[deps]: Update gh minor #590

renovate · 2025-11-28T06:04:03Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
Swatinem/rust-cache	action	minor	`v2.7.7` -> `v2.8.2`
actions/checkout	action	patch	`v5.0.0` -> `v5.0.1`
actions/create-github-app-token	action	minor	`v2.1.1` -> `v2.2.0`	`v2.2.1`
actions/create-github-app-token	action	minor	`v2.0.3` -> `v2.2.0`	`v2.2.1`
actions/setup-node	action	minor	`v4.2.0` -> `v4.4.0`
codecov/codecov-action	action	minor	`v5.3.1` -> `v5.5.1`
crazy-max/ghaction-import-gpg	action	minor	`v6.2.0` -> `v6.3.0`
github/codeql-action	action	patch	`v4.31.2` -> `v4.31.5`	`v4.31.7` (+1)
ncipollo/release-action	action	minor	`v1.15.0` -> `v1.20.0`

Release Notes

Swatinem/rust-cache (Swatinem/rust-cache)

`v2.8.2`

Compare Source

What's Changed

ci: address lint findings, add zizmor workflow by @woodruffw in #262
feat: Implement ability to disable adding job ID + rust environment hashes to cache names by @Ryan-Brice in #279
Don't overwrite env for cargo-metadata call by @MaeIsBad in #285

New Contributors

@woodruffw made their first contribution in #262
@Ryan-Brice made their first contribution in #279
@MaeIsBad made their first contribution in #285

Full Changelog: Swatinem/rust-cache@v2.8.1...v2.8.2

`v2.8.1`

Compare Source

What's Changed

Set empty CARGO_ENCODED_RUSTFLAGS in workspace metadata retrieval by @ark0f in #249
chore(deps): update dependencies by @reneleonhardt in #251
chore: fix dependabot groups by @reneleonhardt in #253
Bump the prd-patch group with 2 updates by @dependabot[bot] in #254
chore(dependabot): regenerate and commit dist/ by @reneleonhardt in #257
Bump @types/node from 22.16.3 to 24.2.1 in the dev-major group by @dependabot[bot] in #255
Bump typescript from 5.8.3 to 5.9.2 in the dev-minor group by @dependabot[bot] in #256
Bump actions/setup-node from 4 to 5 in the actions group by @dependabot[bot] in #259
Update README.md by @Propfend in #234
Bump @types/node from 24.2.1 to 24.3.0 in the dev-minor group by @dependabot[bot] in #258

New Contributors

@ark0f made their first contribution in #249
@reneleonhardt made their first contribution in #251
@dependabot[bot] made their first contribution in #254
@Propfend made their first contribution in #234

Full Changelog: Swatinem/rust-cache@v2...v2.8.1

`v2.8.0`

Compare Source

What's Changed

Add cache-workspace-crates feature by @jbransen in #246
Feat: support warpbuild cache provider by @stegaBOB in #247

New Contributors

@jbransen made their first contribution in #246
@stegaBOB made their first contribution in #247

Full Changelog: Swatinem/rust-cache@v2.7.8...v2.8.0

`v2.7.8`

Compare Source

What's Changed

Include CPU arch in the cache key for arm64 Linux runners by @rhysd in #228

Full Changelog: Swatinem/rust-cache@v2.7.7...v2.7.8

actions/checkout (actions/checkout)

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

actions/setup-node (actions/setup-node)

`v4.4.0`

Compare Source

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in #98
Add support for indented eslint output by @fregante in #1245

Enhancement:

Support private mirrors by @marco-ippolito in #1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #1262

New Contributors

@FloEdelmann made their first contribution in #98
@fregante made their first contribution in #1245
@marco-ippolito made their first contribution in #1240

Full Changelog: actions/setup-node@v4...v4.4.0

`v4.3.0`

Compare Source

What's Changed

Dependency updates

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1200
Upgrade @action/cache from 4.0.0 to 4.0.2 by @gowridurgad in #1251
Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1203
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot in #1220

New Contributors

@gowridurgad made their first contribution in #1251

Full Changelog: actions/setup-node@v4...v4.3.0

codecov/codecov-action (codecov/codecov-action)

`v5.5.1`

Compare Source

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

`v5.4.3`

Compare Source

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in #1822
fix: OIDC on forks by @joseph-sentry in #1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

What's Changed

fix: use the github core methods by @thomasrockhu-codecov in #1807
build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @app/dependabot in #1803
build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @app/dependabot in #1797
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @app/dependabot in #1798
chore(release): wrapper -0.2.1 by @app/codecov-releaser-app in #1788
build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @app/dependabot in #1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

`v5.4.0`

Compare Source

What's Changed

update wrapper submodule to 0.2.0, add recurse_submodules arg by @matt-codecov in #1780
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @app/dependabot in #1775
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @app/dependabot in #1776
build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @app/dependabot in #1777
Clarify in README that use_pypi bypasses integrity checks too by @webknjaz in #1773
Fix use of safe.directory inside containers by @Flamefire in #1768
Fix description for report_type input by @craigscott-crascit in #1770
build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @app/dependabot in #1765
Fix a typo in the example by @miranska in #1758
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @app/dependabot in #1757
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @app/dependabot in #1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

crazy-max/ghaction-import-gpg (crazy-max/ghaction-import-gpg)

`v6.3.0`

Compare Source

Bump openpgp from 5.11.2 to 6.1.0 in #215
Bump cross-spawn from 7.0.3 to 7.0.6 in #212

Full Changelog: crazy-max/ghaction-import-gpg@v6.2.0...v6.3.0

github/codeql-action (github/codeql-action)

`v4.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v4.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

ncipollo/release-action (ncipollo/release-action)

`v1.20.0`

Compare Source

What's Changed

Fixes #542 Add previous tag option by @ncipollo in #550

Full Changelog: ncipollo/release-action@v1...v1.20.0

`v1.19.2`

Compare Source

What's Changed

Update immutableCreate's default in the documentation by @bblanchon in #547
Fixes #548 Add support body + generated release notes by @ncipollo in #549

New Contributors

@bblanchon made their first contribution in #547

Full Changelog: ncipollo/release-action@v1...v1.19.2

`v1.19.1`

Compare Source

Defaults immutableCreate to false if it is omitted.

Full Changelog: ncipollo/release-action@v1.19.0...v1.19.1

`v1.19.0`

Compare Source

What's Changed

Fixes #540 Add support for immutable releases by @ncipollo in #544
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #541
Bump glob from 11.0.2 to 11.0.3 by @dependabot[bot] in #534

Full Changelog: ncipollo/release-action@v1...v1.19.0

`v1.18.0`

Compare Source

Fixes #529 Collect asset URLs into output

Full Changelog: ncipollo/release-action@v1...v1.18.0

`v1.17.0`

Compare Source

What's Changed

Bump ts-jest from 29.2.5 to 29.2.6 by @dependabot in #506
Bump @types/node from 22.13.4 to 22.13.8 by @dependabot in #505
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in #507
Bump @octokit/request from 8.1.6 to 8.4.1 by @dependabot in #508
Fixes #513 Don't generate release notes if omitBody is set by @ncipollo in #517
Bump typescript from 5.7.3 to 5.8.3 by @dependabot in #518
Bump ts-jest from 29.2.6 to 29.3.2 by @dependabot in #521
Bump glob from 11.0.1 to 11.0.2 by @dependabot in #520
Bump @types/node from 22.13.8 to 22.15.3 by @dependabot in #519
Bump ts-jest from 29.3.2 to 29.3.4 by @dependabot in #526
Bump @actions/github from 6.0.0 to 6.0.1 by @dependabot in #525
Bump @types/node from 22.15.18 to 22.15.29 by @dependabot in #524
Fixes #529 Add zip and tarball urls to output

Full Changelog: ncipollo/release-action@v1...v1.17.0

`v1.16.0`

Compare Source

What's Changed

Bump @octokit/request-error from 5.0.1 to 5.1.1 by @dependabot in #498
Update checkout action version in example by @Cycloctane in #496
Bump undici from 5.28.4 to 5.28.5 by @dependabot in #499
Bump glob from 11.0.0 to 11.0.1 by @dependabot in #495
Bump @types/node from 22.10.3 to 22.13.4 by @dependabot in #500
Regenerate release notes on release updates by @rantoniuk in #497

New Contributors

@rantoniuk made their first contribution in #497

Full Changelog: ncipollo/release-action@v1...v1.16.0

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bitwarden-bot · 2025-11-28T06:04:49Z

Internal tracking:

ID: PM-28932
Link: https://bitwarden.atlassian.net/browse/PM-28932

github-actions · 2025-11-28T06:12:37Z

🔍 SDK Breaking Change Detection Results

SDK Version: renovate/gh-minor (ddca83e)
Completed: 2025-12-03 11:30:10 UTC
Total Time: 215s

Client	Status	Details
typescript	❌ Breaking changes detected	TypeScript compilation failed with new SDK version - View Details

Breaking change detection completed. View SDK workflow

codecov · 2025-11-28T06:31:10Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.74%. Comparing base (ab7ae36) to head (ddca83e).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #590   +/-   ##
=======================================
  Coverage   79.74%   79.74%           
=======================================
  Files         304      304           
  Lines       32757    32757           
=======================================
  Hits        26121    26121           
  Misses       6636     6636

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

renovate bot requested review from a team as code owners November 28, 2025 06:04

renovate bot requested review from addisonbeck and aj-bw November 28, 2025 06:04

bitwarden-bot changed the title ~~[deps]: Update gh minor~~ [PM-28932] [deps]: Update gh minor Nov 28, 2025

renovate bot changed the title ~~[PM-28932] [deps]: Update gh minor~~ [deps]: Update gh minor Nov 28, 2025

renovate bot force-pushed the renovate/gh-minor branch 2 times, most recently from f2e73eb to 01479d9 Compare December 1, 2025 10:54

[deps]: Update gh minor

ddca83e

renovate bot force-pushed the renovate/gh-minor branch from 01479d9 to ddca83e Compare December 3, 2025 11:17

github-actions bot added the breaking-change label Dec 3, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[deps]: Update gh minor #590

[deps]: Update gh minor #590

Uh oh!

renovate bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

bitwarden-bot commented Nov 28, 2025

Uh oh!

github-actions bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

codecov bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[deps]: Update gh minor #590

Are you sure you want to change the base?

[deps]: Update gh minor #590

Uh oh!

Conversation

renovate bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

What's Changed

Dependency updates

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

bitwarden-bot commented Nov 28, 2025

Uh oh!

github-actions bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 SDK Breaking Change Detection Results

Uh oh!

codecov bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate bot commented Nov 28, 2025 •

edited

Loading

github-actions bot commented Nov 28, 2025 •

edited

Loading

codecov bot commented Nov 28, 2025 •

edited

Loading