Skip to content

chore(deps): update ci dependencies (major)#1058

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-ci-dependencies
Open

chore(deps): update ci dependencies (major)#1058
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-ci-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jul 23, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
SonarSource/sonarqube-scan-action action major v6v7
actions/checkout action major v4v6
actions/download-artifact action major v4v8
actions/upload-artifact action major v4v7
docker/build-push-action action major v6v7
docker/login-action action major v3v4
docker/setup-buildx-action action major v3v4
docker/setup-qemu-action action major v3v4
node uses-with major 2024
pnpm/action-setup action major v4v6
softprops/action-gh-release action major v2v3

Release Notes

SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)

v7.1

Compare Source

v7.1.0

Compare Source

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.1.0

v7.0

Compare Source

v7.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: SonarSource/sonarqube-scan-action@v6.0.0...v7.0.0

v7

Compare Source

actions/checkout (actions/checkout)

v6.0.2

Compare Source

v6.0.1

Compare Source

v6-beta

Compare Source

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed
⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v5

Compare Source

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

v4.2.1

Compare Source

v4.2.0

Compare Source

v4.1.7

Compare Source

v4.1.6

Compare Source

v4.1.5

Compare Source

v4.1.4

Compare Source

v4.1.3

Compare Source

v4.1.2

Compare Source

  • Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

v4.1.0

Compare Source

actions/download-artifact (actions/download-artifact)

v8.0.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

Compare Source

v8 - What's new
Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v8

Compare Source

v7

Compare Source

v7.0.0

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@​v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6

Compare Source

v6.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

v5

Compare Source

v5.0.0

Compare Source

What's Changed

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

  • By name: name: my-artifact → extracted to path/ (direct)
  • By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

  • By name: name: my-artifact → extracted to path/ (unchanged)
  • By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)
Migration Guide
✅ No Action Needed If:
  • You download artifacts by name
  • You download multiple artifacts by ID
  • You already use merge-multiple: true as a workaround
⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

### Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

Full Changelog: actions/download-artifact@v4...v5.0.0

v4.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

v4.2.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

v4.1.9

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

v4.1.8

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.7...v4.1.8

v4.1.7

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.6...v4.1.7

v4.1.6

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.5...v4.1.6

v4.1.5

Compare Source

What's Changed

  • Update readme with v3/v2/v1 deprecation notice by @​robherley in #​322
  • Update dependencies @actions/core to v1.10.1 and @actions/artifact to v2.1.5

Full Changelog: actions/download-artifact@v4.1.4...v4.1.5

v4.1.4

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4...v4.1.4

v4.1.3

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4...v4.1.3

v4.1.2

Compare Source

v4.1.1

Compare Source

  • Fix transient request timeouts #​249
  • Bump @actions/artifacts to latest version

v4.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4...v4.1.0

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v7

Compare Source

v6

Compare Source

v6.0.0

Compare Source

v5

Compare Source

v5.0.0

Compare Source

v4.6.2

Compare Source

What's Changed

  • Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

v4.4.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

  • Bump @actions/artifact to 2.1.11 by @​robherley in #​627
    • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

v4.3.6

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.3.6

v4.3.5

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

v4.3.4

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

v4.3.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

v4.3.1

Compare Source

v4.3.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.3.0

v4.2.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.2.0

v4.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.1.0

docker/build-push-action (docker/build-push-action)

v7.1.0

Compare Source

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

v7.0.0

Compare Source

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v7

Compare Source

v6.19.2

Compare Source

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Compare Source

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

[Compare Source](https://redirect.github.com/docker/build-push-action/


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the CI label Jul 23, 2025
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 2 times, most recently from 7a7c4d5 to 28d576c Compare August 1, 2025 05:03
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 3 times, most recently from 36a4e91 to 8367aa7 Compare August 11, 2025 14:05
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 3 times, most recently from 44005f1 to fb54840 Compare September 4, 2025 05:08
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from fb54840 to 2bf0c2a Compare September 18, 2025 13:04
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 2 times, most recently from 3245681 to 9be18dc Compare October 14, 2025 04:48
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 3 times, most recently from 41b64b7 to 0da6bc5 Compare October 28, 2025 00:40
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from 0da6bc5 to 1399c35 Compare November 10, 2025 21:07
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 2 times, most recently from f7587fd to 481c1c6 Compare November 26, 2025 04:45
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 4 times, most recently from 6f03421 to 8a9f20f Compare December 15, 2025 16:53
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from 8a9f20f to 7ef5d17 Compare December 31, 2025 15:51
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from 7ef5d17 to 51451f8 Compare January 14, 2026 06:34
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from 51451f8 to cb2e453 Compare February 2, 2026 18:53
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 4 times, most recently from 0dc6f52 to bfc7ce8 Compare February 27, 2026 14:35
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from bfc7ce8 to 1668db5 Compare March 4, 2026 09:55
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 2 times, most recently from f9b10d2 to d597828 Compare March 6, 2026 00:38
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 3 times, most recently from b23cfd5 to df220eb Compare March 20, 2026 08:54
@sonarqubecloud
Copy link
Copy Markdown

@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 2 times, most recently from 21209d6 to 634e487 Compare March 26, 2026 18:54
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from 634e487 to 0dd2921 Compare April 1, 2026 09:42
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch 4 times, most recently from b8b5e79 to bac8bb1 Compare April 16, 2026 12:30
@renovate renovate Bot changed the base branch from next to main April 16, 2026 12:30
@renovate renovate Bot force-pushed the renovate/major-ci-dependencies branch from bac8bb1 to cdf9450 Compare April 16, 2026 12:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants