build(deps): update github actions (main) (major)
Metadata
Current evaluation
Merged #442 in commit 34ac01a, upgrading checkout to v6, artifact actions to v8/v7, Node to 24, and action-gh-release to v3.
Resolution: closed resolved
Reason: PR #442 was approved and merged as commit 34ac01a, applying the major GitHub Actions dependency updates across two workflow files.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v5` → `v6` | `v6.0.3` |
| [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | major | `v6` → `v8` | |
| [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | major | `v5` → `v7` | |
| [node](https://redirect.github.com/actions/node-versions) | uses-with | major | `22` → `24` | |
| [softprops/action-gh-release](https://redirect.github.com/softprops/action-gh-release) | action | major | `v2` → `v3` | |
---
### Release Notes
<details>
<summary>actions/checkout (actions/checkout)</summary>
### [`v6.0.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)
[Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.1...v6.0.2)
- Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://redirect.github.com/ericsciple) in [#​2356](https://redirect.github.com/actions/checkout/pull/2356)
### [`v6.0.1`](https://redirect.github.com/actions/checkout/compare/v6.0.0...v6.0.1)
[Compare Source](https://redirect.github.com/actions/checkout/compare/v6...v6.0.1)
### [`v6.0.0`](https://redirect.github.com/actions/checkout/compare/v5.0.1...v6.0.0)
[Compare Source](https://redirect.github.com/actions/checkout/compare/v6...v6)
### [`v6`]()
[Compare Source](https://redirect.github.com/actions/checkout/compare/v5.0.1...v6)
</details>
<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>
### [`v8.0.1`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.1)
[Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8...v8.0.1)
##### What's Changed
- Support for CJK characters in the artifact name by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​471](https://redirect.github.com/actions/download-artifact/pull/471)
- Add a regression test for artifact name + content-type mismatches by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​472](https://redirect.github.com/actions/download-artifact/pull/472)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v8...v8.0.1>
### [`v8.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.0)
[Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8...v8)
##### v8 - What's new
##### Direct downloads
To support direct uploads in `actions/upload-artifact`, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the `Content-Type` header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new `skip-decompress` parameter to `false`.
##### Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the `digest-mismatch` parameter. To be secure by default, we are now defaulting the behavior to `error` which will fail the workflow run.
##### ESM
To support new versions of the @​actions/\* packages, we've upgraded the package to ESM.
##### What's Changed
- Don't attempt to un-zip non-zipped downloads by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​460](https://redirect.github.com/actions/download-artifact/pull/460)
- Add a setting to specify what to do on hash mismatch and default it to `error` by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​461](https://redirect.github.com/actions/download-artifact/pull/461)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v7...v8.0.0>
### [`v8`](https://redirect.github.com/actions/download-artifact/compare/v7...v8)
[Compare Source](https://redirect.github.com/actions/download-artifact/compare/v7.0.0...v8)
### [`v7.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/download-artifact/compare/v7.0.0...v7.0.0)
##### v7 - What's new
> \[!IMPORTANT]
> actions/download-artifact\@​v7 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.
##### Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
##### What's Changed
- Update GHES guidance to include reference to Node 20 version by [@​patrikpolyak](https://redirect.github.com/patrikpolyak) in [#​440](https://redirect.github.com/actions/download-artifact/pull/440)
- Download Artifact Node24 support by [@​salmanmkc](https://redirect.github.com/salmanmkc) in [#​415](https://redirect.github.com/actions/download-artifact/pull/415)
- fix: update [@​actions/artifact](https://redirect.github.com/actions/artifact) to fix Node.js 24 punycode deprecation by [@​salmanmkc](https://redirect.github.com/salmanmkc) in [#​451](https://redirect.github.com/actions/download-artifact/pull/451)
- prepare release v7.0.0 for Node.js 24 support by [@​salmanmkc](https://redirect.github.com/salmanmkc) in [#​452](https://redirect.github.com/actions/download-artifact/pull/452)
##### New Contributors
- [@​patrikpolyak](https://redirect.github.com/patrikpolyak) made their first contribution in [#​440](https://redirect.github.com/actions/download-artifact/pull/440)
- [@​salmanmkc](https://redirect.github.com/salmanmkc) made their first contribution in [#​415](https://redirect.github.com/actions/download-artifact/pull/415)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0>
### [`v7`](https://redirect.github.com/actions/download-artifact/compare/v6...v7)
[Compare Source](https://redirect.github.com/actions/download-artifact/compare/v6.0.0...v7.0.0)
</details>
<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>
### [`v7.0.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.1)
[Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7...v7.0.1)
##### What's Changed
- Update the readme with direct upload details by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​795](https://redirect.github.com/actions/upload-artifact/pull/795)
- Readme: bump all the example versions to v7 by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​796](https://redirect.github.com/actions/upload-artifact/pull/796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@​yacaovsnc](https://redirect.github.com/yacaovsnc) in [#​797](https://redirect.github.com/actions/upload-artifact/pull/797)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7...v7.0.1>
### [`v7.0.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.0)
[Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7...v7)
#### v7 What's new
##### Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.
##### ESM
To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.
#### What's Changed
- Add proxy integration test by [@​Link-](https://redirect.github.com/Link-) in [#​754](https://redirect.github.com/actions/upload-artifact/pull/754)
- Upgrade the module to ESM and bump dependencies by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​762](https://redirect.github.com/actions/upload-artifact/pull/762)
- Support direct file uploads by [@​danwkennedy](https://redirect.github.com/danwkennedy) in [#​764](https://redirect.github.com/actions/upload-artifact/pull/764)
#### New Contributors
- [@​Link-](https://redirect.github.com/Link-) made their first contribution in [#​754](https://redirect.github.com/actions/upload-artifact/pull/754)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v6...v7.0.0>
### [`v7`](https://redirect.github.com/actions/upload-artifact/compare/v6...v7)
[Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v6.0.0...v7)
### [`v6.0.0`](https://redirect.github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0)
[Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v6.0.0...v6.0.0)
### [`v6`](https://redirect.github.com/actions/upload-artifact/compare/v5...v6)
[Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0)
</details>
<details>
<summary>actions/node-versions (node)</summary>
### [`v24.16.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.16.0-26265092718): 24.16.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.15.0-24511264946...24.16.0-26265092718)
Node.js 24.16.0
### [`v24.15.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.15.0-24511264946): 24.15.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.14.1-23521883727...24.15.0-24511264946)
Node.js 24.15.0
### [`v24.14.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.14.1-23521883727): 24.14.1
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.14.0-22380502845...24.14.1-23521883727)
Node.js 24.14.1
### [`v24.14.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.14.0-22380502845): 24.14.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.13.1-21889660756...24.14.0-22380502845)
Node.js 24.14.0
### [`v24.13.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.13.1-21889660756): 24.13.1
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.13.0-20981653924...24.13.1-21889660756)
Node.js 24.13.1
### [`v24.13.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.13.0-20981653924): 24.13.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.12.0-20140960970...24.13.0-20981653924)
Node.js 24.13.0
### [`v24.12.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.12.0-20140960970): 24.12.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.11.1-19282993875...24.12.0-20140960970)
Node.js 24.12.0
### [`v24.11.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.11.1-19282993875): 24.11.1
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.11.0-18894910158...24.11.1-19282993875)
Node.js 24.11.1
### [`v24.11.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.11.0-18894910158): 24.11.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.10.0-18453495281...24.11.0-18894910158)
Node.js 24.11.0
### [`v24.10.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.10.0-18453495281): 24.10.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.9.0-18024003193...24.10.0-18453495281)
Node.js 24.10.0
### [`v24.9.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.9.0-18024003193): 24.9.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.8.0-17630522236...24.9.0-18024003193)
Node.js 24.9.0
### [`v24.8.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.8.0-17630522236): 24.8.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.7.0-17283839804...24.8.0-17630522236)
Node.js 24.8.0
### [`v24.7.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.7.0-17283839804): 24.7.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.6.0-16980723897...24.7.0-17283839804)
Node.js 24.7.0
### [`v24.6.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.6.0-16980723897): 24.6.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.5.0-16666195981...24.6.0-16980723897)
Node.js 24.6.0
### [`v24.5.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.5.0-16666195981): 24.5.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.4.1-16309768053...24.5.0-16666195981)
Node.js 24.5.0
### [`v24.4.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.4.1-16309768053): 24.4.1
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.4.0-16210503505...24.4.1-16309768053)
Node.js 24.4.1
### [`v24.4.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.4.0-16210503505): 24.4.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.3.0-15866716565...24.4.0-16210503505)
Node.js 24.4.0
### [`v24.3.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.3.0-15866716565): 24.3.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.2.0-15549907769...24.3.0-15866716565)
Node.js 24.3.0
### [`v24.2.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.2.0-15549907769): 24.2.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.1.0-15177436545...24.2.0-15549907769)
Node.js 24.2.0
### [`v24.1.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.1.0-15177436545): 24.1.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.0.2-15035852679...24.1.0-15177436545)
Node.js 24.1.0
### [`v24.0.2`](https://redirect.github.com/actions/node-versions/releases/tag/24.0.2-15035852679): 24.0.2
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.0.1-14928016774...24.0.2-15035852679)
Node.js 24.0.2
### [`v24.0.1`](https://redirect.github.com/actions/node-versions/releases/tag/24.0.1-14928016774): 24.0.1
[Compare Source](https://redirect.github.com/actions/node-versions/compare/24.0.0-14863421234...24.0.1-14928016774)
Node.js 24.0.1
### [`v24.0.0`](https://redirect.github.com/actions/node-versions/releases/tag/24.0.0-14863421234): 24.0.0
[Compare Source](https://redirect.github.com/actions/node-versions/compare/22.22.3-25838401827...24.0.0-14863421234)
Node.js 24.0.0
</details>
<details>
<summary>softprops/action-gh-release (softprops/action-gh-release)</summary>
### [`v3.0.0`](https://redirect.github.com/softprops/action-gh-release/releases/tag/v3.0.0)
[Compare Source](https://redirect.github.com/softprops/action-gh-release/compare/v3.0.0...v3.0.0)
`3.0.0` is a major release that moves the action runtime from Node 20 to Node 24.
Use `v3` on GitHub-hosted runners and self-hosted fleets that already support the
Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on
`v2.6.2`.
#### What's Changed
##### Other Changes 🔄
- Move the action runtime and bundle target to Node 24
- Update `@types/node` to the Node 24 line and allow future Dependabot updates
- Keep the floating major tag on `v3`; `v2` remains pinned to the latest `2.x` release
### [`v3`](https://redirect.github.com/softprops/action-gh-release/compare/v2...v3)
[Compare Source](https://redirect.github.com/softprops/action-gh-release/compare/v2.6.2...v3.0.0)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-cli).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjIwOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJQUjogRGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged #442 in commit 34ac01a, upgrading checkout to v6, artifact actions to v8/v7, Node to 24, and action-gh-release to v3. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #442 via commit 34ac01a, upgrading checkout to v6, artifact actions to download v8/upload v7, Node.js to 24, and action-gh-release to v3. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #442 (34ac01a): upgraded checkout to v6, download/upload-artifact to v8/v7, Node to 24, and action-gh-release to v3. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update for GitHub Actions, bumping checkout to v6, download/upload-artifact to v8/v7, node to 24, and action-gh-release to v3. Approved by two reviewers, passed CI, and merged via Renovate automerge. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #934 build(deps): update github actions (main) (major) | craft-providers | merged | Merged PR #934 via commit 0ddfab9, upgrading checkout to v6, download-artifact to v8, setup-node to v6, upload-artifact to v7, and Node.js 22 to 24. | |
| #1561 build(deps): update github actions (main) (major) | craft-parts | merged | Merged #1561 as 38ab5715, updating download-artifact v6→v8, upload-artifact v5→v7, and action-gh-release v2→v3. | |
| #6114 build(deps): update github actions (main) (major) | snapcraft | merged | Merged as 1c7912946 via #6114, upgrading CI to checkout v6, artifact v8/v7, setup-node v6, Node 24, and release-drafter v7.1.1. | |
| #232 build(deps): update github actions (main) (major) | imagecraft | merged | Merged in commit 9b76647 via PR #232, upgrading download-artifact v5→v6, upload-artifact v4→v5, and Node.js 22→24. | |
| #49 build(deps): update github actions (main) (major) | debcraft | merged | Merged PR #49 in commit 65aaf60, upgrading checkout v5→v6, setup-node v4→v6, and Node.js 22→24; all CI checks passed. | |
| #398 build(deps): update github actions (main) (major) | craft-cli | merged | Merged PR #398 as commit 52fb2cb, updating GitHub Actions download-artifact v5→v6, setup-node v5→v6, and upload-artifact v4→v5. | |
| #151 build(deps): update github actions (main) (major) | craft-grammar | merged | Renovate PR merged as commit 49d40a5 ('build(deps): update github actions (#151)'): actions/download-artifact v5→v6, setup-node v5→v6, upload-artifact v4→v5 in release-publish workflow. Later bumped to v7/v8. | |
| #32 build(deps): update github actions (main) (major) | debcraft | merged | Merged PR #32 upgraded download-artifact v5→v6, setup-node v5→v6, and upload-artifact v4→v5 in commit 807f21c. | |
| #161 build(deps): update github actions (main) (major) | craft-grammar | merged | Merged into main as df24140, upgrading actions/download-artifact from v6 to v7 and actions/upload-artifact from v5 to v6; all reported CI checks passed. | |
| #479 build(deps): update github actions (main) (major) | starbase | merged | Merged PR #479 upgraded actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 in commit 6910a9b. |