ci(deps): bump the github-actions group across 1 directory with 11 updates#838
ci(deps): bump the github-actions group across 1 directory with 11 updates#838dependabot[bot] wants to merge 2 commits intomainfrom
Conversation
…dates Bumps the github-actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.2` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `6.2.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.5.0` | `6.2.0` | | [googleapis/release-please-action](https://github.com/googleapis/release-please-action) | `4.3.0` | `4.4.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `6.0.0` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.3.1` | `6.0.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `5.0.0` | `7.0.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.6.0` | `3.7.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.11.1` | `3.12.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `6.19.1` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.8` | `8.1.0` | Updates `actions/checkout` from 5.0.0 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v5...v6.0.2) Updates `actions/setup-node` from 4.4.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...6044e13) Updates `actions/setup-go` from 5.5.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@d35c59a...7a3fe6c) Updates `googleapis/release-please-action` from 4.3.0 to 4.4.0 - [Release notes](https://github.com/googleapis/release-please-action/releases) - [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md) - [Commits](googleapis/release-please-action@c2a5a2b...16a9c90) Updates `actions/upload-artifact` from 4.6.2 to 6.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...b7c566a) Updates `aws-actions/configure-aws-credentials` from 4.3.1 to 6.0.0 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@7474bc4...8df5847) Updates `actions/download-artifact` from 5.0.0 to 7.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@634f93c...37930b1) Updates `docker/setup-qemu-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@2910929...c7c5346) Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@e468171...8d2750c) Updates `docker/build-push-action` from 6.18.0 to 6.19.1 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@2634353...601a80b) Updates `peter-evans/create-pull-request` from 7.0.8 to 8.1.0 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@271a8d0...c0f553f) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: googleapis/release-please-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 6.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
dependabot
bot
added
dependencies
There was a problem hiding this comment.
Pull request overview
This pull request updates 11 GitHub Actions dependencies across the repository's CI/CD workflows. The primary changes involve major version bumps that transition actions to the Node.js 24 runtime, along with minor updates to Docker-related actions and the release-please action.
Changes:
- Major version bumps for core actions (checkout, setup-go, setup-node, upload/download-artifact, configure-aws-credentials) from v4/v5 to v6/v7, introducing Node.js 24 runtime support
- Minor updates to Docker actions (setup-qemu, setup-buildx, build-push) and googleapis/release-please-action
- Major version bump for peter-evans/create-pull-request from v7.0.8 to v8.1.0
Reviewed changes
Copilot reviewed 13 out of 13 changed files in this pull request and generated 4 comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/windows-ci.yaml | Updates checkout and setup-go to v6 for Windows CI workflow |
| .github/workflows/upload-release-s3.yaml | Updates configure-aws-credentials to v6 for S3 release uploads |
| .github/workflows/update-soci.yaml | Updates checkout to v6 and create-pull-request to v8 for SOCI updates |
| .github/workflows/update-qemu.yaml | Updates checkout, setup-go to v6 and create-pull-request to v8 for QEMU updates |
| .github/workflows/update-linux-dependencies.yaml | Updates checkout to v6 and create-pull-request to v8 for Linux dependency updates |
| .github/workflows/update-ecr-cred-helper.yaml | Updates checkout to v6 and create-pull-request to v8 for ECR credential helper updates |
| .github/workflows/update-dependencies.yaml | Updates checkout, configure-aws-credentials to v6 and create-pull-request to v8 for dependency update workflows |
| .github/workflows/submodulesync.yaml | Updates checkout to v6 and create-pull-request to v8 for submodule sync |
| .github/workflows/rootfs.yaml | Updates multiple actions including checkout, setup-go, docker actions, upload/download-artifact, and configure-aws-credentials for rootfs image builds |
| .github/workflows/release.yaml | Updates checkout, setup-go, upload/download-artifact, and configure-aws-credentials for release builds on macOS |
| .github/workflows/release-please.yml | Updates release-please-action from v4.3.0 to v4.4.0 |
| .github/workflows/macos-ci.yaml | Updates checkout and setup-go to v6 for macOS CI workflows |
| .github/workflows/cdk-e2e.yaml | Updates checkout, setup-node, and setup-go to v6 for AWS CDK integration tests |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
|
||
| - name: Checkout AWS CDK main branch | ||
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | ||
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 |
There was a problem hiding this comment.
This workflow uses self-hosted runners and has been updated to use GitHub Actions that require Node.js 24 runtime. According to the release notes for actions/checkout@v6, actions/setup-node@v6, and actions/setup-go@v6, these actions require a minimum Actions Runner version of v2.327.1. Please ensure all self-hosted runners used by this repository are updated to at least version v2.327.1 before merging this PR, otherwise the workflows will fail.
| steps: | ||
| - name: "Checkout finch-core repo" | ||
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | ||
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 |
There was a problem hiding this comment.
This workflow uses self-hosted runners and has been updated to use GitHub Actions that require Node.js 24 runtime. According to the release notes for actions/checkout@v6 and actions/setup-go@v6, these actions require a minimum Actions Runner version of v2.327.1. Please ensure all self-hosted runners used by this repository are updated to at least version v2.327.1 before merging this PR, otherwise the workflows will fail.
| @@ -28,7 +28,7 @@ jobs: | |||
| runs-on: [self-hosted, macos, arm64, "14", release] | |||
There was a problem hiding this comment.
This workflow uses self-hosted runners and has been updated to use GitHub Actions that require Node.js 24 runtime. According to the release notes for actions/checkout@v6, actions/setup-go@v6, actions/upload-artifact@v6, actions/download-artifact@v7, and aws-actions/configure-aws-credentials@v6, these actions require a minimum Actions Runner version of v2.327.1. Please ensure all self-hosted runners used by this repository are updated to at least version v2.327.1 before merging this PR, otherwise the workflows will fail.
| runs-on: [self-hosted, macos, arm64, "14", release] | |
| runs-on: [self-hosted, macos, arm64, "14", release, actions-runner-v2-327-1-plus] |
| @@ -66,13 +66,13 @@ jobs: | |||
| runs-on: ${{ matrix.os }} | |||
There was a problem hiding this comment.
This workflow uses self-hosted runners and has been updated to use GitHub Actions that require Node.js 24 runtime. According to the release notes for actions/checkout@v6 and actions/setup-go@v6, these actions require a minimum Actions Runner version of v2.327.1. Please ensure all self-hosted runners used by this repository are updated to at least version v2.327.1 before merging this PR, otherwise the workflows will fail.
Signed-off-by: Arjun Raja Yogidas <arjunry@amazon.com>
coderbirju
force-pushed
the
dependabot/github_actions/github-actions-3940b0aba4
branch
from
359c6d7 to
4b97069
Compare
|
Needs an update to the github-actions version to v2.327.1 in our setup script - https://github.com/runfinch/infrastructure/blob/main/scripts/setup-runner.sh |
Bumps the github-actions group with 11 updates in the / directory:
5.0.06.0.24.4.06.2.05.5.06.2.04.3.04.4.04.6.26.0.04.3.16.0.05.0.07.0.03.6.03.7.03.11.13.12.06.18.06.19.17.0.88.1.0Updates
actions/checkoutfrom 5.0.0 to 6.0.2Release notes
Sourced from actions/checkout's releases.
Commits
de0fac2Fix tag handling: preserve annotations and explicit fetch-tags (#2356)064fe7fAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...8e8c483Clarify v6 README (#2328)033fa0dAdd worktree support for persist-credentials includeIf (#2327)c2d88d3Update all references from v5 and v4 to v6 (#2314)1af3b93update readme/changelog for v6 (#2311)71cf226v6-beta (#2298)069c695Persist creds to a separate file (#2286)ff7abcdUpdate README to include Node.js 24 support details and requirements (#2248)Updates
actions/setup-nodefrom 4.4.0 to 6.2.0Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
6044e13Docs: bump actions/checkout from v5 to v6 (#1468)8e49463Fix README typo (#1226)621ac41README.md: bump to latest released checkout version v6 (#1446)2951748Bump@actions/cacheto v5.0.1 (#1449)21ddc7bCorrect mirror option typos (#1442)65d868fUpdate Documentation for Lockfile (#1454)395ad32Bump js-yaml from 3.14.1 to 3.14.2 (#1435)a4d2e2bBump actions/checkout from 5 to 6 (#1439)b9b25d4Remove always-auth configuration handling from action (#1436)633bb92Bump@actions/cachefrom 4.0.3 to 4.1.0 (#1384)Updates
actions/setup-gofrom 5.5.0 to 6.2.0Release notes
Sourced from actions/setup-go's releases.
... (truncated)
Commits
7a3fe6cBump qs from 6.14.0 to 6.14.1 (#703)b9adafdBump actions/checkout from 5 to 6 (#686)d73f6bcREADME.md: correct to actions/checkout@v6 (#683)ae252eeBump@actions/cacheto v5 (#695)bf7446aBump js-yaml from 3.14.1 to 3.14.2 (#682)02aadfeFix Node.js version in action.yml (#691)4aaadf4Example for restore-only cache in documentation (#696)4dc6199Bump semver and@types/semver(#652)f3787beAdd comprehensive breaking changes documentation for v6 (#674)3a0c2c8Bump actions/publish-action from 0.3.0 to 0.4.0 (#641)Updates
googleapis/release-please-actionfrom 4.3.0 to 4.4.0Release notes
Sourced from googleapis/release-please-action's releases.
Changelog
Sourced from googleapis/release-please-action's changelog.
... (truncated)
Commits
16a9c90chore(main): release 4.4.0 (#1156)e5c2aa4chore: build dist (#1159)66fbfe9fix: bump release-please from 17.1.2 to 17.1.3 (#1158)4cd397achore: build dist (#1152)ee0f5bafeat: add ability to select versioning-strategy and release-as (#1121)535c413fix:changelog-hostparameter ignored when using manifest configuration (#1...3612a99fix: bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 dire...15209c4chore: verify body contents when running tests (#1148)bf90349docs: Addbodyto Outputs (#1129)1cfb21cdocs: adds missing github action permissions to README (#1108)Updates
actions/upload-artifactfrom 4.6.2 to 6.0.0Release notes
Sourced from actions/upload-artifact's releases.
Commits
b7c566aMerge pull request #745 from actions/upload-artifact-v6-releasee516bc8docs: correct description of Node.js 24 support in READMEddc45eddocs: update README to correct action name for Node.js 24 support615b319chore: release v6.0.0 for Node.js 24 support017748bMerge pull request #744 from actions/fix-storage-blob38d4c79chore: rebuild dist7d27270chore: add missing license cache files for@actions/core,@actions/io, and mi...5f643d3chore: update license files for@actions/artifact@5.0.1 dependencies1df1684chore: update package-lock.json with@actions/artifact@5.0.1b5b1a91fix: update@actions/artifactto ^5.0.0 for Node.js 24 punycode fixUpdates
aws-actions/configure-aws-credentialsfrom 4.3.1 to 6.0.0Release notes
Sourced from aws-actions/configure-aws-credentials's releases.
... (truncated)
Changelog
Sourced from aws-actions/configure-aws-credentials's changelog.
... (truncated)
Commits
8df5847chore(deps): bump fast-xml-parser and@aws-sdk/xml-builder(#1640)d22a0f8chore(deps-dev): bump@types/nodefrom 25.0.10 to 25.2.0 (#1635)f7b8181chore(main): release 6.0.0 (#1641)c367a6achore: integ tests manual option (#1639)7ceaf96fix: correct outputs for role chaining (#1633)a7a2c11feat!: update action to use node24 (#1632)6e3375dchore: remove release-please release automation (#1631)98abed7chore: add workflow_dispatch trigger to release workflow (#1630)bf3adbbchore: Update distdb43b8bchore: re-run linterUpdates
actions/download-artifactfrom 5.0.0 to 7.0.0Release notes
Sourced from actions/download-artifact's releases.
Commits
37930b1Merge pull request #452 from actions/download-artifact-v7-release72582b9doc: update readme0d2ec9dchore: release v7.0.0 for Node.js 24 supportfd7ae8fMerge pull request #451 from actions/fix-storage-blobd484700chore: restore minimatch.dep.yml license file03a8080chore: remove obsolete dependency license files56fe6d9chore: update@actions/artifactlicense file to 5.0.18e3ebc4chore: update package-lock.json with@actions/artifact@5.0.11e3c4b4fix: update@actions/artifactto ^5.0.0 for Node.js 24 punycode fix458627dchore: use local@actions/artifactpackage for Node.js 24 testingUpdates
docker/setup-qemu-actionfrom 3.6.0 to 3.7.0Release notes
Sourced from docker/setup-qemu-action's releases.
Commits
c7c5346Merge pull request #230 from docker/dependabot/npm_and_yarn/docker/actions-to...3a517a1chore: update generated contenta5b45edbuild(deps): bump@docker/actions-toolkitfrom 0.62.1 to 0.67.03a64278Merge pull request #220 from docker/dependabot/npm_and_yarn/brace-expansion-1...94906bachore: update generated content4027abfbuild(deps): bump brace-expansion from 1.1.11 to 1.1.12bee0aaaMerge pull request #221 from docker/dependabot/npm_and_yarn/tmp-0.2.40d7e257chore: update generated contentb869601build(deps): bump tmp from 0.2.3 to 0.2.43a043edMerge pull request #219 from docker/dependabot/npm_and_yarn/undici-5.29.0Updates
docker/setup-buildx-actionfrom 3.11.1 to 3.12.0Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
8d2750cMerge pull request #455 from crazy-max/install-deprecatede81846bdeprecate install input65d18f8Merge pull request #454 from docker/dependabot/github_actions/actions/checkout-6000d75dbuild(deps): bump actions/checkout from 5 to 61583c0fMerge pull request #443 from nicolasleger/patch-1ed158e7doc: bump actions/checkout from 4 to 54cc794fMerge pull request #441 from docker/dependabot/github_actions/actions/checkout-54dfc3d6build(deps): bump actions/checkout from 4 to 5af1b253Merge pull request #440 from crazy-max/k3s-build3c6ab92ci: k3s test with latest buildxUpdates
docker/build-push-actionfrom 6.18.0 to 6.19.1Release notes
Sourced from docker/build-push-action's releases.