Update GH Actions#5
Conversation
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
f6e35db to
fbd4a96
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
fbd4a96 to
cf2c2b2
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
cf2c2b2 to
9eda4b6
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
9eda4b6 to
c2fd7d2
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
c2fd7d2 to
c2b3ce8
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
c2b3ce8 to
62e3597
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
62e3597 to
1da9aa1
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
1da9aa1 to
33b4121
Compare
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
33b4121 to
59d2d19
Compare
Confidence Score: 5/5 - Safe to MergeSafe to merge — this PR performs straightforward CI infrastructure version bumps across 13 GitHub Actions workflow files with no logic changes to the actual build or test processes. The upgrades to Key Findings:
Files requiring special attention
|
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
59d2d19 to
e8db317
Compare
EntelligenceAI PR SummaryBulk dependency and runner upgrades across all 13 GitHub Actions CI workflow files.
Confidence Score: 2/5 - Changes NeededNot safe to merge — while this PR achieves a well-intentioned bulk upgrade of GitHub Actions dependencies across all 13 workflow files, an unresolved pre-existing concern in Key Findings:
Files requiring special attention
|
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
e8db317 to
3275755
Compare
![entelligence-ai-pr-reviews[bot]](https://avatars.githubusercontent.com/in/932812?s=60&v=4){kind=small}
| jobs: | ||
| llvm_test: | ||
| runs-on: ubuntu-22.04 | ||
| runs-on: ubuntu-24.04 |
There was a problem hiding this comment.
libtinfo5 (line 51) is not available in Ubuntu 24.04 (noble) — it was replaced by libtinfo6. The Set up LLVM step will fail with a package-not-found error on every matrix job because apt-get install -y libtinfo5 has no candidate in the noble repository.
🤖 AI Agent Prompt for Cursor/Windsurf
📋 Copy this prompt to your AI coding assistant (Cursor, Windsurf, etc.) to get help fixing this issue
In .github/workflows/llvm.yml at line 51, the command `sudo apt-get install -y libtinfo5` will fail on the newly upgraded `ubuntu-24.04` runner (line 14) because `libtinfo5` does not exist in Ubuntu 24.04's package repositories (it was replaced by `libtinfo6`). Change line 51 from `sudo apt-get install -y libtinfo5` to `sudo apt-get install -y libtinfo6` to match what is available in Ubuntu 24.04 (noble).
| jobs: | ||
| x86_64-darwin-test: | ||
| runs-on: macos-13 | ||
| runs-on: macos-15 |
There was a problem hiding this comment.
macos-13 was an Intel x86_64 runner; macos-15 is ARM (Apple Silicon M-series). The job is explicitly named x86_64-darwin-test, so the architecture switch means x86_64-specific tests are now executed on the wrong ISA. GitHub's own changelog notes that users requiring x86_64 must use a dedicated label (e.g. macos-13-xlarge or a future macos-15-x86_64 label), not macos-15.
🤖 AI Agent Prompt for Cursor/Windsurf
📋 Copy this prompt to your AI coding assistant (Cursor, Windsurf, etc.) to get help fixing this issue
In `.github/workflows/macos.yml` at line 15, the runner was changed from `macos-13` to `macos-15`. However, `macos-15` is an ARM (Apple Silicon) runner, while the job is named `x86_64-darwin-test` and requires an Intel x86_64 runner. `macos-13` was the x86_64 runner. Since GitHub is closing down macos-13, check the current GitHub-provided label for x86_64 macOS (likely `macos-13-xlarge` or a new x86_64-specific label as documented in https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/) and use that label instead of `macos-15`.
|
File:
Note: This comment was posted as a general PR comment because the specific line could not be resolved in the diff. |
renovate
Bot
force-pushed
the
renovate/gh-actions
branch
from
3275755 to
0291e6e
Compare
This PR contains the following updates:
v4→v5v4→v6v3→v6v4→v8v4→v7v4→v6v14→v17v26→v31v1.5.1→v1.5.213→26v1.0.2→v3.0.0v2→v322.04→24.042022→2025Release Notes
actions/cache (actions/cache)
v5.0.5Compare Source
What's Changed
Full Changelog: actions/cache@v5...v5.0.5
v5.0.4Compare Source
v5.0.3Compare Source
What's Changed
@actions/cacheto v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)@actions/coreto v2.0.3Full Changelog: actions/cache@v5...v5.0.3
v5.0.2Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
v5Compare Source
v4.3.0Compare Source
What's Changed
v4.3.0release by @Link- in #1655New Contributors
Full Changelog: actions/cache@v4...v4.3.0
v4.2.4Compare Source
What's Changed
@actions/cacheto4.0.5and move@protobuf-ts/pluginto dev depdencies by @Link- in #16344.2.4by @Link- in #1636New Contributors
Full Changelog: actions/cache@v4...v4.2.4
v4.2.3Compare Source
What's Changed
New Contributors
Full Changelog: actions/cache@v4.2.2...v4.2.3
v4.2.2Compare Source
What's Changed
Full Changelog: actions/cache@v4.2.1...v4.2.2
v4.2.1Compare Source
What's Changed
New Contributors
Full Changelog: actions/cache@v4.2.0...v4.2.1
v4.2.0Compare Source
The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.
The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.
We are deprecating some versions of this action. We recommend upgrading to version
v4orv3as soon as possible before February 1st, 2025. (Upgrade instructions below).If you are using pinned SHAs, please use the SHAs of versions
v4.2.0orv3.4.0If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.
Upgrading to the recommended versions will not break your workflows.
Read more about the change & access the migration guide: reference to the announcement.
Minor changes
Minor and patch version updates for these dependencies:
1.11.11.1.30.38.3Full Changelog: actions/cache@v4.1.2...v4.2.0
v4.1.2Compare Source
What's Changed
isGheslogic by @jww3 in #14744.1.2release by @Link- in #1477New Contributors
Full Changelog: actions/cache@v4.1.1...v4.1.2
v4.1.1Compare Source
What's Changed
cache-hitoutput by @joshmgross in #1467Full Changelog: actions/cache@v4.1.0...v4.1.1
v4.1.0Compare Source
What's Changed
save-alwaysinput by @joshmgross in #1452New Contributors
Full Changelog: actions/cache@v4.0.2...v4.1.0
v4.0.2Compare Source
What's Changed
fail-on-cache-missnot working by @cdce8p in #1327Full Changelog: actions/cache@v4.0.1...v4.0.2
v4.0.1Compare Source
What's Changed
New Contributors
Full Changelog: actions/cache@v4...v4.0.1
actions/checkout (actions/checkout)
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.1Compare Source
What's Changed
Full Changelog: actions/checkout@v5...v5.0.1
v5.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v5Compare Source
v4.3.1Compare Source
What's Changed
Full Changelog: actions/checkout@v4...v4.3.1
v4.3.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
v4.2.2Compare Source
url-helper.tsnow leverages well-known environment variables by @jww3 in #1941isGhesby @jww3 in #1946v4.2.1Compare Source
v4.2.0Compare Source
v4.1.7Compare Source
v4.1.6Compare Source
v4.1.5Compare Source
user.emailto be41898282+github-actions[bot]@​users.noreply.github.comby @cory-miller in #1707v4.1.4Compare Source
extensions.worktreeConfigwhen disablingsparse-checkoutby @jww3 in #1692v4.1.3Compare Source
sparse-checkoutby @jww3 in #1656actions/checkoutversion inupdate-main-version.ymlby @jww3 in #1650v4.1.2Compare Source
sparse-checkoutoption is not present @dscho in #1598v4.1.1Compare Source
v4.1.0Compare Source
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter tofalse.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v8Compare Source
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v7Compare Source
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaroundYou download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: actions/download-artifact@v4...v5.0.0
v5Compare Source
v4.3.0Compare Source
What's Changed
artifact-idsinput by @GrantBirki in #401New Contributors
Full Changelog: actions/download-artifact@v4.2.1...v4.3.0
v4.2.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.2.0...v4.2.1
v4.2.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4.1.9...v4.2.0
v4.1.9Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4.1.8...v4.1.9
v4.1.8Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.1.7...v4.1.8
v4.1.7Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.1.6...v4.1.7
v4.1.6Compare Source
What's Changed
@actions/artifactdependency to v2.1.6 by @eggyhead in #324Full Changelog: actions/download-artifact@v4.1.5...v4.1.6
v4.1.5Compare Source
What's Changed
@actions/coreto v1.10.1 and@actions/artifactto v2.1.5Full Changelog: actions/download-artifact@v4.1.4...v4.1.5
v4.1.4Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4...v4.1.4
v4.1.3Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4...v4.1.3
v4.1.2Compare Source
v4.1.1Compare Source
@actions/artifactsto latest versionv4.1.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4...v4.1.0
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v7Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.0Compare Source
v5Compare Source
v4.6.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.6.2
v4.6.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.1
v4.6.0Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.0
v4.5.0Compare Source
What's Changed
Node.jsversion in action by @hamirmahal in #578artifact-digestoutput by @bdehamer in #656New Contributors
Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0
v4.4.3Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3
v4.4.2Compare Source
What's Changed
@actions/artifactto 2.1.11 by @robherley in #627Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2
v4.4.1Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1
v4.4.0Compare Source
Notice: Breaking Changes⚠️
We will no longer include hidden files and folders by default in the
upload-artifactaction of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option,include-hidden-files, to continue to do so.See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.
What's Changed
Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0
v4.3.6Compare Source
What's Changed
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.