chore(deps): update github-actions #9485
Merged
+18
−18
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
How to use the Graphite Merge QueueAdd either label to this PR to merge it via the merge queue:
You must have a Graphite account in order to use the merge queue. Sign up using this link. An organization admin has enabled the Graphite Merge Queue in this repository. Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue. |
github-actions
bot
added
the
C-cleanup
CodSpeed Performance ReportMerging #9485 will not alter performanceComparing Summary
|
Merge activity
|
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://redirect.github.com/actions/cache) | action | patch | `v4.2.1` -> `v4.2.2` | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | patch | `v4.1.8` -> `v4.1.9` | | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | minor | `v5.3.1` -> `v5.4.0` | | [peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request) | action | patch | `v7.0.6` -> `v7.0.7` | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.49.1` -> `v2.49.10` | --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v4.2.2`](https://redirect.github.com/actions/cache/releases/tag/v4.2.2) [Compare Source](https://redirect.github.com/actions/cache/compare/v4.2.1...v4.2.2) ##### What's Changed > \[!IMPORTANT] > As a reminder, there were important backend changes to release v4.2.0, see [those release notes](https://redirect.github.com/actions/cache/releases/tag/v4.2.0) and [the announcement](https://redirect.github.com/actions/cache/discussions/1510) for more details. - Bump [@​actions/cache](https://redirect.github.com/actions/cache) to v4.0.2 by [@​robherley](https://redirect.github.com/robherley) in [https://github.com/actions/cache/pull/1560](https://redirect.github.com/actions/cache/pull/1560) **Full Changelog**: actions/cache@v4.2.1...v4.2.2 </details> <details> <summary>actions/download-artifact (actions/download-artifact)</summary> ### [`v4.1.9`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.9) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.8...v4.1.9) ##### What's Changed - Add workflow file for publishing releases to immutable action package by [@​Jcambass](https://redirect.github.com/Jcambass) in [https://github.com/actions/download-artifact/pull/354](https://redirect.github.com/actions/download-artifact/pull/354) - docs: small migration fix by [@​froblesmartin](https://redirect.github.com/froblesmartin) in [https://github.com/actions/download-artifact/pull/370](https://redirect.github.com/actions/download-artifact/pull/370) - Update MIGRATION.md by [@​andyfeller](https://redirect.github.com/andyfeller) in [https://github.com/actions/download-artifact/pull/372](https://redirect.github.com/actions/download-artifact/pull/372) - Update artifact package to 2.2.2 by [@​yacaovsnc](https://redirect.github.com/yacaovsnc) in [https://github.com/actions/download-artifact/pull/380](https://redirect.github.com/actions/download-artifact/pull/380) ##### New Contributors - [@​Jcambass](https://redirect.github.com/Jcambass) made their first contribution in [https://github.com/actions/download-artifact/pull/354](https://redirect.github.com/actions/download-artifact/pull/354) - [@​froblesmartin](https://redirect.github.com/froblesmartin) made their first contribution in [https://github.com/actions/download-artifact/pull/370](https://redirect.github.com/actions/download-artifact/pull/370) - [@​andyfeller](https://redirect.github.com/andyfeller) made their first contribution in [https://github.com/actions/download-artifact/pull/372](https://redirect.github.com/actions/download-artifact/pull/372) - [@​yacaovsnc](https://redirect.github.com/yacaovsnc) made their first contribution in [https://github.com/actions/download-artifact/pull/380](https://redirect.github.com/actions/download-artifact/pull/380) **Full Changelog**: actions/download-artifact@v4...v4.1.9 </details> <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v5.4.0`](https://redirect.github.com/codecov/codecov-action/blob/HEAD/CHANGELOG.md#v540) [Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v5.3.1...v5.4.0) ##### What's Changed - update wrapper submodule to 0.2.0, add recurse_submodules arg by [@​matt-codecov](https://redirect.github.com/matt-codecov) in [https://github.com/codecov/codecov-action/pull/1780](https://redirect.github.com/codecov/codecov-action/pull/1780) - build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1775](https://redirect.github.com/codecov/codecov-action/pull/1775) - build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1776](https://redirect.github.com/codecov/codecov-action/pull/1776) - build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1777](https://redirect.github.com/codecov/codecov-action/pull/1777) - Clarify in README that `use_pypi` bypasses integrity checks too by [@​webknjaz](https://redirect.github.com/webknjaz) in [https://github.com/codecov/codecov-action/pull/1773](https://redirect.github.com/codecov/codecov-action/pull/1773) - Fix use of safe.directory inside containers by [@​Flamefire](https://redirect.github.com/Flamefire) in [https://github.com/codecov/codecov-action/pull/1768](https://redirect.github.com/codecov/codecov-action/pull/1768) - Fix description for report_type input by [@​craigscott-crascit](https://redirect.github.com/craigscott-crascit) in [https://github.com/codecov/codecov-action/pull/1770](https://redirect.github.com/codecov/codecov-action/pull/1770) - build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1765](https://redirect.github.com/codecov/codecov-action/pull/1765) - Fix a typo in the example by [@​miranska](https://redirect.github.com/miranska) in [https://github.com/codecov/codecov-action/pull/1758](https://redirect.github.com/codecov/codecov-action/pull/1758) - build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1757](https://redirect.github.com/codecov/codecov-action/pull/1757) - build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1753](https://redirect.github.com/codecov/codecov-action/pull/1753) **Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0 </details> <details> <summary>peter-evans/create-pull-request (peter-evans/create-pull-request)</summary> ### [`v7.0.7`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.7): Create Pull Request v7.0.7 [Compare Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.6...v7.0.7) ⚙️ Fixes an issue with commit signing where modifications to the same file in multiple commits squash into the first commit. #### What's Changed - build(deps): bump [@​octokit/core](https://redirect.github.com/octokit/core) from 6.1.2 to 6.1.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3593](https://redirect.github.com/peter-evans/create-pull-request/pull/3593) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.68 to 18.19.70 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3594](https://redirect.github.com/peter-evans/create-pull-request/pull/3594) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [https://github.com/peter-evans/create-pull-request/pull/3603](https://redirect.github.com/peter-evans/create-pull-request/pull/3603) - build(deps-dev): bump typescript from 5.7.2 to 5.7.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3610](https://redirect.github.com/peter-evans/create-pull-request/pull/3610) - build(deps): bump octokit dependencies by [@​peter-evans](https://redirect.github.com/peter-evans) in [https://github.com/peter-evans/create-pull-request/pull/3618](https://redirect.github.com/peter-evans/create-pull-request/pull/3618) - docs: add workflow tip for showing message via workflow command by [@​ybiquitous](https://redirect.github.com/ybiquitous) in [https://github.com/peter-evans/create-pull-request/pull/3626](https://redirect.github.com/peter-evans/create-pull-request/pull/3626) - build(deps-dev): bump eslint-plugin-prettier from 5.2.1 to 5.2.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3628](https://redirect.github.com/peter-evans/create-pull-request/pull/3628) - build(deps): bump node-fetch-native from 1.6.4 to 1.6.6 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3627](https://redirect.github.com/peter-evans/create-pull-request/pull/3627) - build(deps-dev): bump undici from 6.21.0 to 6.21.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3630](https://redirect.github.com/peter-evans/create-pull-request/pull/3630) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.70 to 18.19.71 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3629](https://redirect.github.com/peter-evans/create-pull-request/pull/3629) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [https://github.com/peter-evans/create-pull-request/pull/3647](https://redirect.github.com/peter-evans/create-pull-request/pull/3647) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.71 to 18.19.74 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3657](https://redirect.github.com/peter-evans/create-pull-request/pull/3657) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.74 to 18.19.75 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3663](https://redirect.github.com/peter-evans/create-pull-request/pull/3663) - build(deps): bump [@​octokit/plugin-rest-endpoint-methods](https://redirect.github.com/octokit/plugin-rest-endpoint-methods) from 13.3.0 to 13.3.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3670](https://redirect.github.com/peter-evans/create-pull-request/pull/3670) - build(deps-dev): bump prettier from 3.4.2 to 3.5.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3671](https://redirect.github.com/peter-evans/create-pull-request/pull/3671) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [https://github.com/peter-evans/create-pull-request/pull/3680](https://redirect.github.com/peter-evans/create-pull-request/pull/3680) - build(deps): bump [@​octokit/request-error](https://redirect.github.com/octokit/request-error) from 6.1.6 to 6.1.7 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3685](https://redirect.github.com/peter-evans/create-pull-request/pull/3685) - build(deps): bump [@​octokit/plugin-paginate-rest](https://redirect.github.com/octokit/plugin-paginate-rest) from 11.4.0 to 11.4.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3688](https://redirect.github.com/peter-evans/create-pull-request/pull/3688) - build(deps): bump [@​octokit/endpoint](https://redirect.github.com/octokit/endpoint) from 10.1.2 to 10.1.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3700](https://redirect.github.com/peter-evans/create-pull-request/pull/3700) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [https://github.com/peter-evans/create-pull-request/pull/3691](https://redirect.github.com/peter-evans/create-pull-request/pull/3691) - build(deps-dev): bump prettier from 3.5.0 to 3.5.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3709](https://redirect.github.com/peter-evans/create-pull-request/pull/3709) - build(deps-dev): bump eslint-import-resolver-typescript from 3.7.0 to 3.8.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3710](https://redirect.github.com/peter-evans/create-pull-request/pull/3710) - build(deps): bump [@​octokit/plugin-paginate-rest](https://redirect.github.com/octokit/plugin-paginate-rest) from 11.4.1 to 11.4.2 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3713](https://redirect.github.com/peter-evans/create-pull-request/pull/3713) - build(deps-dev): bump [@​types/node](https://redirect.github.com/types/node) from 18.19.75 to 18.19.76 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3712](https://redirect.github.com/peter-evans/create-pull-request/pull/3712) - build(deps): bump [@​octokit/core](https://redirect.github.com/octokit/core) from 6.1.3 to 6.1.4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/peter-evans/create-pull-request/pull/3711](https://redirect.github.com/peter-evans/create-pull-request/pull/3711) - Update distribution by [@​actions-bot](https://redirect.github.com/actions-bot) in [https://github.com/peter-evans/create-pull-request/pull/3736](https://redirect.github.com/peter-evans/create-pull-request/pull/3736) - Use showFileAtRefBase64 to read per-commit file contents by [@​grahamc](https://redirect.github.com/grahamc) in [https://github.com/peter-evans/create-pull-request/pull/3744](https://redirect.github.com/peter-evans/create-pull-request/pull/3744) #### New Contributors - [@​ybiquitous](https://redirect.github.com/ybiquitous) made their first contribution in [https://github.com/peter-evans/create-pull-request/pull/3626](https://redirect.github.com/peter-evans/create-pull-request/pull/3626) - [@​grahamc](https://redirect.github.com/grahamc) made their first contribution in [https://github.com/peter-evans/create-pull-request/pull/3744](https://redirect.github.com/peter-evans/create-pull-request/pull/3744) **Full Changelog**: peter-evans/create-pull-request@v7.0.6...v7.0.7 </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.49.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.10): 2.49.10 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.9...v2.49.10) - Update `release-plz@latest` to 0.3.124. ### [`v2.49.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.9): 2.49.9 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.8...v2.49.9) - Update `typos@latest` to 1.30.0. ### [`v2.49.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.8): 2.49.8 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.7...v2.49.8) - Update `cargo-binstall@latest` to 1.11.2. - Update `cargo-audit@latest` to 0.21.2. ### [`v2.49.7`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.7): 2.49.7 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.6...v2.49.7) - Update `cargo-deny@latest` to 0.18.1. ### [`v2.49.6`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.6): 2.49.6 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.5...v2.49.6) - Update `cargo-lambda@latest` to 1.7.0. ### [`v2.49.5`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.5): 2.49.5 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.4...v2.49.5) - Update `wasmtime@latest` to 30.0.2. - Update `release-plz@latest` to 0.3.123. ### [`v2.49.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.4): 2.49.4 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.3...v2.49.4) - Update `typos@latest` to 1.29.10. ### [`v2.49.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.3): 2.49.3 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.2...v2.49.3) - Update `wash@latest` to 0.39.0. - Update `cargo-nextest@latest` to 0.9.92. ### [`v2.49.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.2): 2.49.2 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.1...v2.49.2) - Update `sccache@latest` to 0.10.0. - Update `cargo-machete@latest` to 0.8.0. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10pm on monday" in timezone Asia/Shanghai, Automerge - "before 10pm on monday" in timezone Asia/Shanghai. 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzYuMiIsInVwZGF0ZWRJblZlciI6IjM5LjE3Ni4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
graphite-app
bot
force-pushed
the
renovate/github-actions
branch
from
d963c92 to
1ed18bd
Compare
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.2.1->v4.2.2v4.1.8->v4.1.9v5.3.1->v5.4.0v7.0.6->v7.0.7v2.49.1->v2.49.10Release Notes
actions/cache (actions/cache)
v4.2.2Compare Source
What's Changed
Full Changelog: actions/cache@v4.2.1...v4.2.2
actions/download-artifact (actions/download-artifact)
v4.1.9Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4...v4.1.9
codecov/codecov-action (codecov/codecov-action)
v5.4.0Compare Source
What's Changed
use_pypibypasses integrity checks too by @webknjaz in https://github.com/codecov/codecov-action/pull/1773Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0
peter-evans/create-pull-request (peter-evans/create-pull-request)
v7.0.7: Create Pull Request v7.0.7Compare Source
⚙️ Fixes an issue with commit signing where modifications to the same file in multiple commits squash into the first commit.
What's Changed
New Contributors
Full Changelog: peter-evans/create-pull-request@v7.0.6...v7.0.7
taiki-e/install-action (taiki-e/install-action)
v2.49.10: 2.49.10Compare Source
release-plz@latestto 0.3.124.v2.49.9: 2.49.9Compare Source
typos@latestto 1.30.0.v2.49.8: 2.49.8Compare Source
Update
cargo-binstall@latestto 1.11.2.Update
cargo-audit@latestto 0.21.2.v2.49.7: 2.49.7Compare Source
cargo-deny@latestto 0.18.1.v2.49.6: 2.49.6Compare Source
cargo-lambda@latestto 1.7.0.v2.49.5: 2.49.5Compare Source
Update
wasmtime@latestto 30.0.2.Update
release-plz@latestto 0.3.123.v2.49.4: 2.49.4Compare Source
typos@latestto 1.29.10.v2.49.3: 2.49.3Compare Source
Update
wash@latestto 0.39.0.Update
cargo-nextest@latestto 0.9.92.v2.49.2: 2.49.2Compare Source
Update
sccache@latestto 0.10.0.Update
cargo-machete@latestto 0.8.0.Configuration
📅 Schedule: Branch creation - "before 10pm on monday" in timezone Asia/Shanghai, Automerge - "before 10pm on monday" in timezone Asia/Shanghai.
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.