[deps]: Update gh minor #590

renovate · 2025-11-28T06:04:03Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
Swatinem/rust-cache	action	minor	`v2.7.7` -> `v2.8.2`
actions/checkout	action	patch	`v5.0.0` -> `v5.0.1`
actions/create-github-app-token	action	minor	`v2.1.4` -> `v2.2.0`	`v2.2.1`
actions/create-github-app-token	action	minor	`v2.1.1` -> `v2.2.0`	`v2.2.1`
actions/create-github-app-token	action	minor	`v2.0.3` -> `v2.2.0`	`v2.2.1`
actions/setup-java	action	minor	`v5.0.0` -> `v5.1.0`
actions/setup-node	action	minor	`v4.2.0` -> `v4.4.0`
codecov/codecov-action	action	minor	`v5.3.1` -> `v5.5.1`	`v5.5.2`
github/codeql-action	action	patch	`v4.31.2` -> `v4.31.7`	`v4.31.8`
ncipollo/release-action	action	minor	`v1.15.0` -> `v1.20.0`

Release Notes

Swatinem/rust-cache (Swatinem/rust-cache)

`v2.8.2`

Compare Source

What's Changed

ci: address lint findings, add zizmor workflow by @woodruffw in #262
feat: Implement ability to disable adding job ID + rust environment hashes to cache names by @Ryan-Brice in #279
Don't overwrite env for cargo-metadata call by @MaeIsBad in #285

New Contributors

@woodruffw made their first contribution in #262
@Ryan-Brice made their first contribution in #279
@MaeIsBad made their first contribution in #285

Full Changelog: Swatinem/rust-cache@v2.8.1...v2.8.2

`v2.8.1`

Compare Source

What's Changed

Set empty CARGO_ENCODED_RUSTFLAGS in workspace metadata retrieval by @ark0f in #249
chore(deps): update dependencies by @reneleonhardt in #251
chore: fix dependabot groups by @reneleonhardt in #253
Bump the prd-patch group with 2 updates by @dependabot[bot] in #254
chore(dependabot): regenerate and commit dist/ by @reneleonhardt in #257
Bump @types/node from 22.16.3 to 24.2.1 in the dev-major group by @dependabot[bot] in #255
Bump typescript from 5.8.3 to 5.9.2 in the dev-minor group by @dependabot[bot] in #256
Bump actions/setup-node from 4 to 5 in the actions group by @dependabot[bot] in #259
Update README.md by @Propfend in #234
Bump @types/node from 24.2.1 to 24.3.0 in the dev-minor group by @dependabot[bot] in #258

New Contributors

@ark0f made their first contribution in #249
@reneleonhardt made their first contribution in #251
@dependabot[bot] made their first contribution in #254
@Propfend made their first contribution in #234

Full Changelog: Swatinem/rust-cache@v2...v2.8.1

`v2.8.0`

Compare Source

What's Changed

Add cache-workspace-crates feature by @jbransen in #246
Feat: support warpbuild cache provider by @stegaBOB in #247

New Contributors

@jbransen made their first contribution in #246
@stegaBOB made their first contribution in #247

Full Changelog: Swatinem/rust-cache@v2.7.8...v2.8.0

`v2.7.8`

Compare Source

What's Changed

Include CPU arch in the cache key for arm64 Linux runners by @rhysd in #228

Full Changelog: Swatinem/rust-cache@v2.7.7...v2.7.8

actions/checkout (actions/checkout)

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

actions/setup-java (actions/setup-java)

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

actions/setup-node (actions/setup-node)

`v4.4.0`

Compare Source

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in #98
Add support for indented eslint output by @fregante in #1245

Enhancement:

Support private mirrors by @marco-ippolito in #1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #1262

New Contributors

@FloEdelmann made their first contribution in #98
@fregante made their first contribution in #1245
@marco-ippolito made their first contribution in #1240

Full Changelog: actions/setup-node@v4...v4.4.0

`v4.3.0`

Compare Source

What's Changed

Dependency updates

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1200
Upgrade @action/cache from 4.0.0 to 4.0.2 by @gowridurgad in #1251
Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1203
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot in #1220

New Contributors

@gowridurgad made their first contribution in #1251

Full Changelog: actions/setup-node@v4...v4.3.0

codecov/codecov-action (codecov/codecov-action)

`v5.5.1`

Compare Source

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

`v5.4.3`

Compare Source

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in #1822
fix: OIDC on forks by @joseph-sentry in #1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

What's Changed

fix: use the github core methods by @thomasrockhu-codecov in #1807
build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @app/dependabot in #1803
build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @app/dependabot in #1797
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @app/dependabot in #1798
chore(release): wrapper -0.2.1 by @app/codecov-releaser-app in #1788
build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @app/dependabot in #1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

`v5.4.0`

Compare Source

What's Changed

update wrapper submodule to 0.2.0, add recurse_submodules arg by @matt-codecov in #1780
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @app/dependabot in #1775
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @app/dependabot in #1776
build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @app/dependabot in #1777
Clarify in README that use_pypi bypasses integrity checks too by @webknjaz in #1773
Fix use of safe.directory inside containers by @Flamefire in #1768
Fix description for report_type input by @craigscott-crascit in #1770
build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @app/dependabot in #1765
Fix a typo in the example by @miranska in #1758
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @app/dependabot in #1757
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @app/dependabot in #1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

github/codeql-action (github/codeql-action)

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

`v4.31.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v4.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

ncipollo/release-action (ncipollo/release-action)

`v1.20.0`

Compare Source

What's Changed

Fixes #542 Add previous tag option by @ncipollo in #550

Full Changelog: ncipollo/release-action@v1...v1.20.0

`v1.19.2`

Compare Source

What's Changed

Update immutableCreate's default in the documentation by @bblanchon in #547
Fixes #548 Add support body + generated release notes by @ncipollo in #549

New Contributors

@bblanchon made their first contribution in #547

Full Changelog: ncipollo/release-action@v1...v1.19.2

`v1.19.1`

Compare Source

Defaults immutableCreate to false if it is omitted.

Full Changelog: ncipollo/release-action@v1.19.0...v1.19.1

`v1.19.0`

Compare Source

What's Changed

Fixes #540 Add support for immutable releases by @ncipollo in #544
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #541
Bump glob from 11.0.2 to 11.0.3 by @dependabot[bot] in #534

Full Changelog: ncipollo/release-action@v1...v1.19.0

`v1.18.0`

Compare Source

Fixes #529 Collect asset URLs into output

Full Changelog: ncipollo/release-action@v1...v1.18.0

`v1.17.0`

Compare Source

What's Changed

Bump ts-jest from 29.2.5 to 29.2.6 by @dependabot in #506
Bump @types/node from 22.13.4 to 22.13.8 by @dependabot in #505
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in #507
Bump @octokit/request from 8.1.6 to 8.4.1 by @dependabot in #508
Fixes #513 Don't generate release notes if omitBody is set by @ncipollo in #517
Bump typescript from 5.7.3 to 5.8.3 by @dependabot in #518
Bump ts-jest from 29.2.6 to 29.3.2 by @dependabot in #521
Bump glob from 11.0.1 to 11.0.2 by @dependabot in #520
Bump @types/node from 22.13.8 to 22.15.3 by @dependabot in #519
Bump ts-jest from 29.3.2 to 29.3.4 by @dependabot in #526
Bump @actions/github from 6.0.0 to 6.0.1 by @dependabot in #525
Bump @types/node from 22.15.18 to 22.15.29 by @dependabot in #524
Fixes #529 Add zip and tarball urls to output

Full Changelog: ncipollo/release-action@v1...v1.17.0

`v1.16.0`

Compare Source

What's Changed

Bump @octokit/request-error from 5.0.1 to 5.1.1 by @dependabot in #498
Update checkout action version in example by @Cycloctane in #496
Bump undici from 5.28.4 to 5.28.5 by @dependabot in #499
Bump glob from 11.0.0 to 11.0.1 by @dependabot in #495
Bump @types/node from 22.10.3 to 22.13.4 by @dependabot in #500
Regenerate release notes on release updates by @rantoniuk in #497

New Contributors

@rantoniuk made their first contribution in #497

Full Changelog: ncipollo/release-action@v1...v1.16.0

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bitwarden-bot · 2025-11-28T06:04:49Z

Internal tracking:

ID: PM-28932
Link: https://bitwarden.atlassian.net/browse/PM-28932

github-actions · 2025-11-28T06:12:37Z

🔍 SDK Breaking Change Detection Results

SDK Version: renovate/gh-minor (d18c096)
Completed: 2025-12-12 17:36:26 UTC
Total Time: 248s

Client	Status	Details
typescript	✅ No breaking changes detected	TypeScript compilation passed with new SDK version - View Details

Breaking change detection completed. View SDK workflow

codecov · 2025-11-28T06:31:10Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.57%. Comparing base (bd636a4) to head (d18c096).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #590   +/-   ##
=======================================
  Coverage   78.57%   78.57%           
=======================================
  Files         283      283           
  Lines       29188    29188           
=======================================
  Hits        22934    22934           
  Misses       6254     6254

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

renovate bot requested review from a team as code owners November 28, 2025 06:04

renovate bot requested review from addisonbeck and aj-bw November 28, 2025 06:04

bitwarden-bot changed the title ~~[deps]: Update gh minor~~ [PM-28932] [deps]: Update gh minor Nov 28, 2025

renovate bot changed the title ~~[PM-28932] [deps]: Update gh minor~~ [deps]: Update gh minor Nov 28, 2025

renovate bot force-pushed the renovate/gh-minor branch 3 times, most recently from 01479d9 to ddca83e Compare December 3, 2025 11:17

github-actions bot added the breaking-change label Dec 3, 2025

renovate bot force-pushed the renovate/gh-minor branch from ddca83e to c4ab650 Compare December 8, 2025 10:27

github-actions bot removed the breaking-change label Dec 8, 2025

aj-bw previously approved these changes Dec 8, 2025

View reviewed changes

renovate bot dismissed aj-bw’s stale review via 798dfd3 December 11, 2025 05:01

renovate bot force-pushed the renovate/gh-minor branch 2 times, most recently from 798dfd3 to 464cddb Compare December 11, 2025 14:14

[deps]: Update gh minor

d18c096

renovate bot force-pushed the renovate/gh-minor branch from 464cddb to d18c096 Compare December 12, 2025 17:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[deps]: Update gh minor #590

[deps]: Update gh minor #590

Uh oh!

renovate bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

bitwarden-bot commented Nov 28, 2025

Uh oh!

github-actions bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

codecov bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[deps]: Update gh minor #590

Are you sure you want to change the base?

[deps]: Update gh minor #590

Uh oh!

Conversation

renovate bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Bug Fixes

Features

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

What's Changed

Dependency updates

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

bitwarden-bot commented Nov 28, 2025

Uh oh!

github-actions bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 SDK Breaking Change Detection Results

Uh oh!

codecov bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate bot commented Nov 28, 2025 •

edited

Loading

github-actions bot commented Nov 28, 2025 •

edited

Loading

codecov bot commented Nov 28, 2025 •

edited

Loading