🚨 Update github actions (main) (major) by renovate[bot] · Pull Request #692 · enterprise-contract/enterprise-contract-controller

renovate · 2025-12-14T02:49:05Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v6.1.0` → `v7.0.1`
actions/deploy-pages	action	major	`v4.0.5` → `v5.0.1`
actions/download-artifact	action	major	`v6.0.0` → `v8.0.1`
actions/setup-go	action	major	`v6.5.0` → `v7.0.0`
actions/upload-artifact	action	major	`v5.0.0` → `v7.0.1`
codecov/codecov-action	action	major	`v5.5.5` → `v7.0.0`
softprops/action-gh-release	action	major	`v2.6.2` → `v3.0.3`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

actions/deploy-pages (actions/deploy-pages)

`v5.0.1`

Compare Source

Changelog

Add backoff and jitter to deployment polling @yoannchaudet (#444)
Improve deployment request test coverage @adwitiyagoyal (#440)

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

`v5.0.0`

Compare Source

Changelog

Update Node.js version to 24.x @salmanmkc (#404)
Add workflow file for publishing releases to immutable action package @Jcambass (#374)
Bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group across 1 directory @dependabot (#360)
Make the rebuild dist workflow work nicer with Dependabot @yoannchaudet (#361)
Bump the non-breaking-changes group across 1 directory with 3 updates @dependabot (#358)
Delete repeated sentence @garethsb (#359)
Update README.md @tsusdere (#348)
Bump the non-breaking-changes group with 4 updates @dependabot (#341)
Remove error message for file permissions @TooManyBees (#340)

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

actions/download-artifact (actions/download-artifact)

`v8.0.1`

Compare Source

What's Changed

Support for CJK characters in the artifact name by @danwkennedy in #471
Add a regression test for artifact name + content-type mismatches by @danwkennedy in #472

Full Changelog: actions/download-artifact@v8...v8.0.1

`v8.0.0`

Compare Source

v8 - What's new

[!IMPORTANT]
actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461

Full Changelog: actions/download-artifact@v7...v8.0.0

`v7.0.0`

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #440
Download Artifact Node24 support by @salmanmkc in #415
fix: update @actions/artifact to fix Node.js 24 punycode deprecation by @salmanmkc in #451
prepare release v7.0.0 for Node.js 24 support by @salmanmkc in #452

New Contributors

@patrikpolyak made their first contribution in #440
@salmanmkc made their first contribution in #415

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

actions/setup-go (actions/setup-go)

`v7.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #763
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #771

New Contributors

@philip-gai made their first contribution in #771

Full Changelog: actions/setup-go@v6...v7.0.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v6.0.0`

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in #719
fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in #744
prepare release v6.0.0 for Node.js 24 support by @salmanmkc in #745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

codecov/codecov-action (codecov/codecov-action)

`v7.0.0`

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

`v6.0.2`

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

What's Changed

fix: prevent template injection in run: steps (VULN-1652) by @thomasrockhu-codecov in #1947
chore(release): 6.0.1 by @thomasrockhu-codecov in #1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in #1929
Th/6.0.0 by @thomasrockhu-codecov in #1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

softprops/action-gh-release (softprops/action-gh-release)

`v3.0.3`

Compare Source

3.0.3 is a maintenance release with updated dependencies. It also safely
classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

fix: safely classify GitHub API errors by @chenrui333 in #822

Other Changes 🔄

dependency updates

`v3.0.2`

Compare Source

3.0.2 is a patch release focused on release reliability and compatibility. It
reuses existing draft releases when publishing prereleases, supports replacing
release assets on Gitea, hardens streamed asset uploads, and provides clearer
release-creation diagnostics. It also includes TypeScript, coverage, and tooling
maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the
historical failure reported in #790, although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to #786 and does not
claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

feat: improve release error reporting and test coverage by @chenrui333 in #813

Bug fixes 🐛

fix: publish existing draft releases as prereleases by @godfengliang in #801
fix: upload small checksum assets reliably by @chenrui333 in #815
fix: replace existing release assets on Gitea by @chenrui333 in #816
fix: clarify release creation 404 errors by @chenrui333 in #817

Other Changes 🔄

chore(deps): upgrade TypeScript to 7 by @chenrui333 in #812
chore(deps): remove unused TypeScript tooling by @chenrui333 in #814
dependency, Node 24 pin, and CI maintenance merged since 3.0.1

`v3.0.1`

Compare Source

3.0.1

maintenance release with updated dependencies

`v3.0.0`

Compare Source

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24.
Use v3 on GitHub-hosted runners and self-hosted fleets that already support the
Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on
v2.6.2.

What's Changed

Other Changes 🔄

Move the action runtime and bundle target to Node 24
Update @types/node to the Node 24 line and allow future Dependabot updates
Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov-commenter · 2025-12-14T02:52:54Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0.66%. Comparing base (71fbec6) to head (a572ce8).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@          Coverage Diff          @@
##            main    #692   +/-   ##
=====================================
  Coverage   0.66%   0.66%           
=====================================
  Files          6       6           
  Lines        301     301           
=====================================
  Hits           2       2           
  Misses       299     299

Flag	Coverage Δ
api	`0.76% <ø> (ø)`
controller	`0.00% <ø> (ø)`
schema	`0.00% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate Bot added main major renovate labels Dec 14, 2025

github-actions Bot added the size: XS label Dec 14, 2025

renovate Bot force-pushed the renovate/main-major-github-actions branch from fa2bbf7 to c3c5757 Compare December 15, 2025 14:30

renovate Bot force-pushed the renovate/main-major-github-actions branch from c3c5757 to c189ea2 Compare December 31, 2025 15:06

renovate Bot force-pushed the renovate/main-major-github-actions branch from c189ea2 to 8afd6ce Compare February 2, 2026 21:46

renovate Bot force-pushed the renovate/main-major-github-actions branch from 8afd6ce to 19542e3 Compare February 12, 2026 10:10

renovate Bot force-pushed the renovate/main-major-github-actions branch from 19542e3 to 655e567 Compare February 26, 2026 18:59

renovate Bot force-pushed the renovate/main-major-github-actions branch from 655e567 to 8d952e5 Compare March 11, 2026 18:57

renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 04b56bd to bf8b331 Compare March 26, 2026 18:03

renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 4bbf7e1 to 60c9b36 Compare April 12, 2026 05:28

renovate Bot force-pushed the renovate/main-major-github-actions branch from 60c9b36 to ad323d9 Compare April 23, 2026 15:58

renovate Bot force-pushed the renovate/main-major-github-actions branch from ad323d9 to fb695b8 Compare May 12, 2026 12:07

renovate Bot force-pushed the renovate/main-major-github-actions branch from fb695b8 to aaa1430 Compare May 23, 2026 07:23

renovate Bot force-pushed the renovate/main-major-github-actions branch from aaa1430 to 9afeae8 Compare June 7, 2026 05:05

renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 679c80b to dfd99c8 Compare June 19, 2026 15:31

renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 970e36c to 6227b62 Compare July 16, 2026 05:00

renovate Bot force-pushed the renovate/main-major-github-actions branch from 6227b62 to a84cc9e Compare July 20, 2026 21:43

renovate Bot force-pushed the renovate/main-major-github-actions branch 4 times, most recently from 14ec8c5 to f87c239 Compare September 3, 2026 21:07

renovate Bot requested a review from a team as a code owner September 3, 2026 21:07

renovate Bot force-pushed the renovate/main-major-github-actions branch from f87c239 to e4645a3 Compare September 7, 2026 16:41

🚨 Update github actions

a572ce8

renovate Bot force-pushed the renovate/main-major-github-actions branch from e4645a3 to a572ce8 Compare September 8, 2026 21:14

robnester-rh merged commit 8c7274d into main Sep 10, 2026
5 checks passed

renovate Bot deleted the renovate/main-major-github-actions branch September 10, 2026 14:20

Navigation Menu

Uh oh!

🚨 Update github actions (main) (major) - #692

🚨 Update github actions (main) (major)#692
robnester-rh merged 1 commit into
mainfrom
renovate/main-major-github-actions

renovate Bot commented Dec 14, 2025 •

edited

Loading

Uh oh!

codecov-commenter commented Dec 14, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Dec 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changelog

Changelog

What's Changed

v8 - What's new

Direct downloads

Enforced checks (breaking)

ESM

What's Changed

v7 - What's new

Node.js 24

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v6 - What's new

Node.js 24

What's Changed

What's Changed

What's Changed

What's Changed

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

What's Changed

Bug fixes 🐛

Other Changes 🔄

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

What's Changed

Other Changes 🔄

Configuration

Uh oh!

codecov-commenter commented Dec 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Dec 14, 2025 •

edited

Loading

codecov-commenter commented Dec 14, 2025 •

edited

Loading