earlier step.
2023-06-20 01:37:32 -04:00
1a5b7c86a3
Fetch all git data for embedding correct version in docker image ( #25361 )
...
Fix #25350
2023-06-19 18:51:35 +00:00
fc2115b494
build nightly docker images ( #25317 )
...
followup of https://github.com/go-gitea/gitea/pull/25308 this time to
build & push nightly docker images
2023-06-18 01:04:23 -04:00
0ab9b7f426
Build nightly binaries with Actions ( #25308 )
...
Co-authored-by: silverwind <me@silverwind.io >
2023-06-16 17:00:39 +00:00
Giteabot
silverwind
wxiaoguang
dependabot[bot]
TheFox0x7
techknowlogick
Meng Zhuo
Allen Conlon
Chongyi Zheng
Rui Chen
Yevhen Pavlov
puni9869
techknowlogick