build(deps): update github actions (major)
Metadata
Current evaluation
Merged Renovate PR #70 via commit 2e3f2f2, upgrading has-signed-canonical-cla from v1 to v2 and codecov-action from v4 to v5.
Resolution: closed resolved
Reason: PR #70 was merged into main as commit 2e3f2f2. The merged change updated the two GitHub Actions major versions in the workflow configuration.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [canonical/has-signed-canonical-cla](https://redirect.github.com/canonical/has-signed-canonical-cla) | action | major | `v1` -> `v2` |
| [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | major | `v4` -> `v5` |
---
### Release Notes
<details>
<summary>canonical/has-signed-canonical-cla (canonical/has-signed-canonical-cla)</summary>
### [`v2`](https://redirect.github.com/canonical/has-signed-canonical-cla/compare/v1...v2)
[Compare Source](https://redirect.github.com/canonical/has-signed-canonical-cla/compare/v1...v2)
</details>
<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>
### [`v5`](https://redirect.github.com/codecov/codecov-action/blob/HEAD/CHANGELOG.md#v540)
[Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v4...v5)
##### What's Changed
- update wrapper submodule to 0.2.0, add recurse_submodules arg by [@​matt-codecov](https://redirect.github.com/matt-codecov) in [https://github.com/codecov/codecov-action/pull/1780](https://redirect.github.com/codecov/codecov-action/pull/1780)
- build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1775](https://redirect.github.com/codecov/codecov-action/pull/1775)
- build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1776](https://redirect.github.com/codecov/codecov-action/pull/1776)
- build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1777](https://redirect.github.com/codecov/codecov-action/pull/1777)
- Clarify in README that `use_pypi` bypasses integrity checks too by [@​webknjaz](https://redirect.github.com/webknjaz) in [https://github.com/codecov/codecov-action/pull/1773](https://redirect.github.com/codecov/codecov-action/pull/1773)
- Fix use of safe.directory inside containers by [@​Flamefire](https://redirect.github.com/Flamefire) in [https://github.com/codecov/codecov-action/pull/1768](https://redirect.github.com/codecov/codecov-action/pull/1768)
- Fix description for report_type input by [@​craigscott-crascit](https://redirect.github.com/craigscott-crascit) in [https://github.com/codecov/codecov-action/pull/1770](https://redirect.github.com/codecov/codecov-action/pull/1770)
- build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1765](https://redirect.github.com/codecov/codecov-action/pull/1765)
- Fix a typo in the example by [@​miranska](https://redirect.github.com/miranska) in [https://github.com/codecov/codecov-action/pull/1758](https://redirect.github.com/codecov/codecov-action/pull/1758)
- build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1757](https://redirect.github.com/codecov/codecov-action/pull/1757)
- build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1753](https://redirect.github.com/codecov/codecov-action/pull/1753)
**Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-grammar).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTc2LjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged Renovate PR #70 via commit 2e3f2f2, upgrading has-signed-canonical-cla from v1 to v2 and codecov-action from v4 to v5. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #70 upgraded canonical/has-signed-canonical-cla from v1 to v2 and codecov/codecov-action from v4 to v5. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated GitHub Actions dependency updates. Renovate upgraded canonical/has-signed-canonical-cla to v2 and codecov/codecov-action to v5. Changes passed CI, received approval, and were auto-merged into main. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #393 build(deps): update github actions (main) (major) | imagecraft | merged | Merged Renovate PR #393, upgrading six GitHub Actions across five workflows; all reported CI checks passed. | |
| #1057 build(deps): update github actions (main) (major) | craft-application | merged | Merged Renovate PR #1057 in commit 33607e21, updating actions/download-artifact v6→v8 and actions/upload-artifact v5→v7. | |
| #133 build(deps): update github actions (main) (major) | starflow | merged | Merged Renovate PR #133 in commit 964543a, upgrading CI GitHub Actions to v5-v8 and Node.js from 22 to 24. | |
| #613 build(deps): update github actions (main) | starbase | merged | Merged Renovate PR updating GitHub Actions: dorny/paths-filter v4.0.2→v4.0.3 and taiki-e/install-action v2.87.19→v2.87.22. | |
| #58 build(deps): update github actions (main) (major) | craft-artifacts | merged | Merged Renovate PR #58 into main, updating actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 in commit 464bf02. | |
| #67 build(deps): update github actions (main) (major) | debcraft | merged | Renovate PR canonical/debcraft#67 merged as 953d791, upgrading actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 after all CI checks passed. | |
| #5170 build(deps): update github actions (main) (major) | snapcraft | merged | Merged PR #5170 at commit 69f148784, upgrading codecov/codecov-action v4→v5 and the main GitHub Actions runner from Ubuntu 22.04→24.04. | |
| #4988 build(deps): update github actions (main) (major) | snapcraft | merged | Merged in canonical/snapcraft#4988 (commit 35c7d97a4): upgraded codecov/codecov-action v3→v4 and release-drafter/release-drafter v5.7.0→v6.0.0. | |
| #801 build(deps): update github actions to v5 (main) (major) | craft-providers | merged | Merged Renovate PR #801, updating actions/checkout and actions/download-artifact from v4 to v5; landed as commit 539bad3. | |
| #218 build(deps): update github actions (main) (major) | craft-platforms | merged | Renovate PR #218 merged in commit ebf4332, updating actions/upload-artifact v6→v7 and softprops/action-gh-release v2→v3. |