Skip to content

🚨 Update github actions (main) (major) - #692

Merged
robnester-rh merged 1 commit into
mainfrom
renovate/main-major-github-actions
Sep 10, 2026
Merged

🚨 Update github actions (main) (major)#692
robnester-rh merged 1 commit into
mainfrom
renovate/main-major-github-actions

Conversation

@renovate

@renovate renovate Bot commented Dec 14, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v6.1.0 → v7.0.1
actions/deploy-pages action major v4.0.5 → v5.0.1
actions/download-artifact action major v6.0.0 → v8.0.1
actions/setup-go action major v6.5.0 → v7.0.0
actions/upload-artifact action major v5.0.0 → v7.0.1
codecov/codecov-action action major v5.5.5 → v7.0.0
softprops/action-gh-release action major v2.6.2 → v3.0.3

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

v7.0.0

Compare Source

actions/deploy-pages (actions/deploy-pages)

v5.0.1

Compare Source

Changelog

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v5.0.0

Compare Source

Changelog

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

actions/download-artifact (actions/download-artifact)

v8.0.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

Compare Source

v8 - What's new

[!IMPORTANT]
actions/download-artifact@​v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v7.0.0

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@​v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

actions/setup-go (actions/setup-go)

v7.0.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@​v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

codecov/codecov-action (codecov/codecov-action)

v7.0.0

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

v6.0.2

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

v6.0.1

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

v6.0.0

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️
What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

softprops/action-gh-release (softprops/action-gh-release)

v3.0.3

Compare Source

3.0.3 is a maintenance release with updated dependencies. It also safely
classifies malformed GitHub API errors to avoid secondary failures (#​822).

What's Changed

Bug fixes 🐛
Other Changes 🔄
  • dependency updates

v3.0.2

Compare Source

3.0.2 is a patch release focused on release reliability and compatibility. It
reuses existing draft releases when publishing prereleases, supports replacing
release assets on Gitea, hardens streamed asset uploads, and provides clearer
release-creation diagnostics. It also includes TypeScript, coverage, and tooling
maintenance merged since 3.0.1.

This release fixes #​795, #​438, and #​803. The upload transport hardening covers the
historical failure reported in #​790, although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to #​786 and does not
claim a reproducible release-creation fix.

What's Changed
Exciting New Features 🎉
Bug fixes 🐛
Other Changes 🔄

v3.0.1

Compare Source

3.0.1

  • maintenance release with updated dependencies

v3.0.0

Compare Source

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24.
Use v3 on GitHub-hosted runners and self-hosted fleets that already support the
Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on
v2.6.2.

What's Changed

Other Changes 🔄
  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov-commenter

codecov-commenter commented Dec 14, 2025 •
edited
Loading

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0.66%. Comparing base (71fbec6) to head (a572ce8).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

Impacted file tree graph

@@          Coverage Diff          @@
##            main    #692   +/-   ##
=====================================
  Coverage   0.66%   0.66%           
=====================================
  Files          6       6           
  Lines        301     301           
=====================================
  Hits           2       2           
  Misses       299     299
Flag Coverage Δ
api 0.76% <ø> (ø)
controller 0.00% <ø> (ø)
schema 0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from fa2bbf7 to c3c5757 Compare December 15, 2025 14:30
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from c3c5757 to c189ea2 Compare December 31, 2025 15:06
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from c189ea2 to 8afd6ce Compare February 2, 2026 21:46
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from 8afd6ce to 19542e3 Compare February 12, 2026 10:10
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from 19542e3 to 655e567 Compare February 26, 2026 18:59
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from 655e567 to 8d952e5 Compare March 11, 2026 18:57
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 04b56bd to bf8b331 Compare March 26, 2026 18:03
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 4bbf7e1 to 60c9b36 Compare April 12, 2026 05:28
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from 60c9b36 to ad323d9 Compare April 23, 2026 15:58
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from ad323d9 to fb695b8 Compare May 12, 2026 12:07
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from fb695b8 to aaa1430 Compare May 23, 2026 07:23
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from aaa1430 to 9afeae8 Compare June 7, 2026 05:05
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 679c80b to dfd99c8 Compare June 19, 2026 15:31
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch 2 times, most recently from 970e36c to 6227b62 Compare July 16, 2026 05:00
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from 6227b62 to a84cc9e Compare July 20, 2026 21:43
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch 4 times, most recently from 14ec8c5 to f87c239 Compare September 3, 2026 21:07
@renovate
renovate Bot requested a review from a team as a code owner September 3, 2026 21:07
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from f87c239 to e4645a3 Compare September 7, 2026 16:41
@renovate
renovate Bot force-pushed the renovate/main-major-github-actions branch from e4645a3 to a572ce8 Compare September 8, 2026 21:14
@robnester-rh
robnester-rh merged commit 8c7274d into main Sep 10, 2026
5 checks passed
@renovate
renovate Bot deleted the renovate/main-major-github-actions branch September 10, 2026 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

main major renovate size: XS

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@codecov-commenter @robnester-rh