Repository navigation
chore(deps): update github actions - #308
renovate[bot] wants to merge 1 commit into
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #308 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 10 10
Lines 1344 1344
Branches 168 168
=========================================
Hits 1344 1344
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
|
🐳 Docker image built and pushed: |
597ffd3 to
a34e387
Compare
|
🐳 Docker image built and pushed: |
a34e387 to
eb5c0dc
Compare
|
🐳 Docker image built and pushed: |
eb5c0dc to
eaf71d1
Compare
|
🐳 Docker image built and pushed: |
eaf71d1 to
62ed86b
Compare
|
🐳 Docker image built and pushed: |
62ed86b to
5a27ce4
Compare
|
🐳 Docker image built and pushed: |
5a27ce4 to
3fd9611
Compare
|
🐳 Docker image built and pushed: |
3fd9611 to
6373462
Compare
|
🐳 Docker image built and pushed: |
6373462 to
e7de349
Compare
|
🐳 Docker image built and pushed: |
e7de349 to
e8bd071
Compare
|
🐳 Docker image built and pushed: |
e8bd071 to
f890631
Compare
|
🐳 Docker image built and pushed: |
f890631 to
73c5b47
Compare
|
🐳 Docker image built and pushed: |
73c5b47 to
10c91ee
Compare
eb029b6 to
f177100
Compare
3bc0c46 to
b653959
Compare
6fcca67 to
8695c4d
Compare
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v3.2.0→v3.3.0v5.0.0→v5.0.1v8.0.1→v8.0.2v7.0.0→v7.1.0v7.0.1→v7.0.2v0.24.0→v0.24.3v7.0.0→v7.1.1v7.3.0→v7.4.0v4.6.0→v4.8.0v4.2.0→v4.4.1v4.37.6→v4.39.3v1.14.0→v1.15.22026.8.3→2026.11.2v4.2.4→v4.3.0v2.4.4→v2.5.0v4.1.2→v4.1.3v3.0.2→v3.0.4Release Notes
actions/create-github-app-token
v3.3.0Compare Source
Features
Bug Fixes
actions/deploy-pages
v5.0.1Compare Source
Changelog
See details of all code changes since previous release.
actions/download-artifact
v8.0.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v8.0.1...v8.0.2
actions/setup-python
v7.1.0Compare Source
What's Changed
Enhancements
mirrorandmirror-tokeninputs for custom Python distribution sources by @luhenry in #1302Dependency Upgrade
New Contributors
Full Changelog: actions/setup-python@v7.0.0...v7.1.0
actions/upload-artifact
v7.0.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2
anchore/sbom-action
v0.24.3Compare Source
Added Features
Bug Fixes
(Full Changelog)
v0.24.2Compare Source
Added Features
Additional Changes
(Full Changelog)
v0.24.1Compare Source
codecov/codecov-action
v7.1.1Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1
v7.1.0Compare Source
What's Changed
Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0
docker/build-push-action
v7.4.0Compare Source
Full Changelog: docker/build-push-action@v7.3.0...v7.4.0
docker/login-action
v4.8.0Compare Source
Full Changelog: docker/login-action@v4.7.0...v4.8.0
v4.7.0Compare Source
registry-authby @crazy-max in #1089Full Changelog: docker/login-action@v4.6.0...v4.7.0
docker/setup-buildx-action
v4.4.1Compare Source
Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1
v4.4.0Compare Source
Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0
v4.3.0Compare Source
Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0
github/codeql-action
v4.39.3Compare Source
v4.39.2Compare Source
CODEQL_ACTION_CLEANUP_TRAP_CACHESenvironment variable has been removed, as announced in the release notes for CodeQL Action 4.35.2. TheanalyzeAction now warns if this environment variable is set. If you used TRAP cache cleanup to limit Actions cache usage, we recommend disabling TRAP caching by passing thetrap-caching: falseinput to theinitAction. #4243v4.39.1Compare Source
v4.39.0Compare Source
codeql-action/analyzestep now validates that a correct argument for thecheckout_pathinput has been provided. Thecheckout_pathinput must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used bycodeql-action/init, then the CodeQL Action now produces a warning. #4148codeql-action/start-proxystep that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic ascodeql-action/init. This primarily benefits customers who are using GitHub instances other thangithub.comwhere thecodeql-action/start-proxystep may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198v4.38.3Compare Source
v4.38.2Compare Source
v4.38.1Compare Source
v4.38.0Compare Source
linux-arm64CodeQL bundle when available. #4072v4.37.9Compare Source
v4.37.8Compare Source
No user facing changes.
v4.37.7Compare Source
helm/kind-action
v1.15.2Compare Source
What's Changed
New Contributors
Full Changelog: helm/kind-action@v1.15.1...v1.15.2
v1.15.1Compare Source
What's Changed
New Contributors
Full Changelog: helm/kind-action@v1.15.0...v1.15.1
v1.15.0Compare Source
What's Changed
New Contributors
Full Changelog: helm/kind-action@v1.14.0...v1.15.0
jdx/mise
v2026.11.2: : Task tags, summary output, JSON run reports, and mise run --atCompare Source
This release adds four
mise runfeatures that help CI scripts and coding agents: tags for selecting tasks, asummaryoutput style that only shows failures, a JSON run report, and--atfor running tasks at another git revision. It also fixes problems with safe-mode lockfiles,symlink-eachdotfiles, shims and shell completion.Added
Task tags. You can label tasks with
tags, then run every task that has a tag withmise run --tag. A tag can be a string or a list. File tasks set them with#MISE tags=[...], and templates add their tags to the tasks that extend them. You can repeat--tag, and a task matches if it has any of the given tags. Dependencies run whatever their tags are. If you also give a pattern, such asmise run --tag slow 'test:*', mise runs only the matching tasks that have the tag.mise tasks ls --tagfilters the task list, andtasks ls --json,tasks infoand the MCP task list now includetags. #15406 (@jdx)summarytask output style. mise holds each task's output until the task ends. A task that passed prints one line, such as[unit] passed in 4.2s. A task that failed prints everything it wrote. Tasks that mise stopped print[name] cancelled. This style is opt-in: use--output summary,MISE_TASK_OUTPUT=summary,task.output, or a task'soutput. mise keeps up to 64 KiB of output per task and drops the oldest output past that. A long-running task such as a dev server prints nothing until it exits, so give those tasksoutput = "interleave". #15403 (@jdx)JSON run reports.
mise run --report-file <PATH>, orMISE_TASK_REPORT_FILE, writes a JSON report when the run ends. This happens whether the run passes, fails, is interrupted or hits--timeout.status(passed,failed,cancelledortimed_out) and every scheduled task, dependencies included.passed,failed,cancelled,skipped,cachedornot_run), exit code, duration and timestamps.--dry-run. Tasks don't inherit the variable, so a nestedmise runcan't overwrite the outer report.#15405 (@jdx)
mise run --at REV. Runs tasks at another git revision without touching your checkout. mise checks the revision out into a temporary detached worktree, runs the task with that revision's own config and tasks, then removes the worktree. It also removes it after a failure, a timeout or Ctrl-C.--at-setup CMDprepares the worktree first, for example by installing dependencies.MISE_RUN_AT_SOURCE(your checkout) andMISE_RUN_AT_REV(the commit).--yes.#15410 (@jdx)
Fixed
MISE_SAFE=1 MISE_LOCKED=1 mise installworks again fornode,pythonandgowhenmise.lockhas their checksums. It used to fail with "No lockfile URL found". These tools now work out their own download URL and check it against the locked checksum. If safe mode is the reason a URL is missing, the error now says so. #15392 (@jdx)npm:tools locked through aube now install in safe mode and in untrusted projects. mise keeps the lockfile's dependency graph if it only fetches from the registry using integrity hashes. Graphs that name tarball URLs, git sources or local paths are still dropped. #15401 (@jdx)mise lock java@temurin-27no longer rewritesjava = "temurin-26"to the brokentemurin-temurin. It now writestemurin-27, with the same precision as the original request. Switching vendor at the same version, as injava@zulu-26, is saved too. #15386 (@jdx)mise lock tool@3.0.1changestool = "2"totool = "3"in the config, the lockfile entry now records"3", the request the config holds, instead of"3.0.1". Before, later lookups for that request couldn't find the entry. #15404 (@jdx)mise bootstrapnow writes mise's own config files first and plans the rest of the dotfiles from the result, asmise dot applyalready did. If a dotfile entry deploys aconf.dfile, the entries in that file now apply in the same run, not the next one.--dry-runpreviews them as well. #15387 (@jdx, @webkaz)symlink-eachentry no longer writes through a directory symlink you made inside its target. That symlink is now reported as a conflict that needs--force.unapplyalso no longer deletes a directory symlink as if it were an empty folder. #15399 (@jdx)symlink-eachsource that contains a dangling symlink no longer loses its link right after creating it. #15395 (@jdx)mise dot unapply --groupandmise dot apply --prunenow delete a group's leftoversymlink-eachstate records once none of its links remain. #15390 (@jdx)mise dot origin setnow adopts the origin's history. It used to fail with "local and origin histories are unrelated". Iforigin setrefuses to connect, it no longer writes[history.origin]. #15394 (@jdx)gitprocess for each encrypted tracked file. This speeds upmise bootstrapand the dotfile history commands when you have many encrypted files. #15393 (@jdx)tool_update.global_autocheck ran from a shim, the tool was launched with mise's internal arguments (jq: Unknown option --id). mise now runs the update itself. #15389 (@jdx)mise whicherrors no longer suggest a reinstall that can't help. They now show the errormprocs@0.10.3 does not provide mprocs (it provides: dekit), or name another installed version that does provide it. #15388 (@jdx)mise x -- <cmd> <Tab>, every word after the command now completes file names, as it would in a plain shell. The same applies tomise dot capture --,mise bootstrap repos exec --andmise ssh. #15396 (@jdx, @Yasushi)upgrade, completingmise upnow shows the built-in command's description.mise run <TAB>still shows the task. #15385 (@jdx)go installafter temporary network errors from the module proxy or checksum database, using thehttp_retriessetting. When the retries run out, mise shows the network error, not a misleadingunknown revision. #15384 (@jdx).exenow keep the extension when the recipe setscomplete_windows_ext: false. Before,aqua:SonarSource/sonarqube-cliinstalledsonarinstead ofsonar.exe. #15412 (@jdx)PermissionDeniedif it can't resolve a config path. This happened on Windows inside workspace sandboxes. A config trusted outside the sandbox may show as untrusted inside it;MISE_TRUSTED_CONFIG_PATHSworks around that. #15383 (@jdx)skills.auto_sync, a tool that only your global config declares no longer has its agent skills linked into every project as well. Global tools are linked only under your home directory.mise skills syncwithout--diror--globalfollows the same rule. Links that are already in project directories stay until you runmise skills sync --prune. [#15391](https://redirect.github.com/jdConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.