build(deps): update github actions (major)
Metadata
Current evaluation
Merged automated GitHub Actions dependency updates. Renovate upgraded canonical/has-signed-canonical-cla to v2 and codecov/codecov-action to v5. Changes passed CI, received approval, and were auto-merged into main.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [canonical/has-signed-canonical-cla](https://redirect.github.com/canonical/has-signed-canonical-cla) | action | major | `v1` -> `v2` |
| [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | major | `v4` -> `v5` |
---
### Release Notes
<details>
<summary>canonical/has-signed-canonical-cla (canonical/has-signed-canonical-cla)</summary>
### [`v2`](https://redirect.github.com/canonical/has-signed-canonical-cla/compare/v1...v2)
[Compare Source](https://redirect.github.com/canonical/has-signed-canonical-cla/compare/v1...v2)
</details>
<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>
### [`v5`](https://redirect.github.com/codecov/codecov-action/blob/HEAD/CHANGELOG.md#v540)
[Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v4...v5)
##### What's Changed
- update wrapper submodule to 0.2.0, add recurse_submodules arg by [@​matt-codecov](https://redirect.github.com/matt-codecov) in [https://github.com/codecov/codecov-action/pull/1780](https://redirect.github.com/codecov/codecov-action/pull/1780)
- build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1775](https://redirect.github.com/codecov/codecov-action/pull/1775)
- build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1776](https://redirect.github.com/codecov/codecov-action/pull/1776)
- build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1777](https://redirect.github.com/codecov/codecov-action/pull/1777)
- Clarify in README that `use_pypi` bypasses integrity checks too by [@​webknjaz](https://redirect.github.com/webknjaz) in [https://github.com/codecov/codecov-action/pull/1773](https://redirect.github.com/codecov/codecov-action/pull/1773)
- Fix use of safe.directory inside containers by [@​Flamefire](https://redirect.github.com/Flamefire) in [https://github.com/codecov/codecov-action/pull/1768](https://redirect.github.com/codecov/codecov-action/pull/1768)
- Fix description for report_type input by [@​craigscott-crascit](https://redirect.github.com/craigscott-crascit) in [https://github.com/codecov/codecov-action/pull/1770](https://redirect.github.com/codecov/codecov-action/pull/1770)
- build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1765](https://redirect.github.com/codecov/codecov-action/pull/1765)
- Fix a typo in the example by [@​miranska](https://redirect.github.com/miranska) in [https://github.com/codecov/codecov-action/pull/1758](https://redirect.github.com/codecov/codecov-action/pull/1758)
- build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1757](https://redirect.github.com/codecov/codecov-action/pull/1757)
- build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by [@​app/dependabot](https://redirect.github.com/app/dependabot) in [https://github.com/codecov/codecov-action/pull/1753](https://redirect.github.com/codecov/codecov-action/pull/1753)
**Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-grammar).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTc2LjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged automated GitHub Actions dependency updates. Renovate upgraded canonical/has-signed-canonical-cla to v2 and codecov/codecov-action to v5. Changes passed CI, received approval, and were auto-merged into main. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated GitHub Actions update. Upgraded canonical/has-signed-canonical-cla to v2 and codecov/codecov-action to v5. CI passed and changes were merged into main by Renovate bot. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #4988 build(deps): update github actions (main) (major) | snapcraft | merged | Merged automatically via Renovate. Updated GitHub Actions to codecov/codecov-action v4 and release-drafter/release-drafter v6.0.0. CI checks passed and changes were approved. | |
| #5170 build(deps): update github actions (main) (major) | snapcraft | merged | Merged after approval. Upgraded GitHub Actions dependencies, including codecov-action to v5 and ubuntu runner to 24.04. A reviewer manually adjusted ubuntu updates, triggering a rebase warning, but changes were accepted and the PR was successfully merged. | |
| #240 build(deps): update github actions (main) (major) | craft-archives | merged | Merged automated dependency update upgrading five GitHub Actions to major versions. Approved by one reviewer, passed CI checks, and merged via Renovate automerge. | |
| #393 build(deps): update github actions (main) (major) | imagecraft | merged | Merged automated dependency update via Renovate, upgrading six GitHub Actions to major versions. All CI checks passed, and the changes were auto-merged into main. | |
| #1561 build(deps): update github actions (main) (major) | craft-parts | merged | Merged automated GitHub Actions dependency update. Renovate upgraded actions/download-artifact to v8, actions/upload-artifact to v7, and action-gh-release to v3. Approved by two reviewers, passed CI checks, and merged to main. | |
| #6114 build(deps): update github actions (main) (major) | snapcraft | merged | Merged automated dependency update bumping GitHub Actions and Node.js to major versions. Auto-merged by Renovate after passing CI checks. | |
| #91 build(deps): update github actions (main) (major) | debcraft | merged | Merged an automated dependency update via Renovate bot. Updated GitHub Actions download-artifact to v8 and upload-artifact to v7. Approved by two reviewers, passed CI checks, and merged with a single-file change. | |
| #398 build(deps): update github actions (main) (major) | craft-cli | merged | Merged automated GitHub Actions dependency updates. Renovate upgraded actions/download-artifact to v6, actions/setup-node to v6, and actions/upload-artifact to v5. All CI checks passed before merging into main. | |
| #6323 build(deps): update github actions (main) (major) | snapcraft | merged | Merged automated dependency updates via Renovate. Upgraded actions/checkout to v7 and actions/download-artifact to v8. Approved by reviewers and merged to main despite some failing integration tests. | |
| #97 build(deps): update canonical/has-signed-canonical-cla action to v2 | imagecraft | merged | Merged automated dependency update upgrading the canonical/has-signed-canonical-cla GitHub Action from v1 to v2. Approved by reviewers, passed CI, and automerged into main via Renovate. |