Skip to content

chore(deps): update github actions - #4902

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/upload-artifact action minor v4.4.3 → v4.6.2
backstage/actions action patch v0.7.12 → v0.7.13
step-security/harden-runner action minor v2.20.0 → v2.21.1
tombi-toml/setup-tombi action patch v1.5.5 → v1.5.8

Release Notes

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

  • Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

backstage/actions (backstage/actions)

v0.7.13

Compare Source

What's Changed

Full Changelog: backstage/actions@v0.7.12...v0.7.13

step-security/harden-runner (step-security/harden-runner)

v2.21.1

Compare Source

What's Changed
  • Improved performance of the disable-sudo feature.
  • Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
  • Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
  • Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

v2.21.0

Compare Source

What's Changed
  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

v2.20.1

Compare Source

What's Changed
  • AWS CodeBuild-hosted runner support
  • Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

tombi-toml/setup-tombi (tombi-toml/setup-tombi)

v1.5.8

Compare Source

This setup-tombi release matches tombi v1.5.8.

Full Changelog: tombi-toml/setup-tombi@v1.5.7...v1.5.8

v1.5.7

Compare Source

This setup-tombi release matches tombi v1.5.7.

Full Changelog: tombi-toml/setup-tombi@v1.5.6...v1.5.7

v1.5.6

Compare Source

This setup-tombi release matches tombi v1.5.6.

What's Changed

New Contributors

Full Changelog: tombi-toml/setup-tombi@v1.5.5...v1.5.6


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 21, 2026
@renovate
renovate Bot requested review from a team as code owners September 21, 2026 12:20
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 21, 2026
@codecov

codecov Bot commented Sep 21, 2026

Copy link
Copy Markdown

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

@renovate
renovate Bot force-pushed the renovate/github-actions branch 24 times, most recently from 601d17e to 7d2356f Compare September 22, 2026 09:04
@renovate
renovate Bot force-pushed the renovate/github-actions branch from f612ba4 to 40a52df Compare September 23, 2026 05:25
@renovate renovate Bot changed the title chore(deps): update backstage/actions action to v0.7.13 Update backstage/actions action to v0.7.13 Sep 23, 2026
@renovate
renovate Bot force-pushed the renovate/github-actions branch 25 times, most recently from d49687e to 6efc9a9 Compare September 24, 2026 20:24
gabemontero
gabemontero approved these changes Sep 28, 2026 •
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant