build(deps): update github actions (main) (major)

Metadata

Project: rockcraft
Number: #1306
Type: pull request
State: open
Author: renovate
Labels: PR: Dependencies
Created: 2026-07-18 10:40 AM UTC
Updated: 2026-10-30 04:40 PM UTC
Closed: —

Current evaluation

⚠️ This summary may be outdated — the issue content or evaluation prompts have changed since this evaluation was made.

Renovate PR updating multiple GitHub Actions to latest major versions. Open 98 days with 3 failing CI checks and 19 unresolved review comments.

Suggested action: close stale

Reason: This PR has been inactive for 98 days with 3 failing CI checks (build, source-spread-tests, docs-spread-tests) and 19 unresolved review comments but zero reviewers. The PR appears abandoned and the CI failures suggest the action updates may need adjustments to work with the current codebase.

Evaluated by: mr-cal-bot

Impact: 20 Quick Win: 3 Complexity: 15 Confidence: 75 Actionability: 20

Issue body

> [!NOTE] > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v6` → `v7` | | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v5` → `v7` | | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | major | `v5` → `v8` | | | [actions/labeler](https://redirect.github.com/actions/labeler) | action | major | `v6` → `v7` | | | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v5` → `v7` | | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | major | `v6` → `v7` | | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | major | `v4` → `v7` | | | [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | major | `v6` → `v10.3.3` | | | [node](https://redirect.github.com/actions/node-versions) | uses-with | major | `22` → `26` | `26.13.0` | | [node](https://redirect.github.com/actions/node-versions) | uses-with | major | `24` → `26` | `26.13.0` | | [softprops/action-gh-release](https://redirect.github.com/softprops/action-gh-release) | action | major | `v2` → `v3` | | | [ubuntu](https://redirect.github.com/actions/runner-images) | github-runner | major | `24.04` → `26.04` | | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v7.0.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2518](https://redirect.github.com/actions/checkout/pull/2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2521](https://redirect.github.com/actions/checkout/pull/2521) - Escape values passed to --unset by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2530](https://redirect.github.com/actions/checkout/pull/2530) - Various dependency updates ### [`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.1.0...v7.0.0) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Various dependency updates </details> <details> <summary>actions/download-artifact</summary> ### [`v8.0.2`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.2) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8.0.1...v8.0.2) #### What's Changed - Update the readme by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#473](https://redirect.github.com/actions/download-artifact/pull/473) - Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers. - Update [@actions/artifact](https://redirect.github.com/actions/artifact) to 6.3.1 by [@tunc-d](https://redirect.github.com/tunc-d) in [#492](https://redirect.github.com/actions/download-artifact/pull/492) - Prepare download-artifact v8.0.2 by [@tunc-d](https://redirect.github.com/tunc-d) in [#493](https://redirect.github.com/actions/download-artifact/pull/493) #### New Contributors - [@tunc-d](https://redirect.github.com/tunc-d) made their first contribution in [#492](https://redirect.github.com/actions/download-artifact/pull/492) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2> ### [`v8.0.1`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.1) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8.0.0...v8.0.1) #### What's Changed - Support for CJK characters in the artifact name by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#471](https://redirect.github.com/actions/download-artifact/pull/471) - Add a regression test for artifact name + content-type mismatches by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#472](https://redirect.github.com/actions/download-artifact/pull/472) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v8...v8.0.1> ### [`v8.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.0) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v7.0.0...v8.0.0) #### v8 - What's new > \[!IMPORTANT] > actions/download-artifact\@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes. > \[!IMPORTANT] > Hash mismatches will now error by default. Users can override this behavior with a setting change (see below). ##### Direct downloads To support direct uploads in `actions/upload-artifact`, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the `Content-Type` header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new `skip-decompress` parameter to `true`. ##### Enforced checks (breaking) A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the `digest-mismatch` parameter. To be secure by default, we are now defaulting the behavior to `error` which will fail the workflow run. ##### ESM To support new versions of the @actions/\* packages, we've upgraded the package to ESM. #### What's Changed - Don't attempt to un-zip non-zipped downloads by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#460](https://redirect.github.com/actions/download-artifact/pull/460) - Add a setting to specify what to do on hash mismatch and default it to `error` by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#461](https://redirect.github.com/actions/download-artifact/pull/461) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v7...v8.0.0> ### [`v7.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v6.0.0...v7.0.0) #### v7 - What's new > \[!IMPORTANT] > actions/download-artifact\@v7 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. ##### Node.js 24 This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. #### What's Changed - Update GHES guidance to include reference to Node 20 version by [@patrikpolyak](https://redirect.github.com/patrikpolyak) in [#440](https://redirect.github.com/actions/download-artifact/pull/440) - Download Artifact Node24 support by [@salmanmkc](https://redirect.github.com/salmanmkc) in [#415](https://redirect.github.com/actions/download-artifact/pull/415) - fix: update [@actions/artifact](https://redirect.github.com/actions/artifact) to fix Node.js 24 punycode deprecation by [@salmanmkc](https://redirect.github.com/salmanmkc) in [#451](https://redirect.github.com/actions/download-artifact/pull/451) - prepare release v7.0.0 for Node.js 24 support by [@salmanmkc](https://redirect.github.com/salmanmkc) in [#452](https://redirect.github.com/actions/download-artifact/pull/452) #### New Contributors - [@patrikpolyak](https://redirect.github.com/patrikpolyak) made their first contribution in [#440](https://redirect.github.com/actions/download-artifact/pull/440) - [@salmanmkc](https://redirect.github.com/salmanmkc) made their first contribution in [#415](https://redirect.github.com/actions/download-artifact/pull/415) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0> ### [`v6.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v5.0.0...v6.0.0) #### What's Changed **BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such. - Update README for download-artifact v5 changes by [@yacaovsnc](https://redirect.github.com/yacaovsnc) in [#417](https://redirect.github.com/actions/download-artifact/pull/417) - Update README with artifact extraction details by [@yacaovsnc](https://redirect.github.com/yacaovsnc) in [#424](https://redirect.github.com/actions/download-artifact/pull/424) - Readme: spell out the first use of GHES by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#431](https://redirect.github.com/actions/download-artifact/pull/431) - Bump `@actions/artifact` to `v4.0.0` - Prepare `v6.0.0` by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#438](https://redirect.github.com/actions/download-artifact/pull/438) #### New Contributors - [@danwkennedy](https://redirect.github.com/danwkennedy) made their first contribution in [#431](https://redirect.github.com/actions/download-artifact/pull/431) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v5...v6.0.0> </details> <details> <summary>actions/labeler</summary> ### [`v7.0.0`](https://redirect.github.com/actions/labeler/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/labeler/compare/v6.2.0...v7.0.0) #### What's Changed ##### Enhancements: - Migrate to ESM and update dependencies by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#949](https://redirect.github.com/actions/labeler/pull/949) **Full Changelog**: <https://github.com/actions/labeler/compare/v6...v7.0.0> </details> <details> <summary>actions/setup-node</summary> ### [`v7.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.1.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.1.0) #### What's Changed ##### Enhancements: - Add support for mise.toml file by [@gperdomor](https://redirect.github.com/gperdomor) in [#1421](https://redirect.github.com/actions/setup-node/pull/1421) - Support absolute paths in node-version-file by [@v-mahabaleshwars](https://redirect.github.com/v-mahabaleshwars) in [#1633](https://redirect.github.com/actions/setup-node/pull/1633) ##### Bug fixes: - Add Node version validation and manifest fetch retry by [@v-jitenderpalsingh](https://redirect.github.com/v-jitenderpalsingh) in [#1580](https://redirect.github.com/actions/setup-node/pull/1580) ##### Documentation updates: - README.md: bump actions/checkout to latest version 7 by [@deining](https://redirect.github.com/deining) in [#1578](https://redirect.github.com/actions/setup-node/pull/1578) - docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by [@v-gowridurgad](https://redirect.github.com/v-gowridurgad) in [#1593](https://redirect.github.com/actions/setup-node/pull/1593) - Fixed cache recommendation syntax by [@SubJunk](https://redirect.github.com/SubJunk) in [#1603](https://redirect.github.com/actions/setup-node/pull/1603) ##### Dependency updates: - Update workflow pins and migrate Node matrices to modern versions by [@v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#1583](https://redirect.github.com/actions/setup-node/pull/1583) - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 6.2.0 by [@philip-gai](https://redirect.github.com/philip-gai) in [#1584](https://redirect.github.com/actions/setup-node/pull/1584) - Pin [@types/node](https://redirect.github.com/types/node) to v24 by [@v-priyagupta108](https://redirect.github.com/v-priyagupta108) in [#1585](https://redirect.github.com/actions/setup-node/pull/1585) - Override brace-expansion to 5.0.8 by [@v-priyagupta108](https://redirect.github.com/v-priyagupta108) with [@Copilot](https://redirect.github.com/Copilot) in [#1599](https://redirect.github.com/actions/setup-node/pull/1599) - Upgrade actions/checkout from 7.0.0 to 7.0.1 by [@dependabot](https://redirect.github.com/dependabot) in [#1598](https://redirect.github.com/actions/setup-node/pull/1598) - Upgrade prettier from 3.8.4 to 3.9.6 by [@dependabot](https://redirect.github.com/dependabot) in [#1590](https://redirect.github.com/actions/setup-node/pull/1590) - Upgrade [@vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.44.0 to 0.45.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1610](https://redirect.github.com/actions/setup-node/pull/1610) - Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by [@dependabot](https://redirect.github.com/dependabot) in [#1602](https://redirect.github.com/actions/setup-node/pull/1602) - Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by [@dependabot](https://redirect.github.com/dependabot) in [#1629](https://redirect.github.com/actions/setup-node/pull/1629) - Upgrade [@types/semver](https://redirect.github.com/types/semver) from 7.7.1 to 7.8.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1616](https://redirect.github.com/actions/setup-node/pull/1616) - Upgrade [@typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser) from 8.62.0 to 8.70.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1615](https://redirect.github.com/actions/setup-node/pull/1615) - Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1631](https://redirect.github.com/actions/setup-node/pull/1631) - Upgrade jest-each from 30.4.1 to 30.5.2 by [@dependabot](https://redirect.github.com/dependabot) in [#1636](https://redirect.github.com/actions/setup-node/pull/1636) - Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1638](https://redirect.github.com/actions/setup-node/pull/1638) - Update dependencies and add license files by [@v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#1642](https://redirect.github.com/actions/setup-node/pull/1642) - Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1635](https://redirect.github.com/actions/setup-node/pull/1635) #### New Contributors - [@v-jitenderpalsingh](https://redirect.github.com/v-jitenderpalsingh) made their first contribution in [#1580](https://redirect.github.com/actions/setup-node/pull/1580) - [@philip-gai](https://redirect.github.com/philip-gai) made their first contribution in [#1584](https://redirect.github.com/actions/setup-node/pull/1584) - [@gperdomor](https://redirect.github.com/gperdomor) made their first contribution in [#1421](https://redirect.github.com/actions/setup-node/pull/1421) - [@SubJunk](https://redirect.github.com/SubJunk) made their first contribution in [#1603](https://redirect.github.com/actions/setup-node/pull/1603) **Full Changelog**: <https://github.com/actions/setup-node/compare/v7.0.0...v7.1.0> ### [`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0) ##### What's Changed ##### Enhancements: - Add cache-primary-key and cache-matched-key as outputs by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1577](https://redirect.github.com/actions/setup-node/pull/1577) - Migrate to ESM and upgrade dependencies by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1574](https://redirect.github.com/actions/setup-node/pull/1574) ##### Bug fixes: - Remove dummy NODE_AUTH_TOKEN export by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1558](https://redirect.github.com/actions/setup-node/pull/1558) - Only use `mirrorToken` in `getManifest` if it's provided by [@deiga](https://redirect.github.com/deiga) in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) ##### Documentation updates: - Add documentation for publishing to npm with Trusted Publisher (OIDC) by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - docs: Update restore-only cache documentation by [@priya-kinthali](https://redirect.github.com/priya-kinthali) in [#1550](https://redirect.github.com/actions/setup-node/pull/1550) - docs: Update caching recommendations to mitigate cache poisoning risks by [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) in [#1567](https://redirect.github.com/actions/setup-node/pull/1567) ##### Dependency update: - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@jasongin](https://redirect.github.com/jasongin) in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) ##### New Contributors - [@chiranjib-swain](https://redirect.github.com/chiranjib-swain) made their first contribution in [#1536](https://redirect.github.com/actions/setup-node/pull/1536) - [@deiga](https://redirect.github.com/deiga) made their first contribution in [#1548](https://redirect.github.com/actions/setup-node/pull/1548) - [@jasongin](https://redirect.github.com/jasongin) made their first contribution in [#1569](https://redirect.github.com/actions/setup-node/pull/1569) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v7.0.0> ### [`v6.5.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.5.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.4.0...v6.5.0) ##### What's Changed - Update [@actions/cache](https://redirect.github.com/actions/cache) to 5.1.0 and add security overrides for undici and fast-xml-parser by [@HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#1579](https://redirect.github.com/actions/setup-node/pull/1579) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0> ### [`v6.4.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.4.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.3.0...v6.4.0) ##### What's Changed ##### Dependency updates: - Upgrade [@actions](https://redirect.github.com/actions) dependencies by [@Copilot](https://redirect.github.com/Copilot) in [#1525](https://redirect.github.com/actions/setup-node/pull/1525) - Update Node.js versions in versions.yml and bump package to v6.4.0 by [@priya-kinthali](https://redirect.github.com/priya-kinthali) in [#1533](https://redirect.github.com/actions/setup-node/pull/1533) ##### New Contributors - [@Copilot](https://redirect.github.com/Copilot) made their first contribution in [#1525](https://redirect.github.com/actions/setup-node/pull/1525) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.4.0> ### [`v6.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.3.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.2.0...v6.3.0) ##### What's Changed ##### Enhancements: - Support parsing `devEngines` field by [@susnux](https://redirect.github.com/susnux) in [#1283](https://redirect.github.com/actions/setup-node/pull/1283) > When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node. ##### Dependency updates: - Fix npm audit issues by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1491](https://redirect.github.com/actions/setup-node/pull/1491) - Replace uuid with crypto.randomUUID() by [@trivikr](https://redirect.github.com/trivikr) in [#1378](https://redirect.github.com/actions/setup-node/pull/1378) - Upgrade minimatch from 3.1.2 to 3.1.5 by [@dependabot](https://redirect.github.com/dependabot) in [#1498](https://redirect.github.com/actions/setup-node/pull/1498) ##### Bug fixes: - Remove hardcoded bearer for mirror-url [@marco-ippolito](https://redirect.github.com/marco-ippolito) in [#1467](https://redirect.github.com/actions/setup-node/pull/1467) - Scope test lockfiles by package manager and update cache tests by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1495](https://redirect.github.com/actions/setup-node/pull/1495) ##### New Contributors - [@susnux](https://redirect.github.com/susnux) made their first contribution in [#1283](https://redirect.github.com/actions/setup-node/pull/1283) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.3.0> ### [`v6.2.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.2.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0) #### What's Changed ##### Documentation - Documentation update related to absence of Lockfile by [@mahabaleshwars](https://redirect.github.com/mahabaleshwars) in [#1454](https://redirect.github.com/actions/setup-node/pull/1454) - Correct mirror option typos by [@MikeMcC399](https://redirect.github.com/MikeMcC399) in [#1442](https://redirect.github.com/actions/setup-node/pull/1442) - Readme update on checkout version v6 by [@deining](https://redirect.github.com/deining) in [#1446](https://redirect.github.com/actions/setup-node/pull/1446) - Readme typo fixes [@munyari](https://redirect.github.com/munyari) in [#1226](https://redirect.github.com/actions/setup-node/pull/1226) - Advanced document update on checkout version v6 by [@aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#1468](https://redirect.github.com/actions/setup-node/pull/1468) ##### Dependency updates: - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to v5.0.1 by [@salmanmkc](https://redirect.github.com/salmanmkc) in [#1449](https://redirect.github.com/actions/setup-node/pull/1449) #### New Contributors - [@mahabaleshwars](https://redirect.github.com/mahabaleshwars) made their first contribution in [#1454](https://redirect.github.com/actions/setup-node/pull/1454) - [@MikeMcC399](https://redirect.github.com/MikeMcC399) made their first contribution in [#1442](https://redirect.github.com/actions/setup-node/pull/1442) - [@deining](https://redirect.github.com/deining) made their first contribution in [#1446](https://redirect.github.com/actions/setup-node/pull/1446) - [@munyari](https://redirect.github.com/munyari) made their first contribution in [#1226](https://redirect.github.com/actions/setup-node/pull/1226) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.2.0> ### [`v6.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.0.0...v6.1.0) ##### What's Changed ##### Enhancement: - Remove always-auth configuration handling by [@priyagupta108](https://redirect.github.com/priyagupta108) in [#1436](https://redirect.github.com/actions/setup-node/pull/1436) ##### Dependency updates: - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) from 4.0.3 to 4.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1384](https://redirect.github.com/actions/setup-node/pull/1384) - Upgrade actions/checkout from 5 to 6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1439](https://redirect.github.com/actions/setup-node/pull/1439) - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1435](https://redirect.github.com/actions/setup-node/pull/1435) ##### Documentation update: - Add example for restore-only cache in documentation by [@aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in [#1419](https://redirect.github.com/actions/setup-node/pull/1419) **Full Changelog**: <https://github.com/actions/setup-node/compare/v6...v6.1.0> ### [`v6.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v5.0.0...v6.0.0) #### What's Changed **Breaking Changes** - Limit automatic caching to npm, update workflows and documentation by [@priyagupta108](https://redirect.github.com/priyagupta108) in [#1374](https://redirect.github.com/actions/setup-node/pull/1374) **Dependency Upgrades** - Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1336](https://redirect.github.com/actions/setup-node/pull/1336) - Upgrade prettier from 2.8.8 to 3.6.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1334](https://redirect.github.com/actions/setup-node/pull/1334) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1362](https://redirect.github.com/actions/setup-node/pull/1362) **Full Changelog**: <https://github.com/actions/setup-node/compare/v5...v6.0.0> </details> <details> <summary>actions/setup-python</summary> ### [`v7.1.0`](https://redirect.github.com/actions/setup-python/releases/tag/v7.1.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v7.0.0...v7.1.0) #### What's Changed ##### Enhancements - Add `mirror` and `mirror-token` inputs for custom Python distribution sources by [@luhenry](https://redirect.github.com/luhenry) in [#1302](https://redirect.github.com/actions/setup-python/pull/1302) - Improve error message clarity by [@v-lmvysakh](https://redirect.github.com/v-lmvysakh) in [#1351](https://redirect.github.com/actions/setup-python/pull/1351) ##### Dependency Upgrade - Upgrade browserslist from 4.28.2 to 4.28.9 by [@dependabot](https://redirect.github.com/dependabot) in [#1353](https://redirect.github.com/actions/setup-python/pull/1353) - Upgrade [@typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser) from 8.62.0 to 8.70.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1343](https://redirect.github.com/actions/setup-python/pull/1343) - Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by [@dependabot](https://redirect.github.com/dependabot) in [#1342](https://redirect.github.com/actions/setup-python/pull/1342) - Upgrade [@vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.44.0 to 0.45.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1357](https://redirect.github.com/actions/setup-python/pull/1357) - Upgrade [@types/semver](https://redirect.github.com/types/semver) from 7.7.1 to 7.8.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1359](https://redirect.github.com/actions/setup-python/pull/1359) - Upgrade undici from 6.28.0 to 6.29.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1364](https://redirect.github.com/actions/setup-python/pull/1364) - Upgrade ts-jest from 29.4.11 to 29.4.14 by [@dependabot](https://redirect.github.com/dependabot) in [#1361](https://redirect.github.com/actions/setup-python/pull/1361) - Upgrade brace-expansion from 5.0.9 to 5.0.12 by [@dependabot](https://redirect.github.com/dependabot) in [#1365](https://redirect.github.com/actions/setup-python/pull/1365) - Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1363](https://redirect.github.com/actions/setup-python/pull/1363) - Upgrade [@typescript-eslint/eslint-plugin](https://redirect.github.com/typescript-eslint/eslint-plugin) from 8.62.0 to 8.71.1 by [@dependabot](https://redirect.github.com/dependabot) in [#1369](https://redirect.github.com/actions/setup-python/pull/1369) - Upgrade actions/checkout from 7.0.0 to 7.0.1 by [@dependabot](https://redirect.github.com/dependabot) in [#1345](https://redirect.github.com/actions/setup-python/pull/1345) - Upgrade cache to 6.3.0 by [@v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#1370](https://redirect.github.com/actions/setup-python/pull/1370) - Resolve Basic Validation audit failures by [@v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#1347](https://redirect.github.com/actions/setup-python/pull/1347) - Resolve npm audit failures by [@v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#1350](https://redirect.github.com/actions/setup-python/pull/1350) #### New Contributors - [@luhenry](https://redirect.github.com/luhenry) made their first contribution in [#1302](https://redirect.github.com/actions/setup-python/pull/1302) **Full Changelog**: <https://github.com/actions/setup-python/compare/v7.0.0...v7.1.0> ### [`v7.0.0`](https://redirect.github.com/actions/setup-python/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) #### What's Changed ##### Enhancements - Migrate to ESM and upgrade dependencies by [@priyagupta108](https://redirect.github.com/priyagupta108) in [#1330](https://redirect.github.com/actions/setup-python/pull/1330) - Pin SHA commits and update docs with latest versions by [@HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#1338](https://redirect.github.com/actions/setup-python/pull/1338) - Remove the pip-install input by [@gowridurgad](https://redirect.github.com/gowridurgad) in [#1336](https://redirect.github.com/actions/setup-python/pull/1336) ##### Bug Fix - Fix to Classify stderr warning messages as warnings instead of errors in annotations by [@lmvysakh](https://redirect.github.com/lmvysakh) in [#1335](https://redirect.github.com/actions/setup-python/pull/1335) - Validate and retry manifest fetch to prevent silent failures by [@priyagupta108](https://redirect.github.com/priyagupta108) in [#1332](https://redirect.github.com/actions/setup-python/pull/1332) ##### Dependency Upgrade - Bump certifi from 2020.6.20 to 2024.7.4 in /**tests**/data by [@dependabot](https://redirect.github.com/dependabot) in [#1328](https://redirect.github.com/actions/setup-python/pull/1328) - Remove EOL Python versions and Bumps numpy text fixture by [@priya-kinthali](https://redirect.github.com/priya-kinthali) in [#1333](https://redirect.github.com/actions/setup-python/pull/1333) - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 6.2.0 by [@philip-gai](https://redirect.github.com/philip-gai) in [#1337](https://redirect.github.com/actions/setup-python/pull/1337) #### New Contributors - [@lmvysakh](https://redirect.github.com/lmvysakh) made their first contribution in [#1335](https://redirect.github.com/actions/setup-python/pull/1335) - [@philip-gai](https://redirect.github.com/philip-gai) made their first contribution in [#1337](https://redirect.github.com/actions/setup-python/pull/1337) **Full Changelog**: <https://github.com/actions/setup-python/compare/v6...v7.0.0> </details> <details> <summary>actions/upload-artifact</summary> ### [`v7.0.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.2) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2) ##### What's Changed - Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers. - Updates [@actions/artifact](https://redirect.github.com/actions/artifact) to v6.3.1. ##### New Contributors - [@tunc-d](https://redirect.github.com/tunc-d) made their first contribution in [#821](https://redirect.github.com/actions/upload-artifact/pull/821) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2> ### [`v7.0.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7.0.0...v7.0.1) #### What's Changed - Update the readme with direct upload details by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#795](https://redirect.github.com/actions/upload-artifact/pull/795) - Readme: bump all the example versions to v7 by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#796](https://redirect.github.com/actions/upload-artifact/pull/796) - Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://redirect.github.com/yacaovsnc) in [#797](https://redirect.github.com/actions/upload-artifact/pull/797) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7...v7.0.1> ### [`v7.0.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v6.0.0...v7.0.0) #### v7 What's new ##### Direct Uploads Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file. ##### ESM To support new versions of the `@actions/*` packages, we've upgraded the package to ESM. #### What's Changed - Add proxy integration test by [@Link-](https://redirect.github.com/Link-) in [#754](https://redirect.github.com/actions/upload-artifact/pull/754) - Upgrade the module to ESM and bump dependencies by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#762](https://redirect.github.com/actions/upload-artifact/pull/762) - Support direct file uploads by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#764](https://redirect.github.com/actions/upload-artifact/pull/764) #### New Contributors - [@Link-](https://redirect.github.com/Link-) made their first contribution in [#754](https://redirect.github.com/actions/upload-artifact/pull/754) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v6...v7.0.0> ### [`v6.0.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0) #### v6 - What's new > \[!IMPORTANT] > actions/upload-artifact\@v6 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. ##### Node.js 24 This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. #### What's Changed - Upload Artifact Node 24 support by [@salmanmkc](https://redirect.github.com/salmanmkc) in [#719](https://redirect.github.com/actions/upload-artifact/pull/719) - fix: update [@actions/artifact](https://redirect.github.com/actions/artifact) for Node.js 24 punycode deprecation by [@salmanmkc](https://redirect.github.com/salmanmkc) in [#744](https://redirect.github.com/actions/upload-artifact/pull/744) - prepare release v6.0.0 for Node.js 24 support by [@salmanmkc](https://redirect.github.com/salmanmkc) in [#745](https://redirect.github.com/actions/upload-artifact/pull/745) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0> ### [`v5.0.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v5.0.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.2...v5.0.0) #### What's Changed **BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such. - Update README.md by [@GhadimiR](https://redirect.github.com/GhadimiR) in [#681](https://redirect.github.com/actions/upload-artifact/pull/681) - Update README.md by [@nebuk89](https://redirect.github.com/nebuk89) in [#712](https://redirect.github.com/actions/upload-artifact/pull/712) - Readme: spell out the first use of GHES by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#727](https://redirect.github.com/actions/upload-artifact/pull/727) - Update GHES guidance to include reference to Node 20 version by [@patrikpolyak](https://redirect.github.com/patrikpolyak) in [#725](https://redirect.github.com/actions/upload-artifact/pull/725) - Bump `@actions/artifact` to `v4.0.0` - Prepare `v5.0.0` by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#734](https://redirect.github.com/actions/upload-artifact/pull/734) #### New Contributors - [@GhadimiR](https://redirect.github.com/GhadimiR) made their first contribution in [#681](https://redirect.github.com/actions/upload-artifact/pull/681) - [@nebuk89](https://redirect.github.com/nebuk89) made their first contribution in [#712](https://redirect.github.com/actions/upload-artifact/pull/712) - [@danwkennedy](https://redirect.github.com/danwkennedy) made their first contribution in [#727](https://redirect.github.com/actions/upload-artifact/pull/727) - [@patrikpolyak](https://redirect.github.com/patrikpolyak) made their first contribution in [#725](https://redirect.github.com/actions/upload-artifact/pull/725) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v4...v5.0.0> </details> <details> <summary>astral-sh/setup-uv</summary> ### [`v10.3.3`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.3): 🌈 Use Astral mirror for version manifests with GitHub fallback [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.2...v10.3.3) ##### Changes This release contains something that should have been included a very long time ago. Sorry for sleeping on that. This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change) Also a big thank you to [@soujasK](https://redirect.github.com/soujasK) for a set of bugfixes 👏 ##### 🐛 Bug fixes - Use Astral mirror for version manifests with GitHub fallback [@eifinger](https://redirect.github.com/eifinger) ([#1119](https://redirect.github.com/astral-sh/setup-uv/issues/1119)) - fix: allow whitespace in uv requirement specifiers [@soujasK](https://redirect.github.com/soujasK) ([#1112](https://redirect.github.com/astral-sh/setup-uv/issues/1112)) - fix: resolve \~= specifiers with PEP 440 semantics [@soujasK](https://redirect.github.com/soujasK) ([#1111](https://redirect.github.com/astral-sh/setup-uv/issues/1111)) - fix: only report a saved cache when saving succeeded [@soujasK](https://redirect.github.com/soujasK) ([#1110](https://redirect.github.com/astral-sh/setup-uv/issues/1110)) ##### 🧰 Maintenance - chore: update known checksums for 0.13.6 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1117](https://redirect.github.com/astral-sh/setup-uv/issues/1117)) ##### 📚 Documentation - docs: use JSDoc for compatible release specifier comment [@eifinger](https://redirect.github.com/eifinger) ([#1113](https://redirect.github.com/astral-sh/setup-uv/issues/1113)) - docs: update version references to v10.3.2 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1104](https://redirect.github.com/astral-sh/setup-uv/issues/1104)) ### [`v10.3.2`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.2): 🌈 update known checksums for 0.13.5 [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.1...v10.3.2) ##### Changes ##### 🧰 Maintenance - chore: update known checksums for 0.13.5 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1103](https://redirect.github.com/astral-sh/setup-uv/issues/1103)) ##### 📚 Documentation - docs: update version references to v10.3.1 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1102](https://redirect.github.com/astral-sh/setup-uv/issues/1102)) ### [`v10.3.1`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.1): 🌈 preserve cache error class names in save-cache bundle [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.0...v10.3.1) ##### Changes This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn `##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.` ##### 🐛 Bug fixes - fix: preserve cache error class names in save-cache bundle [@dannyward630](https://redirect.github.com/dannyward630) ([#1093](https://redirect.github.com/astral-sh/setup-uv/issues/1093)) ##### 🧰 Maintenance - chore: update known checksums for 0.13.4 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1099](https://redirect.github.com/astral-sh/setup-uv/issues/1099)) - chore: update known checksums for 0.13.2/0.13.3 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1098](https://redirect.github.com/astral-sh/setup-uv/issues/1098)) - chore: update known checksums for 0.13.1 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1094](https://redirect.github.com/astral-sh/setup-uv/issues/1094)) - Verify npm dependency signatures before builds [@zaniebot](https://redirect.github.com/zaniebot) ([#1027](https://redirect.github.com/astral-sh/setup-uv/issues/1027)) ##### 📚 Documentation - docs: cache-dependency-glob matches relative to the working directory [@flange-ipb](https://redirect.github.com/flange-ipb) ([#1092](https://redirect.github.com/astral-sh/setup-uv/issues/1092)) - docs: update version references to v10.3.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1090](https://redirect.github.com/astral-sh/setup-uv/issues/1090)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://redirect.github.com/eifinger) ([#1101](https://redirect.github.com/astral-sh/setup-uv/issues/1101)) ### [`v10.3.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.0): 🌈 Add Python architecture selection [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.2.0...v10.3.0) #### Changes This release adds the `python-arch` input to select a Python architecture independently of the Python version. With `uv` 0.13.0 or later, set `python-arch: x86_64` to use x64 Python on Windows ARM64 runners. It also includes embedded checksums for `uv` releases through 0.13.0. - Use macOS 15 runners for tests [@charliermarsh](https://redirect.github.com/charliermarsh) ([#1081](https://redirect.github.com/astral-sh/setup-uv/issues/1081)) #### 🚀 Enhancements - Add `python-arch` support [@zanieb](https://redirect.github.com/zanieb) ([#1079](https://redirect.github.com/astral-sh/setup-uv/issues/1079)) #### 🧰 Maintenance - chore: update known checksums for 0.13.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1089](https://redirect.github.com/astral-sh/setup-uv/issues/1089)) - chore: update known checksums for 0.12.24 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1084](https://redirect.github.com/astral-sh/setup-uv/issues/1084)) - chore: update known checksums for 0.12.23 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1082](https://redirect.github.com/astral-sh/setup-uv/issues/1082)) - chore: update known checksums for 0.12.22 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1080](https://redirect.github.com/astral-sh/setup-uv/issues/1080)) - chore: update known checksums for 0.12.21 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1078](https://redirect.github.com/astral-sh/setup-uv/issues/1078)) - chore: update known checksums for 0.12.20 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1076](https://redirect.github.com/astral-sh/setup-uv/issues/1076)) - chore: update known checksums for 0.12.19 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1068](https://redirect.github.com/astral-sh/setup-uv/issues/1068)) - chore: update known checksums for 0.12.18 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1065](https://redirect.github.com/astral-sh/setup-uv/issues/1065)) #### ⬆️ Dependency updates - chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) ([#1077](https://redirect.github.com/astral-sh/setup-uv/issues/1077)) ### [`v10.2.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.2.0): 🌈 Disable automatic cache saves for merge queues [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.1.0...v10.2.0) ##### Changes This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used. ##### 🚀 Enhancements - Disable automatic cache saves for merge queues [@eifinger](https://redirect.github.com/eifinger) ([#1056](https://redirect.github.com/astral-sh/setup-uv/issues/1056)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.17 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1058](https://redirect.github.com/astral-sh/setup-uv/issues/1058)) - chore: update known checksums for 0.12.16 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1057](https://redirect.github.com/astral-sh/setup-uv/issues/1057)) - chore: update known checksums for 0.12.15 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1054](https://redirect.github.com/astral-sh/setup-uv/issues/1054)) - chore: update known checksums for 0.12.14 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1053](https://redirect.github.com/astral-sh/setup-uv/issues/1053)) - chore: update known checksums for 0.12.13 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1045](https://redirect.github.com/astral-sh/setup-uv/issues/1045)) ##### 📚 Documentation - docs: update version references to v10.1.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1044](https://redirect.github.com/astral-sh/setup-uv/issues/1044)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://redirect.github.com/eifinger) ([#1059](https://redirect.github.com/astral-sh/setup-uv/issues/1059)) ### [`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://redirect.github.com/mj0nez) ([#1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://redirect.github.com/woodruffw) ([#1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://redirect.github.com/woodruffw) ([#1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://redirect.github.com/zaniebot) ([#1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://redirect.github.com/woodruffw) ([#1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024)) - Pin one-shot tools [@woodruffw](https://redirect.github.com/woodruffw) ([#1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022)) - ci: remove obsolete direct push attempts [@eifinger](https://redirect.github.com/eifinger) ([#1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://redirect.github.com/eifinger) ([#1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043)) - Harden npm install defaults [@zaniebot](https://redirect.github.com/zaniebot) ([#1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026)) - Add dependency cooldowns [@woodruffw](https://redirect.github.com/woodruffw) ([#1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021)) ### [`v10.0.1`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.0.1): 🌈 Tolerate transient manifest timeouts [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.0...v10.0.1) ##### Changes Thank you [@arguile-](https://redirect.github.com/arguile-) for making this action more resilient. ##### 🐛 Bug fixes - Tolerate transient manifest timeouts [@arguile-](https://redirect.github.com/arguile-) ([#1016](https://redirect.github.com/astral-sh/setup-uv/issues/1016)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.4 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1017](https://redirect.github.com/astral-sh/setup-uv/issues/1017)) ##### 📚 Documentation - docs: update version references to v10.0.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1014](https://redirect.github.com/astral-sh/setup-uv/issues/1014)) ### [`v10.0.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.0.0): 🌈 Disable automatic caching for sensitive events and new QOL features [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v9.0.0...v10.0.0) ##### Changes Another breaking release, directly after v9.0.0 but we think the added security justifies that. ##### Extra security by default If you use the default `enable-cache: auto` this will now **DISABLE THE CACHE** to protect against cache poisoning for the following events: - `pull_request_target` - `workflow_run` - `release` You can read the full reasoning in [#984](https://redirect.github.com/astral-sh/setup-uv/issues/984) ##### `version: latest-known` ```yaml - name: Install the latest version of uv known to setup-uv uses: astral-sh/setup-uv@v10.0.0 with: version: "latest-known" ``` This will now install the latest version with a checksum that is known by this action. The [known `uv` checksums](https://redirect.github.com/astral-sh/setup-uv/blob/4f6036f71cec78afb113b323f220c9185d983c12/src/download/checksum/known-checksums.ts) are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security. ##### Read python version from `.tool-versions` ```yaml - name: Install uv based on the version defined in .tool-versions and also set python uses: astral-sh/setup-uv@v10.0.0 with: version-file: "pyproject.toml" ``` Will now also set the python version if it is defined in `.tool-versions`. You can read the details [in the docs](https://redirect.github.com/astral-sh/setup-uv/blob/main/docs/advanced-version-configuration.md#install-a-version-defined-in-a-requirements-or-config-file) ##### 🚨 Breaking changes - Disable automatic caching for sensitive events [@eifinger](https://redirect.github.com/eifinger) ([#992](https://redirect.github.com/astral-sh/setup-uv/issues/992)) ##### 🐛 Bug fixes - Reject paths in .tool-versions [@eifinger](https://redirect.github.com/eifinger) ([#1007](https://redirect.github.com/astral-sh/setup-uv/issues/1007)) ##### 🚀 Enhancements - Read Python version from .tool-versions [@eifinger](https://redirect.github.com/eifinger) ([#996](https://redirect.github.com/astral-sh/setup-uv/issues/996)) - Add latest-known version selector [@eifinger](https:// > [!IMPORTANT] > ✂ PR body was truncated to here. </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/rockcraft).

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-25 02:52 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 3 Complexity: 15 Confidence: 75 Actionability: 20	close stale	Renovate PR updating multiple GitHub Actions to latest major versions. Open 98 days with 3 failing CI checks and 19 unresolved review comments.
2026-10-24 10:54 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 30 Quick Win: 7 Complexity: 20 Confidence: 60 Actionability: 30	needs review	Renovate PR updating 10 GitHub Actions to major versions with node 24 and ubuntu 26.04. Has 3 failing CI checks and 19 unresolved review comments.
2026-10-24 06:53 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 25 Quick Win: 4 Complexity: 30 Confidence: 75 Actionability: 20	close stale	Renovate PR updating 10 GitHub Actions to major versions (checkout v7, download-artifact v8, setup-node v7, setup-python v7, upload-artifact v7, setup-uv v10, node 24, ubuntu 26.04). 98 days old, 19 unresolved review comments, 3 CI checks failing (build, source-spread-tests, docs-spread-tests).
2026-10-24 10:53 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 11 Complexity: 10 Confidence: 60 Actionability: 60	needs review	Renovate PR updating GitHub Actions to latest major versions. CI passing, but has 19 unresolved review comments after 98 days of inactivity.
2026-10-24 07:22 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 5 Complexity: 15 Confidence: 75 Actionability: 30	needs review	Renovate PR updating GitHub Actions to latest major versions. Has failing CI (docs-spread-tests, build, source-spread-tests) and 19 unresolved review comments after 97 days.
2026-10-24 03:43 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 5 Complexity: 10 Confidence: 70 Actionability: 30	needs review	Renovate PR updating GitHub Actions to latest major versions. CI failing on docs-spread-tests, build, and source-spread-tests. Awaiting maintainer review.
2026-10-24 12:03 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 25 Quick Win: 18 Complexity: 10 Confidence: 85 Actionability: 80	needs review	Renovate PR updating GitHub Actions to latest major versions. All CI checks passing, awaiting maintainer review.
2026-10-23 06:23 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 4 Complexity: 10 Confidence: 60 Actionability: 20	keep open	Renovate PR updating GitHub Actions to latest major versions. CI failing on lint / files, source-spread-tests, and build checks. No reviewers, 19 unresolved comments.
2026-10-23 03:52 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 2 Complexity: 15 Confidence: 75 Actionability: 10	close stale	Renovate PR updating multiple GitHub Actions to major versions. Open 97 days with 19 unresolved review comments and 3 failing CI checks (lint/files, source-spread-tests, build).
2026-10-22 05:42 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 15 Quick Win: 11 Complexity: 10 Confidence: 90 Actionability: 80	needs review	Renovate-generated PR updating multiple GitHub Actions to latest major versions (checkout v7, download-artifact v8, setup-node v7, setup-python v7, upload-artifact v7, setup-uv v10.3.0, node 24, ubuntu 26.04). All CI checks passing.
2026-10-08 05:54 PM UTC	~deepseek/deepseek-pro-latest	Impact: 30 Quick Win: 3 Complexity: 45 Confidence: 75 Actionability: 20	keep open	Renovate major bump for GitHub Actions across 9 workflow files: checkout v5/v6→v7, upload/download-artifact to v7/v8, setup-node/python/uv, labeler, action-gh-release, Node 22→24. CI failing on build and spread tests.
2026-10-08 10:35 AM UTC	~deepseek/deepseek-pro-latest	Impact: 25 Quick Win: 5 Complexity: 40 Confidence: 70 Actionability: 35	needs review	Renovate major update for GitHub Actions across 9 workflow files: checkout v5/v6→v7, artifact actions v4/v5→v7/v8, setup-node/python/uv, labeler, action-gh-release, Node 22→24. CI failing: build, docs/source spread tests.
2026-10-07 07:04 PM UTC	~deepseek/deepseek-pro-latest	Impact: 35 Quick Win: 5 Complexity: 50 Confidence: 70 Actionability: 30	keep open	Renovate major GitHub Actions update across 9 workflow files: checkout v7, artifact actions v7/v8, setup-node/python/uv, Node 22→24, action-gh-release v3. CI failing on build, docs-spread-tests, source-spread-tests.
2026-10-07 07:03 PM UTC	~deepseek/deepseek-pro-latest	Impact: 35 Quick Win: 6 Complexity: 40 Confidence: 70 Actionability: 30	keep open	Renovate major GitHub Actions update across 9 workflow files: checkout to v7, artifact actions to v7/v8, setup-node/python/uv, Node 22→24, action-gh-release v2→v3. CI failing on build, docs-spread-tests, source-spread-tests.
2026-10-07 12:07 PM UTC	~deepseek/deepseek-pro-latest	Impact: 30 Quick Win: 5 Complexity: 40 Confidence: 70 Actionability: 30	needs review	Renovate major bumps of GitHub Actions (checkout, upload/download-artifact, setup-node/python/uv, labeler, gh-release) across 9 workflow files. CI failing on spread tests and build.
2026-10-03 03:58 PM UTC	stealth/space-bunny-alpha	Impact: 28 Quick Win: 11 Complexity: 30 Confidence: 70 Actionability: 58	needs review	Renovate bot bumps GitHub Actions majors across 9 rockcraft workflows (+21/-21): checkout v7, setup-node v7, setup-uv v10.2.0, upload-artifact v7, download-artifact v8, labeler/setup-python v7, gh-release v3, node 22 to 24. No reviews yet; CI mostly green, several checks still pending.
2026-10-02 08:29 PM UTC	stealth/space-bunny-alpha	Impact: 22 Quick Win: 14 Complexity: 18 Confidence: 82 Actionability: 78	needs review	Renovate major bump of GitHub Actions (checkout v7, setup-node v7, setup-uv v10.2.0, upload-artifact v7, download-artifact v8, labeler/setup-python v7, gh-release v3, node 22→24) across 9 workflow files, +21/-21. No review comments, most CI green, 3 checks pending.
2026-10-02 01:34 PM UTC	qwen/qwen3.8-27b	Impact: 15 Quick Win: 10 Complexity: 10 Confidence: 85 Actionability: 75	needs review	Renovate major bump of GitHub Actions (checkout v7, setup-node v7, setup-uv v10.2.0, upload/download-artifact v7/v8, node 24, gh-release v3) across 9 workflow files; +21/-21, no CI failures, some checks pending, automerge enabled.
2026-10-02 01:22 PM UTC	qwen/qwen3.8-27b	Impact: 15 Quick Win: 9 Complexity: 20 Confidence: 85 Actionability: 72	needs review	Renovate major bump of GitHub Actions (checkout v7, setup-node v7, setup-python v7, upload/download-artifact v7/v8, setup-uv v10.2.0, node 22->24) across 9 workflow files (+21/-21). No CI failures, several checks pending, no review yet.
2026-10-01 08:33 PM UTC	qwen/qwen3.8-27b	Impact: 25 Quick Win: 7 Complexity: 35 Confidence: 75 Actionability: 45	needs review	Renovate major bump of GitHub Actions (checkout v7, download-artifact v8, setup-node v7, setup-uv v10, node 24, etc.) across 9 workflow files (+21/-21). Open, no reviewers, CI mostly green but docs-spread-tests and source-spread-tests failing.
2026-10-01 02:45 PM UTC	qwen/qwen3.8-27b	Impact: 35 Quick Win: 8 Complexity: 35 Confidence: 80 Actionability: 35	keep open	Renovate major bump of GitHub Actions across 9 workflow files (+21/-21): checkout v5/v6→v7, download-artifact v5→v8, upload-artifact v4→v7, setup-node/python→v7, setup-uv v6→v10, node 22→24, labeler→v7, gh-release→v3. Open, 0 comments, no reviewer; CI failing on docs-spread-tests and source-spread-tests (self-hosted runners).
2026-09-30 09:38 PM UTC	stealth/space-bunny-alpha	Impact: 42 Quick Win: 15 Complexity: 40 Confidence: 72 Actionability: 58	needs review	Renovate major bump of GitHub Actions across 9 workflow files (checkout v7, upload/download-artifact v7/v8, setup-node v7, setup-uv v10.2.0, node 22→24, action-gh-release v3). No failing checks, several still pending, automerge on, zero reviews.
2026-09-25 09:03 PM UTC	stealth/space-bunny-alpha	Impact: 38 Quick Win: 8 Complexity: 45 Confidence: 80 Actionability: 38	keep open	Renovate updates GitHub Actions to new majors and Node 22 to 24 across 9 workflow files; fast tests pass, but lint fails and several slow/build checks remain pending.
2026-09-25 07:16 PM UTC	stealth/space-bunny-alpha	Impact: 30 Quick Win: 14 Complexity: 28 Confidence: 70 Actionability: 66	needs review	Renovate bot bumps GitHub Actions across 9 CI workflow files (+21/-21): checkout to v7, download-artifact v5->v8, upload-artifact v4->v7, setup-node/python/labeler v7, setup-uv v10, gh-release v3, Node 22->24. Automerge on, 8 checks green, several still pending, awaiting review.
2026-09-24 09:19 PM UTC	stealth/space-bunny-alpha	Impact: 40 Quick Win: 15 Complexity: 36 Confidence: 87 Actionability: 60	needs review	Renovate proposes 21 additions and 21 deletions across 9 CI workflow files for major GitHub Actions and Node 24 updates. No reviewers or CI checks are reported; maintainer review is pending.
2026-09-24 09:19 PM UTC	stealth/space-bunny-alpha	Impact: 48 Quick Win: 14 Complexity: 50 Confidence: 92 Actionability: 58	needs review	Renovate updates nine CI workflows to major GitHub Actions releases and Node 24; open with no reviewers or reported CI checks and several documented breaking changes.
2026-09-17 11:42 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 30 Quick Win: 26 Staleness: 10 Complexity: 15 Confidence: 85	needs review	Renovate PR updating multiple GitHub Actions to major versions (checkout v6→v7, download-artifact v5→v8, setup-node v5→v7, etc.). All CI checks passing, automerge enabled, awaiting review.
2026-09-16 07:43 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 35 Quick Win: 30 Staleness: 10 Complexity: 15 Confidence: 75	needs review	Renovate PR updating multiple GitHub Actions to latest major versions. CI mostly passing except docs-spread-tests and source-spread-tests. Automerge enabled.
2026-09-16 06:23 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 35 Quick Win: 28 Staleness: 15 Complexity: 20 Confidence: 70	keep open	Renovate PR updating GitHub Actions to latest major versions (checkout v7, download-artifact v8, setup-node v7, etc.). CI mostly passing with 2 spread tests failing. Automerge enabled.
2026-09-16 11:02 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 25 Quick Win: 21 Staleness: 45 Complexity: 15 Confidence: 75	needs review	Renovate PR updating multiple GitHub Actions to latest major versions. CI has 2 failing spread tests (docs-spread-tests, source-spread-tests). Automerge enabled but blocked by test failures.
2026-09-16 12:26 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 25 Quick Win: 21 Staleness: 5 Complexity: 15 Confidence: 85	needs review	Renovate PR updating multiple GitHub Actions to major versions (checkout, download-artifact, labeler, setup-node, setup-python, upload-artifact, setup-uv, node runtime, gh-release). Automerge enabled. 2 CI tests failing.
2026-09-15 11:55 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 15 Staleness: 5 Complexity: 25 Confidence: 85	needs review	Renovate PR updating 11 GitHub Actions to major versions (checkout v5→v7, download-artifact v5→v8, setup-node v5→v7, etc.). All CI checks passing, automerge enabled, no reviewers yet.
2026-09-15 10:14 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 30 Quick Win: 26 Staleness: 20 Complexity: 15 Confidence: 65	needs review	Renovate PR updating multiple GitHub Actions to major versions. CI has 2 failing spread tests (source-spread-tests, docs-spread-tests). No reviewers, no comments.
2026-09-14 04:25 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 40 Quick Win: 34 Staleness: 35 Complexity: 15 Confidence: 70	needs review	Renovate PR updating multiple GitHub Actions to major versions (checkout v6→v7, download-artifact v5→v8, setup-node v5→v7, etc.). CI has 2 failing spread tests.
2026-09-13 11:46 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 25 Quick Win: 21 Staleness: 20 Complexity: 15 Confidence: 75	needs review	Renovate PR updating multiple GitHub Actions to latest major versions. CI has failing spread tests. Awaiting review/merge.
2026-09-13 03:35 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 35 Quick Win: 30 Staleness: 35 Complexity: 15 Confidence: 75	needs review	Renovate PR updating multiple GitHub Actions to major versions. Most CI passing, but source-spread-tests and docs-spread-tests are failing. Automerge enabled.
2026-09-12 11:14 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 18 Staleness: 10 Complexity: 10 Confidence: 85	keep open	Renovate PR updating multiple GitHub Actions to major versions (checkout v6→v7, download-artifact v5→v8, setup-node v5/v6→v7, etc.). All CI checks passing, automerge enabled.
2026-09-11 09:24 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 19 Staleness: 10 Complexity: 5 Confidence: 90	needs review	Renovate PR updating 10 GitHub Actions to latest major versions. All CI checks passing, automerge enabled, no reviews yet.
2026-09-11 05:55 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 30 Quick Win: 26 Staleness: 75 Complexity: 15 Confidence: 70	close stale	Renovate PR updating 11 GitHub Actions to latest major versions. Inactive for 55 days with 2 failing CI tests (source-spread-tests, docs-spread-tests).
2026-09-11 12:05 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 15 Quick Win: 14 Staleness: 25 Complexity: 10 Confidence: 75	needs review	Renovate PR updating multiple GitHub Actions to their latest major versions. CI mostly passing except source-spread-tests and docs-spread-tests. Automerge enabled.
2026-09-10 08:05 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 35 Quick Win: 30 Staleness: 5 Complexity: 15 Confidence: 80	keep open	Renovate PR updating 11 GitHub Actions to latest major versions. CI mostly passing except source-spread-tests and docs-spread-tests. Automerge enabled.
2026-09-10 05:03 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 18 Staleness: 5 Complexity: 10 Confidence: 90	keep open	Renovate PR updating multiple GitHub Actions to their latest major versions across 9 files; all CI checks passing, automerge enabled.
2026-09-10 12:25 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 20 Quick Win: 18 Staleness: 5 Complexity: 10 Confidence: 90	keep open	Renovate PR updating multiple GitHub Actions to their latest major versions. All CI checks passing, automerge enabled, no comments or reviews yet.
2026-09-09 05:15 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 30 Quick Win: 26 Staleness: 10 Complexity: 15 Confidence: 75	needs review	Renovate PR updating multiple GitHub Actions to major versions. Automerge enabled. Most CI checks passing; lint / files, source-spread-tests, and docs-spread-tests failing.
2026-09-08 11:55 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 25 Quick Win: 21 Staleness: 15 Complexity: 15 Confidence: 75	needs review	Renovate PR updating multiple GitHub Actions to major versions (checkout, download-artifact, setup-node, setup-python, upload-artifact, etc.). CI has 3 failing checks: lint/files, source-spread-tests, docs-spread-tests.
2026-09-08 06:18 PM UTC	qwen/qwen3.6-35b-a3b	Impact: 25 Quick Win: 22 Staleness: 15 Complexity: 10 Confidence: 75	keep open	Renovate PR updating multiple GitHub Actions to major versions. CI mostly passing with one failing lint check. Automerge enabled.
2026-09-08 11:15 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 40 Quick Win: 34 Staleness: 10 Complexity: 15 Confidence: 75	needs review	Renovate PR updating 11 GitHub Actions to major versions (checkout v7, download-artifact v8, setup-node v7, etc.). CI has 2 failing spread tests (source-spread-tests, docs-spread-tests). No maintainer comments yet.
2026-09-08 01:23 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 40 Quick Win: 34 Staleness: 35 Complexity: 15 Confidence: 70	needs review	Renovate PR updating multiple GitHub Actions to major versions (checkout v7, download-artifact v8, setup-node v7, setup-python v7, upload-artifact v7, setup-uv v10, node 24). CI has 2 failing spread tests.
2026-09-05 06:41 PM UTC	qwen3.6-35b-a3b-mtp-q6	Impact: 40 Quick Win: 34 Staleness: 10 Complexity: 15 Confidence: 85	needs review	Renovate PR updating multiple GitHub Actions to major versions (checkout v6→v7, download-artifact v5→v8, setup-node v5→v7, etc.). CI passing, automerge enabled, no reviewers yet.
2026-08-27 11:42 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 90	needs review	Updates multiple GitHub Actions to major versions and Node.js 24. Generated by Renovate with automerge enabled. Currently pending review with no CI checks run yet.
2026-08-26 09:12 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 15 Confidence: 90	needs review	Automated dependency update bumping GitHub Actions and Node.js to major versions. Currently awaiting maintainer review with no comments or CI results yet.
2026-08-16 03:11 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 90	needs review	Automated dependency update for GitHub Actions and Node.js versions. Currently awaiting maintainer review with no comments or CI results reported.
2026-08-16 11:01 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js versions to their latest major releases. Generated by Renovate, currently pending maintainer review with no comments or CI results yet.
2026-08-16 11:01 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 85	needs review	Automated dependency update for GitHub Actions and Node.js runtime. Targets major version bumps across multiple official and third-party actions. Currently pending maintainer review with no CI checks triggered yet.
2026-08-15 03:42 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 5 Confidence: 90	needs review	Automated dependency update for GitHub Actions and Node.js runtime. Updates multiple official actions to major versions. Currently awaiting review and CI checks. Automerge is enabled.
2026-08-15 12:11 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 15 Complexity: 25 Confidence: 85	needs review	Automated dependency update for GitHub Actions and Node.js versions. Currently pending maintainer review with no comments or CI results yet.
2026-08-14 04:11 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 90	needs review	Updates multiple GitHub Actions to major versions and bumps Node.js to v24. Generated by Renovate with automerge enabled. Currently pending review with no CI results yet.
2026-08-12 09:11 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 20 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Generated by Renovate with automerge enabled. Currently pending review with two failing CI checks.
2026-08-12 09:42 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 10 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Currently pending maintainer review with two failing CI checks (lint / files, source-spread-tests).
2026-08-12 09:41 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js versions to major releases. Currently pending maintainer review with 2 failing CI checks (lint/files, source-spread-tests).
2026-08-12 04:31 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 20 Confidence: 85	needs review	Automated dependency update upgrading multiple GitHub Actions to major versions. Currently pending review with 0 comments and 2 failing CI checks.
2026-08-10 07:01 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Currently has two failing CI checks and awaits maintainer review.
2026-08-10 03:51 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Automated dependency update for GitHub Actions and Node.js versions. Currently pending review with two failing CI checks. Automerge is enabled.
2026-08-09 07:21 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 35 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and bumps Node.js to v24. Currently pending review with two failing CI checks.
2026-08-09 03:11 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 40 Complexity: 20 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js 22 to 24. Currently pending maintainer review with two failing CI checks.
2026-08-08 07:01 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 85	needs review	Automated dependency update for GitHub Actions and Node.js versions. Currently pending maintainer review with 2 failing CI checks (lint/files, source-spread-tests).
2026-08-08 11:01 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 15 Confidence: 90	needs review	Automated update of GitHub Actions and Node.js to major versions. Currently pending maintainer review with two failing CI checks.
2026-08-07 12:41 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Currently pending review with 0 comments. CI shows 2 failing checks.
2026-08-07 07:12 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 90	needs review	Automated dependency update upgrading multiple GitHub Actions to major versions. Currently pending maintainer review with two failing CI checks.
2026-08-07 03:31 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Automated dependency update for GitHub Actions and Node.js versions. Currently pending maintainer review with two failing CI checks.
2026-08-06 11:11 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 25 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and bumps Node.js to v24. Currently pending maintainer review with two failing CI checks. Generated by Renovate.
2026-08-06 07:51 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 20 Confidence: 90	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. CI shows two failing lint/test checks. Awaiting maintainer review.
2026-08-06 03:21 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 20 Complexity: 10 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js versions to major releases. Currently pending maintainer review with 0 comments. CI shows 2 failing checks while others pass.
2026-08-04 04:41 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 20 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js versions to major releases. Currently pending maintainer review with zero comments. CI shows two failing checks while others pass.
2026-08-04 04:41 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 20 Confidence: 85	needs review	Updates major versions of GitHub Actions and Node.js runtime. Currently pending maintainer review with two failing CI checks.
2026-08-02 04:41 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions (checkout v7, download-artifact v8, setup-node v7, etc.). Currently pending maintainer review with two failing CI checks.
2026-08-01 11:51 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 20 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js versions to major releases via Renovate. Currently pending maintainer review with two failing CI checks.
2026-08-01 11:11 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 20 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Opened 14 days ago, currently pending maintainer review with two failing CI checks.
2026-08-01 11:11 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Currently pending review with zero comments. CI shows two failing checks that require assessment before merging.
2026-08-01 04:11 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 20 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Currently pending review with two failing CI checks.
2026-08-01 12:21 AM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to 24. Currently pending maintainer review with two failing CI checks.
2026-07-31 04:44 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Currently pending review with zero comments. CI shows two failing checks despite automerge being enabled.
2026-07-30 11:04 PM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js versions to major releases. Currently pending maintainer review with 0 comments. CI shows failures in lint and source-spread-tests.
2026-07-30 03:13 PM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 10 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and bumps Node.js to v24. Currently pending maintainer review with two failing CI checks.
2026-07-24 11:33 PM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Automated dependency update for GitHub Actions and Node.js versions. CI shows two failing checks (lint/files, source-spread-tests). Awaiting maintainer review.
2026-07-24 04:36 PM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions to major versions and Node.js to v24. Generated by Renovate with automerge enabled. CI shows failing lint and source-spread tests.
2026-07-24 03:00 PM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js versions to their latest major releases. Currently pending review with two failing CI checks (lint/files, source-spread-tests).
2026-07-23 05:21 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 20 Confidence: 85	needs review	Updates multiple GitHub Actions and Node.js to major versions via Renovate. Currently pending maintainer review with one failing lint check and others passing or pending.
2026-07-23 05:21 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 25 Confidence: 85	needs review	Automated dependency update upgrading multiple GitHub Actions to major versions. Currently awaiting maintainer review with one failing lint check and several pending CI jobs.
2026-07-23 02:19 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 15 Confidence: 85	needs review	Updates GitHub Actions to major versions and Node.js to v24. Automated by Renovate with automerge enabled. Awaiting review with one failing lint check.
2026-07-22 12:22 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 5 Complexity: 10 Confidence: 90	needs review	Updates major versions of GitHub Actions and Node.js runtime. Currently pending CI checks and awaiting maintainer review.
2026-07-18 10:44 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 5 Complexity: 25 Confidence: 90	keep open	Updates multiple GitHub Actions to major versions (checkout v7, download-artifact v8, setup-node v7, upload-artifact v7, setup-uv v8, node v24, gh-release v3). Currently open, awaiting CI and automerge.

Update history

Date	Change
2026-10-30 04:40 PM UTC	updated
2026-10-30 12:25 PM UTC	updated
2026-10-30 02:59 AM UTC	updated
2026-10-29 10:42 PM UTC	updated
2026-10-29 02:32 PM UTC	updated
2026-10-29 04:13 AM UTC	updated
2026-10-28 10:06 PM UTC	updated
2026-10-28 03:15 PM UTC	updated
2026-10-28 08:02 AM UTC	updated
2026-10-28 12:47 AM UTC	updated
2026-10-27 04:15 PM UTC	updated
2026-10-27 01:53 PM UTC	updated
2026-10-27 07:13 AM UTC	updated
2026-10-27 02:58 AM UTC	updated
2026-10-26 08:03 PM UTC	updated
2026-10-26 12:13 PM UTC	updated
2026-10-26 07:33 AM UTC	updated
2026-10-26 03:40 AM UTC	updated
2026-10-25 10:38 PM UTC	updated
2026-10-25 06:35 PM UTC	updated
2026-10-25 02:13 PM UTC	updated
2026-10-25 10:37 AM UTC	updated
2026-10-25 06:22 AM UTC	updated
2026-10-25 02:43 AM UTC	updated
2026-10-24 10:50 PM UTC	updated
2026-10-24 06:46 PM UTC	updated
2026-10-24 10:45 AM UTC	updated
2026-10-24 07:14 AM UTC	updated
2026-10-24 03:36 AM UTC	updated
2026-10-24 12:00 AM UTC	updated
2026-10-23 06:15 PM UTC	updated
2026-10-23 10:17 AM UTC	updated
2026-10-23 12:34 AM UTC	updated
2026-10-22 04:36 PM UTC	updated
2026-10-22 06:52 AM UTC	updated
2026-10-22 12:35 AM UTC	updated
2026-10-21 06:46 PM UTC	updated
2026-10-21 08:38 AM UTC	updated
2026-10-21 01:30 AM UTC	updated
2026-10-20 02:32 PM UTC	updated
2026-10-19 12:29 PM UTC	updated
2026-10-19 07:21 AM UTC	updated
2026-10-18 10:27 PM UTC	updated
2026-10-18 02:17 PM UTC	updated
2026-10-18 10:39 AM UTC	updated
2026-10-18 06:37 AM UTC	updated
2026-10-17 11:03 AM UTC	updated
2026-10-17 04:01 AM UTC	updated
2026-10-16 07:11 PM UTC	updated
2026-10-16 04:44 PM UTC	updated
2026-10-16 12:11 PM UTC	updated
2026-10-16 08:15 AM UTC	updated
2026-10-16 01:08 AM UTC	updated
2026-10-15 06:11 PM UTC	updated
2026-10-15 01:36 PM UTC	updated
2026-10-15 08:04 AM UTC	updated
2026-10-15 01:03 AM UTC	updated
2026-10-15 12:25 AM UTC	updated
2026-10-14 01:14 PM UTC	updated
2026-10-14 12:50 AM UTC	updated
2026-10-13 06:30 PM UTC	updated
2026-10-13 05:39 PM UTC	updated
2026-10-13 08:15 AM UTC	updated
2026-10-13 02:58 AM UTC	updated
2026-10-12 07:01 PM UTC	updated
2026-10-12 04:40 PM UTC	updated
2026-10-12 08:00 AM UTC	updated
2026-10-12 04:00 AM UTC	updated
2026-10-11 10:28 PM UTC	updated
2026-10-11 02:35 PM UTC	updated
2026-10-11 11:26 AM UTC	updated
2026-10-11 03:48 AM UTC	updated
2026-10-10 06:40 PM UTC	updated
2026-10-10 02:28 PM UTC	updated
2026-10-10 10:27 AM UTC	updated
2026-10-10 07:27 AM UTC	updated
2026-10-10 03:36 AM UTC	updated
2026-10-09 04:39 PM UTC	updated
2026-10-08 05:41 PM UTC	updated
2026-10-08 10:27 AM UTC	updated
2026-10-07 06:54 PM UTC	updated
2026-10-07 11:52 AM UTC	updated
2026-10-02 08:47 PM UTC	updated
2026-10-02 02:51 PM UTC	updated
2026-10-02 01:31 PM UTC	updated
2026-10-02 01:19 PM UTC	updated
2026-10-01 08:27 PM UTC	updated
2026-10-01 02:36 PM UTC	updated
2026-09-28 01:07 PM UTC	updated
2026-09-28 12:25 PM UTC	updated
2026-09-25 08:58 PM UTC	updated
2026-09-25 06:08 PM UTC	updated
2026-09-25 01:37 PM UTC	updated
2026-09-24 05:21 PM UTC	updated
2026-09-23 08:29 PM UTC	updated
2026-09-22 01:45 PM UTC	updated
2026-09-22 11:49 AM UTC	updated
2026-09-21 05:30 PM UTC	updated
2026-09-21 12:05 PM UTC	updated
2026-09-17 11:36 AM UTC	updated
2026-09-16 07:40 PM UTC	updated
2026-09-16 06:12 PM UTC	updated
2026-09-16 03:25 AM UTC	updated
2026-09-16 12:13 AM UTC	updated
2026-09-15 11:44 AM UTC	updated
2026-09-15 10:04 AM UTC	updated
2026-09-14 04:13 AM UTC	updated
2026-09-13 11:37 PM UTC	updated
2026-09-13 03:21 AM UTC	updated
2026-09-12 11:10 PM UTC	updated
2026-09-11 09:14 PM UTC	updated
2026-09-11 05:41 PM UTC	updated
2026-09-11 11:50 AM UTC	updated
2026-09-10 07:58 PM UTC	updated
2026-09-10 04:54 PM UTC	updated
2026-09-09 01:11 PM UTC	updated
2026-09-09 05:03 AM UTC	updated
2026-09-08 11:48 PM UTC	updated
2026-09-08 06:05 PM UTC	updated
2026-09-08 11:03 AM UTC	updated
2026-09-08 12:45 AM UTC	updated
2026-09-04 05:25 PM UTC	updated
2026-09-03 06:10 PM UTC	updated
2026-09-03 04:26 PM UTC	updated
2026-09-03 02:22 PM UTC	updated
2026-09-01 02:37 PM UTC	updated
2026-09-01 03:37 AM UTC	updated
2026-08-31 08:17 PM UTC	updated
2026-08-31 04:37 AM UTC	updated
2026-08-30 11:30 PM UTC	updated
2026-08-30 04:31 AM UTC	updated
2026-08-29 11:38 PM UTC	updated
2026-08-29 12:10 PM UTC	updated
2026-08-29 04:01 AM UTC	updated
2026-08-28 12:58 PM UTC	updated
2026-08-28 11:52 AM UTC	updated
2026-08-27 11:38 PM UTC	updated
2026-08-27 04:16 PM UTC	updated
2026-08-27 02:32 PM UTC	updated
2026-08-27 01:53 PM UTC	updated
2026-08-27 04:10 AM UTC	updated
2026-08-26 10:50 PM UTC	updated
2026-08-26 09:06 AM UTC	updated
2026-08-21 03:42 PM UTC	updated
2026-08-20 09:00 PM UTC	updated
2026-08-20 03:28 PM UTC	updated
2026-08-19 05:25 PM UTC	updated
2026-08-19 01:15 PM UTC	updated
2026-08-18 05:23 PM UTC	updated
2026-08-18 04:26 PM UTC	updated
2026-08-18 03:25 PM UTC	updated
2026-08-18 03:04 PM UTC	updated
2026-08-18 02:56 PM UTC	updated
2026-08-18 01:57 PM UTC	updated
2026-08-16 03:07 PM UTC	updated
2026-08-16 10:55 AM UTC	updated
2026-08-15 03:33 AM UTC	updated
2026-08-15 12:07 AM UTC	updated
2026-08-14 10:44 AM UTC	updated
2026-08-12 09:03 PM UTC	updated
2026-08-12 09:37 AM UTC	updated
2026-08-12 04:29 AM UTC	updated
2026-08-10 07:00 AM UTC	updated
2026-08-10 03:48 AM UTC	updated
2026-08-09 07:16 PM UTC	updated
2026-08-09 03:03 PM UTC	updated
2026-08-08 06:59 PM UTC	updated
2026-08-08 10:53 AM UTC	updated
2026-08-07 12:30 PM UTC	updated
2026-08-07 07:03 AM UTC	updated
2026-08-07 03:26 AM UTC	updated
2026-08-06 11:02 PM UTC	updated
2026-08-06 07:45 AM UTC	updated
2026-08-06 03:16 AM UTC	updated
2026-08-04 04:35 AM UTC	updated
2026-08-02 04:39 AM UTC	updated
2026-08-01 11:50 PM UTC	updated
2026-08-01 11:08 AM UTC	updated
2026-08-01 04:07 AM UTC	updated
2026-08-01 12:16 AM UTC	updated
2026-07-31 04:26 AM UTC	updated
2026-07-30 10:57 PM UTC	updated
2026-07-30 01:07 PM UTC	updated
2026-07-30 04:30 AM UTC	updated
2026-07-24 11:13 PM UTC	updated
2026-07-24 03:29 PM UTC	updated
2026-07-24 12:08 AM UTC	updated
2026-07-23 05:08 PM UTC	updated
2026-07-23 11:45 AM UTC	updated
2026-07-23 04:37 AM UTC	updated
2026-07-22 09:03 PM UTC	updated
2026-07-22 09:00 AM UTC	updated
2026-07-21 04:40 PM UTC	updated
2026-07-21 05:52 AM UTC	updated
2026-07-20 06:28 PM UTC	updated
2026-07-20 03:56 PM UTC	updated
2026-07-20 01:36 PM UTC	updated
2026-07-18 10:40 AM UTC	created

Related work

Duplicate Of: charmcraft#2693 (confidence 80%)
Multiple projects have identical Renovate PRs updating GitHub Actions; this is a routine dependency update pattern across the ecosystem.

Related issues

Issue	Project	State	Summary	Similarity
#2190 build(deps): update github actions (main) (major)	charmcraft	closed	Renovate PR #2190 was closed unmerged after a maintainer requested a manual update; equivalent GitHub Actions upgrades later merged through #2514 (75ea55e7).	89%
#226 build(deps): update github actions (main)	craft-grammar	merged	Renovate PR updating GitHub Actions (setup-node, setup-uv, pypi-publish, install-action) to minor/patch versions. All CI checks passing, awaiting maintainer review.	89%
#393 build(deps): update github actions (main) (major)	imagecraft	merged	Merged Renovate PR #393, upgrading six GitHub Actions across five workflows; all reported CI checks passed.	88%
#133 build(deps): update github actions (main) (major)	starflow	merged	Merged Renovate PR #133 in commit 964543a, upgrading CI GitHub Actions to v5-v8 and Node.js from 22 to 24.	87%
#91 build(deps): update github actions (main) (major)	debcraft	merged	Renovate PR #91 merged into main, upgrading actions/download-artifact v7→v8 and actions/upload-artifact v6→v7.	86%
#1232 build(deps): update github actions (main)	craft-application	merged	Renovate PR updating GitHub Actions: setup-node v7.0.0→v7.1.0, setup-uv v10.3.0→v10.3.2, pypi-publish digest, install-action v2.87.26→v2.87.30. CI has failing tests.	86%
#497 build(deps): update github actions (main) (major)	starbase	merged	Renovate PR #497 merged via commit 01a6030, bumping actions/download-artifact v7 to v8 and actions/upload-artifact v6 to v7 in CI workflows. Approved by 2 reviewers with all CI checks passing.	86%
#218 build(deps): update github actions (main) (major)	craft-platforms	merged	Renovate PR #218 merged in commit ebf4332, updating actions/upload-artifact v6→v7 and softprops/action-gh-release v2→v3.	85%
#339 build(deps): update github actions (hotfix/3.2) (major)	craft-store	closed	Renovate's hotfix/3.2 GitHub Actions upgrade was closed unmerged after 254 days, with three checks failing and no review.	85%
#271 build(deps): update github actions (main) (major)	imagecraft	merged	Renovate PR merged in commit 3b53327, bumping CI actions to cache v5, checkout v6, download-artifact v7, setup-node v6, upload-artifact v6 (3 files, +10/-10); all CI checks passed.	85%