Skip to content

Update all non-major dependencies#18

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch
Open

Update all non-major dependencies#18
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented May 25, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
actions/attest action minor v4.1.0v4.2.0
actions/cache action minor v5.0.5v5.1.0
actions/checkout action patch v6.0.2v6.0.3 v6.1.0
actions/setup-go action minor v6.4.0v6.5.0
actions/setup-node action minor v6.4.0v6.5.0
astral-sh/setup-uv action minor v8.1.0v8.3.2
codecov/codecov-action action patch v6v6.0.2
docker/build-push-action action minor v7.1.0v7.3.0
docker/login-action action minor v4.1.0v4.4.0 v4.5.1 (+1)
docker/metadata-action action minor v6v6.2.0
docker/setup-buildx-action action minor v4v4.2.0
pnpm/action-setup action patch v6.0.6v6.0.9
rharkor/caching-for-turbo action minor v2.3.14v2.5.0 v2.5.1
zizmorcore/zizmor-action action minor v0.5.3v0.6.0 v0.6.1
zizmorcore/zizmor-pre-commit repository minor v1.24.1v1.27.0 v1.28.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

actions/attest (actions/attest)

v4.2.0

Compare Source

What's Changed

Full Changelog: actions/attest@v4.1.1...v4.2.0

v4.1.1

Compare Source

What's Changed

Full Changelog: actions/attest@v4.1.0...v4.1.1

actions/cache (actions/cache)

v5.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

actions/checkout (actions/checkout)

v6.0.3

Compare Source

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

astral-sh/setup-uv (astral-sh/setup-uv)

v8.3.2

Compare Source

v8.3.1

Compare Source

v8.3.0

Compare Source

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates
codecov/codecov-action (codecov/codecov-action)

v6.0.2

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

v6.0.1

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

v7.2.0

Compare Source

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

v4.4.0

Compare Source

v4.3.0

Compare Source

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

Full Changelog: docker/login-action@v4.1.0...v4.2.0

docker/metadata-action (docker/metadata-action)

v6.2.0

Compare Source

v6.1.0

Compare Source

  • Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​613
  • Bump brace-expansion from 1.1.12 to 5.0.6 in #​658 #​630
  • Bump csv-parse from 6.1.0 to 6.2.1 in #​617
  • Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​620
  • Bump flatted from 3.3.3 to 3.4.2 in #​623
  • Bump glob from 10.3.15 to 10.5.0 in #​621
  • Bump handlebars from 4.7.8 to 4.7.9 in #​629
  • Bump lodash from 4.17.23 to 4.18.1 in #​639
  • Bump moment-timezone from 0.6.0 to 0.6.1 in #​619
  • Bump picomatch from 4.0.3 to 4.0.4 in #​626
  • Bump postcss from 8.5.6 to 8.5.10 in #​649
  • Bump tar from 6.2.1 to 7.5.15 in #​657
  • Bump undici from 6.23.0 to 6.25.0 in #​614
  • Bump vite from 7.3.1 to 7.3.2 in #​637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

  • Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
  • Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
  • Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
  • Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
  • Bump flatted from 3.3.3 to 3.4.2 in #​499
  • Bump glob from 10.3.12 to 13.0.6 in #​495
  • Bump handlebars from 4.7.8 to 4.7.9 in #​504
  • Bump lodash from 4.17.23 to 4.18.1 in #​523
  • Bump picomatch from 4.0.3 to 4.0.4 in #​503
  • Bump postcss from 8.5.6 to 8.5.10 in #​537
  • Bump tar from 6.2.1 to 7.5.15 in #​545
  • Bump undici from 6.23.0 to 6.25.0 in #​492
  • Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

pnpm/action-setup (pnpm/action-setup)

v6.0.9

Compare Source

What's Changed

Full Changelog: pnpm/action-setup@v6...v6.0.9

v6.0.8

Compare Source

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

v6.0.7

Compare Source

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

rharkor/caching-for-turbo (rharkor/caching-for-turbo)

v2.5.0

Compare Source

Features
  • add useRelativeCachePath (75e6656)
Bug Fixes
Miscellaneous Chores
Code Refactors

v2.4.2

Compare Source

Miscellaneous Chores
CI/CD
  • trigger PR checks with pull_request instead of pull_request_target (a900bf2)

v2.4.1

Compare Source

Bug Fixes
Miscellaneous Chores
  • sync: restore package.json from main (ee71897)

v2.4.0

Compare Source

Features
  • support port 0 for automatic port assignment (a384771), closes #​917
Bug Fixes
Miscellaneous Chores
  • deps: update aws-sdk-js-v3 monorepo to v3.1036.0 (#​889) (146dba6)
  • deps: update aws-sdk-js-v3 monorepo to v3.1037.0 (#​890) (4cd0f58)
  • deps: update aws-sdk-js-v3 monorepo to v3.1038.0 (#​892) (db64445)
  • deps: update aws-sdk-js-v3 monorepo to v3.1039.0 (#​893) (38aabd9)
  • deps: update aws-sdk-js-v3 monorepo to v3.1040.0 (#​894) (94bcc41)
  • deps: update aws-sdk-js-v3 monorepo to v3.1041.0 (#​898) (427799b)
  • deps: update aws-sdk-js-v3 monorepo to v3.1042.0 (#​902) (bb6a038)
  • deps: update aws-sdk-js-v3 monorepo to v3.1043.0 (#​904) (1f0c531)
  • deps: update aws-sdk-js-v3 monorepo to v3.1044.0 (#​905) (488bfd9)
  • deps: update aws-sdk-js-v3 monorepo to v3.1045.0 ([#&#820

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the type: chore Maintenance, CI, deps, refactoring label May 25, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from eda1f2a to 73ec448 Compare June 8, 2026 02:16
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 73ec448 to 43360c0 Compare June 15, 2026 02:27
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 43360c0 to 7b2419a Compare July 6, 2026 01:16
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 7b2419a to cb23df1 Compare July 20, 2026 02:01
| datasource  | package                      | from    | to      |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | actions/attest               | v4.1.0  | v4.2.0  |
| github-tags | actions/cache                | v5.0.5  | v5.1.0  |
| github-tags | actions/checkout             | v6.0.2  | v6.0.3  |
| github-tags | actions/setup-go             | v6.4.0  | v6.5.0  |
| github-tags | actions/setup-node           | v6.4.0  | v6.5.0  |
| github-tags | astral-sh/setup-uv           | v8.1.0  | v8.3.2  |
| github-tags | codecov/codecov-action       | v6.0.0  | v6.0.2  |
| github-tags | docker/build-push-action     | v7.1.0  | v7.3.0  |
| github-tags | docker/login-action          | v4.1.0  | v4.4.0  |
| github-tags | docker/metadata-action       | v6.0.0  | v6.2.0  |
| github-tags | docker/setup-buildx-action   | v4.0.0  | v4.2.0  |
| github-tags | pnpm/action-setup            | v6.0.6  | v6.0.9  |
| github-tags | rharkor/caching-for-turbo    | v2.3.14 | v2.5.0  |
| github-tags | zizmorcore/zizmor-action     | v0.5.3  | v0.6.0  |
| github-tags | zizmorcore/zizmor-pre-commit | v1.24.1 | v1.27.0 |
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from cb23df1 to 194e2c3 Compare July 27, 2026 00:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: chore Maintenance, CI, deps, refactoring

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants