build(deps): update github actions (main)
Metadata
Current evaluation
Updated GitHub Actions dependencies (download-artifact, setup-node, upload-artifact, setup-uv, go, pypi-publish) to latest versions. Merged into main.
Resolution: closed resolved
Reason: This automated dependency update PR was successfully merged into the main branch, bringing CI workflows up to date with the latest action releases.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | patch | `v8.0.1` → `v8.0.2` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | minor | `v7.0.0` → `v7.1.0` |
| [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | patch | `v7.0.1` → `v7.0.2` |
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | minor | `v10.2.0` → `v10.3.3` |
| [go](https://redirect.github.com/actions/go-versions) | uses-with | minor | `1.26` → `1.27` |
| [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) ([changelog](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/dc37677b2e1c63e2034f94d8a5b11f265b73ba33..7245906fb61fa33a13554f9d5fb856fe61758086)) | action | digest | `dc37677` → `7245906` |
---
### Release Notes
<details>
<summary>actions/download-artifact</summary>
### [`v8.0.2`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.2)
[Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8.0.1...v8.0.2)
##### What's Changed
- Update the readme by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​473](https://redirect.github.com/actions/download-artifact/pull/473)
- Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
- Update [@​actions/artifact](https://redirect.github.com/actions/artifact) to 6.3.1 by [@​tunc-d](https://redirect.github.com/tunc-d) in [#​492](https://redirect.github.com/actions/download-artifact/pull/492)
- Prepare download-artifact v8.0.2 by [@​tunc-d](https://redirect.github.com/tunc-d) in [#​493](https://redirect.github.com/actions/download-artifact/pull/493)
##### New Contributors
- [@​tunc-d](https://redirect.github.com/tunc-d) made their first contribution in [#​492](https://redirect.github.com/actions/download-artifact/pull/492)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2>
</details>
<details>
<summary>actions/setup-node</summary>
### [`v7.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.1.0)
[Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.1.0)
##### What's Changed
##### Enhancements:
- Add support for mise.toml file by [@​gperdomor](https://redirect.github.com/gperdomor) in [#​1421](https://redirect.github.com/actions/setup-node/pull/1421)
- Support absolute paths in node-version-file by [@​v-mahabaleshwars](https://redirect.github.com/v-mahabaleshwars) in [#​1633](https://redirect.github.com/actions/setup-node/pull/1633)
##### Bug fixes:
- Add Node version validation and manifest fetch retry by [@​v-jitenderpalsingh](https://redirect.github.com/v-jitenderpalsingh) in [#​1580](https://redirect.github.com/actions/setup-node/pull/1580)
##### Documentation updates:
- README.md: bump actions/checkout to latest version 7 by [@​deining](https://redirect.github.com/deining) in [#​1578](https://redirect.github.com/actions/setup-node/pull/1578)
- docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by [@​v-gowridurgad](https://redirect.github.com/v-gowridurgad) in [#​1593](https://redirect.github.com/actions/setup-node/pull/1593)
- Fixed cache recommendation syntax by [@​SubJunk](https://redirect.github.com/SubJunk) in [#​1603](https://redirect.github.com/actions/setup-node/pull/1603)
##### Dependency updates:
- Update workflow pins and migrate Node matrices to modern versions by [@​v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#​1583](https://redirect.github.com/actions/setup-node/pull/1583)
- Upgrade [@​actions/cache](https://redirect.github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://redirect.github.com/philip-gai) in [#​1584](https://redirect.github.com/actions/setup-node/pull/1584)
- Pin [@​types/node](https://redirect.github.com/types/node) to v24 by [@​v-priyagupta108](https://redirect.github.com/v-priyagupta108) in [#​1585](https://redirect.github.com/actions/setup-node/pull/1585)
- Override brace-expansion to 5.0.8 by [@​v-priyagupta108](https://redirect.github.com/v-priyagupta108) with [@​Copilot](https://redirect.github.com/Copilot) in [#​1599](https://redirect.github.com/actions/setup-node/pull/1599)
- Upgrade actions/checkout from 7.0.0 to 7.0.1 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1598](https://redirect.github.com/actions/setup-node/pull/1598)
- Upgrade prettier from 3.8.4 to 3.9.6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1590](https://redirect.github.com/actions/setup-node/pull/1590)
- Upgrade [@​vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.44.0 to 0.45.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1610](https://redirect.github.com/actions/setup-node/pull/1610)
- Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1602](https://redirect.github.com/actions/setup-node/pull/1602)
- Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1629](https://redirect.github.com/actions/setup-node/pull/1629)
- Upgrade [@​types/semver](https://redirect.github.com/types/semver) from 7.7.1 to 7.8.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1616](https://redirect.github.com/actions/setup-node/pull/1616)
- Upgrade [@​typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser) from 8.62.0 to 8.70.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1615](https://redirect.github.com/actions/setup-node/pull/1615)
- Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1631](https://redirect.github.com/actions/setup-node/pull/1631)
- Upgrade jest-each from 30.4.1 to 30.5.2 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1636](https://redirect.github.com/actions/setup-node/pull/1636)
- Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1638](https://redirect.github.com/actions/setup-node/pull/1638)
- Update dependencies and add license files by [@​v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#​1642](https://redirect.github.com/actions/setup-node/pull/1642)
- Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by [@​dependabot](https://redirect.github.com/dependabot) in [#​1635](https://redirect.github.com/actions/setup-node/pull/1635)
##### New Contributors
- [@​v-jitenderpalsingh](https://redirect.github.com/v-jitenderpalsingh) made their first contribution in [#​1580](https://redirect.github.com/actions/setup-node/pull/1580)
- [@​philip-gai](https://redirect.github.com/philip-gai) made their first contribution in [#​1584](https://redirect.github.com/actions/setup-node/pull/1584)
- [@​gperdomor](https://redirect.github.com/gperdomor) made their first contribution in [#​1421](https://redirect.github.com/actions/setup-node/pull/1421)
- [@​SubJunk](https://redirect.github.com/SubJunk) made their first contribution in [#​1603](https://redirect.github.com/actions/setup-node/pull/1603)
**Full Changelog**: <https://github.com/actions/setup-node/compare/v7.0.0...v7.1.0>
</details>
<details>
<summary>actions/upload-artifact</summary>
### [`v7.0.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.2)
[Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2)
##### What's Changed
- Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
- Updates [@​actions/artifact](https://redirect.github.com/actions/artifact) to v6.3.1.
##### New Contributors
- [@​tunc-d](https://redirect.github.com/tunc-d) made their first contribution in [#​821](https://redirect.github.com/actions/upload-artifact/pull/821)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2>
</details>
<details>
<summary>astral-sh/setup-uv</summary>
### [`v10.3.3`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.3): 🌈 Use Astral mirror for version manifests with GitHub fallback
[Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.2...v10.3.3)
##### Changes
This release contains something that should have been included a very long time ago. Sorry for sleeping on that.
This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)
Also a big thank you to [@​soujasK](https://redirect.github.com/soujasK) for a set of bugfixes 👏
##### 🐛 Bug fixes
- Use Astral mirror for version manifests with GitHub fallback [@​eifinger](https://redirect.github.com/eifinger) ([#​1119](https://redirect.github.com/astral-sh/setup-uv/issues/1119))
- fix: allow whitespace in uv requirement specifiers [@​soujasK](https://redirect.github.com/soujasK) ([#​1112](https://redirect.github.com/astral-sh/setup-uv/issues/1112))
- fix: resolve \~= specifiers with PEP 440 semantics [@​soujasK](https://redirect.github.com/soujasK) ([#​1111](https://redirect.github.com/astral-sh/setup-uv/issues/1111))
- fix: only report a saved cache when saving succeeded [@​soujasK](https://redirect.github.com/soujasK) ([#​1110](https://redirect.github.com/astral-sh/setup-uv/issues/1110))
##### 🧰 Maintenance
- chore: update known checksums for 0.13.6 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1117](https://redirect.github.com/astral-sh/setup-uv/issues/1117))
##### 📚 Documentation
- docs: use JSDoc for compatible release specifier comment [@​eifinger](https://redirect.github.com/eifinger) ([#​1113](https://redirect.github.com/astral-sh/setup-uv/issues/1113))
- docs: update version references to v10.3.2 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1104](https://redirect.github.com/astral-sh/setup-uv/issues/1104))
### [`v10.3.2`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.2): 🌈 update known checksums for 0.13.5
[Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.1...v10.3.2)
##### Changes
##### 🧰 Maintenance
- chore: update known checksums for 0.13.5 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1103](https://redirect.github.com/astral-sh/setup-uv/issues/1103))
##### 📚 Documentation
- docs: update version references to v10.3.1 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1102](https://redirect.github.com/astral-sh/setup-uv/issues/1102))
### [`v10.3.1`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.1): 🌈 preserve cache error class names in save-cache bundle
[Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.0...v10.3.1)
##### Changes
This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn
`##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.`
##### 🐛 Bug fixes
- fix: preserve cache error class names in save-cache bundle [@​dannyward630](https://redirect.github.com/dannyward630) ([#​1093](https://redirect.github.com/astral-sh/setup-uv/issues/1093))
##### 🧰 Maintenance
- chore: update known checksums for 0.13.4 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1099](https://redirect.github.com/astral-sh/setup-uv/issues/1099))
- chore: update known checksums for 0.13.2/0.13.3 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1098](https://redirect.github.com/astral-sh/setup-uv/issues/1098))
- chore: update known checksums for 0.13.1 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1094](https://redirect.github.com/astral-sh/setup-uv/issues/1094))
- Verify npm dependency signatures before builds [@​zaniebot](https://redirect.github.com/zaniebot) ([#​1027](https://redirect.github.com/astral-sh/setup-uv/issues/1027))
##### 📚 Documentation
- docs: cache-dependency-glob matches relative to the working directory [@​flange-ipb](https://redirect.github.com/flange-ipb) ([#​1092](https://redirect.github.com/astral-sh/setup-uv/issues/1092))
- docs: update version references to v10.3.0 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1090](https://redirect.github.com/astral-sh/setup-uv/issues/1090))
##### ⬆️ Dependency updates
- chore(deps): roll up Dependabot updates [@​eifinger](https://redirect.github.com/eifinger) ([#​1101](https://redirect.github.com/astral-sh/setup-uv/issues/1101))
### [`v10.3.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.0): 🌈 Add Python architecture selection
[Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.2.0...v10.3.0)
##### Changes
This release adds the `python-arch` input to select a Python architecture independently of the Python version. With `uv` 0.13.0 or later, set `python-arch: x86_64` to use x64 Python on Windows ARM64 runners.
It also includes embedded checksums for `uv` releases through 0.13.0.
- Use macOS 15 runners for tests [@​charliermarsh](https://redirect.github.com/charliermarsh) ([#​1081](https://redirect.github.com/astral-sh/setup-uv/issues/1081))
##### 🚀 Enhancements
- Add `python-arch` support [@​zanieb](https://redirect.github.com/zanieb) ([#​1079](https://redirect.github.com/astral-sh/setup-uv/issues/1079))
##### 🧰 Maintenance
- chore: update known checksums for 0.13.0 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1089](https://redirect.github.com/astral-sh/setup-uv/issues/1089))
- chore: update known checksums for 0.12.24 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1084](https://redirect.github.com/astral-sh/setup-uv/issues/1084))
- chore: update known checksums for 0.12.23 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1082](https://redirect.github.com/astral-sh/setup-uv/issues/1082))
- chore: update known checksums for 0.12.22 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1080](https://redirect.github.com/astral-sh/setup-uv/issues/1080))
- chore: update known checksums for 0.12.21 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1078](https://redirect.github.com/astral-sh/setup-uv/issues/1078))
- chore: update known checksums for 0.12.20 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1076](https://redirect.github.com/astral-sh/setup-uv/issues/1076))
- chore: update known checksums for 0.12.19 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1068](https://redirect.github.com/astral-sh/setup-uv/issues/1068))
- chore: update known checksums for 0.12.18 @​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#​1065](https://redirect.github.com/astral-sh/setup-uv/issues/1065))
##### ⬆️ Dependency updates
- chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) ([#​1077](https://redirect.github.com/astral-sh/setup-uv/issues/1077))
</details>
<details>
<summary>actions/go-versions (go)</summary>
### [`v1.27.3`](https://redirect.github.com/actions/go-versions/releases/tag/1.27.3-39437817176): 1.27.3
[Compare Source](https://redirect.github.com/actions/go-versions/compare/1.27.2-37875086547...1.27.3-39437817176)
Go 1.27.3
### [`v1.27.2`](https://redirect.github.com/actions/go-versions/releases/tag/1.27.2-37875086547): 1.27.2
[Compare Source](https://redirect.github.com/actions/go-versions/compare/1.27.1-33583469715...1.27.2-37875086547)
Go 1.27.2
### [`v1.27.1`](https://redirect.github.com/actions/go-versions/releases/tag/1.27.1-33583469715): 1.27.1
[Compare Source](https://redirect.github.com/actions/go-versions/compare/1.27.0-32325163857...1.27.1-33583469715)
Go 1.27.1
### [`v1.27.0`](https://redirect.github.com/actions/go-versions/releases/tag/1.27.0-32325163857): 1.27.0
[Compare Source](https://redirect.github.com/actions/go-versions/compare/1.26.10-39437851726...1.27.0-32325163857)
Go 1.27.0
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODguMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJQUjogRGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | closed resolved | Updated GitHub Actions dependencies (download-artifact, setup-node, upload-artifact, setup-uv, go, pypi-publish) to latest versions. Merged into main. |
Update history
| Date | Change |
|---|---|
| merged | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #226 build(deps): update github actions (main) | craft-grammar | merged | Merged automated dependency update for GitHub Actions, upgrading setup-node, setup-uv, gh-action-pypi-publish, and install-action. | |
| #1232 build(deps): update github actions (main) | craft-application | merged | Merged automated dependency update for GitHub Actions (setup-node v7.1.0, setup-uv v10.3.2, pypi-publish digest, install-action v2.87.30). | |
| #398 build(deps): update github actions (main) (major) | craft-cli | merged | Merged PR #398 as commit 52fb2cb, updating GitHub Actions download-artifact v5→v6, setup-node v5→v6, and upload-artifact v4→v5. | |
| #1561 build(deps): update github actions (main) (major) | craft-parts | merged | Merged #1561 as 38ab5715, updating download-artifact v6→v8, upload-artifact v5→v7, and action-gh-release v2→v3. | |
| #32 build(deps): update github actions (main) (major) | debcraft | merged | Merged PR #32 upgraded download-artifact v5→v6, setup-node v5→v6, and upload-artifact v4→v5 in commit 807f21c. | |
| #2693 build(deps): update github actions (main) (major) | charmcraft | merged | Merged PR #2693 via commit 840f3ae4, upgrading artifact actions, setup-uv, and action-gh-release to their new major versions. | |
| #232 build(deps): update github actions (main) (major) | imagecraft | merged | Merged in commit 9b76647 via PR #232, upgrading download-artifact v5→v6, upload-artifact v4→v5, and Node.js 22→24. | |
| #934 build(deps): update github actions (main) (major) | craft-providers | merged | Merged PR #934 via commit 0ddfab9, upgrading checkout to v6, download-artifact to v8, setup-node to v6, upload-artifact to v7, and Node.js 22 to 24. | |
| #479 build(deps): update github actions (main) (major) | starbase | merged | Merged PR #479 upgraded actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 in commit 6910a9b. | |
| #161 build(deps): update github actions (main) (major) | craft-grammar | merged | Merged into main as df24140, upgrading actions/download-artifact from v6 to v7 and actions/upload-artifact from v5 to v6; all reported CI checks passed. |