skip running unsafe pr check if input is default by aiqiaoy · Pull Request #2518 · actions/checkout

aiqiaoy · 2026-07-14T22:08:11Z

Copilot

Pull request overview

Adjusts actions/checkout’s unsafe fork PR checkout assertion to avoid false positives on pull_request_target workflows when using rebase/fast-forward merges (issue #2511), by skipping the guard for the default “self-checkout with no explicit ref” scenario.

Changes:

Skip assertSafePrCheckout() when checking out the workflow repository without an explicit ref input (default checkout behavior).
Keep the safety guard enabled for customized repository/ref checkouts.
Add Jest coverage for the rebase/fast-forward merge scenario and for explicitly requesting a fork repository.

Show a summary per file

File	Description
src/input-helper.ts	Skips unsafe PR checkout guard for default self-checkout (workflow repo + no explicit `ref`).
dist/index.js	Built output updated to reflect the new default-checkout guard behavior.
test/input-helper.test.ts	Adds tests covering default self-checkout on fork PRs and refusal of explicit fork repository on `pull_request_target`.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 2/3 changed files
Comments generated: 1
Review effort level: Low

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](actions/checkout#2461) - Bump [@actions/core](https://github.com/actions/core) and [@actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://github.com/dependabot)\[bot] in [#2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://github.com/aiqiaoy) in [#2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v6.0.3...v7.0.0) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2475](actions/checkout#2475) - Bump actions/setup-node from 4 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2477](actions/checkout#2477) - Bump docker/build-push-action from 6.5.0 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2478](actions/checkout#2478) - Bump docker/login-action from 3.3.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2479](actions/checkout#2479) - Bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2488](actions/checkout#2488) - Bump actions/upload-artifact from 4 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2476](actions/checkout#2476) - eslint 9 by [@dependabot](https://github.com/dependabot)\[bot] in [#2474](actions/checkout#2474) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2499](actions/checkout#2499) - skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Chicago) - Branch creation - "on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.berry.house/kyleberry/sensorpush_local/pulls/10

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](actions/checkout#2461) - Bump [@actions/core](https://github.com/actions/core) and [@actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://github.com/dependabot)\[bot] in [#2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://github.com/aiqiaoy) in [#2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v6.0.3...v7.0.0) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2475](actions/checkout#2475) - Bump actions/setup-node from 4 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2477](actions/checkout#2477) - Bump docker/build-push-action from 6.5.0 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2478](actions/checkout#2478) - Bump docker/login-action from 3.3.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2479](actions/checkout#2479) - Bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2488](actions/checkout#2488) - Bump actions/upload-artifact from 4 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2476](actions/checkout#2476) - eslint 9 by [@dependabot](https://github.com/dependabot)\[bot] in [#2474](actions/checkout#2474) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2499](actions/checkout#2499) - skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.0.1...v6) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.3.1...v5) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Los_Angeles) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Co-authored-by: Renovate Bot <renovate-bot@geekfarm.org> Reviewed-on: https://git.geekfarm.org/wu/keyop-messenger/pulls/9

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](actions/checkout#2461) - Bump [@actions/core](https://github.com/actions/core) and [@actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://github.com/dependabot)\[bot] in [#2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://github.com/aiqiaoy) in [#2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v6.0.3...v7.0.0) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2475](actions/checkout#2475) - Bump actions/setup-node from 4 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2477](actions/checkout#2477) - Bump docker/build-push-action from 6.5.0 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2478](actions/checkout#2478) - Bump docker/login-action from 3.3.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2479](actions/checkout#2479) - Bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2488](actions/checkout#2488) - Bump actions/upload-artifact from 4 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2476](actions/checkout#2476) - eslint 9 by [@dependabot](https://github.com/dependabot)\[bot] in [#2474](actions/checkout#2474) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2499](actions/checkout#2499) - skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.fossy.my.id/bagas/tunnel-please/pulls/159 Co-authored-by: Renovate-Clanker <renovate-bot@fossy.my.id> Co-committed-by: Renovate-Clanker <renovate-bot@fossy.my.id>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://github.com/actions/cache) | action | major | `v5` → `v6` | | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` | | [aes-gcm](https://github.com/RustCrypto/AEADs) | dependencies | minor | `0.10` → `0.11` | | debian | stage | patch | `trixie-20260610` → `13` | | debian | final | patch | `trixie-20260610` → `13` | | [elixir](https://elixir-lang.org/) ([source](https://github.com/elixir-lang/elixir)) | | patch | `1.20.1` → `1.20.2` | | [erlang](https://github.com/erlang/otp) | | patch | `29.0.2` → `29.0.3` | | [goreleaser/nfpm](https://github.com/goreleaser/nfpm) | | minor | `v2.46.3` → `v2.47.0` | | [ra](https://hex.pm/packages/ra) ([source](https://github.com/rabbitmq/ra)) | prod | patch | `3.1.8` → `3.1.9` | | registry.k8s.io/sig-storage/csi-resizer | | patch | `v2.2.0` → `v2.2.1` | | [req](https://hex.pm/packages/req) ([source](https://github.com/wojtekmach/req)) | dev | patch | `0.6.2` → `0.6.3` | | [req](https://hex.pm/packages/req) ([source](https://github.com/wojtekmach/req)) | dev | patch | `~> 0.5` → `~> 0.6` | | [rust](https://github.com/rust-lang/rust) | | minor | `1.96.0` → `1.97.1` | | [serde](https://serde.rs) ([source](https://github.com/serde-rs/serde)) | dependencies | patch | `1.0.228` → `1.0.229` | | [stream_data](https://hex.pm/packages/stream_data) ([source](https://github.com/whatyouhide/stream_data)) | dev | minor | `1.3.0` → `1.4.0` | | [stream_data](https://hex.pm/packages/stream_data) ([source](https://github.com/whatyouhide/stream_data)) | prod | minor | `1.3.0` → `1.4.0` | | [thiserror](https://github.com/dtolnay/thiserror) | dependencies | patch | `2.0.18` → `2.0.19` | --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v6.1.0`](https://github.com/actions/cache/releases/tag/v6.1.0) [Compare Source](actions/cache@v6.0.0...v6.1.0) ##### What's Changed - Bump [@actions/cache](https://github.com/actions/cache) to v6.1.0 - handle read-only cache access by [@jasongin](https://github.com/jasongin) in [#1768](actions/cache#1768) **Full Changelog**: <actions/cache@v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/cache/releases/tag/v6.0.0) [Compare Source](actions/cache@v6.0.0...v6.0.0) ##### What's Changed - Update packages, migrate to ESM by [@Samirat](https://github.com/Samirat) in [#1760](actions/cache#1760) **Full Changelog**: <actions/cache@v5...v6.0.0> ### [`v6`](actions/cache@v5.1.0...v6.0.0) [Compare Source](actions/cache@v5.1.0...v6.0.0) </details> <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](actions/checkout#2461) - Bump [@actions/core](https://github.com/actions/core) and [@actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://github.com/dependabot)\[bot] in [#2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://github.com/aiqiaoy) in [#2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v6.0.3...v7.0.0) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2475](actions/checkout#2475) - Bump actions/setup-node from 4 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2477](actions/checkout#2477) - Bump docker/build-push-action from 6.5.0 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2478](actions/checkout#2478) - Bump docker/login-action from 3.3.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2479](actions/checkout#2479) - Bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2488](actions/checkout#2488) - Bump actions/upload-artifact from 4 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2476](actions/checkout#2476) - eslint 9 by [@dependabot](https://github.com/dependabot)\[bot] in [#2474](actions/checkout#2474) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2499](actions/checkout#2499) - skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) </details> <details> <summary>RustCrypto/AEADs (aes-gcm)</summary> ### [`v0.11.0`](RustCrypto/AEADs@aes-gcm-v0.10.3...aes-gcm-v0.11.0) [Compare Source](RustCrypto/AEADs@aes-gcm-v0.10.3...aes-gcm-v0.11.0) </details> <details> <summary>elixir-lang/elixir (elixir)</summary> ### [`v1.20.2`](https://github.com/elixir-lang/elixir/releases/tag/v1.20.2) [Compare Source](elixir-lang/elixir@v1.20.1...v1.20.2) ##### 1. Enhancements ##### Elixir - \[Kernel.ParallelCompiler] Include per-module type checking times when compiler profiling is enabled with `profile: :time` ##### 2. Bug fixes ##### Elixir - \[Kernel] Fix binary comprehensions with sizes when options such as `:uniq` or `:into` are used - \[Kernel] Improve compiler error messages when `quote` with `unquote` is used inside a pattern or guard - \[Kernel] Restore the compiler optimization of `Kernel.put_elem/3` to emit `:erlang.setelement/3` - \[Module] Fix type checking when applying an empty function type - \[Module] Fix type checking of bitstring patterns that reuse variables - \[Module] Fix type information for `__info__(:struct)` to include the `:required` key - \[Module] Fix type operations on map and optional keys during difference/intersection, including open keys and empty intersections - \[Module] Fix typing of list types involving dynamic or empty lists - \[Module] Include bitstrings as a possible domain key in the type system - \[Module] Preserve file metadata from each clause in type system warnings - \[Module] Fix type warnings for protocol implementations whose protocol module defines additional callbacks - \[Module] Raise clearer type checking errors when an expected struct is removed or redefined during compilation ##### Mix - \[mix compile] Avoid unnecessary umbrella recompilation when a path dependency's manifest is newer but unchanged - \[mix deps.compile] Recompile fetched dependencies when their compile-time environment changes </details> <details> <summary>erlang/otp (erlang)</summary> ### [`v29.0.3`](https://github.com/erlang/otp/releases/tag/OTP-29.0.3): OTP 29.0.3 [Compare Source](erlang/otp@OTP-29.0.2...OTP-29.0.3) ``` Patch Package: OTP 29.0.3 Git Tag: OTP-29.0.3 Date: 2026-07-02 Trouble Report Id: OTP-20173, OTP-20183, OTP-20185, OTP-20186, OTP-20190, OTP-20191, OTP-20194, OTP-20196, OTP-20197, OTP-20198, OTP-20199, OTP-20200, OTP-20201, OTP-20206, OTP-20207, OTP-20208, OTP-20215, OTP-20216, OTP-20217, OTP-20220, OTP-20222, OTP-20226, OTP-20227, OTP-20230, OTP-20231, OTP-20232, OTP-20233 Seq num: CVE-2026-53422, CVE-2026-54886, CVE-2026-54887, CVE-2026-54891, CVE-2026-55950, CVE-2026-55952, ERIERL-1333, GH-SA-7wp4-pc27-2vj9, GH-SA-h9pw-h5w4-h976, PR-11209, PR-11215, PR-11219, PR-11230, PR-11239, PR-11244, PR-11247, PR-11250, PR-11259, PR-11268, PR-11269, PR-11270, PR-11271, PR-11281, PR-11282, PR-11283, PR-11289, PR-11294, PR-11295, PR-11299, PR-11302, PR-11306, PR-11307, PR-11309, PR-11311 System: OTP Release: 29 Application: common_test-1.31.1, compiler-10.0.2, crypto-5.9.1, dialyzer-6.0.2, erts-17.0.3, kernel-11.0.3, public_key-1.21.3, ssh-6.0.2, ssl-11.7.3, stdlib-8.0.2 Predecessor: OTP 29.0.2 ``` Check out the git tag OTP-29.0.3, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp\_patch\_apply' tool. For information on install requirements, see descriptions for each application version below. ### common\_test-1.31.1 The common\_test-1.31.1 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - Fixed a crash in ct\_netconfc that occurred when the remote server closed the SSH connection during NETCONF subsystem negotiation. Own Id: OTP-20191\ Related Id(s): ERIERL-1333, [PR-11230] > #### Full runtime dependencies of common\_test-1.31.1 > > compiler-10.0, crypto-4.5, debugger-4.1, erts-7.0, ftp-1.0, inets-6.0, kernel-11.0, observer-2.1, runtime\_tools-1.8.16, sasl-2.5, snmp-5.1.2, ssh-4.0, stdlib-8.0, syntax\_tools-1.7, tools-3.2, xmerl-1.3.8 ### compiler-10.0.2 The compiler-10.0.2 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - Several compiler bugs that could crash the compiler or generate incorrect code in rare circumstances have been fixed. Own Id: OTP-20222\ Related Id(s): [PR-11219] > #### Full runtime dependencies of compiler-10.0.2 > > crypto-5.1, erts-13.0, kernel-8.4, stdlib-8.0 ### crypto-5.9.1 The crypto-5.9.1 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - `crypto:compute_key/4` for `eddh` and `crypto:generate_key/2,3` for `eddh`/`eddsa` now raise an `error:{notsup, Info, Description}` exception instead of returning the atom `notsup` when the underlying cryptolib lacks support. Own Id: OTP-20215\ Related Id(s): [PR-11302] > #### Full runtime dependencies of crypto-5.9.1 > > erts-9.0, kernel-6.0, stdlib-3.9 ### dialyzer-6.0.2 The dialyzer-6.0.2 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - Fix a bug with native record sets in `erl_types.erl` Own Id: OTP-20201 > #### Full runtime dependencies of dialyzer-6.0.2 > > compiler-10.0, erts-12.0, kernel-8.0, stdlib-5.0, syntax\_tools-2.0 ### erts-17.0.3 The erts-17.0.3 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - Fixed an undefined behavior in the internal `erts_qsort()` function, which could have been the cause of a beam crash seen when updating large maps. Own Id: OTP-20185\ Related Id(s): [PR-11215] - Calculating `bxor` of the largest supported positive integer (`erlang:system_info(max_integer)`) and `-1` would return `[]` instead of a raising a `system_limit` exception. Own Id: OTP-20208\ Related Id(s): [PR-11269] - Fix possible race between `ets:delete/1` and terminating process with a fixation on the same table. Own Id: OTP-20217\ Related Id(s): [PR-11283] - A few code generation issues for the JIT on AArch64 (ARM64) have been fixed. For all platforms, the loader will reject some invalid BEAM files earlier. Own Id: OTP-20226\ Related Id(s): [PR-11299] - On 32-bit computers, the `md5` BIFs would return an incorrect MD5 checksum for data of size 4GiB or more. Own Id: OTP-20227\ Related Id(s): [PR-11289] > #### Full runtime dependencies of erts-17.0.3 > > kernel-9.0, sasl-3.3, stdlib-4.1 ### kernel-11.0.3 The kernel-11.0.3 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - inet:info/1 could crash when calling for a closing (port) socket. Own Id: OTP-20173 - Handling of the truncation bit in `inet_res` has been fixed so it properly falls back to querying over TCP after a truncated UDP reply. This fixes a bug introduced in OTP-28.4.2 - kernel-10.6.2 making a truncated UDP answer fail to parse and never execute the fallback, instead the name resolve operation fails. Own Id: OTP-20199\ Related Id(s): [PR-11247] > #### Full runtime dependencies of kernel-11.0.3 > > crypto-5.8, erts-17.0, sasl-3.0, stdlib-8.0 ### public\_key-1.21.3 The public\_key-1.21.3 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - Hardened OCSP response verification by using constant-time hash comparisons and rejecting responses exceeding 100 KB before ASN.1 decoding. Own Id: OTP-20197\ Related Id(s): [PR-11239] > #### Full runtime dependencies of public\_key-1.21.3 > > asn1-5.0, crypto-5.8, erts-13.0, kernel-8.0, stdlib-4.0 ### ssh-6.0.2 The ssh-6.0.2 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - Fixed a path-existence oracle in the SFTP server where `SSH_FXP_REALPATH` requests with `..` components could bypass the configured root directory isolation, allowing an authenticated client to determine whether arbitrary paths exist on the host filesystem. Own Id: OTP-20183\ Related Id(s): [GH-SA-h9pw-h5w4-h976], [PR-11294], [CVE-2026-53422] - Fixed an infinite loop in the SFTP server triggered when receiving `SSH_MSG_CHANNEL_EXTENDED_DATA` on an SFTP channel, which caused the channel process to spin indefinitely on CPU without consuming its message queue. Own Id: OTP-20186\ Related Id(s): [GH-SA-7wp4-pc27-2vj9], [PR-11295], [CVE-2026-54886] - Fixed mlkem768x25519 hybrid key exchange failing intermittently with "incorrect signature" when the X25519 shared secret had a leading zero byte. The shared secret is now encoded as a fixed-width 32-byte string per the specification. Own Id: OTP-20196\ Related Id(s): [PR-11209] - Fixed a race condition where SSH keepalive responses could be matched to unrelated pending requests due to incorrect request queue ordering. Requests are now matched in the order they were sent. Own Id: OTP-20198\ Related Id(s): [PR-11244] - The SFTP server now caps the read length in `SSH_FXP_READ` requests to 255 KiB (matching OpenSSH's `SFTP_MAX_READ_LENGTH`), preventing excessive memory allocation when clients request large reads. Own Id: OTP-20200\ Related Id(s): [PR-11259] - Removed a server-side workaround (OTP-14827, introduced in OTP 20) that accepted SHA-1 user-auth signatures from clients identifying as OpenSSH 7.x when rsa-sha2-\* was negotiated. The workaround addressed a distro-specific build issue in 2017 that no longer exists. Clients affected by this removal (extremely unlikely — requires a 10-year-old unpatched OpenSSH build) will see authentication failures and must upgrade. Own Id: OTP-20206\ Related Id(s): [PR-11268] > #### Full runtime dependencies of ssh-6.0.2 > > crypto-5.7, erts-14.0, kernel-10.3, public\_key-1.6.1, runtime\_tools-1.15.1, stdlib-8.0 ### ssl-11.7.3 Note! The ssl-11.7.3 application *cannot* be applied independently of other applications on an arbitrary OTP 29 installation. ``` On a full OTP 29 installation, also the following runtime dependency has to be satisfied: -- public_key-1.21.1 (first satisfied in OTP 29.0.1) ``` #### Fixed Bugs and Malfunctions - Correct small behavior bugs that occasionally could cause DTLS connection errors, unwanted behavior for legacy DHE\_DSS, hiding of a distribution config error, and possible unorderly process tree shutdown. Own Id: OTP-20190\ Related Id(s): [PR-11250] - Initialize DTLS cookie to random value to avoid DoS attack with forged cookie during startup window. Own Id: OTP-20194\ Related Id(s): [PR-11271], [CVE-2026-54887] - Guard TLS client for MITM injection of application data during "plain-text-window" during handshake. Own Id: OTP-20207\ Related Id(s): [PR-11270], [CVE-2026-54891] - Improve error handling of TLS PSK sending ILLIGAL\_PARMETER alert if binders and PSK-identities are not matched. Also mend recovery mechanism of ticket and session stores to be as resilient as possible to intermediate bugs. Own Id: OTP-20216\ Related Id(s): [PR-11282], [CVE-2026-55952] - Fix race condition that could be used to DoS attack DTLS servers. Own Id: OTP-20220\ Related Id(s): [PR-11306], [CVE-2026-55950] - A TLS-1.3 stateless session ticket with obfuscated\_ticket\_age set to zero was incorrectly accepted without checking the server-side ticket lifetime or the RFC 8446 Section 8.3 freshness window. The server now always validates ticket age using its own timestamp regardless of the client-reported age value. Own Id: OTP-20230\ Related Id(s): [PR-11307] - TLS-1.3 client rejects a second HelloRetryRequest as requiered in RFC 8446 Section 4.1.4 Own Id: OTP-20231\ Related Id(s): [PR-11309] - A busy client node could self-trigger a ticket store crash if unlucky with scheduling if auto mode is used. Own Id: OTP-20232\ Related Id(s): [PR-11311] - Correct spec for CRL API Own Id: OTP-20233\ Related Id(s): [PR-11281] > #### Full runtime dependencies of ssl-11.7.3 > > crypto-5.8, erts-16.0, inets-5.10.7, kernel-10.3, public\_key-1.21.1, runtime\_tools-1.15.1, stdlib-7.0 ### stdlib-8.0.2 The stdlib-8.0.2 application can be applied independently of other applications on a full OTP 29 installation. #### Fixed Bugs and Malfunctions - Several compiler bugs that could crash the compiler or generate incorrect code in rare circumstances have been fixed. Own Id: OTP-20222\ Related Id(s): [PR-11219] > #### Full runtime dependencies of stdlib-8.0.2 > > compiler-5.0, crypto-4.5, erts-16.0.3, kernel-11.0, sasl-3.0, syntax\_tools-3.2.1 ### Thanks to Cole Christensen, Nick Krichevsky, Stefan Grundmann [cve-2026-53422]: https://nvd.nist.gov/vuln/detail/CVE-2026-53422 [cve-2026-54886]: https://nvd.nist.gov/vuln/detail/CVE-2026-54886 [cve-2026-54887]: https://nvd.nist.gov/vuln/detail/CVE-2026-54887 [cve-2026-54891]: https://nvd.nist.gov/vuln/detail/CVE-2026-54891 [cve-2026-55950]: https://nvd.nist.gov/vuln/detail/CVE-2026-55950 [cve-2026-55952]: https://nvd.nist.gov/vuln/detail/CVE-2026-55952 [gh-sa-7wp4-pc27-2vj9]: https://github.com/erlang/otp/issues/SA-7wp4-pc27-2vj9 [gh-sa-h9pw-h5w4-h976]: https://github.com/erlang/otp/issues/SA-h9pw-h5w4-h976 [pr-11209]: erlang/otp#11209 [pr-11215]: erlang/otp#11215 [pr-11219]: erlang/otp#11219 [pr-11230]: erlang/otp#11230 [pr-11239]: erlang/otp#11239 [pr-11244]: erlang/otp#11244 [pr-11247]: erlang/otp#11247 [pr-11250]: erlang/otp#11250 [pr-11259]: erlang/otp#11259 [pr-11268]: erlang/otp#11268 [pr-11269]: erlang/otp#11269 [pr-11270]: erlang/otp#11270 [pr-11271]: erlang/otp#11271 [pr-11281]: erlang/otp#11281 [pr-11282]: erlang/otp#11282 [pr-11283]: erlang/otp#11283 [pr-11289]: erlang/otp#11289 [pr-11294]: erlang/otp#11294 [pr-11295]: erlang/otp#11295 [pr-11299]: erlang/otp#11299 [pr-11302]: erlang/otp#11302 [pr-11306]: erlang/otp#11306 [pr-11307]: erlang/otp#11307 [pr-11309]: erlang/otp#11309 [pr-11311]: erlang/otp#11311 </details> <details> <summary>goreleaser/nfpm (goreleaser/nfpm)</summary> ### [`v2.47.0`](https://github.com/goreleaser/nfpm/releases/tag/v2.47.0) [Compare Source](goreleaser/nfpm@v2.46.3...v2.47.0) ##### Changelog ##### New Features - [`5c2f7ca`](goreleaser/nfpm@5c2f7ca): feat: RiscV64 support ([#1091](goreleaser/nfpm#1091)) ([@ahqsoftwares](https://github.com/ahqsoftwares)) - [`64b788a`](goreleaser/nfpm@64b788a): feat: add Requires(Post) for RPMS ([#1085](goreleaser/nfpm#1085)) ([@teddelin](https://github.com/teddelin)) - [`dc96073`](goreleaser/nfpm@dc96073): feat: add fang support for styled CLI output ([#1068](goreleaser/nfpm#1068)) ([@caarlos0](https://github.com/caarlos0)) ##### Security updates - [`060af04`](goreleaser/nfpm@060af04): sec(deps): update golang.org/x/crypto ([@caarlos0](https://github.com/caarlos0)) - [`f769631`](goreleaser/nfpm@f769631): sec(deps): update golang.org/x/net ([@caarlos0](https://github.com/caarlos0)) ##### Bug fixes - [`3118ec1`](goreleaser/nfpm@3118ec1): fix: tolerate empty overrides packager clause ([#1080](goreleaser/nfpm#1080)) ([@dleske](https://github.com/dleske)) ##### Dependency updates - [`a2d9ce5`](goreleaser/nfpm@a2d9ce5): feat(deps): go1.26.4 ([@caarlos0](https://github.com/caarlos0)) - [`9b16218`](goreleaser/nfpm@9b16218): fix(deps): bump alpine from 3.23.3 to 3.23.4 ([#1075](goreleaser/nfpm#1075)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`e3102b3`](goreleaser/nfpm@e3102b3): fix(deps): bump alpine from 3.23.3 to 3.23.4 in /testdata/acceptance ([#1076](goreleaser/nfpm#1076)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`62c555e`](goreleaser/nfpm@62c555e): fix(deps): bump alpine from 3.23.4 to 3.24.0 ([#1098](goreleaser/nfpm#1098)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`071ae18`](goreleaser/nfpm@071ae18): fix(deps): bump alpine from 3.23.4 to 3.24.0 in /testdata/acceptance ([#1099](goreleaser/nfpm#1099)) ([@dependabot](https://github.com/dependabot)\[bot]) ##### Build process updates - [`4c62d34`](goreleaser/nfpm@4c62d34): ci(deps): bump github/codeql-action in the actions group ([#1083](goreleaser/nfpm#1083)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`38a05de`](goreleaser/nfpm@38a05de): ci(deps): bump the actions group across 1 directory with 3 updates ([#1096](goreleaser/nfpm#1096)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`6fe4da4`](goreleaser/nfpm@6fe4da4): ci(deps): bump the actions group across 1 directory with 7 updates ([#1095](goreleaser/nfpm#1095)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`cd95f9f`](goreleaser/nfpm@cd95f9f): ci(deps): bump the actions group with 2 updates ([#1078](goreleaser/nfpm#1078)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`8f9cbef`](goreleaser/nfpm@8f9cbef): ci(deps): bump the actions group with 3 updates ([#1090](goreleaser/nfpm#1090)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`9ff0e2f`](goreleaser/nfpm@9ff0e2f): ci(deps): bump the actions group with 4 updates ([#1086](goreleaser/nfpm#1086)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`2ce1832`](goreleaser/nfpm@2ce1832): ci(deps): bump the actions group with 5 updates ([#1074](goreleaser/nfpm#1074)) ([@dependabot](https://github.com/dependabot)\[bot]) - [`1bd2fed`](goreleaser/nfpm@1bd2fed): ci: fix docs build test ([@caarlos0](https://github.com/caarlos0)) - [`4695cdc`](goreleaser/nfpm@4695cdc): ci: fix license check ([@caarlos0](https://github.com/caarlos0)) - [`a40b461`](goreleaser/nfpm@a40b461): ci: update build ([@caarlos0](https://github.com/caarlos0)) ##### Other work - [`d16d75f`](goreleaser/nfpm@d16d75f): docs(deps): update hextra ([@caarlos0](https://github.com/caarlos0)) - [`c6a6a27`](goreleaser/nfpm@c6a6a27): docs: update cmd docs ([@caarlos0](https://github.com/caarlos0)) **Full Changelog**: <goreleaser/nfpm@v2.46.3...v2.47.0> ##### Helping out This release is only possible thanks to **all** the support of **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/) or [contribute with code](https://goreleaser.com/contributing). ##### Where to go next? - nFPM is a satellite project from GoReleaser. [Check it out](https://goreleaser.com)! - Find examples and commented usage of all options in our [website](https://nfpm.goreleaser.com/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6) and [Twitter](https://twitter.com/goreleaser)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> </details> <details> <summary>rabbitmq/ra (ra)</summary> ### [`v3.1.9`](https://github.com/rabbitmq/ra/releases/tag/v3.1.9) [Compare Source](rabbitmq/ra@v3.1.8...v3.1.9) #### What's Changed - ci: temporary fix for windows-latest changed by [@lshir](https://github.com/lshir) in [#639](rabbitmq/ra#639) - Forward follower's append\_entries\_reply when it already has the snapshot by [@kjnilsson](https://github.com/kjnilsson) in [#641](rabbitmq/ra#641) - Fix stale `last_written`/`pending` state after log truncation, and a snapshot-send regression by [@kjnilsson](https://github.com/kjnilsson) in [#644](rabbitmq/ra#644) - Fix `force_shrink_members_to_current_member/1` typespec by [@visciang](https://github.com/visciang) in [#640](rabbitmq/ra#640) **Full Changelog**: <rabbitmq/ra@v3.1.8...v3.1.9> </details> <details> <summary>wojtekmach/req (req)</summary> ### [`v0.6.3`](https://github.com/wojtekmach/req/blob/HEAD/CHANGELOG.md#v063-2026-07-16) [Compare Source](wojtekmach/req@v0.6.2...v0.6.3) - \[`Req.Test`]: Fix race condition </details> <details> <summary>rust-lang/rust (rust)</summary> ### [`v1.97.1`](https://github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1971-2026-07-16) [Compare Source](rust-lang/rust@1.97.0...1.97.1) \========================== <a id="1.97.1"></a> - [rustc: Fix miscompilation in LLVM optimization](rust-lang/rust#159035) This backports an LLVM submodule bump to include the LLVM-side fix and a revert of the rustc change that is one known trigger for the bug. The rustc side revert should not be strictly necessary but is done out of abundance of caution. ### [`v1.97.0`](https://github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1970-2026-07-09) [Compare Source](rust-lang/rust@1.96.1...1.97.0) \========================== <a id="1.97.0-Language"></a> ## Language - [Consider `Result<T, Uninhabited>` and `ControlFlow<Uninhabited, T>` to be equivalent to `T` for must use lint](rust-lang/rust#148214) - [Add allow-by-default `dead_code_pub_in_binary` lint for unused pub items in binary crates](rust-lang/rust#149509) - [Stabilize the `div32`, `lam-bh`, `lamcas`, `ld-seq-sa` and `scq` target features](rust-lang/rust#154510) - [Stabilize `cfg(target_has_atomic_primitive_alignment)`](rust-lang/rust#155006) - [Allow trailing `self` in imports in more cases](rust-lang/rust#155137) <a id="1.97.0-Platform-Support"></a> ## Platform Support - [nvptx64-nvidia-cuda: drop support for old architectures and old ISAs](rust-lang/rust#152443) Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support. [platform-support-doc]: https://doc.rust-lang.org/rustc/platform-support.html <a id="1.97.0-Stabilized-APIs"></a> ## Stabilized APIs - [`Default for RepeatN`](https://doc.rust-lang.org/stable/std/iter/struct.RepeatN.html#impl-Default-for-RepeatN%3CA%3E) - [`Copy for ffi::FromBytesUntilNulError`](https://doc.rust-lang.org/stable/std/ffi/struct.FromBytesUntilNulError.html#impl-Copy-for-FromBytesUntilNulError) - [`Send for std::fs::File` on UEFI](rust-lang/rust#154003) - [`<{integer}>::isolate_highest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.isolate_highest_one) - [`<{integer}>::isolate_lowest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.isolate_lowest_one) - [`<{integer}>::highest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.highest_one) - [`<{integer}>::lowest_one`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.lowest_one) - [`<{integer}>::bit_width`](https://doc.rust-lang.org/stable/std/primitive.u32.html#method.bit_width) - [`NonZero<{integer}>::isolate_highest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.isolate_highest_one) - [`NonZero<{integer}>::isolate_lowest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.isolate_lowest_one) - [`NonZero<{integer}>::highest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.highest_one) - [`NonZero<{integer}>::lowest_one`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.lowest_one) - [`NonZero<{integer}>::bit_width`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.bit_width) These previously stable APIs are now stable in const contexts: - [`char::is_control`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.is_control) <a id="1.97.0-Cargo"></a> ## Cargo - [Stabilize `build.warnings` config.](rust-lang/cargo#16796) This controls how lint warnings from local packages are treated. Useful for enforcing a warning-free build in CI, replacing `-Dwarnings`. [docs](https://doc.rust-lang.org/nightly/cargo/reference/config.html#buildwarnings) - [Stabilize `resolver.lockfile-path` config.](rust-lang/cargo#16694) This allows specifying the path to the lockfile to use when resolving dependencies. Useful when working with read-only source directories. [docs](https://doc.rust-lang.org/nightly/cargo/reference/config.html#resolverlockfile-path) - [cargo-clean: Error when `--target-dir` doesn't look like a Cargo target directory.](rust-lang/cargo#16712) This prevents accidental deletion of non-target directories. - [Add `-m` shorthand for `--manifest-path`](rust-lang/cargo#16858) - [Remove `curl` dependency from `crates-io` crate](rust-lang/cargo#16936) <a id="1.97.0-Rustdoc"></a> ## Rustdoc - [Stabilize `--emit` flag](rust-lang/rust#146220) - [Stabilize `--remap-path-prefix`](rust-lang/rust#155307) <a id="1.97.0-Compatibility-Notes"></a> ## Compatibility Notes - [Emit a future-compatibility warning when relying on `f32: From<{float}>` to constrain `{float}`](rust-lang/rust#139087) - [Rust will use the v0 symbol mangling scheme by default.](rust-lang/rust#151994) This may cause some tools (such as debuggers or profilers, especially with old versions) to fail to demangle symbols emitted by Rust. It may also cause the formatting of text in backtraces to change. - [Prevent deref coercions in `pin!`, in order to prevent unsoundness.](rust-lang/rust#153457) The most likely case where this might impact users is: writing `pin!(x)` where `x` has type `&mut T` will now always correctly produce a value of type `Pin<&mut &mut T>`, instead of sometimes allowing a coercion that produces a value of type `Pin<&mut T>`. This coercion was previously incorrectly allowed since Rust 1.88.0. - [Deprecate `std::char` constants and functions](rust-lang/rust#153873) - [Warn on linker output by default](rust-lang/rust#153968) - [Remove hidden `f64` methods which have been deprecated since 1.0](rust-lang/rust#153975) - [report the `varargs_without_pattern` lint in deps](rust-lang/rust#154599) - [Forbid passing generic arguments to module path segments even if the module reexports a generic enum variant](rust-lang/rust#154971) - [Error on invalid macho `link_section` specifier](rust-lang/rust#155065) - The encoding of certain `enum`s [have changed](rust-lang/rust#155473). This is not a breaking change, as it only applies to `enum`s without layout guarantees, but is noted here as we've seen people impacted from having made assumptions about the layout algorithm. - [Error on `#[export_name = "..."]` where the name is empty](rust-lang/rust#155515) - [Syntactically reject tuple index shorthands in struct patterns](rust-lang/rust#155698) - [validate `#[link_name = "..."]` & `#[link(name = "...")]` parameters](rust-lang/rust#155817) - On Windows, after calling `shutdown` on a socket to shut down the write side, attempting to write to the socket will now produce a `BrokenPipe` error rather than `Other`. [Map `WSAESHUTDOWN` to `io::ErrorKind::BrokenPipe`](rust-lang/rust#156063) ### [`v1.96.1`](https://github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1961-2026-06-30) [Compare Source](rust-lang/rust@1.96.0...1.96.1) \=========================== <a id="1.96.1"></a> - [Cargo: fix timeout/retry behavior](rust-lang/cargo#17131) - [Cargo: apply patches for CVE-2025-15661, CVE-2026-55199, and CVE-2026-55200 to libssh2](rust-lang/cargo#17140) - [rustc: fix miscompilation in MIR optimization](rust-lang/rust#158214) </details> <details> <summary>serde-rs/serde (serde)</summary> ### [`v1.0.229`](https://github.com/serde-rs/serde/releases/tag/v1.0.229) [Compare Source](serde-rs/serde@v1.0.228...v1.0.229) - Update to syn 3 </details> <details> <summary>whatyouhide/stream_data (stream_data)</summary> ### [`v1.4.0`](https://github.com/whatyouhide/stream_data/blob/HEAD/CHANGELOG.md#v140) [Compare Source](whatyouhide/stream_data@v1.3.0...v1.4.0) - Require Elixir 1.14+. - Fix `StreamData.float/1` when min and max are too far apart. - Support choosing between graphemes and codepoints in `StreamData.string/2`. - Shrink `StreamData.one_of/1` towards earlier elements first (instead of smaller values for later elements). </details> <details> <summary>dtolnay/thiserror (thiserror)</summary> ### [`v2.0.19`](https://github.com/dtolnay/thiserror/releases/tag/2.0.19) [Compare Source](dtolnay/thiserror@2.0.18...2.0.19) - Update to syn 3 </details> --- ### Configuration 📅 **Schedule**: (in timezone Pacific/Auckland) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - Between 12:00 AM and 03:59 AM (`* 0-3 * * *`) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Co-authored-by: James Harton <james@harton.dev> Reviewed-on: https://harton.dev/project-neon/neonfs/pulls/1568

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4.3.1` → `v7.0.0` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](actions/checkout#2461) - Bump [@actions/core](https://github.com/actions/core) and [@actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://github.com/dependabot)\[bot] in [#2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://github.com/aiqiaoy) in [#2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2462](actions/checkout#2462) ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v6.0.3...v7.0.0) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2475](actions/checkout#2475) - Bump actions/setup-node from 4 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2477](actions/checkout#2477) - Bump docker/build-push-action from 6.5.0 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2478](actions/checkout#2478) - Bump docker/login-action from 3.3.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2479](actions/checkout#2479) - Bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2488](actions/checkout#2488) - Bump actions/upload-artifact from 4 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#2476](actions/checkout#2476) - eslint 9 by [@dependabot](https://github.com/dependabot)\[bot] in [#2474](actions/checkout#2474) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2499](actions/checkout#2499) - skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](actions/checkout@v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](actions/checkout#2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](actions/checkout@v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](actions/checkout#2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](actions/checkout@v6...v6) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](actions/checkout#2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](actions/checkout#2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](actions/checkout@v5.0.1...v6) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](actions/checkout#2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](actions/checkout#2414) ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v5...v5.0.1) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](actions/checkout@v5...v5) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](actions/checkout#2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](actions/checkout@v4.3.1...v5) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](actions/checkout#2301) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/6 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Warsaw) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.ajgon.casa/deedee/schemas/pulls/13

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6.0.3` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](actions/checkout#2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2460](actions/checkout#2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](actions/checkout#2461) - Bump [@actions/core](https://github.com/actions/core) and [@actions/tool-cache](https://github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://github.com/dependabot)\[bot] in [#2459](actions/checkout#2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://github.com/aiqiaoy) in [#2463](actions/checkout#2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2462](actions/checkout#2462) ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](actions/checkout@v6.0.3...v6.1.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](actions/checkout#2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](actions/checkout#2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <actions/checkout@v6.0.3...v6.1.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 12:59 AM, only on Monday ( * 0 * * 1 ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Co-authored-by: crowci-bot <admin@crowci.dev> Reviewed-on: https://codefloe.com/crowci/terraform-provider-crowci/pulls/8

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/14 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

@aiqiaoy

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (in timezone America/New_York) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.greyrock.io/greyrock-labs/esphome-config/pulls/4

…(v7.0.0 ➔ v7.0.1) (#117) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (https://github.com/actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (in timezone America/New_York) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.greyrock.io/greyrock-labs/home-ops/pulls/117

…#116) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/11) for more information. --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (in timezone America/New_York) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.greyrock.io/greyrock-labs/home-ops/pulls/116

…#23) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/talos-mcp/pulls/23

…(v7.0.0 ➔ v7.0.1) (#1665) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (https://github.com/actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1665

@aiqiaoy

Bumps the github-actions-updates group with 3 updates: actions/checkout, 1password/load-secrets-action and lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml. Updates `actions/checkout` from 7.0.0 to 7.0.1 ## Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 Escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view Updates `1password/load-secrets-action` from 4.0.1 to 4.1.1 ## Release notes Sourced from 1password/load-secrets-action's releases. v4.1.1 What's Changed Features Add fallback version resolution so if app-updates.agilebits.com is unavailable, the action now falls back to Docker Hub and then a baked-in pinned version. (#173 ) Security Harden CI security: add StepSecurity harden runner and pin GitHub Actions to commit SHAs across workflows, restrict workflow permissions, and add Dependabot config. (#174 ) Full Changelog: 1Password/load-secrets-action@v4.0.1...v4.1.1 ## Commits eb2efd0 Merge pull request #183 from 1Password/release/v4.1.1 22158bd Prepare release 19a016f Merge pull request #174 from 1Password/chore/GHA-151735-stepsecurity-remediation 01723ec Merge pull request #173 from 1Password/jill/add-docker-hub-fallback-for-cli-i 4eec4d1 Rebuild 2f9fe68 Add CI release check for op version c63b840 Apply GitHub Actions security best practices d97149e Refactor E2E b240826 Update E2E tests 759227f Add pinned version Additional commits viewable in compare view Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.7.4 to 0.9.1 ## Release notes Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases. v0.9.1 🔧 Maintenance 🔧 Chore: Bump sonarqube-cloud-scan-action to v1.2.1 @ModeSevenIndustrialSolutions (#810) Links Submit bugs/feature requests v0.9.0 ✨ New Features ✨ Feat: Add build stage to Sonatype Lifecycle scan @ModeSevenIndustrialSolutions (#809) Feat: Add PARALLEL input to rtdv3 verify workflow @ModeSevenIndustrialSolutions (#811) 🔧 Maintenance 🔧 Chore: Bump release-drafter/release-drafter from 7.5.1 to 7.6.0 @dependabot[bot] (#793) Chore: Bump actions/setup-java from 5.5.0 to 5.6.0 @dependabot[bot] (#796) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-jjb-verify.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#794) Chore: Bump lfreleng-actions/zizmor-scan-action from 0.4.0 to 0.5.0 @dependabot[bot] (#795) Chore: Bump github/codeql-action/analyze from 4.37.0 to 4.37.1 @dependabot[bot] (#798) Chore: Bump release-drafter/release-drafter/autolabeler from 7.5.1 to 7.6.0 @dependabot[bot] (#799) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#797) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/gerrit-compose-required-tox-verify.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#801) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-verify-github-actions.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#800) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-sonatype-lifecycle.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#802) Chore: Bump actions/checkout from 7.0.0 to 7.0.1 @dependabot[bot] (#803) Chore: Bump actions/setup-go from 6.5.0 to 7.0.0 @dependabot[bot] (#804) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-packer-verify.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#805) Chore: Bump github/codeql-action/init from 4.37.0 to 4.37.1 @dependabot[bot] (#806) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-repo-linting.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#807) Chore: pre-commit linting updates @pre-commit-ci[bot] (#808) Links Submit bugs/feature requests v0.8.1 🔧 Maintenance 🔧 Chore: Bump egress allow-list pin to v0.6.0 @ModeSevenIndustrialSolutions (#792) Links Submit bugs/feature requests ... (truncated) ## Commits 973bba8 Merge pull request #810 from modeseven-lfit/chore/bump-sonarqube-scan-v1.2.1 eb97ae4 Merge pull request #811 from modeseven-lfit/docs-parallel-toggle a7985cf Feat: Add PARALLEL input to rtdv3 verify workflow 05bf980 Merge pull request #809 from modeseven-lfit/feat/sonatype-lifecycle-build-stage fb765b8 Merge pull request #808 from lfit/pre-commit-ci-update-config bbc6947 Merge pull request #807 from lfit/dependabot/github_actions/lfit/releng-reusa a46b638 Merge pull request #806 from lfit/dependabot/github_actions/github/codeql-act d642a61 Merge pull request #805 from lfit/dependabot/github_actions/lfit/releng-reusa 8a255ea Merge pull request #804 from lfit/dependabot/github_actions/actions/setup-go- dae7013 Merge pull request #803 from lfit/dependabot/github_actions/actions/checkout- Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I95cbd8b7f4b20a287969d0b4219f8a1811b1f6d5 GitHub-PR: #24 GitHub-Hash: 903c412c53235b24 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

@aiqiaoy

…to v7.0.1 (#26) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://code.forgejo.org/actions/checkout](https://code.forgejo.org/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (https://code.forgejo.org/actions/checkout)</summary> ### [`v7.0.1`](https://data.forgejo.org/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://code.forgejo.org/actions/checkout/compare/v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled because a matching PR was automerged previously. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/odeva/tax-conformance-kit/pulls/26

@ref

…updates [skip ci] Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.178` | `1.0.183` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.5.1` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` | Updates `actions/checkout` from 7.0.0 to 7.0.1 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v7.0.1 > ------ > > What's Changed > -------------- > > * skip running unsafe pr check if input is default by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518) > * trim only ascii whitespace for branch by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521) > * escape values passed to --unset by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530) > * Various dependency updates > > **Full Changelog**: <actions/checkout@v7...v7.0.1> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v7.0.1 > ------ > > * Skip running unsafe pr check if input is default by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518) > * Trim only ascii whitespace for branch by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521) > * Escape values passed to --unset by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530) > * Various dependency updates > > v7.0.0 > ------ > > * Block checking out fork PR for pull\_request\_target and workflow\_run by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2454](https://redirect.github.com/actions/checkout/pull/2454) > * Various dependency updates > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) ... (truncated) Commits * [`3d3c42e`](actions/checkout@3d3c42e) prep v7.0.1 release ([#2531](https://redirect.github.com/actions/checkout/issues/2531)) * [`2880268`](actions/checkout@2880268) escape values passed to --unset ([#2530](https://redirect.github.com/actions/checkout/issues/2530)) * [`12cd223`](actions/checkout@12cd223) trim only ascii whitespace for branch ([#2521](https://redirect.github.com/actions/checkout/issues/2521)) * [`62661c4`](actions/checkout@62661c4) skip running unsafe pr check if input is default ([#2518](https://redirect.github.com/actions/checkout/issues/2518)) * [`e8d4307`](actions/checkout@e8d4307) Bump the minor-actions-dependencies group with 2 updates ([#2499](https://redirect.github.com/actions/checkout/issues/2499)) * [`631c942`](actions/checkout@631c942) eslint 9 ([#2474](https://redirect.github.com/actions/checkout/issues/2474)) * [`4f1f4ae`](actions/checkout@4f1f4ae) Bump actions/upload-artifact from 4 to 7 ([#2476](https://redirect.github.com/actions/checkout/issues/2476)) * [`ba09753`](actions/checkout@ba09753) Bump actions/checkout from 6 to 7 ([#2488](https://redirect.github.com/actions/checkout/issues/2488)) * [`b9e0990`](actions/checkout@b9e0990) Bump docker/login-action from 3.3.0 to 4.2.0 ([#2479](https://redirect.github.com/actions/checkout/issues/2479)) * [`e8cb398`](actions/checkout@e8cb398) Bump docker/build-push-action from 6.5.0 to 7.2.0 ([#2478](https://redirect.github.com/actions/checkout/issues/2478)) * Additional commits viewable in [compare view](actions/checkout@9c091bb...3d3c42e) Updates `anthropics/claude-code-action` from 1.0.178 to 1.0.183 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.183 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.183> > > v1.0.182 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.182> > > v1.0.181 > -------- > > What's Changed > -------------- > > * fix: share one exchanged WIF credential across spawned Claude processes by [`@KeisukeYamashita`](https://github.com/KeisukeYamashita) in [anthropics/claude-code-action#1407](https://redirect.github.com/anthropics/claude-code-action/pull/1407) > > New Contributors > ---------------- > > * [`@KeisukeYamashita`](https://github.com/KeisukeYamashita) made their first contribution in [anthropics/claude-code-action#1407](https://redirect.github.com/anthropics/claude-code-action/pull/1407) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.181> > > v1.0.180 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.180> > > v1.0.179 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.179> Commits * [`be7b93b`](anthropics/claude-code-action@be7b93b) chore: bump Claude Code to 2.1.220 and Agent SDK to 0.3.220 * [`e0cf66d`](anthropics/claude-code-action@e0cf66d) chore: bump Claude Code to 2.1.219 and Agent SDK to 0.3.219 * [`44423bd`](anthropics/claude-code-action@44423bd) chore: bump Claude Code to 2.1.218 and Agent SDK to 0.3.218 * [`b00a341`](anthropics/claude-code-action@b00a341) fix: share one exchanged WIF credential across spawned Claude processes ([#1407](https://redirect.github.com/anthropics/claude-code-action/issues/1407)) * [`fa7e2f0`](anthropics/claude-code-action@fa7e2f0) chore: bump Claude Code to 2.1.217 and Agent SDK to 0.3.217 * [`b76a077`](anthropics/claude-code-action@b76a077) chore: bump Claude Code to 2.1.216 and Agent SDK to 0.3.216 * See full diff in [compare view](anthropics/claude-code-action@af0559e...be7b93b) Updates `github/codeql-action/upload-sarif` from 4.37.1 to 4.37.3 Release notes *Sourced from [github/codeql-action/upload-sarif's releases](https://github.com/github/codeql-action/releases).* > v4.37.3 > ------- > > No user facing changes. > > v4.37.2 > ------- > > * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023) > * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007) Changelog *Sourced from [github/codeql-action/upload-sarif's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037) > > 4.37.3 - 22 Jul 2026 > -------------------- > > No user facing changes. > > 4.37.2 - 21 Jul 2026 > -------------------- > > * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023) > * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007) > > 4.37.1 - 16 Jul 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956) > * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019) > > 4.37.0 - 08 Jul 2026 > -------------------- > > * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995) > * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973) > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) ... (truncated) Commits * [`e4fba86`](github/codeql-action@e4fba86) Merge pull request [#4031](https://redirect.github.com/github/codeql-action/issues/4031) from github/update-v4.37.3-72f6a9da0 * [`fb50ab5`](github/codeql-action@fb50ab5) Update changelog for v4.37.3 * [`72f6a9d`](github/codeql-action@72f6a9d) Merge pull request [#4030](https://redirect.github.com/github/codeql-action/issues/4030) from github/mbg/fix/no-proxy * [`3b5ee58`](github/codeql-action@3b5ee58) Use default `request` options instead of `undefined` * [`bfb6be4`](github/codeql-action@bfb6be4) Merge pull request [#4028](https://redirect.github.com/github/codeql-action/issues/4028) from github/mergeback/v4.37.2-to-main-e0647621 * [`526ab84`](github/codeql-action@526ab84) Rebuild * [`d6217b9`](github/codeql-action@d6217b9) Update changelog and version after v4.37.2 * [`e064762`](github/codeql-action@e064762) Merge pull request [#4027](https://redirect.github.com/github/codeql-action/issues/4027) from github/update-v4.37.2-385bcdc5a * [`e0faed8`](github/codeql-action@e0faed8) Add a couple of change notes * [`73aad0e`](github/codeql-action@73aad0e) Update changelog for v4.37.2 * Additional commits viewable in [compare view](github/codeql-action@7188fc3...e4fba86) Updates `docker/login-action` from 4.4.0 to 4.5.1 Release notes *Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).* > v4.5.1 > ------ > > * Support `dhi.io` as Docker Hub OIDC registry by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1054](https://redirect.github.com/docker/login-action/pull/1054) > > **Full Changelog**: <docker/login-action@v4.5.0...v4.5.1> > > v4.5.0 > ------ > > * [Docker Hub OIDC](https://github.com/docker/login-action#docker-hub) login support by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1048](https://redirect.github.com/docker/login-action/pull/1048) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1091.0 in [docker/login-action#1037](https://redirect.github.com/docker/login-action/pull/1037) > * Bump `@docker/actions-toolkit` from 0.92.0 to 0.94.0 in [docker/login-action#1044](https://redirect.github.com/docker/login-action/pull/1044) [docker/login-action#1050](https://redirect.github.com/docker/login-action/pull/1050) > * Bump brace-expansion from 1.1.13 to 1.1.16 in [docker/login-action#1046](https://redirect.github.com/docker/login-action/pull/1046) > * Bump js-yaml from 5.2.0 to 5.2.1 in [docker/login-action#1038](https://redirect.github.com/docker/login-action/pull/1038) > > **Full Changelog**: <docker/login-action@v4.4.0...v4.5.0> Commits * [`abd2ef4`](docker/login-action@abd2ef4) Merge pull request [#1055](https://redirect.github.com/docker/login-action/issues/1055) from crazy-max/test-registry-auth-oidc * [`d49d3a9`](docker/login-action@d49d3a9) Merge pull request [#1054](https://redirect.github.com/docker/login-action/issues/1054) from crazy-max/oidc-missing-dhi * [`b58b17c`](docker/login-action@b58b17c) test: cover Docker Hub OIDC with registry-auth * [`be646c2`](docker/login-action@be646c2) chore: update generated content * [`d77c059`](docker/login-action@d77c059) support dhi.io as Docker Hub OIDC registry * [`06fb636`](docker/login-action@06fb636) Merge pull request [#1037](https://redirect.github.com/docker/login-action/issues/1037) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependen... * [`a8bc953`](docker/login-action@a8bc953) [dependabot skip] chore: update generated content * [`f54b901`](docker/login-action@f54b901) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up... * [`77f18f6`](docker/login-action@77f18f6) Merge pull request [#1049](https://redirect.github.com/docker/login-action/issues/1049) from docker/dependabot/github\_actions/codeql-actions... * [`ec0bf28`](docker/login-action@ec0bf28) Merge pull request [#1050](https://redirect.github.com/docker/login-action/issues/1050) from docker/dependabot/npm\_and\_yarn/docker/actions-t... * Additional commits viewable in [compare view](docker/login-action@af1e73f...abd2ef4) Updates `github/codeql-action/init` from 4.37.1 to 4.37.3 Release notes *Sourced from [github/codeql-action/init's releases](https://github.com/github/codeql-action/releases).* > v4.37.3 > ------- > > No user facing changes. > > v4.37.2 > ------- > > * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023) > * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007) Changelog *Sourced from [github/codeql-action/init's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037) > > 4.37.3 - 22 Jul 2026 > -------------------- > > No user facing changes. > > 4.37.2 - 21 Jul 2026 > -------------------- > > * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023) > * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007) > > 4.37.1 - 16 Jul 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956) > * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019) > > 4.37.0 - 08 Jul 2026 > -------------------- > > * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995) > * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973) > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) ... (truncated) Commits * [`e4fba86`](github/codeql-action@e4fba86) Merge pull request [#4031](https://redirect.github.com/github/codeql-action/issues/4031) from github/update-v4.37.3-72f6a9da0 * [`fb50ab5`](github/codeql-action@fb50ab5) Update changelog for v4.37.3 * [`72f6a9d`](github/codeql-action@72f6a9d) Merge pull request [#4030](https://redirect.github.com/github/codeql-action/issues/4030) from github/mbg/fix/no-proxy * [`3b5ee58`](github/codeql-action@3b5ee58) Use default `request` options instead of `undefined` * [`bfb6be4`](github/codeql-action@bfb6be4) Merge pull request [#4028](https://redirect.github.com/github/codeql-action/issues/4028) from github/mergeback/v4.37.2-to-main-e0647621 * [`526ab84`](github/codeql-action@526ab84) Rebuild * [`d6217b9`](github/codeql-action@d6217b9) Update changelog and version after v4.37.2 * [`e064762`](github/codeql-action@e064762) Merge pull request [#4027](https://redirect.github.com/github/codeql-action/issues/4027) from github/update-v4.37.2-385bcdc5a * [`e0faed8`](github/codeql-action@e0faed8) Add a couple of change notes * [`73aad0e`](github/codeql-action@73aad0e) Update changelog for v4.37.2 * Additional commits viewable in [compare view](github/codeql-action@7188fc3...e4fba86) Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3 Release notes *Sourced from [github/codeql-action/analyze's releases](https://github.com/github/codeql-action/releases).* > v4.37.3 > ------- > > No user facing changes. > > v4.37.2 > ------- > > * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023) > * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007) Changelog *Sourced from [github/codeql-action/analyze's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037) > > 4.37.3 - 22 Jul 2026 > -------------------- > > No user facing changes. > > 4.37.2 - 21 Jul 2026 > -------------------- > > * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023) > * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007) > > 4.37.1 - 16 Jul 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956) > * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019) > > 4.37.0 - 08 Jul 2026 > -------------------- > > * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995) > * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973) > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) ... (truncated) Commits * [`e4fba86`](github/codeql-action@e4fba86) Merge pull request [#4031](https://redirect.github.com/github/codeql-action/issues/4031) from github/update-v4.37.3-72f6a9da0 * [`fb50ab5`](github/codeql-action@fb50ab5) Update changelog for v4.37.3 * [`72f6a9d`](github/codeql-action@72f6a9d) Merge pull request [#4030](https://redirect.github.com/github/codeql-action/issues/4030) from github/mbg/fix/no-proxy * [`3b5ee58`](github/codeql-action@3b5ee58) Use default `request` options instead of `undefined` * [`bfb6be4`](github/codeql-action@bfb6be4) Merge pull request [#4028](https://redirect.github.com/github/codeql-action/issues/4028) from github/mergeback/v4.37.2-to-main-e0647621 * [`526ab84`](github/codeql-action@526ab84) Rebuild * [`d6217b9`](github/codeql-action@d6217b9) Update changelog and version after v4.37.2 * [`e064762`](github/codeql-action@e064762) Merge pull request [#4027](https://redirect.github.com/github/codeql-action/issues/4027) from github/update-v4.37.2-385bcdc5a * [`e0faed8`](github/codeql-action@e0faed8) Add a couple of change notes * [`73aad0e`](github/codeql-action@73aad0e) Update changelog for v4.37.2 * Additional commits viewable in [compare view](github/codeql-action@7188fc3...e4fba86)

Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1. Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v7.0.1 > ------ > > What's Changed > -------------- > > * skip running unsafe pr check if input is default by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518) > * trim only ascii whitespace for branch by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521) > * escape values passed to --unset by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530) > * Various dependency updates > > **Full Changelog**: <actions/checkout@v7...v7.0.1> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v7.0.1 > ------ > > * Skip running unsafe pr check if input is default by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518) > * Trim only ascii whitespace for branch by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521) > * Escape values passed to --unset by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530) > * Various dependency updates > > v7.0.0 > ------ > > * Block checking out fork PR for pull\_request\_target and workflow\_run by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2454](https://redirect.github.com/actions/checkout/pull/2454) > * Various dependency updates > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) ... (truncated) Commits * [`3d3c42e`](actions/checkout@3d3c42e) prep v7.0.1 release ([#2531](https://redirect.github.com/actions/checkout/issues/2531)) * [`2880268`](actions/checkout@2880268) escape values passed to --unset ([#2530](https://redirect.github.com/actions/checkout/issues/2530)) * [`12cd223`](actions/checkout@12cd223) trim only ascii whitespace for branch ([#2521](https://redirect.github.com/actions/checkout/issues/2521)) * [`62661c4`](actions/checkout@62661c4) skip running unsafe pr check if input is default ([#2518](https://redirect.github.com/actions/checkout/issues/2518)) * [`e8d4307`](actions/checkout@e8d4307) Bump the minor-actions-dependencies group with 2 updates ([#2499](https://redirect.github.com/actions/checkout/issues/2499)) * [`631c942`](actions/checkout@631c942) eslint 9 ([#2474](https://redirect.github.com/actions/checkout/issues/2474)) * [`4f1f4ae`](actions/checkout@4f1f4ae) Bump actions/upload-artifact from 4 to 7 ([#2476](https://redirect.github.com/actions/checkout/issues/2476)) * [`ba09753`](actions/checkout@ba09753) Bump actions/checkout from 6 to 7 ([#2488](https://redirect.github.com/actions/checkout/issues/2488)) * [`b9e0990`](actions/checkout@b9e0990) Bump docker/login-action from 3.3.0 to 4.2.0 ([#2479](https://redirect.github.com/actions/checkout/issues/2479)) * [`e8cb398`](actions/checkout@e8cb398) Bump docker/build-push-action from 6.5.0 to 7.2.0 ([#2478](https://redirect.github.com/actions/checkout/issues/2478)) * Additional commits viewable in [compare view](actions/checkout@9c091bb...3d3c42e) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/checkout&package-manager=github\_actions&previous-version=7.0.0&new-version=7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps actions/checkout from 7.0.0 to 7.0.1. ## Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 Escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: If5f391295595f2670c521e85de2468ea79084d42 GitHub-PR: #24 GitHub-Hash: d8d0dc9471e3cc43 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

@aiqiaoy

This MR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v6...v7) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Refs: rmenage/ansible-role-hardened-docker!40 See-also:

## Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 ## Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 Escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) ## Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I33a53ad5c80e8a9542ea08cc19b93ead80193303 GitHub-PR: #29 GitHub-Hash: 2e2716ccf142bb3d Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v7...v7) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates ### [`v7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v6.1.0...v7) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/kirkeasterson/.dotfiles/pulls/3

Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [docker/login-action](https://github.com/docker/login-action). Updates `actions/checkout` from 7.0.0 to 7.0.1 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v7.0.1 > ------ > > What's Changed > -------------- > > * skip running unsafe pr check if input is default by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518) > * trim only ascii whitespace for branch by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521) > * escape values passed to --unset by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530) > * Various dependency updates > > **Full Changelog**: <actions/checkout@v7...v7.0.1> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v7.0.1 > ------ > > * Skip running unsafe pr check if input is default by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518) > * Trim only ascii whitespace for branch by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521) > * Escape values passed to --unset by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530) > * Various dependency updates > > v7.0.0 > ------ > > * Block checking out fork PR for pull\_request\_target and workflow\_run by [`@aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2454](https://redirect.github.com/actions/checkout/pull/2454) > * Various dependency updates > > v6.0.3 > ------ > > * Fix checkout init for SHA-256 repositories by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439) > * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414) > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) ... (truncated) Commits * See full diff in [compare view](actions/checkout@v7...3d3c42e) Updates `docker/login-action` from 4.4.0 to 4.6.0 Release notes *Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).* > v4.6.0 > ------ > > * Harden buildx scoped config path handling by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1059](https://redirect.github.com/docker/login-action/pull/1059) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1095.0 in [docker/login-action#1051](https://redirect.github.com/docker/login-action/pull/1051) > * Bump js-yaml from 5.2.1 to 5.2.2 in [docker/login-action#1057](https://redirect.github.com/docker/login-action/pull/1057) > * Bump postcss from 8.5.10 to 8.5.22 in [docker/login-action#1056](https://redirect.github.com/docker/login-action/pull/1056) > > **Full Changelog**: <docker/login-action@v4.5.2...v4.6.0> > > v4.5.2 > ------ > > * Surface Docker Hub OIDC error responses by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1058](https://redirect.github.com/docker/login-action/pull/1058) > > **Full Changelog**: <docker/login-action@v4.5.1...v4.5.2> > > v4.5.1 > ------ > > * Support `dhi.io` as Docker Hub OIDC registry by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1054](https://redirect.github.com/docker/login-action/pull/1054) > > **Full Changelog**: <docker/login-action@v4.5.0...v4.5.1> > > v4.5.0 > ------ > > * [Docker Hub OIDC](https://github.com/docker/login-action#docker-hub) login support by [`@crazy-max`](https://github.com/crazy-max) in [docker/login-action#1048](https://redirect.github.com/docker/login-action/pull/1048) > * Bump `@aws-sdk/client-ecr` and `@aws-sdk/client-ecr-public` to 3.1091.0 in [docker/login-action#1037](https://redirect.github.com/docker/login-action/pull/1037) > * Bump `@docker/actions-toolkit` from 0.92.0 to 0.94.0 in [docker/login-action#1044](https://redirect.github.com/docker/login-action/pull/1044) [docker/login-action#1050](https://redirect.github.com/docker/login-action/pull/1050) > * Bump brace-expansion from 1.1.13 to 1.1.16 in [docker/login-action#1046](https://redirect.github.com/docker/login-action/pull/1046) > * Bump js-yaml from 5.2.0 to 5.2.1 in [docker/login-action#1038](https://redirect.github.com/docker/login-action/pull/1038) > > **Full Changelog**: <docker/login-action@v4.4.0...v4.5.0> Commits * [`dbcb813`](docker/login-action@dbcb813) Merge pull request [#1051](https://redirect.github.com/docker/login-action/issues/1051) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependen... * [`5bcb015`](docker/login-action@5bcb015) [dependabot skip] chore: update generated content * [`b30b2f2`](docker/login-action@b30b2f2) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up... * [`9087f1e`](docker/login-action@9087f1e) Merge pull request [#1057](https://redirect.github.com/docker/login-action/issues/1057) from docker/dependabot/npm\_and\_yarn/js-yaml-5.2.2 * [`0009830`](docker/login-action@0009830) [dependabot skip] chore: update generated content * [`2325523`](docker/login-action@2325523) build(deps): bump js-yaml from 5.2.1 to 5.2.2 * [`4ec1d4a`](docker/login-action@4ec1d4a) Merge pull request [#1056](https://redirect.github.com/docker/login-action/issues/1056) from docker/dependabot/npm\_and\_yarn/postcss-8.5.22 * [`5fc99ba`](docker/login-action@5fc99ba) Merge pull request [#1053](https://redirect.github.com/docker/login-action/issues/1053) from docker/dependabot/github\_actions/aws-actions/co... * [`e512bd5`](docker/login-action@e512bd5) Merge pull request [#1052](https://redirect.github.com/docker/login-action/issues/1052) from docker/dependabot/github\_actions/codeql-actions... * [`a146c91`](docker/login-action@a146c91) Merge pull request [#1059](https://redirect.github.com/docker/login-action/issues/1059) from crazy-max/harden-buildx-scope-paths * Additional commits viewable in [compare view](docker/login-action@v4.4.0...dbcb813) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/umati/Sample-Server/pulls/1736

…ckout (v7.0.0 ➔ v7.0.1) (#1668) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://data.forgejo.org/actions/checkout](https://data.forgejo.org/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (https://data.forgejo.org/actions/checkout)</summary> ### [`v7.0.1`](https://data.forgejo.org/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://data.forgejo.org/actions/checkout/compare/v7...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1668

Bumps the github-actions group with 7 updates: Package From To actions/checkout 4.3.1 7.0.1 actions/setup-python 5.6.0 7.0.0 actions/upload-artifact 4.6.2 7.0.1 ansible-community/ansible-test-gh-action 1.17.0 1.18.0 actions/github-script 7.1.0 9.0.0 dawidd6/action-download-artifact 16 21 SonarSource/sonarqube-scan-action 7.0.0 8.2.1 Updates actions/checkout from 4.3.1 to 7.0.1 Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.1.0 What's Changed [BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in actions/checkout#2500 backport fixes to releases-v6 by @aiqiaoy in actions/checkout#2527 https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change Full Changelog: actions/checkout@v6.0.3...v6.1.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 Escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view Updates actions/setup-python from 5.6.0 to 7.0.0 Release notes Sourced from actions/setup-python's releases. v7.0.0 What's Changed Enhancements Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-python#1330 Pin SHA commits and update docs with latest versions by @HarithaVattikuti in actions/setup-python#1338 Remove the pip-install input by @gowridurgad in actions/setup-python#1336 Bug Fix Fix to Classify stderr warning messages as warnings instead of errors in annotations by @lmvysakh in actions/setup-python#1335 Validate and retry manifest fetch to prevent silent failures by @priyagupta108 in actions/setup-python#1332 Dependency Upgrade Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @dependabot in actions/setup-python#1328 Remove EOL Python versions and Bumps numpy text fixture by @priya-kinthali in actions/setup-python#1333 Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-python#1337 New Contributors @lmvysakh made their first contribution in actions/setup-python#1335 @philip-gai made their first contribution in actions/setup-python#1337 Full Changelog: actions/setup-python@v6...v7.0.0 v6.3.0 What's Changed Enhancement Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323 Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040 Dependency update Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281 Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303 Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324 Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322 Documentation Update advanced-usage.md by @Dunky-Z in actions/setup-python#811 New Contributors @gowridurgad with @Copilot made their first contribution in actions/setup-python#1303 @jasongin made their first contribution in actions/setup-python#1324 @Dunky-Z made their first contribution in actions/setup-python#811 Full Changelog: actions/setup-python@v6.2.0...v6.3.0 v6.2.0 What's Changed Dependency Upgrades Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259 ... (truncated) Commits 5fda3b9 Pin SHA commits and update docs with latest versions (#1338) 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0 0f3a009 Remove the pip-install input (#1336) f8cf429 Migrate to ESM and upgrade dependencies (#1330) 54baeea Validate and retry manifest fetch to prevent silent failures (#1332) c709277 Annotation code fix (#1335) 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333) 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328) ece7cb0 Fix pip cache error handling on Windows. (#1040) 1d18d7a Update advanced-usage.md (#811) Additional commits viewable in compare view Updates actions/upload-artifact from 4.6.2 to 7.0.1 Release notes Sourced from actions/upload-artifact's releases. v7.0.1 What's Changed Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795 Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796 Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797 Full Changelog: actions/upload-artifact@v7...v7.0.1 v7.0.0 v7 What's new Direct Uploads Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file. ESM To support new versions of the @actions/* packages, we've upgraded the package to ESM. What's Changed Add proxy integration test by @Link- in actions/upload-artifact#754 Upgrade the module to ESM and bump dependencies by @danwkennedy in actions/upload-artifact#762 Support direct file uploads by @danwkennedy in actions/upload-artifact#764 New Contributors @Link- made their first contribution in actions/upload-artifact#754 Full Changelog: actions/upload-artifact@v6...v7.0.0 v6.0.0 v6 - What's new [!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. Node.js 24 This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. What's Changed Upload Artifact Node 24 support by @salmanmkc in actions/upload-artifact#719 fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in actions/upload-artifact#744 prepare release v6.0.0 for Node.js 24 support by @salmanmkc in actions/upload-artifact#745 Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0 v5.0.0 What's Changed ... (truncated) Commits 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency 634250c Include changes in typespec/ts-http-runtime 0.3.5 e454baa Readme: bump all the example versions to v7 (#796) 74fad66 Update the readme with direct upload details (#795) bbbca2d Support direct file uploads (#764) 589182c Upgrade the module to ESM and bump dependencies (#762) 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests 02a8460 Add proxy integration test b7c566a Merge pull request #745 from actions/upload-artifact-v6-release e516bc8 docs: correct description of Node.js 24 support in README Additional commits viewable in compare view Updates ansible-community/ansible-test-gh-action from 1.17.0 to 1.18.0 Release notes Sourced from ansible-community/ansible-test-gh-action's releases. v1.18.0 What's Changed Project Changes Support ansible-core 2.20 and 2.21, bump default ansible-core version to 2.21 by @felixfontein in ansible-community/ansible-test-gh-action#125 Dependencies Bump codecov/codecov-action from 4.5.0 to 5.4.3 by @dependabot[bot] in ansible-community/ansible-test-gh-action#101 Bump actions/checkout from 4 to 5 by @dependabot[bot] in ansible-community/ansible-test-gh-action#104 Bump codecov/codecov-action from 5.4.3 to 5.5.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#105 Bump codecov/codecov-action from 5.5.0 to 5.5.1 by @dependabot[bot] in ansible-community/ansible-test-gh-action#107 Bump actions/setup-python from 5 to 6 by @dependabot[bot] in ansible-community/ansible-test-gh-action#108 Bump actions/checkout from 5 to 6 by @dependabot[bot] in ansible-community/ansible-test-gh-action#110 Bump codecov/codecov-action from 5.5.1 to 5.5.2 by @dependabot[bot] in ansible-community/ansible-test-gh-action#111 Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in ansible-community/ansible-test-gh-action#114 Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#115 Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in ansible-community/ansible-test-gh-action#119 Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#122 Bump actions/checkout from 6 to 7 by @dependabot[bot] in ansible-community/ansible-test-gh-action#126 Full Changelog: ansible-community/ansible-test-gh-action@v1.17.0...v1.18.0 Commits 6ded727 Merge pull request #126 from ansible-community/dependabot/github_actions/acti... e0d4c98 Bump actions/checkout from 6 to 7 6c86f3f Merge pull request #125 from felixfontein/ansible-core 48b041f Merge pull request #122 from ansible-community/dependabot/github_actions/code... 3272591 Merge pull request #124 from felixfontein/fix-pre-commit c0626df Bump default ansible-core to 2.21 7dfd27a Support ansible-core 2.20 and 2.21 c8e46ea Bump pre-commit flake8 additional deps 13e4993 Bump codecov/codecov-action from 6.0.1 to 7.0.0 8b1ac34 Merge pull request #119 from ansible-community/dependabot/github_actions/code... Additional commits viewable in compare view Updates actions/github-script from 7.1.0 to 9.0.0 Release notes Sourced from actions/github-script's releases. v9.0.0 New features: getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples. Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing. Breaking changes: require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed. getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it. If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility. What's Changed Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in actions/github-script#695 ci: use deployment: false for integration test environments by @salmanmkc in actions/github-script#712 feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in actions/github-script#700 New Contributors @Copilot made their first contribution in actions/github-script#695 Full Changelog: actions/github-script@v8.0.0...v9.0.0 v8.0.0 What's Changed Update Node.js version support to 24.x by @salmanmkc in actions/github-script#637 README for updating actions/github-script from v7 to v8 by @sneha-krip in actions/github-script#653 ⚠️ Minimum Compatible Runner Version v2.327.1 Release Notes Make sure your runner is updated to this version or newer to use this release. New Contributors @salmanmkc made their first contribution in actions/github-script#637 @sneha-krip made their first contribution in actions/github-script#653 Full Changelog: actions/github-script@v7.1.0...v8.0.0 Commits 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re... ca10bbd fix: use @octokit/core/types import for v7 compatibility 86e48e2 merge: incorporate main branch changes c108472 chore: rebuild dist for v9 upgrade and getOctokit factory afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag... ff8117e ci: fix user-agent test to handle orchestration ID 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests 3953caf docs: update README examples from @v8 to @v9, add getOctokit docs and v9 brea... c17d55b ci: add getOctokit integration test job a047196 test: add getOctokit integration tests via callAsyncFunction Additional commits viewable in compare view Updates dawidd6/action-download-artifact from 16 to 21 Release notes Sourced from dawidd6/action-download-artifact's releases. v21 What's Changed build(deps): bump @actions/github from 9.0.0 to 9.1.0 by @dependabot[bot] in dawidd6/action-download-artifact#396 build(deps): bump filesize from 11.0.15 to 11.0.16 by @dependabot[bot] in dawidd6/action-download-artifact#399 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 by @dependabot[bot] in dawidd6/action-download-artifact#402 build(deps): bump @actions/github from 9.1.0 to 9.1.1 by @dependabot[bot] in dawidd6/action-download-artifact#400 build(deps): bump @actions/core from 3.0.0 to 3.0.1 by @dependabot[bot] in dawidd6/action-download-artifact#401 build(deps): bump filesize from 11.0.16 to 11.0.17 by @dependabot[bot] in dawidd6/action-download-artifact#404 Download artifacts in creation order by @matejdro in dawidd6/action-download-artifact#398 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#405 New Contributors @matejdro made their first contribution in dawidd6/action-download-artifact#398 Full Changelog: dawidd6/action-download-artifact@v20...v21 v20 What's Changed build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @dependabot[bot] in dawidd6/action-download-artifact#387 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#388 build(deps): bump filesize from 11.0.13 to 11.0.14 by @dependabot[bot] in dawidd6/action-download-artifact#389 build(deps): bump brace-expansion by @dependabot[bot] in dawidd6/action-download-artifact#390 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#391 build(deps): bump filesize from 11.0.14 to 11.0.15 by @dependabot[bot] in dawidd6/action-download-artifact#392 build(deps): bump adm-zip from 0.5.16 to 0.5.17 by @dependabot[bot] in dawidd6/action-download-artifact#393 build(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in dawidd6/action-download-artifact#394 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#395 Full Changelog: dawidd6/action-download-artifact@v19...v20 v19 What's Changed build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @dependabot[bot] in dawidd6/action-download-artifact#385 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#386 Full Changelog: dawidd6/action-download-artifact@v18...v19 v18 What's Changed build(deps): bump @actions/artifact from 6.2.0 to 6.2.1 by @dependabot[bot] in dawidd6/action-download-artifact#381 build(deps): bump undici from 6.23.0 to 6.24.0 by @dependabot[bot] in dawidd6/action-download-artifact#382 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#383 Full Changelog: dawidd6/action-download-artifact@v17...v18 v17 What's Changed ... (truncated) Commits b6e2e70 node_modules: update (#405) 1708cb3 Download artifacts in creation order (#398) 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404) 0414c42 build(deps): bump @actions/core from 3.0.0 to 3.0.1 (#401) c802aad build(deps): bump @actions/github from 9.1.0 to 9.1.1 (#400) ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402) 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399) 09d0677 build(deps): bump @actions/github from 9.0.0 to 9.1.0 (#396) 8305c0f node_modules: update (#395) 542af03 build(deps): bump lodash from 4.17.23 to 4.18.1 (#394) Additional commits viewable in compare view Updates SonarSource/sonarqube-scan-action from 7.0.0 to 8.2.1 Release notes Sourced from SonarSource/sonarqube-scan-action's releases. v8.2.1 What's Changed Bug fix SQSCANGHA-156 GPG signature verification fails when temporary directory path is too long Full Changelog: SonarSource/sonarqube-scan-action@v8.2.0...v8.2.1 v8.2.0 What's Changed SQSCANGHA-149 Add scannerBinariesAuthHeader input by @henryju in SonarSource/sonarqube-scan-action#246 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support by @henryju in SonarSource/sonarqube-scan-action#249 SQSCANGHA-84 Remove outdated wget/curl references by @henryju in SonarSource/sonarqube-scan-action#248 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4-part version by @henryju in SonarSource/sonarqube-scan-action#250 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows by @henryju in SonarSource/sonarqube-scan-action#251 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0 v8.1.0 What's Changed SQSCANGHA-146 Add proxy support for GPG keyserver access by @henryju in SonarSource/sonarqube-scan-action#244 SQSCANGHA-148 Update SonarScanner CLI to 8.1.0.6389 by @github-actions[bot] in SonarSource/sonarqube-scan-action#232 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0 v8.0.0 What's Changed Breaking change SQSCANGHA-145 Set skipSignatureVerification default value to false by @antoine-vinot-sonarsource in SonarSource/sonarqube-scan-action#241 Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0 v7.2.1 What's Changed SQSCANGHA-140 Set skipSignatureVerification default value to true to avoid breaking change by @gmmcal in SonarSource/sonarqube-scan-action#240 Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.1 v7.2.0 What's Changed SQSCANGHA-133 Upgrade the Node version used in UTs + contribution guide by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#226 SC-45750 Migrate to dateless license headers by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#229 SQSCANGHA-134 Upgrade the libraries to latest version by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#227 ... (truncated) Commits 2291811 SQSCANGHA-156 GPG signature verification fails when temporary directory path ... 7cdc154 SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (#255) 45f2736 SQSCANGHA-151 Change Code Owners (#254) 7138816 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows (#251) 3581139 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4... c9d327c SQSCANGHA-84 Remove outdated wget/curl references b243e51 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support 375c3f5 SQSCANGHA-149 Add scannerBinariesAuthHeader input for authenticated binary do... 9c78323 SQSCANGHA-144 Add gate jobs to QA workflows for branch protection 7006c44 Update SonarScanner CLI to 8.1.0.6389 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore con... Description has been truncated Reviewed-by: Mark Chappell

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v6.1.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](actions/checkout@v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](actions/checkout#2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](actions/checkout#2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](actions/checkout#2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](actions/checkout@v6.1.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](actions/checkout#2454) - Various dependency updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 12:59 AM, only on Monday ( * 0 * * 1 ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Co-authored-by: crowci-bot <admin@crowci.dev> Reviewed-on: https://codefloe.com/crowci/terraform-provider-crowci/pulls/14

@aiqiaoy

skip running unsafe pr check if input is default

011c9c5

Copilot AI review requested due to automatic review settings July 14, 2026 22:08

Copilot started reviewing on behalf of aiqiaoy July 14, 2026 22:08 View session

Copilot AI reviewed Jul 14, 2026

View reviewed changes

Comment thread __test__/input-helper.test.ts

rentziass approved these changes Jul 15, 2026

View reviewed changes

aiqiaoy merged commit 62661c4 into main Jul 15, 2026
13 checks passed

aiqiaoy deleted the aiqiaoy/skip-check-defaults branch July 15, 2026 14:02

Copilot AI mentioned this pull request Jul 15, 2026

Backport #2518 to releases/v2–v6: skip unsafe PR check on default checkout #2520

Closed

This was referenced Jul 16, 2026

backport fixes to releases-v5 #2523

Merged

backport fixes to releases-v4 #2524

Merged

backport fixes to releases-v3 #2525

Merged

backport fixes to releases-v2 #2526

Merged

backport fixes to releases-v6 #2527

Merged

Infiland mentioned this pull request Jul 18, 2026

Bump actions/checkout from 5.0.1 to 7.0.0 Infiland/GM2Godot#744

Closed

clanker-claude Bot mentioned this pull request Jul 20, 2026

ci(github-action): update action actions/checkout ( 9c091bb ➔ 3d3c42e ) mrdynamo/home-ops#2381

Merged

1 task

github-actions Bot mentioned this pull request Jul 20, 2026

Update actions/checkout action to v7.0.1 claytono/go-unifi-mcp#153

Merged

1 task

github-actions Bot mentioned this pull request Jul 20, 2026

chore(deps): update actions/checkout digest to 3d3c42e MikaelElkiaer/nvim-config#174

Merged

1 task

github-actions Bot mentioned this pull request Jul 22, 2026

chore(deps): update actions/checkout action to v7.0.1 tailor-platform/sdk#1838

Merged

1 task

Copilot AI mentioned this pull request Jul 23, 2026

Bump the github-actions group across 1 directory with 4 updates boxofyellow/ConsoleMarkdownRenderer#268

Merged

claude Bot mentioned this pull request Jul 24, 2026

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 ncaq/git-hooks#200

Merged

github-actions Bot mentioned this pull request Jul 25, 2026

chore(deps): Bump the all-dependencies group with 3 updates ddteeter/agentic-guardrails-scaffolding#9

Open

vxfemboy mentioned this pull request Jul 27, 2026

[PR] Update actions/checkout action to v7 vxfemboy/ghostport#7

Closed

1 task

queenjustice1990-web approved these changes Jul 28, 2026

View reviewed changes

This was referenced Jul 29, 2026

Update actions/checkout action to v7 vxfemboy/nyancat-rs#11

Open

Update actions/checkout action to v7 vxfemboy/zoa.sh#18

Open

coderabbitai Bot mentioned this pull request Jul 30, 2026

Allow fork PR checkout in pull_request_target build job betaflight/firmware-presets#589

Merged

2 tasks

scottames-github-bot Bot mentioned this pull request Jul 30, 2026

chore(deps): update github-actions scottames/dots#1001

Merged

1 task

genzouw mentioned this pull request Jul 31, 2026

ci(deps): bump actions/checkout from 7.0.0 to 7.0.1 genzouw/trim-text#130

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

skip running unsafe pr check if input is default - #2518

skip running unsafe pr check if input is default#2518
aiqiaoy merged 1 commit into
mainfrom
aiqiaoy/skip-check-defaults

aiqiaoy commented Jul 14, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

aiqiaoy commented Jul 14, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants