Update GH Actions#1
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
a1400f8 to
917b335
Compare
6abd280 to
ee3956b
Compare
ee3956b to
6e689d2
Compare
87460a4 to
42312c2
Compare
183608b to
620991c
Compare
620991c to
e21bd4f
Compare
e21bd4f to
b9e91e5
Compare
8a949db to
d071750
Compare
d071750 to
8e9a93a
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4→v5v4→v6v4→v8v4→v7v4→v6v15→v17v30→v31v5→v6v1.5.1→v1.5.2v3.1.0→v4.5.2v2.26.0→v2.31.1v2→v32022→2025Release Notes
actions/cache (actions/cache)
v5.0.5Compare Source
What's Changed
Full Changelog: actions/cache@v5...v5.0.5
v5.0.4Compare Source
v5.0.3Compare Source
What's Changed
@actions/cacheto v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)@actions/coreto v2.0.3Full Changelog: actions/cache@v5...v5.0.3
v5.0.2Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
v5Compare Source
actions/checkout (actions/checkout)
v6.0.3Compare Source
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.1Compare Source
What's Changed
Full Changelog: actions/checkout@v5...v5.0.1
v5.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v5Compare Source
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter tofalse.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v8Compare Source
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v7Compare Source
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaroundYou download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: actions/download-artifact@v4...v5.0.0
v5Compare Source
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v7Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.0Compare Source
v5Compare Source
aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)
v6.2.0Compare Source
v6.1.3Compare Source
Bug Fixes
v6.1.2Compare Source
Bug Fixes
v6.1.1Compare Source
What's Changed
Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1
v6.1.0Compare Source
Features
v6.0.0Compare Source
⚠ BREAKING CHANGES
Features
Bug Fixes
aws-account-idandauthenticated-arnwhen using role-chaining (#1633) (7ceaf96)v6Compare Source
v5.1.1Compare Source
Miscellaneous Chores
v5.1.0Compare Source
Features
Bug Fixes
v5.0.0Compare Source
⚠ BREAKING CHANGES
Features
v5Compare Source
cachix/cachix-action (cachix/cachix-action)
v17Compare Source
What's Changed
Breaking changes
https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Bug fixes
Full Changelog: cachix/cachix-action@v16...v17
v16Compare Source
What's Changed
Full Changelog: cachix/cachix-action@v15...v16
cachix/install-nix-action (cachix/install-nix-action)
v31.10.6Compare Source
What's Changed
GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High.
GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.
Full Changelog: cachix/install-nix-action@v31...v31.10.6
v31.10.5Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.10.5
v31.10.4Compare Source
What's Changed
[SECURITY] Fixes a root privilege escalation vulnerability via sandbox escape GHSA-g3g9-5vj6-r3gj
Full Changelog: cachix/install-nix-action@v31.10.3...v31.10.4
v31.10.3Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.10.3
v31.10.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.10.2
v31.10.1Compare Source
What's Changed
Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by
cachix-action.Full Changelog: cachix/install-nix-action@v31.10.0...v31.10.1
v31.10.0Compare Source
What's Changed
Release notes: https://discourse.nixos.org/t/nix-2-34-0-released/75818
trusted-user+ a client-sidenetrc-file), breaks authentication with private caches that rely onnetrcfiles. This regression affectscachix/cachix-action.UPD: 2.34.1 has been released with a patch for the authentication issue
Full Changelog: cachix/install-nix-action@v31.9.1...v31.10.0
v31.9.1Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.9.1
v31.9.0Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.4...v31.9.0
v31.8.4Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.3...v31.8.4
v31.8.3Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.2...v31.8.3
v31.8.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.1...v31.8.2
v31.8.1Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.8.1
v31.8.0Compare Source
What's Changed
Release notes: https://discourse.nixos.org/t/nix-2-32-0-released/70528
Full Changelog: cachix/install-nix-action@v31.7.0...v31.8.0
v31.7.0Compare Source
What's Changed
feat: set up the environment based on the installer shell scripts by @sandydoo in #251
Configures the following environment variables:
NIX_PROFILESNIX_SSL_CERT_FILE(if not set)Adds the bin directory from the user's profile to
$PATH.Full Changelog: cachix/install-nix-action@v31.6.2...v31.7.0
v31.6.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.6.2
v31.6.1Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.6.1
v31.6.0Compare Source
What's Changed
nix developby @jennydaman in #248Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465
New Contributors
Full Changelog: cachix/install-nix-action@v31.5.2...v31.6.0
v31.5.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.5.2
v31.5.1Compare Source
What's Changed
[SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. GHSA-qc7j-jgf3-qmhg
New Contributors
Full Changelog: cachix/install-nix-action@v31.5.0...v31.5.1
v31.5.0Compare Source
What's Changed
Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html
Full Changelog: cachix/install-nix-action@v31.4.1...v31.5.0
v31.4.1Compare Source
What's Changed
[SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
New Contributors
Full Changelog: cachix/install-nix-action@v31.4.0...v31.4.1
v31.4.0Compare Source
What's Changed
Release notes: https://nix.dev/manual/nix/2.29/release-notes/rl-2.29
Full Changelog: cachix/install-nix-action@v31.3.0...v31.4.0
v31.3.0Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.2.0...v31.3.0
v31.2.0Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.1.0...v31.2.0
v31.1.0Compare Source
What's Changed
--darwin-use-unencrypted-nix-store-volumeflag by @sandydoo in #230Full Changelog: cachix/install-nix-action@v31.0.0...v31.1.0
v31.0.0Compare Source
What's Changed
New Contributors
Full Changelog: cachix/install-nix-action@v30...v31.0.0
v31Compare Source
Starting with v31, this action will use semantic versioning for releases.
Major tags, like v31, will be bumped to point to the latest minor/patch release.
This is in line with how most GitHub actions manage releases.
What's Changed
nix: 2.26.3 -> 2.28.2 by @Mic92 in #232
nix: 2.24.9 -> 2.25.2 by @Mic92 in #218
ci: fix latest installer tests by @sandydoo in #220
ci: add ubuntu-24.04-arm to matrix by @msgilligan in #221
nix: 2.25.2 -> 2.26.2 by @Mic92 in #226
nix: 2.26.2 -> 2.26.3 by @sandydoo in #228
feat: Pin actions to hashes by @l0b0 in #201
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot in #234
docs: document how to provide AWS credentials to the nix-daemon by @sandydoo in #235
nix: 2.28.2 -> 2.28.3 by @Mic92 in #236
nix: 2.28.3 -> 2.29.0 by @Mic92 in #239
Release notes: https://nix.dev/manual/nix/latest/release-notes/rl-2.29
Automate nix updates in CI by @Mic92 in #241
nix: 2.29.0 -> 2.29.1 by @github-actions in #243
[SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
nix: 2.29.1 -> 2.30.0 by @github-actions in #244
Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html
nix: 2.30.0 -> 2.30.1 by @xokdvium in #245
[SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. GHSA-qc7j-jgf3-qmhg
docs: add example for
nix developby @jennydaman in #248nix: 2.30.2 -> 2.31.0 by @github-actions[bot] in #250
Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465
nix: 2.31.0 -> 2.31.1 by @github-actions[bot] in #253
nix: 2.31.1 -> 2.31.2 by @github-actions[bot] in #256
feat: set up the environment based on the installer shell scripts by @sandydoo in #251
Adds the bin directory from the user's profile to
$PATH.Configures the following environment variables:
NIX_PROFILESNIX_SSL_CERT_FILE(if not set)nix: 2.31.2 -> 2.32.0 by @github-actions[bot] in [#&Recursive data structures should have nilable fields crystal-lang/crystal#8
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.