chore(deps): update github-actions (major) by renovate[bot] · Pull Request #38 · nanohype/docs

renovate · 2026-08-10T08:52:12Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4` → `v7`
actions/setup-node	action	major	`v4` → `v7`
aws-actions/configure-aws-credentials	action	major	`v4` → `v6`
pnpm/action-setup	action	major	`v4` → `v6`

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v5.1.0`

Compare Source

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

`v5`

Compare Source

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

Miscellaneous Chores

release 6.2.2 (d01d678)

`v6.2.1`

Compare Source

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

`v6.2.0`

Compare Source

Features

add additional session tags by default (#1775) (e0ba768)
add more retry logic and better logging (#1764) (540d0c1)
add regex validation to role-session-name (#1765) (e354499)
Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
expose run id in STS client user-agent (#1774) (29d1be3)
support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

skip credential check on output-env-credentials: false (#1778) (58e7c47)
assumeRole failing from session tag size too large (#1808) (d6f5dc3)

`v6.1.3`

Compare Source

Bug Fixes

fix: allow kubelet token symlink in #1805

`v6.1.2`

Compare Source

Bug Fixes

additional filesystem checks (#1799) (c39f282)

`v6.1.1`

Compare Source

What's Changed

chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @dependabot[bot] in #1722
chore(deps-dev): bump @types/node from 25.5.0 to 25.5.2 by @dependabot[bot] in #1723
chore(deps-dev): bump @smithy/property-provider from 4.2.12 to 4.2.13 by @dependabot[bot] in #1724
chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @dependabot[bot] in #1726
chore(deps): bump @smithy/node-http-handler from 4.5.1 to 4.5.2 by @dependabot[bot] in #1725
chore(deps): bump @aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @dependabot[bot] in #1727
chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @dependabot[bot] in #1728
chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @dependabot[bot] in #1729
chore(deps-dev): bump @types/node from 25.5.2 to 25.6.0 by @dependabot[bot] in #1730
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.24 to 3.972.25 by @dependabot[bot] in #1733
chore(deps): bump @aws-sdk/client-sts from 3.1025.0 to 3.1030.0 by @dependabot[bot] in #1732
chore(deps-dev): bump @biomejs/biome from 2.4.10 to 2.4.11 by @dependabot[bot] in #1734
chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by @dependabot[bot] in #1736
chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by @dependabot[bot] in #1737
chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in #1740
chore(deps-dev): bump @smithy/property-provider from 4.2.13 to 4.2.14 by @dependabot[bot] in #1741
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.25 to 3.972.28 by @dependabot[bot] in #1742
chore(deps): bump @aws-sdk/client-sts from 3.1030.0 to 3.1033.0 by @dependabot[bot] in #1743
chore(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12 by @dependabot[bot] in #1739
chore(deps-dev): bump @biomejs/biome from 2.4.12 to 2.4.13 by @dependabot[bot] in #1747
chore(deps): bump postcss from 8.5.6 to 8.5.12 by @dependabot[bot] in #1752
chore(deps): bump @smithy/node-http-handler from 4.6.0 to 4.6.1 by @dependabot[bot] in #1750
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.28 to 3.972.32 by @dependabot[bot] in #1751
chore(deps): bump @aws-sdk/client-sts from 3.1033.0 to 3.1038.0 by @dependabot[bot] in #1749
chore: release 6.1.1 by @lehmanmj in #1757

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

`v6.1.0`

Compare Source

Features

add skip cleanup option (#1716) (11b1c58), closes #1545
Support usage of AWS Profiles (#1696) (a7f0c82)

`v6.0.0`

Compare Source

⚠ BREAKING CHANGES

Update action to use node24 Note this requires GitHub action runner version v2.327.1 or later (#1632) (a7a2c11)

Features

add support to define transitive tag keys (#1316) (232435c) (930ebd9)

Bug Fixes

properly output aws-account-id and authenticated-arn when using role-chaining (#1633) (7ceaf96)

`v6`

Compare Source

`v5.1.1`

Compare Source

Miscellaneous Chores

release 5.1.1 (56d6a58)
various dependency updates

`v5.1.0`

Compare Source

Features

Add global timeout support (#1487) (1584b8b)
add no-proxy support (#1482) (dde9b22)
Improve debug logging in retry logic (#1485) (97ef425)

Bug Fixes

properly expose getProxyForUrl (introduced in #1482) (#1486) (cea4298)

`v5.0.0`

Compare Source

⚠ BREAKING CHANGES

Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

add skip OIDC option (#1458) (8c45f6b)
Cleanup input handling. Changes invalid boolean input behavior (see #1445) (74b3e27)
support account id allowlist (#1456) (c4be498)

`v5`

Compare Source

pnpm/action-setup (pnpm/action-setup)

`v6.0.10`

Compare Source

`v6.0.9`

Compare Source

What's Changed

fix: update pnpm to v11.7.0 by @zkochan in #267

Full Changelog: pnpm/action-setup@v6...v6.0.9

`v6.0.8`

Compare Source

What's Changed

docs(README): fix cache_dependency_path type by @haines in #257
fix: drop patchPnpmEnv so standalone+self-update works on Windows by @zkochan in #258
fix: update pnpm to 11.1.1 by @mungodewar in #248

New Contributors

@mungodewar made their first contribution in #248

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

`v6.0.7`

Compare Source

What's Changed

fix: honor devEngines.packageManager.onFail=error (#252) by @zkochan in #254
fix: restore inputs from state in post by @haines in #255
fix: self-update bootstrap to packageManager-pinned version (#233) by @zkochan in #256

New Contributors

@haines made their first contribution in #255

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

`v6.0.6`

Compare Source

What's Changed

fix: bin_dest output points to self-updated pnpm, not bootstrap by @zkochan in #249

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

`v6.0.5`

Compare Source

What's Changed

fix: append (not prepend) action node dir to PATH for npm bootstrap by @zkochan in #241

Full Changelog: pnpm/action-setup@v6.0.4...v6.0.5

`v6.0.4`

Compare Source

What's Changed

fix: use npm co-located with the action node binary by @benquarmby in #239

New Contributors

@benquarmby made their first contribution in #239

Full Changelog: pnpm/action-setup@v6.0.3...v6.0.4

`v6.0.3`

Compare Source

Updated pnpm to v11.0.0-rc.5

Full Changelog: pnpm/action-setup@v6.0.2...v6.0.3

`v6.0.2`

Compare Source

What's Changed

fix: pnpm self-update binary shadowed by bootstrap on PATH by @oniani1 in #230

New Contributors

@oniani1 made their first contribution in #230

Full Changelog: pnpm/action-setup@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

Update pnpm to v11.0.0-rc.2. pnpm-lock.yaml will not be saved with two documents unless the packageManager is set via devEngines.packageManager. Related issue: #228

`v6.0.0`

Compare Source

Added support for pnpm v11.

`v6`

Compare Source

`v5.0.0`

Compare Source

Updated the action to use Node.js 24.

`v5`

Compare Source

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

Branch creation
- "before 6am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update github-actions

7d50dbb

renovate Bot added deps needs-review security Security-relevant (never disclose a vulnerability in a public issue — see SECURITY.md) labels Aug 10, 2026

Navigation Menu

Uh oh!

chore(deps): update github-actions (major) - #38

chore(deps): update github-actions (major)#38
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-actions

renovate Bot commented Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 10, 2026

Release Notes

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Documentation

Dependency updates:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

Features

⚠ BREAKING CHANGES

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

⚠ BREAKING CHANGES

Features

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants