Skip to content

Update github-actions dependencies (major) - #376

Merged
michael-valdron merged 1 commit into
mainfrom
konflux/mintmaker/main/major-github-actions-deps
Sep 24, 2026
Merged

michael-valdron merged 1 commit into
mainfrom
konflux/mintmaker/main/major-github-actions-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 23, 2026 •

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
actions/checkout action major v3.7.0 → v7.0.1
actions/setup-go action major v4.3.0 → v7.0.0
actions/upload-artifact action major v4.6.2 → v7.0.1
codecov/codecov-action action major v3.1.6 → v7.1.0 v7.1.1
docker/login-action action major v2.2.0 → v4.6.0
docker/setup-qemu-action action major v3.7.0 → v4.3.0 v4.4.0
github/codeql-action action major v2.28.1 → v4.38.0
github/codeql-action action major v3.38.0 → v4.38.0
peter-evans/repository-dispatch action major v1 → v4
ubuntu github-runner major 20.04 → 24.04

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

v7.0.0

Compare Source

  • Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
  • Various dependency updates

v7

Compare Source

v6.1.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.1.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v5.0.1...v5.1.0

v5.0.1

Compare Source

v5.0.0

Compare Source

v5

Compare Source

v4.4.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v4.3.1...v4.4.0

v4.3.1

Compare Source

v4.3.0

Compare Source

v4.2.2

Compare Source

v4.2.1

Compare Source

v4.2.0

Compare Source

v4.1.7

Compare Source

v4.1.6

Compare Source

v4.1.5

Compare Source

v4.1.4

Compare Source

v4.1.3

Compare Source

v4.1.2

Compare Source

  • Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

v4.1.0

Compare Source

v4.0.0

Compare Source

v4

Compare Source

actions/setup-go (actions/setup-go)

v7.0.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

v7

Compare Source

v6.5.0

Compare Source

What's Changed
Dependency update
New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

Compare Source

What's Changed
Enhancement
  • Add go-download-base-url input for custom Go distributions by @​gdams in #​721
Dependency update
Documentation update
New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

Compare Source

What's Changed
Enhancements
Dependency updates
New Contributors

Full Changelog: actions/setup-go@v6...v6.2.0

v6.1.0

Compare Source

What's Changed
Enhancements
Dependency updates
New Contributors

Full Changelog: actions/setup-go@v6...v6.1.0

v6.0.0

Compare Source

What's Changed
Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades
New Contributors

Full Changelog: actions/setup-go@v5...v6.0.0

v6

Compare Source

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

v5.5.0

Compare Source

What's Changed
Bug fixes:
Dependency updates:
New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed
Dependency updates :
New Contributors

Full Changelog: actions/setup-go@v5...v5.4.0

v5.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

Compare Source

What's Changed
  • Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in #​496
New Contributors

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed
  • Add workflow file for publishing releases to immutable action package by @​Jcambass in #​500
  • Upgrade IA Publish by @​Jcambass in #​502
  • Add architecture to cache key by @​Zxilly in #​493
    This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
    Note: This change may break previous cache keys as they will no longer be compatible with the new format.
  • Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in #​510

Bug Fixes

New Contributors

Full Changelog: actions/setup-go@v5...v5.1.0

v5.0.2

Compare Source

What's Changed
Bug fixes:
Dependency updates:
New Contributors

Full Changelog: actions/setup-go@v5...v5.0.2

v5.0.1

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

v5.0.0

Compare Source

What's Changed

In scope of this release, we change Nodejs runtime from node16 to node20 (#​421). Moreover, we update some dependencies to the latest versions (#​445).

Besides, this release contains such changes as:

New Contributors

Full Changelog: actions/setup-go@v4...v5.0.0

v5

Compare Source

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new
Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed
New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v7

Compare Source

v6.0.0

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@​v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v6

Compare Source

v5.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v5

Compare Source

codecov/codecov-action (codecov/codecov-action)

v7.1.0

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

v7.0.0

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

v7

Compare Source

v6.0.2

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

v6.0.1

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

v6.0.0

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️
What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v6

Compare Source

v5.5.5

Compare Source

This release only contains the keybase.io change as described here.

Full Changelog: codecov/codecov-action@v5.5.4...v5.5.5

v5.5.4

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

✂ Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/Toronto)

  • Branch creation
    • At 07:00 PM through 11:59 PM and 12:00 AM through 02:59 AM, every 2 days in a month and on day 4 of the month, and on Thursday (* 19-23,0-2 */2,4 * 4)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@openshift-ci
openshift-ci Bot requested review from elsony and thepetk July 23, 2026 05:11
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-github-actions-deps branch 2 times, most recently from b0ee071 to 8d182c6 Compare July 24, 2026 05:21
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-github-actions-deps branch 3 times, most recently from 76a3aad to 6b217fe Compare August 17, 2026 01:25
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-github-actions-deps branch 2 times, most recently from 8ee3962 to 051b480 Compare September 3, 2026 04:43
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-github-actions-deps branch from 051b480 to 002bca3 Compare September 4, 2026 00:39
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-github-actions-deps branch from 002bca3 to bd51a26 Compare September 17, 2026 05:50
@coderabbitai

coderabbitai Bot commented Sep 17, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 693ea012-c7c5-450e-9158-b082a82208a6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-github-actions-deps branch from bd51a26 to ef3ea21 Compare September 18, 2026 00:45

@michael-valdron michael-valdron left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Sep 24, 2026
@openshift-ci

openshift-ci Bot commented Sep 24, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: michael-valdron, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 24, 2026
@michael-valdron
michael-valdron merged commit 78e77ba into main Sep 24, 2026
17 checks passed
@red-hat-konflux
red-hat-konflux Bot deleted the konflux/mintmaker/main/major-github-actions-deps branch September 25, 2026 00:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. renovatebot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant