🌱 Update github-actions group (minor) #1568

syself-bot · 2025-03-24T11:02:23Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	`v4.2.3` -> `v4.3.0`
actions/cache	action	digest	`d4323d4` -> `0057852`
actions/checkout	action	minor	`v4.2.2` -> `v4.3.0`
actions/checkout	action	digest	`11bd719` -> `08eba0b`
actions/create-github-app-token	action	digest	`21cfef2` -> `d72941d`
actions/download-artifact	action	digest	`cc20338` -> `d3f86a1`
actions/setup-go	action	minor	`v5.3.0` -> `v5.5.0`
actions/setup-node	action	digest	`cdca736` -> `49933ea`
actions/upload-artifact	action	digest	`4cec3d8` -> `ea165f8`
docker/build-push-action	action	digest	`471d1dc` -> `2634353`
docker/build-push-action	action	minor	`v6.15.0` -> `v6.18.0`
docker/login-action	action	minor	`v3.4.0` -> `v3.6.0`
docker/metadata-action	action	minor	`v5.7.0` -> `v5.9.0`
docker/setup-buildx-action	action	digest	`b5ca514` -> `e468171`
docker/setup-buildx-action	action	minor	`v3.10.0` -> `v3.11.1`
docker/setup-qemu-action	action	digest	`2910929` -> `c7c5346`
hetznercloud/tps-action	action	digest	`dee5dd2` -> `769ba70`
sigstore/cosign-installer	action	minor	`v3.8.1` -> `v3.10.1`
softprops/action-gh-release	action	digest	`c95fe14` -> `6da8fa9`

Release Notes

actions/cache (actions/cache)

What's Changed

Update README.md by @nebuk89 in https://github.com/actions/cache/pull/1620
Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in https://github.com/actions/cache/pull/1634
Prepare release 4.2.4 by @Link- in https://github.com/actions/cache/pull/1636

New Contributors

@nebuk89 made their first contribution in https://github.com/actions/cache/pull/1620

Full Changelog: actions/cache@v4...v4.2.4

actions/checkout (actions/checkout)

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in https://github.com/actions/checkout/pull/1971
Add internal repos for checking out multiple repositories by @mouismail in https://github.com/actions/checkout/pull/1977
Documentation update - add recommended permissions to Readme by @benwells in https://github.com/actions/checkout/pull/2043
Adjust positioning of user email note and permissions heading by @joshmgross in https://github.com/actions/checkout/pull/2044
Update README.md by @nebuk89 in https://github.com/actions/checkout/pull/2194
Update CODEOWNERS for actions by @TingluoHuang in https://github.com/actions/checkout/pull/2224
Update package dependencies by @salmanmkc in https://github.com/actions/checkout/pull/2236
Prepare release v4.3.0 by @salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

@motss made their first contribution in https://github.com/actions/checkout/pull/1971
@mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
@benwells made their first contribution in https://github.com/actions/checkout/pull/2043
@nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
@salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/setup-go (actions/setup-go)

`v5.5.0`

Compare Source

What's Changed

Bug fixes:

Update self-hosted environment validation by @priyagupta108 in https://github.com/actions/setup-go/pull/556
Add manifest validation and improve error handling by @priyagupta108 in https://github.com/actions/setup-go/pull/586
Update template link by @jsoref in https://github.com/actions/setup-go/pull/527

Dependency updates:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/574
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in https://github.com/actions/setup-go/pull/573
Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in https://github.com/actions/setup-go/pull/582
Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot in https://github.com/actions/setup-go/pull/537

New Contributors

@jsoref made their first contribution in https://github.com/actions/setup-go/pull/527

Full Changelog: actions/setup-go@v5...v5.5.0

`v5.4.0`

Compare Source

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-go/pull/535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in https://github.com/actions/setup-go/pull/536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

@aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

docker/build-push-action (docker/build-push-action)

`v6.18.0`

Compare Source

Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 in https://github.com/docker/build-push-action/pull/1381

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

`v6.17.0`

Compare Source

Bump @docker/actions-toolkit from 0.59.0 to 0.61.0 by @crazy-max in https://github.com/docker/build-push-action/pull/1364

[!NOTE]
Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

`v6.16.0`

Compare Source

Handle no default attestations env var by @crazy-max in https://github.com/docker/build-push-action/pull/1343
Only print secret keys in build summary output by @crazy-max in https://github.com/docker/build-push-action/pull/1353
Bump @docker/actions-toolkit from 0.56.0 to 0.59.0 in https://github.com/docker/build-push-action/pull/1352

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

docker/login-action (docker/login-action)

`v3.6.0`

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in https://github.com/docker/login-action/pull/887
Bump @aws-sdk/client-ecr to 3.890.0 in https://github.com/docker/login-action/pull/882 https://github.com/docker/login-action/pull/890
Bump @aws-sdk/client-ecr-public to 3.890.0 in https://github.com/docker/login-action/pull/882 https://github.com/docker/login-action/pull/890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in https://github.com/docker/login-action/pull/883
Bump brace-expansion from 1.1.11 to 1.1.12 in https://github.com/docker/login-action/pull/880
Bump undici from 5.28.4 to 5.29.0 in https://github.com/docker/login-action/pull/879
Bump tmp from 0.2.3 to 0.2.4 in https://github.com/docker/login-action/pull/881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in https://github.com/docker/login-action/pull/874 https://github.com/docker/login-action/pull/876
Bump @aws-sdk/client-ecr to 3.859.0 in https://github.com/docker/login-action/pull/860 https://github.com/docker/login-action/pull/878
Bump @aws-sdk/client-ecr-public to 3.859.0 in https://github.com/docker/login-action/pull/860 https://github.com/docker/login-action/pull/878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in https://github.com/docker/login-action/pull/870
Bump form-data from 2.5.1 to 2.5.5 in https://github.com/docker/login-action/pull/875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

docker/metadata-action (docker/metadata-action)

`v5.9.0`

Compare Source

Add tag-names output to return tag names without image base name by @crazy-max in https://github.com/docker/metadata-action/pull/553
Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in https://github.com/docker/metadata-action/pull/539
Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in https://github.com/docker/metadata-action/pull/555
Bump brace-expansion from 1.1.11 to 1.1.12 in https://github.com/docker/metadata-action/pull/540
Bump csv-parse from 5.6.0 to 6.1.0 in https://github.com/docker/metadata-action/pull/532
Bump semver from 7.7.2 to 7.7.3 in in https://github.com/docker/metadata-action/pull/554
Bump tmp from 0.2.3 to 0.2.5 in https://github.com/docker/metadata-action/pull/541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

`v5.8.0`

Compare Source

New is_not_default_branch global expression by @crazy-max in https://github.com/docker/metadata-action/pull/535
Allow to match part of the git tag or value for semver/pep440 types by @crazy-max in https://github.com/docker/metadata-action/pull/536 https://github.com/docker/metadata-action/pull/537
Bump @actions/github from 6.0.0 to 6.0.1 in https://github.com/docker/metadata-action/pull/523
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/metadata-action/pull/526
Bump form-data from 2.5.1 to 2.5.5 in https://github.com/docker/metadata-action/pull/533
Bump moment-timezone from 0.5.47 to 0.6.0 in https://github.com/docker/metadata-action/pull/525
Bump semver from 7.7.1 to 7.7.2 in https://github.com/docker/metadata-action/pull/524

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.11.1`

Compare Source

Fix keep-state not being respected by @crazy-max in https://github.com/docker/setup-buildx-action/pull/429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

`v3.11.0`

Compare Source

Keep BuildKit state support by @crazy-max in https://github.com/docker/setup-buildx-action/pull/427
Remove aliases created when installing by default by @hashhar in https://github.com/docker/setup-buildx-action/pull/139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/setup-buildx-action/pull/422 https://github.com/docker/setup-buildx-action/pull/425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

sigstore/cosign-installer (sigstore/cosign-installer)

`v3.10.1`

Compare Source

What's Changed?

Note: cosign-installer v3.x cannot be used to install Cosign v3.x. You must upgrade to cosign-installer v4 in order to use Cosign v3.

Note: This is planned to be the final release of Cosign v2, though we will cut new releases for any critical security or bug fixes. We recommend transitioning to Cosign v3.

Bump default Cosign to v2.6.1 (#203)

`v3.10.0`

Compare Source

What's Changed

Bump default Cosign to v2.6.0 in https://github.com/sigstore/cosign-installer/pull/200

Full Changelog: sigstore/cosign-installer@v3.9.2...v3.10.0

`v3.9.2`

Compare Source

What's Changed

not fail fast and setup permissions in https://github.com/sigstore/cosign-installer/pull/195
drop old unsupported versions <v2.0.0 inhttps://github.com/sigstore/cosign-installer/pull/1922
Update default to v2.5.3 in https://github.com/sigstore/cosign-installer/pull/196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

`v3.9.1`

Compare Source

What's Changed

default action install to use release v2.5.1 by @cpanato in https://github.com/sigstore/cosign-installer/pull/193
default cosign to v2.5.2 by @cpanato in https://github.com/sigstore/cosign-installer/pull/194

Full Changelog: sigstore/cosign-installer@v3.9.0...v3.9.1

`v3.9.0`

Compare Source

What's Changed

Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in https://github.com/sigstore/cosign-installer/pull/189
bump cosign install to use release v2.5.0 as default by @cpanato in https://github.com/sigstore/cosign-installer/pull/191

Full Changelog: sigstore/cosign-installer@v3...v3.9.0

`v3.8.2`

Compare Source

What's Changed

install cosign v2 from main in https://github.com/sigstore/cosign-installer/pull/186

Full Changelog: sigstore/cosign-installer@v3...v3.8.2

Configuration

📅 Schedule: Branch creation - "on monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

| datasource | package | from | to | | ----------- | -------------------------- | ------- | ------- | | github-tags | actions/cache | v4.2.3 | v4.3.0 | | github-tags | actions/checkout | v4.2.2 | v4.3.0 | | github-tags | actions/setup-go | v5.3.0 | v5.5.0 | | github-tags | docker/build-push-action | v6.15.0 | v6.18.0 | | github-tags | docker/login-action | v3.4.0 | v3.6.0 | | github-tags | docker/metadata-action | v5.7.0 | v5.9.0 | | github-tags | docker/setup-buildx-action | v3.10.0 | v3.11.1 | | github-tags | sigstore/cosign-installer | v3.8.1 | v3.10.1 |

syself-bot bot added type/minor update/github-action size/S Denotes a PR that changes 20-50 lines, ignoring generated files. area/github Changes made in the github directory labels Mar 24, 2025

syself-bot bot force-pushed the renovate/github-actions branch from 30f5108 to b8d9893 Compare March 29, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from f9571f2 to df5ed6a Compare April 14, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from 0425e3b to c7b7085 Compare April 25, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from c7b7085 to 7aac533 Compare May 8, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from a101169 to d2f2e8f Compare May 22, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from d2f2e8f to bbcf109 Compare May 28, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 3 times, most recently from 1515648 to 87121df Compare June 17, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from 87121df to e28b6b2 Compare June 18, 2025 11:02

github-actions bot added size/M Denotes a PR that changes 50-200 lines, ignoring generated files. and removed size/S Denotes a PR that changes 20-50 lines, ignoring generated files. labels Jun 18, 2025

syself-bot bot force-pushed the renovate/github-actions branch from e28b6b2 to 3efb051 Compare June 24, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from 3efb051 to 7a5b57c Compare July 10, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from 7a5b57c to db937bd Compare July 18, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 3 times, most recently from fb46870 to 62a250a Compare August 8, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from e01f1ec to d3cf14d Compare August 13, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from ee11520 to b6464ee Compare September 13, 2025 11:01

syself-bot bot force-pushed the renovate/github-actions branch from b6464ee to af6bf0f Compare September 17, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from af6bf0f to b683e10 Compare September 25, 2025 11:03

syself-bot bot changed the title ~~🌱 Update github-actions group~~ 🌱 Update github-actions group (minor) Sep 25, 2025

syself-bot bot force-pushed the renovate/github-actions branch from b683e10 to f69a299 Compare September 29, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch 2 times, most recently from 05effd6 to 30d9b5a Compare October 12, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from 30d9b5a to 8e49e81 Compare October 17, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from 8e49e81 to 2c44533 Compare November 5, 2025 11:02

syself-bot bot force-pushed the renovate/github-actions branch from 2c44533 to dffe538 Compare November 6, 2025 11:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🌱 Update github-actions group (minor) #1568

🌱 Update github-actions group (minor) #1568

Uh oh!

syself-bot bot commented Mar 24, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

🌱 Update github-actions group (minor) #1568

Are you sure you want to change the base?

🌱 Update github-actions group (minor) #1568

Uh oh!

Conversation

syself-bot bot commented Mar 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Dependency updates :

New Contributors

What's Changed?

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

syself-bot bot commented Mar 24, 2025 •

edited

Loading