← Back to issue list

build(deps): update github actions (main) (major)

View original Github issue

Metadata

Project
craft-cli
Number
#442
Type
pull request
State
merged
Author
renovate[bot]
Labels
PR: Dependencies
Created
Updated
Closed

Current evaluation

Merged automated dependency update for GitHub Actions, bumping checkout to v6, download/upload-artifact to v8/v7, node to 24, and action-gh-release to v3. Approved by two reviewers, passed CI, and merged via Renovate automerge.

Suggested action:

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v5` → `v6` | `v6.0.3` | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | major | `v6` → `v8` | | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | major | `v5` → `v7` | | | [node](https://redirect.github.com/actions/node-versions) | uses-with | major | `22` → `24` | | | [softprops/action-gh-release](https://redirect.github.com/softprops/action-gh-release) | action | major | `v2` → `v3` | | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://redirect.github.com/ericsciple) in [#&#8203;2356](https://redirect.github.com/actions/checkout/pull/2356) ### [`v6.0.1`](https://redirect.github.com/actions/checkout/compare/v6.0.0...v6.0.1) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6...v6.0.1) ### [`v6.0.0`](https://redirect.github.com/actions/checkout/compare/v5.0.1...v6.0.0) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6...v6) ### [`v6`]() [Compare Source](https://redirect.github.com/actions/checkout/compare/v5.0.1...v6) </details> <details> <summary>actions/download-artifact (actions/download-artifact)</summary> ### [`v8.0.1`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.1) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8...v8.0.1) ##### What's Changed - Support for CJK characters in the artifact name by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;471](https://redirect.github.com/actions/download-artifact/pull/471) - Add a regression test for artifact name + content-type mismatches by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;472](https://redirect.github.com/actions/download-artifact/pull/472) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v8...v8.0.1> ### [`v8.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.0) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8...v8) ##### v8 - What's new ##### Direct downloads To support direct uploads in `actions/upload-artifact`, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the `Content-Type` header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new `skip-decompress` parameter to `false`. ##### Enforced checks (breaking) A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the `digest-mismatch` parameter. To be secure by default, we are now defaulting the behavior to `error` which will fail the workflow run. ##### ESM To support new versions of the @&#8203;actions/\* packages, we've upgraded the package to ESM. ##### What's Changed - Don't attempt to un-zip non-zipped downloads by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;460](https://redirect.github.com/actions/download-artifact/pull/460) - Add a setting to specify what to do on hash mismatch and default it to `error` by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;461](https://redirect.github.com/actions/download-artifact/pull/461) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v7...v8.0.0> ### [`v8`](https://redirect.github.com/actions/download-artifact/compare/v7...v8) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v7.0.0...v8) ### [`v7.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v7.0.0...v7.0.0) ##### v7 - What's new > \[!IMPORTANT] > actions/download-artifact\@&#8203;v7 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. ##### Node.js 24 This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. ##### What's Changed - Update GHES guidance to include reference to Node 20 version by [@&#8203;patrikpolyak](https://redirect.github.com/patrikpolyak) in [#&#8203;440](https://redirect.github.com/actions/download-artifact/pull/440) - Download Artifact Node24 support by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;415](https://redirect.github.com/actions/download-artifact/pull/415) - fix: update [@&#8203;actions/artifact](https://redirect.github.com/actions/artifact) to fix Node.js 24 punycode deprecation by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;451](https://redirect.github.com/actions/download-artifact/pull/451) - prepare release v7.0.0 for Node.js 24 support by [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) in [#&#8203;452](https://redirect.github.com/actions/download-artifact/pull/452) ##### New Contributors - [@&#8203;patrikpolyak](https://redirect.github.com/patrikpolyak) made their first contribution in [#&#8203;440](https://redirect.github.com/actions/download-artifact/pull/440) - [@&#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their first contribution in [#&#8203;415](https://redirect.github.com/actions/download-artifact/pull/415) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0> ### [`v7`](https://redirect.github.com/actions/download-artifact/compare/v6...v7) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v6.0.0...v7.0.0) </details> <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v7.0.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7...v7.0.1) ##### What's Changed - Update the readme with direct upload details by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;795](https://redirect.github.com/actions/upload-artifact/pull/795) - Readme: bump all the example versions to v7 by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;796](https://redirect.github.com/actions/upload-artifact/pull/796) - Include changes in typespec/ts-http-runtime 0.3.5 by [@&#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in [#&#8203;797](https://redirect.github.com/actions/upload-artifact/pull/797) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7...v7.0.1> ### [`v7.0.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7...v7) #### v7 What's new ##### Direct Uploads Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file. ##### ESM To support new versions of the `@actions/*` packages, we've upgraded the package to ESM. #### What's Changed - Add proxy integration test by [@&#8203;Link-](https://redirect.github.com/Link-) in [#&#8203;754](https://redirect.github.com/actions/upload-artifact/pull/754) - Upgrade the module to ESM and bump dependencies by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;762](https://redirect.github.com/actions/upload-artifact/pull/762) - Support direct file uploads by [@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in [#&#8203;764](https://redirect.github.com/actions/upload-artifact/pull/764) #### New Contributors - [@&#8203;Link-](https://redirect.github.com/Link-) made their first contribution in [#&#8203;754](https://redirect.github.com/actions/upload-artifact/pull/754) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v6...v7.0.0> ### [`v7`](https://redirect.github.com/actions/upload-artifact/compare/v6...v7) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v6.0.0...v7) ### [`v6.0.0`](https://redirect.github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v6.0.0...v6.0.0) ### [`v6`](https://redirect.github.com/actions/upload-artifact/compare/v5...v6) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0) </details> <details> <summary>actions/node-versions (node)</summary> ### [`v24.16.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.16.0-26265092718): 24.16.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.15.0-24511264946...24.16.0-26265092718) Node.js 24.16.0 ### [`v24.15.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.15.0-24511264946): 24.15.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.14.1-23521883727...24.15.0-24511264946) Node.js 24.15.0 ### [`v24.14.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.14.1-23521883727): 24.14.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.14.0-22380502845...24.14.1-23521883727) Node.js 24.14.1 ### [`v24.14.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.14.0-22380502845): 24.14.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.13.1-21889660756...24.14.0-22380502845) Node.js 24.14.0 ### [`v24.13.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.13.1-21889660756): 24.13.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.13.0-20981653924...24.13.1-21889660756) Node.js 24.13.1 ### [`v24.13.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.13.0-20981653924): 24.13.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.12.0-20140960970...24.13.0-20981653924) Node.js 24.13.0 ### [`v24.12.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.12.0-20140960970): 24.12.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.11.1-19282993875...24.12.0-20140960970) Node.js 24.12.0 ### [`v24.11.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.11.1-19282993875): 24.11.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.11.0-18894910158...24.11.1-19282993875) Node.js 24.11.1 ### [`v24.11.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.11.0-18894910158): 24.11.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.10.0-18453495281...24.11.0-18894910158) Node.js 24.11.0 ### [`v24.10.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.10.0-18453495281): 24.10.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.9.0-18024003193...24.10.0-18453495281) Node.js 24.10.0 ### [`v24.9.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.9.0-18024003193): 24.9.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.8.0-17630522236...24.9.0-18024003193) Node.js 24.9.0 ### [`v24.8.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.8.0-17630522236): 24.8.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.7.0-17283839804...24.8.0-17630522236) Node.js 24.8.0 ### [`v24.7.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.7.0-17283839804): 24.7.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.6.0-16980723897...24.7.0-17283839804) Node.js 24.7.0 ### [`v24.6.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.6.0-16980723897): 24.6.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.5.0-16666195981...24.6.0-16980723897) Node.js 24.6.0 ### [`v24.5.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.5.0-16666195981): 24.5.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.4.1-16309768053...24.5.0-16666195981) Node.js 24.5.0 ### [`v24.4.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.4.1-16309768053): 24.4.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.4.0-16210503505...24.4.1-16309768053) Node.js 24.4.1 ### [`v24.4.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.4.0-16210503505): 24.4.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.3.0-15866716565...24.4.0-16210503505) Node.js 24.4.0 ### [`v24.3.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.3.0-15866716565): 24.3.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.2.0-15549907769...24.3.0-15866716565) Node.js 24.3.0 ### [`v24.2.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.2.0-15549907769): 24.2.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.1.0-15177436545...24.2.0-15549907769) Node.js 24.2.0 ### [`v24.1.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.1.0-15177436545): 24.1.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.0.2-15035852679...24.1.0-15177436545) Node.js 24.1.0 ### [`v24.0.2`](https://redirect.github.com/actions/node-versions/releases/tag/24.0.2-15035852679): 24.0.2 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.0.1-14928016774...24.0.2-15035852679) Node.js 24.0.2 ### [`v24.0.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.0.1-14928016774): 24.0.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/24.0.0-14863421234...24.0.1-14928016774) Node.js 24.0.1 ### [`v24.0.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.0.0-14863421234): 24.0.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.22.3-25838401827...24.0.0-14863421234) Node.js 24.0.0 </details> <details> <summary>softprops/action-gh-release (softprops/action-gh-release)</summary> ### [`v3.0.0`](https://redirect.github.com/softprops/action-gh-release/releases/tag/v3.0.0) [Compare Source](https://redirect.github.com/softprops/action-gh-release/compare/v3.0.0...v3.0.0) `3.0.0` is a major release that moves the action runtime from Node 20 to Node 24. Use `v3` on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on `v2.6.2`. #### What's Changed ##### Other Changes 🔄 - Move the action runtime and bundle target to Node 24 - Update `@types/node` to the Node 24 line and allow future Dependabot updates - Keep the floating major tag on `v3`; `v2` remains pinned to the latest `2.x` release ### [`v3`](https://redirect.github.com/softprops/action-gh-release/compare/v2...v3) [Compare Source](https://redirect.github.com/softprops/action-gh-release/compare/v2.6.2...v3.0.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-cli). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjIwOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJQUjogRGVwZW5kZW5jaWVzIl19-->

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b Merged automated dependency update for GitHub Actions, bumping checkout to v6, download/upload-artifact to v8/v7, node to 24, and action-gh-release to v3. Approved by two reviewers, passed CI, and merged via Renovate automerge.
qwen3.6-35b-a3b-mtp-q6
Staleness: 25
Complexity: 10
Confidence: 85
needs review Bumps major versions of GitHub Actions and Node.js runtime in CI workflows. Open for 59 days with zero comments and no recent activity, currently awaiting review or merge.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#214 build(deps): update github actions (main) (major) craft-archives merged Merged automated dependency updates for GitHub Actions. Renovate updated actions/download-artifact to v6, actions/upload-artifact to v5, and Node.js to v24. Approved by two reviewers, passed all CI checks, and merged automatically.
97%
#67 build(deps): update github actions (main) (major) debcraft merged Merged automated dependency update upgrading GitHub Actions download-artifact to v7 and upload-artifact to v6. Approved by two reviewers, passed all CI checks, and merged automatically via Renovate bot.
96%
#1561 build(deps): update github actions (main) (major) craft-parts merged Merged automated GitHub Actions dependency update. Renovate upgraded actions/download-artifact to v8, actions/upload-artifact to v7, and action-gh-release to v3. Approved by two reviewers, passed CI checks, and merged to main.
95%
#232 build(deps): update github actions (main) (major) imagecraft merged Merged automated dependency update upgrading GitHub Actions download-artifact to v6, upload-artifact to v5, and Node.js to v24. Approved by reviewers, passed CI checks, and integrated into main.
95%
#151 build(deps): update github actions (main) (major) craft-grammar merged Merged automated GitHub Actions dependency updates. Renovate upgraded download-artifact to v6, setup-node to v6, and upload-artifact to v5. Approved by two reviewers, passed all CI checks, and merged to main.
95%
#32 build(deps): update github actions (main) (major) debcraft merged Merged automated GitHub Actions dependency update. Renovate upgraded download-artifact to v6, setup-node to v6, and upload-artifact to v5. Approved by two reviewers and passed all CI checks before merging into main.
95%
#458 build(deps): update github actions (main) (major) starbase merged Merged automated dependency update upgrading GitHub Actions download-artifact to v6, upload-artifact to v5, and Node runner to v24. All CI checks passed and changes were approved before merge.
95%
#48 build(deps): update github actions (main) (major) craft-artifacts merged Merged automated dependency update upgrading GitHub Actions to major versions: download-artifact v6, setup-node v6, and upload-artifact v5. Approved by two reviewers and merged to main.
95%
#91 build(deps): update github actions (main) (major) debcraft merged Merged an automated dependency update via Renovate bot. Updated GitHub Actions download-artifact to v8 and upload-artifact to v7. Approved by two reviewers, passed CI checks, and merged with a single-file change.
94%
#398 build(deps): update github actions (main) (major) craft-cli merged Merged automated GitHub Actions dependency updates. Renovate upgraded actions/download-artifact to v6, actions/setup-node to v6, and actions/upload-artifact to v5. All CI checks passed before merging into main.
94%