Update GitHub Actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	v3 → v5
actions/checkout	action	major	v2 → v6
actions/checkout	action	major	v3 → v6
actions/setup-java	action	major	v1 → v5
actions/setup-java	action	major	v3 → v5
actions/stale	action	major	v6 → v10
suzuki-shunsuke/github-action-renovate-config-validator	action	major	v0.1.3 → v2.1.0

---

Release Notes

actions/cache (actions/cache)

v5

Compare Source

v4

Compare Source

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v3

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

actions/setup-java (actions/setup-java)

v5

Compare Source

v4

Compare Source

v3

Compare Source

v2

Compare Source

actions/stale (actions/stale)

v10

Compare Source

v9

Compare Source

v8

Compare Source

v7

Compare Source

suzuki-shunsuke/github-action-renovate-config-validator (suzuki-shunsuke/github-action-renovate-config-validator)

v2.1.0

Compare Source

Features

#​1092 Enable npm cache by default

Cache improves the performance and mitigates the API Rate Limit Issues.

v2.0.0

Compare Source

⚠️ Breaking Change

#​1063 The action installs Node.js 24 by default to support the latest Renovate.
If you don't want to install it, please set the input node-version to none.

Fixes

#​1060 Install the latest Renovate by default @​deviantintegral

v1.1.1

Compare Source

Bug Fixes

#​768 #​770 #​772 Fixed a bug strict doesn't work

renovate-config-validator has an issue aboutRENOVATE_CONFIG_FILE.

• renovatebot/renovate#30418

And now renovate-config-validator can accept files via positional arguments.

• renovatebot/renovate#16475

Unlike RENOVATE_CONFIG_FILE, positional arguments can pass multiple files, so we don't need to run renovate-config-validator by file.
So this release replaces RENOVATE_CONFIG_FILE with positional arguments.

v1.1.0

Compare Source

Features

#​699 #​701 Support validating multiple files

You can validate multiple files by setting multiple lines to config_file_path.
Leading spaces on each line are removed.

e.g.

with:
  config_file_path: |
    default.json
    foo.json

You can pass config_file_path through output command.

e.g.

      - id: files
        run: |
          set -euo pipefail
          files=$(git ls-files | grep renovate.json)

### https://stackoverflow.com/a/74232400
          EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
          {
            echo "files<<$EOF"
            echo "$files"
            echo "$EOF"
          } >> "$GITHUB_OUTPUT"
      - name: Pass files through output
        uses: suzuki-shunsuke/github-action-renovate-config-validator@v1.1.0
        with:
          config_file_path: ${{ steps.files.outputs.files }}

v1.0.1

Compare Source

Fixes

#​551 Suppress npx warnings using --yes option @​TWiStErRob

This action executes renovate-config-validator via npx, then the following warning was outputted.

npm WARN exec The following package was not found and will be installed: renovate@37.130.0

To suppress the warning, we set npx's --yes option.

https://docs.npmjs.com/cli/v8/commands/npx

If any requested packages are not present in the local project dependencies, then they are installed to a folder in the npm cache, which is added to the PATH environment variable in the executed process.
A prompt is printed (which can be suppressed by providing either --yes or --no).

To prevent security and user-experience problems from mistyping package names, npx prompts before installing anything.
Suppress this prompt with the -y or --yes option.
The --no-install option is deprecated, and will be converted to --no.

🎉 New contributors

Thank you for your contribution!

@​TWiStErRob #​551

v1.0.0

Compare Source

⚠️ Breaking Changes

#​531 renovate-config-validator's --strict option is enabled by default.

How to migrate

There are several options.

1. Recommended: Fix Renovate configuration according to the error message
2. Unrecommended: Set false to the input strict to disable --strict option

⚠️ Security Improvement

#​530 Pass inputs via environment variables to prevent malicious injection

Features

#​531 Add the input strict.

You can enable renovate-config-validator's --strict option.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 3am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.