Update github actions (dev) (major) by renovate[bot] · Pull Request #4018 · DefGuard/defguard

renovate · 2026-11-07T10:38:58Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	major	`v5.0.5` → `v6.1.0`
actions/setup-node	action	major	`v6.4.0` → `v7.1.0`
aws-actions/configure-aws-credentials	action	major	`v4.3.1` → `v6.3.0`
docker/login-action	action	major	`v3` → `v4`	`v4.8.0`
ubuntu (source)	container	major	`22.04` → `26.04`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/cache

`v6.1.0`

Compare Source

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in #1768

Full Changelog: actions/cache@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Update packages, migrate to ESM by @Samirat in #1760

Full Changelog: actions/cache@v5...v6.0.0

`v5.1.0`

Compare Source

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in #1775

Full Changelog: actions/cache@v5...v5.1.0

actions/setup-node

`v7.1.0`

Compare Source

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in #1421
Support absolute paths in node-version-file by @v-mahabaleshwars in #1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in #1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in #1578
docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in #1593
Fixed cache recommendation syntax by @SubJunk in #1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in #1583
Upgrade @actions/cache to 6.2.0 by @philip-gai in #1584
Pin @types/node to v24 by @v-priyagupta108 in #1585
Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in #1599
Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in #1598
Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in #1590
Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in #1610
Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in #1602
Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in #1629
Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in #1616
Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in #1615
Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in #1631
Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in #1636
Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in #1638
Update dependencies and add license files by @v-HarithaVattikuti in #1642
Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in #1635

New Contributors

@v-jitenderpalsingh made their first contribution in #1580
@philip-gai made their first contribution in #1584
@gperdomor made their first contribution in #1421
@SubJunk made their first contribution in #1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

aws-actions/configure-aws-credentials

`v6.3.0`

Compare Source

Features

add translate-env-variables option (#1961) (57b8365)

`v6.2.4`

Compare Source

Bug Fixes

account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

`v6.2.3`

Compare Source

Bug Fixes

attach git credentials before Tag Major Version push (#1877) (9ae780b)
PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

`v6.2.2`

Compare Source

Miscellaneous Chores

release 6.2.2 (d01d678)

`v6.2.1`

Compare Source

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

`v6.2.0`

Compare Source

Features

add additional session tags by default (#1775) (e0ba768)
add more retry logic and better logging (#1764) (540d0c1)
add regex validation to role-session-name (#1765) (e354499)
Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
expose run id in STS client user-agent (#1774) (29d1be3)
support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

skip credential check on output-env-credentials: false (#1778) (58e7c47)
assumeRole failing from session tag size too large (#1808) (d6f5dc3)

`v6.1.3`

Compare Source

Bug Fixes

fix: allow kubelet token symlink in #1805

`v6.1.2`

Compare Source

Bug Fixes

additional filesystem checks (#1799) (c39f282)

`v6.1.1`

Compare Source

What's Changed

chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @dependabot[bot] in #1722
chore(deps-dev): bump @types/node from 25.5.0 to 25.5.2 by @dependabot[bot] in #1723
chore(deps-dev): bump @smithy/property-provider from 4.2.12 to 4.2.13 by @dependabot[bot] in #1724
chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @dependabot[bot] in #1726
chore(deps): bump @smithy/node-http-handler from 4.5.1 to 4.5.2 by @dependabot[bot] in #1725
chore(deps): bump @aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @dependabot[bot] in #1727
chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @dependabot[bot] in #1728
chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @dependabot[bot] in #1729
chore(deps-dev): bump @types/node from 25.5.2 to 25.6.0 by @dependabot[bot] in #1730
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.24 to 3.972.25 by @dependabot[bot] in #1733
chore(deps): bump @aws-sdk/client-sts from 3.1025.0 to 3.1030.0 by @dependabot[bot] in #1732
chore(deps-dev): bump @biomejs/biome from 2.4.10 to 2.4.11 by @dependabot[bot] in #1734
chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by @dependabot[bot] in #1736
chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by @dependabot[bot] in #1737
chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in #1740
chore(deps-dev): bump @smithy/property-provider from 4.2.13 to 4.2.14 by @dependabot[bot] in #1741
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.25 to 3.972.28 by @dependabot[bot] in #1742
chore(deps): bump @aws-sdk/client-sts from 3.1030.0 to 3.1033.0 by @dependabot[bot] in #1743
chore(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12 by @dependabot[bot] in #1739
chore(deps-dev): bump @biomejs/biome from 2.4.12 to 2.4.13 by @dependabot[bot] in #1747
chore(deps): bump postcss from 8.5.6 to 8.5.12 by @dependabot[bot] in #1752
chore(deps): bump @smithy/node-http-handler from 4.6.0 to 4.6.1 by @dependabot[bot] in #1750
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.28 to 3.972.32 by @dependabot[bot] in #1751
chore(deps): bump @aws-sdk/client-sts from 3.1033.0 to 3.1038.0 by @dependabot[bot] in #1749
chore: release 6.1.1 by @lehmanmj in #1757

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

`v6.1.0`

Compare Source

Features

add skip cleanup option (#1716) (11b1c58), closes #1545
Support usage of AWS Profiles (#1696) (a7f0c82)

`v6.0.0`

Compare Source

⚠ BREAKING CHANGES

Update action to use node24 Note this requires GitHub action runner version v2.327.1 or later (#1632) (a7a2c11)

Features

add support to define transitive tag keys (#1316) (232435c) (930ebd9)

Bug Fixes

properly output aws-account-id and authenticated-arn when using role-chaining (#1633) (7ceaf96)

`v5.1.1`

Compare Source

Miscellaneous Chores

release 5.1.1 (56d6a58)
various dependency updates

`v5.1.0`

Compare Source

Features

Add global timeout support (#1487) (1584b8b)
add no-proxy support (#1482) (dde9b22)
Improve debug logging in retry logic (#1485) (97ef425)

Bug Fixes

properly expose getProxyForUrl (introduced in #1482) (#1486) (cea4298)

`v5.0.0`

Compare Source

⚠ BREAKING CHANGES

Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

add skip OIDC option (#1458) (8c45f6b)
Cleanup input handling. Changes invalid boolean input behavior (see #1445) (74b3e27)
support account id allowlist (#1456) (c4be498)

docker/login-action

`v4.7.0`

Compare Source

Preserve explicit ECR settings in registry-auth by @crazy-max in #1089
Use registry hosts for scoped credentials by @crazy-max in #1088
Raise Docker Hub OIDC max expiry to 6 hours by @crazy-max in #1068
Log Docker Hub OIDC token exchange progress by @crazy-max in #1061
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1154.0 in #1093
Bump @docker/actions-toolkit from 0.94.0 to 0.107.0 in #1100
Bump @humanfs/node from 0.16.7 to 0.16.8 in #1077
Bump csv-parse from 7.0.1 to 7.0.3 in #1078
Bump handlebars from 4.7.9 to 4.7.10 in #1091
Bump js-yaml from 5.2.2 to 5.5.0 in #1066
Bump postcss from 8.5.22 to 8.5.26 in #1071
Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #1092
Bump source-map-js from 1.2.1 to 1.2.2 in #1090
Bump undici from 6.27.0 to 6.29.1 in #1085
Bump uuid from 14.0.1 to 14.0.3 in #1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

`v4.6.0`

Compare Source

Harden buildx scoped config path handling by @crazy-max in #1059
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in #1051
Bump js-yaml from 5.2.1 to 5.2.2 in #1057
Bump postcss from 8.5.10 to 8.5.22 in #1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

`v4.5.2`

Compare Source

Surface Docker Hub OIDC error responses by @crazy-max in #1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

`v4.5.1`

Compare Source

Support dhi.io as Docker Hub OIDC registry by @crazy-max in #1054

Full Changelog: docker/login-action@v4.5.0...v4.5.1

`v4.5.0`

Compare Source

Docker Hub OIDC login support by @crazy-max in #1048
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1091.0 in #1037
Bump @docker/actions-toolkit from 0.92.0 to 0.94.0 in #1044 #1050
Bump brace-expansion from 1.1.13 to 1.1.16 in #1046
Bump js-yaml from 5.2.0 to 5.2.1 in #1038

Full Changelog: docker/login-action@v4.4.0...v4.5.0

`v4.4.0`

Compare Source

Skip empty registry-auth secret mask by @crazy-max in #1035
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 #1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

`v4.3.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #1022
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
Bump js-yaml from 4.1.1 to 5.2.0 in #1028
Bump sigstore from 4.1.0 to 4.1.1 in #1031
Bump tmp from 0.2.5 to 0.2.7 in #1002
Bump undici from 6.24.1 to 6.27.0 in #1020
Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

Branch creation
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update github actions

4ed2d6c

renovate Bot added dependencies Pull requests that update a dependency file renovate labels Nov 7, 2026

renovate Bot requested a review from a team November 7, 2026 10:39

Navigation Menu

Repository navigation

Update github actions (dev) (major) - #4018

Update github actions (dev) (major)#4018
renovate[bot] wants to merge 1 commit into
devfrom
renovate/dev-major-github-actions

renovate Bot commented Nov 7, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Nov 7, 2026

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

Features

Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

Features

⚠ BREAKING CHANGES

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

⚠ BREAKING CHANGES

Features

Configuration

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants