Skip to content

chore(deps): update github actions#611

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

chore(deps): update github actions#611
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 2, 2026

This PR contains the following updates:

Package Type Update Change Pending
Netcracker/qubership-workflow-hub action patch v2.2.1v2.2.2
actions/cache action patch v5.0.4v5.0.5
actions/setup-go action minor v6.3.0v6.4.0
actions/setup-node action minor v6.3.0v6.4.0
github/codeql-action action minor v4.34.1v4.35.5 v4.36.0
netcracker/qubership-workflow-hub action patch v2.2.1v2.2.2
netcracker/qubership-workflow-hub action minor v2.1.2v2.2.2
super-linter/super-linter action minor v8.5.0v8.6.0
webiny/action-conventional-commits action minor v1.3.1v1.4.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

Netcracker/qubership-workflow-hub (Netcracker/qubership-workflow-hub)

v2.2.2: 2.2.2

Compare Source

🚀 Release
What's Changed
💡 New Features
📝 Documentation

Full Changelog: Netcracker/qubership-workflow-hub@v2.2.1...v2.2.2

actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

actions/setup-go (actions/setup-go)

v6.4.0

Compare Source

What's Changed
Enhancement
  • Add go-download-base-url input for custom Go distributions by @​gdams in #​721
Dependency update
Documentation update
New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

actions/setup-node (actions/setup-node)

v6.4.0

Compare Source

github/codeql-action (github/codeql-action)

v4.35.5

Compare Source

  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880

v4.35.4

Compare Source

v4.35.3

Compare Source

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865

v4.35.2

Compare Source

  • The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #​3795
  • The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #​3789
  • Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #​3794
  • Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #​3807
  • Update default CodeQL bundle version to 2.25.2. #​3823

v4.35.1

Compare Source

v4.35.0

Compare Source

netcracker/qubership-workflow-hub (netcracker/qubership-workflow-hub)

v2.2.2: 2.2.2

Compare Source

🚀 Release
What's Changed
💡 New Features
📝 Documentation

Full Changelog: Netcracker/qubership-workflow-hub@v2.2.1...v2.2.2

super-linter/super-linter (super-linter/super-linter)

v8.6.0

Compare Source

🚀 Features
🐛 Bugfixes
⬆️ Dependency updates
  • bundler: bump rubocop in /dependencies in the rubocop group (#​7514) (f2264d2)
  • bundler: bump rubocop in /dependencies in the rubocop group (#​7604) (c929dc3)
  • bundler: bump rubocop in /dependencies in the rubocop group (#​7662) (bfb2fd9)
  • bundler: bump rubocop-github in /dependencies in the rubocop group (#​7640) (a88d75e)
  • bundler: bump the rubocop group across 1 directory with 2 updates (#​7565) (56ae6b3)
  • docker: bump python in the docker-base-images group (#​7319) (717c087)
  • docker: bump the docker group across 1 directory with 4 updates (#​7698) (11c750e)
  • docker: bump the docker group across 1 directory with 5 updates (#​7615) (d7e1bd8)
  • docker: bump the docker group across 1 directory with 6 updates (#​7566) (0f9cf19)
  • docker: bump the docker group across 1 directory with 6 updates (#​7631) (ad7f508)
  • docker: bump the docker group across 1 directory with 9 updates (#​7513) (89e3725)
  • docker: bump the docker group with 2 updates (#​7577) (8b2f0c0)
  • docker: bump the docker group with 2 updates (#​7641) (7293e37)
  • docker: bump the docker group with 2 updates (#​7663) (eabfa25)
  • java: bump com.puppycrawl.tools:checkstyle (#​7689) (4c66d9d)
  • java: bump the java-gradle group across 2 directories with 2 updates (#​7581) (51af5a0)
  • npm: bump ajv from 6.12.6 to 6.14.0 in /dependencies (#​7550) (7f00eb7)
  • npm: bump axios from 1.12.2 to 1.13.5 in /dependencies (#​7510) (a891169)
  • npm: bump brace-expansion from 1.1.12 to 1.1.13 in /dependencies (#​7685) (92c4cea)
  • npm: bump express-rate-limit from 8.2.1 to 8.3.0 in /dependencies (#​7613) (c184a25)
  • npm: bump flatted from 3.3.3 to 3.4.1 in /dependencies (#​7636) (013d8a7)
  • npm: bump hono from 4.11.7 to 4.12.2 in /dependencies (#​7559) (5c3679f)
  • npm: bump hono from 4.12.5 to 4.12.7 in /dependencies (#​7624) (c31d9ad)
  • npm: bump markdown-it and renovate in /dependencies (#​7529) (9b794c2)
  • npm: bump path-to-regexp from 8.3.0 to 8.4.0 in /dependencies (#​7687) (309fb55)
  • npm: bump picomatch in /dependencies (#​7675) (df4f15e)
  • npm: bump qs from 6.14.1 to 6.14.2 in /dependencies (#​7520) (a9e6534)
  • npm: bump renovate (#​7699) (b91627f)
  • npm: bump renovate from 43.4.0 to 43.4.4 in /dependencies (#​7524) (2ab5b9c)
  • npm: bump smol-toml from 1.6.0 to 1.6.1 in /dependencies (#​7676) (d015498)
  • npm: bump the npm group across 1 directory with 15 updates (#​7595) (58ee821)
  • npm: bump the npm group across 1 directory with 2 updates (#​7623) (ddb4fbb)
  • npm: bump the npm group across 1 directory with 2 updates (#​7664) (7e22df4)
  • npm: bump the npm group across 1 directory with 3 updates (#​7612) (355a779)
  • npm: bump the npm group across 1 directory with 4 updates (#​7633) (6e8bf45)
  • npm: bump the npm group across 1 directory with 7 updates (#​7651) (946725f)
  • npm: bump the npm group across 1 directory with 9 updates (#​7690) (db85efc)
  • npm: bump underscore from 1.13.7 to 1.13.8 in /dependencies (#​7584) (9a661fa)
  • python: bump ruff (#​7659) (576d1c4)
  • python: bump snakefmt (#​7668) (1723a83)
  • python: bump the pip group across 1 directory with 3 updates (#​7509) (d580241)
  • python: bump the pip group across 1 directory with 3 updates (#​7582) (56b7621)
  • python: bump the pip group across 1 directory with 3 updates (#​7634) (e3d8eca)
  • python: bump the pip group across 1 directory with 3 updates (#​7648) (2e8137a)
  • python: bump the pip group across 1 directory with 5 updates (#​7684) (cb17f60)
  • python: bump the pip group across 1 directory with 6 updates (#​7567) (b823682)
  • python: bump the pip group across 1 directory with 6 updates (#​7617) (3d2fc0d)
🧰 Maintenance
webiny/action-conventional-commits (webiny/action-conventional-commits)

v1.4.2

Compare Source

v1.4.1

Compare Source

v1.4.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every 4 day"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Apr 2, 2026
@renovate renovate Bot requested review from IldarMinaev, asatt and vlsi as code owners April 2, 2026 10:36
@renovate renovate Bot force-pushed the renovate/github-actions branch 20 times, most recently from 481fc92 to 73c7b2d Compare April 9, 2026 09:16
@renovate renovate Bot force-pushed the renovate/github-actions branch 6 times, most recently from c634a8b to d33cb3c Compare April 10, 2026 09:02
@renovate renovate Bot force-pushed the renovate/github-actions branch 28 times, most recently from 44991e0 to af4d4dd Compare April 23, 2026 07:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant