chore(deps): update github-actions (maint) #10424

renovate-bot · 2025-12-01T09:10:01Z

This PR contains the following updates:

Package	Type	Update	Change
EnricoMi/publish-unit-test-result-action	action	minor	`v2.20.0` → `v2.22.0`
actions/cache	action	digest	`5a3ec84` → `9255dc7`
actions/cache	action	minor	`v4.2.4` → `v4.3.0`
actions/checkout	action	minor	`v4.2.2` → `v4.3.1`
actions/checkout (changelog)	action	digest	`11bd719` → `34e1148`
actions/create-github-app-token	action	digest	`6701853` → `29824e6`
actions/create-github-app-token	action	minor	`v2.1.4` → `v2.2.1`
actions/github-script	action	minor	`v7.0.1` → `v7.1.0`
advanced-security/spdx-dependency-submission-action	action	patch	`v0.1.1` → `v0.1.2`
docker/login-action	action	minor	`v3.5.0` → `v3.6.0`
erlef/setup-beam	action	digest	`5304e04` → `566deeb`
erlef/setup-beam (changelog)	action	digest	`5304e04` → `e6d7c94`
ghcr.io/sethvargo/ratchet	docker	digest	`2946723` → `527e78e`
github/codeql-action	action	digest	`ff0a06e` → `0fa411e`
softprops/action-gh-release	action	minor	`v2.3.2` → `v2.5.0`
vmactions/freebsd-vm (changelog)	action	digest	`966989c` → `9832a7f`

Release Notes

EnricoMi/publish-unit-test-result-action (EnricoMi/publish-unit-test-result-action)

`v2.22.0`

Compare Source

Adds the following improvements:

Upgrade all Python dependencies to latest version #710

Full Changelog: EnricoMi/publish-unit-test-result-action@v2.21.0...v2.22.0

`v2.21.0`

Compare Source

Adds the following improvements:

Add Docker action to allow setting Docker registry and image #688
Fix class name matching for NUnit3 #689
Upgrade all Python dependencies to latest version #695
Fix @2 tag in README.md to @v2 #687

Full Changelog: EnricoMi/publish-unit-test-result-action@v2.20.0...v2.21.0

actions/cache (actions/cache)

`v4.3.0`

Compare Source

What's Changed

Add note on runner versions by @GhadimiR in #1642
Prepare v4.3.0 release by @Link- in #1655

New Contributors

@GhadimiR made their first contribution in #1642

Full Changelog: actions/cache@v4...v4.3.0

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

actions/github-script (actions/github-script)

`v7.1.0`

Compare Source

What's Changed

Upgrade husky to v9 by @benelan in #482
Add workflow file for publishing releases to immutable action package by @Jcambass in #485
Upgrade IA Publish by @Jcambass in #486
Fix workflow status badges by @joshmgross in #497
Update usage of actions/upload-artifact by @joshmgross in #512
Clear up package name confusion by @joshmgross in #514
Update dependencies with npm audit fix by @joshmgross in #515
Specify that the used script is JavaScript by @timotk in #478
chore: Add Dependabot for NPM and Actions by @nschonni in #472
Define permissions in workflows and update actions by @joshmgross in #531
chore: Add Dependabot for .github/actions/install-dependencies by @nschonni in #532
chore: Remove .vscode settings by @nschonni in #533
ci: Use github/setup-licensed by @nschonni in #473
make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @iamstarkov in #508
Remove octokit README updates for v7 by @joshmgross in #557
docs: add "exec" usage examples by @neilime in #546
Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @dependabot[bot] in #563
Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @dependabot[bot] in #575
Clearly document passing inputs to the script by @joshmgross in #603
Update README.md by @nebuk89 in #610

New Contributors

@benelan made their first contribution in #482
@Jcambass made their first contribution in #485
@timotk made their first contribution in #478
@iamstarkov made their first contribution in #508
@neilime made their first contribution in #546
@nebuk89 made their first contribution in #610

Full Changelog: actions/github-script@v7...v7.1.0

advanced-security/spdx-dependency-submission-action (advanced-security/spdx-dependency-submission-action)

`v0.1.2`: - features and maintenance release

Compare Source

What's Changed

Update CODEOWNERS to DG team by @jhutchings1 in #49
Update CODEOWNERS by @GeekMasher in #54
deps: bump actions/setup-node from 4.0.2 to 4.2.0 in the production-dependencies group across 1 directory by @dependabot[bot] in #69
feat: Update dependabot.yml by @GeekMasher in #55
feat: Add support for running inside a matrix by overriding the default correlator identifier by @felickz in #50
deps: bump actions/setup-node from 4.2.0 to 4.3.0 in the production-dependencies group by @dependabot[bot] in #71
deps: bump actions/setup-node from 4.3.0 to 4.4.0 in the production-dependencies group by @dependabot[bot] in #72
Update README.md to use v4 for checkout and upload-artifact by @CallMeGreg in #73
conditional test - do not run on PR from fork by @felickz in #74
Bump the npm_and_yarn group across 1 directory with 5 updates by @dependabot[bot] in #77
deps: bump actions/checkout from 4 to 5 in the production-dependencies group by @dependabot[bot] in #79
chore: bump the development-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #78
chore: bump js-yaml from 3.14.1 to 3.14.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #86
deps: bump the production-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #76
chore: bump glob from 10.4.5 to 10.5.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #87
deps: bump the production-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #85
deps: Bump the production-dependencies group across 1 directory with 2 updates by @dependabot[bot] in #89
chore: bump the development-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #82
Fix for "workflow does not contain permissions", plus updated dist and fixed test failure with lazy loading of submission toolkit by @aegilops in #90
deps: bump @actions/core from 1.11.1 to 2.0.1 in the production-dependencies group by @dependabot[bot] in #92

New Contributors

@felickz made their first contribution in #50
@CallMeGreg made their first contribution in #73
@aegilops made their first contribution in #90

Full Changelog: advanced-security/spdx-dependency-submission-action@v0.1.1...v0.1.2

docker/login-action (docker/login-action)

`v3.6.0`

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

softprops/action-gh-release (softprops/action-gh-release)

`v2.5.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat: mark release as draft until all artifacts are uploaded by @dumbmoron in #692

Other Changes 🔄

chore(deps): bump the npm group across 1 directory with 5 updates by @dependabot[bot] in #697
chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the github-actions group by @dependabot[bot] in #689

New Contributors

@dumbmoron made their first contribution in #692

Full Changelog: softprops/action-gh-release@v2.4.2...v2.5.0

`v2.4.2`

Compare Source

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in #684

Other Changes 🔄

dependency updates

New Contributors

@BeryJu made their first contribution in #684

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

`v2.4.1`

Compare Source

What's Changed

Other Changes 🔄

fix(util): support brace expansion globs containing commas in parseInputFiles by @Copilot in #672
fix: gracefully fallback to body when body_path cannot be read by @Copilot in #671

Full Changelog: softprops/action-gh-release@v2...v2.4.1

`v2.4.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat(action): respect working_directory for files globs by @stephenway in #667

Other Changes 🔄

chore(deps): bump the npm group with 2 updates by @dependabot[bot] in #668

Full Changelog: softprops/action-gh-release@v2.3.4...v2.4.0

`v2.3.4`

Compare Source

What's Changed

Bug fixes 🐛

fix(action): handle 422 already_exists race condition by @stephenway in #665

Other Changes 🔄

chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 in the github-actions group by @dependabot[bot] in #656
chore(deps): bump @types/node from 20.19.11 to 20.19.13 in the npm group by @dependabot[bot] in #655
chore(deps): bump vite from 7.0.0 to 7.1.5 by @dependabot[bot] in #657
chore(deps): bump the npm group across 1 directory with 2 updates by @dependabot[bot] in #662
chore(deps): bump the npm group with 3 updates by @dependabot[bot] in #666

Full Changelog: softprops/action-gh-release@v2...v2.3.4

`v2.3.3`

Compare Source

What's Changed

Exciting New Features 🎉

feat: add input option overwrite_files by @asfernandes in #343

Other Changes 🔄

dependency updates

New Contributors

@asfernandes made their first contribution in #343

Full Changelog: softprops/action-gh-release@v2...v2.3.3

Configuration

📅 Schedule: Branch creation - "after 2am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

CLAassistant · 2025-12-01T09:10:09Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

github-actions · 2025-12-01T09:10:51Z

CT Test Results

1 files 11 suites 4m 14s ⏱️
95 tests 91 ✅ 4 💤 0 ❌
111 runs 107 ✅ 4 💤 0 ❌

Results for commit e17f485.

♻️ This comment has been updated with latest results.

To speed up review, make sure that you have read Contributing to Erlang/OTP and that all checks pass.

See the TESTING and DEVELOPMENT HowTo guides for details about how to run test locally.

Artifacts

// Erlang/OTP Github Action Bot

forking-renovate bot added the team:VM Assigned to OTP team VM label Dec 1, 2025

forking-renovate bot assigned garazdawi and kikofernandez Dec 1, 2025

renovate-bot force-pushed the renovate/maint-github-actions branch 3 times, most recently from 69f09c5 to c906a50 Compare December 7, 2025 14:15

renovate-bot force-pushed the renovate/maint-github-actions branch 4 times, most recently from 8901a29 to 1ce3815 Compare December 15, 2025 15:11

renovate-bot force-pushed the renovate/maint-github-actions branch 3 times, most recently from ca6818b to cdff978 Compare December 19, 2025 10:16

renovate-bot force-pushed the renovate/maint-github-actions branch 5 times, most recently from 4e4b138 to 0144c15 Compare December 31, 2025 15:15

renovate-bot force-pushed the renovate/maint-github-actions branch 8 times, most recently from ab33c57 to 0db3874 Compare January 8, 2026 16:02

chore(deps): update github-actions

e17f485

renovate-bot force-pushed the renovate/maint-github-actions branch from 0db3874 to e17f485 Compare January 9, 2026 17:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github-actions (maint) #10424

chore(deps): update github-actions (maint) #10424

renovate-bot commented Dec 1, 2025 •

edited

Loading

Uh oh!

CLAassistant commented Dec 1, 2025

Uh oh!

github-actions bot commented Dec 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

chore(deps): update github-actions (maint) #10424

Are you sure you want to change the base?

chore(deps): update github-actions (maint) #10424

Conversation

renovate-bot commented Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Bug Fixes

Bug Fixes

Features

What's Changed

New Contributors

v0.1.2: - features and maintenance release

What's Changed

New Contributors

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

What's Changed

Other Changes 🔄

What's Changed

Exciting New Features 🎉

Other Changes 🔄

What's Changed

Bug fixes 🐛

Other Changes 🔄

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

Configuration

Uh oh!

CLAassistant commented Dec 1, 2025

Uh oh!

github-actions bot commented Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CT Test Results

Artifacts

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

renovate-bot commented Dec 1, 2025 •

edited

Loading

`v0.1.2`: - features and maintenance release

github-actions bot commented Dec 1, 2025 •

edited

Loading