Update github-actions updates by renovate[bot] · Pull Request #639 · ansforge/SAMU-Hub-Sante

renovate · 2026-08-03T13:40:38Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	major	`v5` → `v7`
actions/checkout	action	major	`v6` → `v7`
actions/checkout	action	major	`v3` → `v7`
actions/checkout	action	major	`v2` → `v7`
actions/setup-dotnet	action	major	`v3` → `v6`
actions/setup-java	action	major	`v2` → `v5`	`v5.7.0`
actions/setup-node	action	major	`v3` → `v7`
actions/upload-artifact	action	major	`v4` → `v7`
astral-sh/setup-uv	action	major	`v7` → `v8.3.2`	`v9.0.0`
danielpalme/ReportGenerator-GitHub-Action	action	minor	`5.1.23` → `v5.5.10`	`v5.5.11` (+1)
docker/build-push-action	action	major	`v6` → `v7`
docker/login-action	action	major	`v3` → `v4`	`v4.6.0` (+3)
docker/setup-buildx-action	action	major	`v3` → `v4`
gradle/actions	action	major	`v5` → `v6`	`v6.3.0`
madrapps/jacoco-report	action	minor	`v1.3` → `v1.8`
node	uses-with	minor	`24.11` → `24.18`	`24.19.0` (+1)

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/setup-dotnet (actions/setup-dotnet)

`v6.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #752
Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #751
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #756

New Contributors

@philip-gai made their first contribution in #756

Full Changelog: actions/setup-dotnet@v5...v6.0.0

`v6`

Compare Source

`v5.4.0`

Compare Source

What's Changed

Enhancements

Improve global.json SDK version validation for rollForward by @priyagupta108 in #742
Pin actions to commit SHAs in workflows by @priya-kinthali in #744
Expand the CSC problem matcher to light up more errors on GitHub. by @StephenCleary in #717

Documentation

Docs(action): Explicitly mark all optional inputs with required: false by @kranthipoturaju in #737

Bug Fixes

Fix global.json creation command by @michal2612 in #694

Dependency Updates

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #746

New Contributors

@jasongin made their first contribution in #746
@michal2612 made their first contribution in #694
@kranthipoturaju made their first contribution in #737
@StephenCleary made their first contribution in #717

Full Changelog: actions/setup-dotnet@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Enhancements

Add dotnet-version: latest support with dotnet-channel input by @mahabaleshwars in #730
Support global.json's rollForward latest* variants by @js6pak in #538
Improve version resolution by @akoeplinger in #560

Dependency Updates

Upgrade @actions/* and fast-xml-parser dependencies by @Copilot in #728
Update install scripts to v2026.05.19 (preserve archive links) by @MichaelSimons in #736
Add rollForward note in README, improve proxy health check in e2e tests and bump version to v5.3.0 by @priyagupta108 in #738

Bug Fixes

Update Test Proxy job by @priya-kinthali in #703

New Contributors

@Copilot made their first contribution in #728
@akoeplinger made their first contribution in #560
@MichaelSimons made their first contribution in #736
@js6pak made their first contribution in #538

Full Changelog: actions/setup-dotnet@v5...v5.3.0

`v5.2.0`

Compare Source

What's changed

Enhancements

Add support for workloads input by @gowridurgad in #693
Add support for optional architecture input for cross-architecture .NET installs by @priya-kinthali in #700

Dependency Updates

Upgrade fast-xml-parser from 4.4.1 to 5.3.6 by @dependabot in #671
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #705

Full Changelog: actions/setup-dotnet@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Documentation

Readme update for environment variable on self hosted linux runners by @priya-kinthali in #689
Contributor icon updates by @Falco20019 in #604

Dependency updates

Upgrade actions/checkout from 5 to 6 by @dependabot in #684
Upgrade to latest actions packages by @salmanmkc in #687
Upgrade dependencies in testproject and checkout in Readme by @priya-kinthali in #692

New Contributors

@priya-kinthali made their first contribution in #689
@Falco20019 made their first contribution in #604

Full Changelog: actions/setup-dotnet@v5...v5.1.0

`v5.0.1`

Compare Source

What's Changed

Upgrade typescript from 5.4.2 to 5.9.2 and document breaking changes in v5 by @dependabot in #624
Upgrade eslint-plugin-jest from 27.9.0 to 29.0.1 by @dependabot in #648
Upgrade actions/publish-action from 0.3.0 to 0.4.0 and update macos-13 to macos-15-intel by @dependabot in #665

Full Changelog: actions/setup-dotnet@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to Node.js 24 and modernize async usage by @salmanmkc in #654

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Updates

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #622
Upgrade husky from 8.0.3 to 9.1.7 by @dependabot[bot] in #591
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot[bot] in #594
Upgrade eslint-config-prettier from 9.1.0 to 10.1.5 by @dependabot[bot] in #639
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #641
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #652
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #662

Bug Fixes

Remove Support for older .NET Versions and Update installers scripts by @gowridurgad in #647

New Contributors

@gowridurgad made their first contribution in #647
@salmanmkc made their first contribution in #654

Full Changelog: actions/setup-dotnet@v4...v5.0.0

`v5`

Compare Source

`v4.3.1`

Compare Source

What's Changed

v4 - Remove azureedge.net fallback logic and update install scripts by @zaataylor in #572
As outlined in Critical .NET Install Links Are Changing, remove the storage account fallback logic added for v4 in #566 and update the install scripts accordingly.
Related issue: dotnet/install-scripts#559
upgrade @actions/cache to 4.0.2 by @HarithaVattikuti in #615

Full Changelog: actions/setup-dotnet@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

README update - add permissions section by @benwells in #587
Configure Dependabot settings by @HarithaVattikuti in #585
Upgrade cache from 3.2.4 to 4.0.0 by @aparnajyothi-y in #586
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #590
Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in #592
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #596

New Contributors

@benwells made their first contribution in #587
@aparnajyothi-y made their first contribution in #586

Full Changelog: actions/setup-dotnet@v4...v4.3.0

`v4.2.0`

Compare Source

What's Changed

Enhance Workflows, Update Dependencies and Installer Scripts by @priyagupta108 in #555
V4 - Use new .NET CDN URLs and update to latest install scripts by @heavymachinery in #566

Some .NET binaries and installers currently hosted on Azure Content Delivery Network (CDN) domains ending in .azureedge.net will move to new domains as the provider, edg.io, will soon cease operations. There may be downtime or unavailability of .azureedge.net domains in the future as the .NET team is required to migrate to a new CDN and set of domains moving forward.

If your workflows are pinned to specific SHAs or minor tags, please upgrade to a major release tag to avoid service disruptions. Edgio has confirmed their services will be operational until at least January 15, 2025.

For updates, follow dotnet/core#9671.

New Contributors

@priyagupta108 made their first contribution in #555
@heavymachinery made their first contribution in #566

Full Changelog: actions/setup-dotnet@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #548
Upgrade IA Publish by @Jcambass in #550

Bug fixes :

Fixed Basic Validation failure checks by @HarithaVattikuti in #545
Revise isGhes logic by @jww3 in #556

Dependency updates :

Bump fast-xml-parser from 4.3.6 to 4.4.1 by @dependabot in #540

New Contributors

@Jcambass made their first contribution in #548
@jww3 made their first contribution in #556

Full Changelog: actions/setup-dotnet@v4...v4.1.0

`v4.0.1`

Compare Source

What's Changed

Documentation changes:

Update README.md to use latest action version by @mikes-gh in #502
Update links to runner software by @samuel-w in #499

Dependency updates:

Bump undici from 5.27.2 to 5.28.3 by @dependabot in #515
Bump braces from 3.0.2 to 3.0.3 and other dependency updates by @dependabot in #533

New Contributors

@mikes-gh made their first contribution in #502
@samuel-w made their first contribution in #499

Full Changelog: actions/setup-dotnet@v4...v4.0.1

`v4.0.0`

Compare Source

What's Changed

In the scope of this release, the version of the Node.js runtime was updated to 20. The majority of dependencies were updated to the latest versions. From now on, the code for the setup-dotnet will run on Node.js 20 instead of Node.js 16.

Breaking changes

Update Node.js runtime to version 20 by @harithavattikuti in #484
Sequential version install fix by @nikolai-laevskii in #433
In setup-dotnet@v3, the dotnet executable was overwritten during each action run, sometimes leading to failures if the executable was still in use. This issue was resolved in setup-dotnet@v4 by introducing an additional install-script run that installs the LTS version of the dotnet executable and utilizes it for all subsequent dotnet installations. The actual download is performed only once per workflow by the initial install-script run. To use older versions, utilize global.json. For more details, refer to the documentation.

Non-breaking changes

Refactor installer by @nikolai-laevskii in #432
Allow json comments by @nikolai-laevskii in #431
Update fast-xml-parser and dotnet installer scripts by @IvanZosimov in #437
Update dependencies by @IvanZosimov in #440
Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in #444
Update installers by @nikolai-laevskii in #462
Update semver by @dmitry-shibanov in #468

New Contributors

@HarithaVattikuti made their first contribution in #484

Full Changelog: actions/setup-dotnet@v3...v4.0.0

`v4`

Compare Source

actions/setup-java (actions/setup-java)

`v5.6.0`

Compare Source

What's Changed

Backport to v5: Add Maven compiler problem matcher for javac diagnostics by @brunoborges in #1087
feat: expose cache-primary-key output (#597) [v5 backport] by @brunoborges in #1089
dist: Cover Tencent Kona JDK 25 (#1108) [v5 backport] by @brunoborges in #1110
Backport #1111: Preserve Maven toolchains across repeated setup-java runs (#1099) by @brunoborges in #1113
Backport #1097/#1098 to v5: cache Maven and Gradle wrapper distributions separately by @brunoborges in #1122

Full Changelog: actions/setup-java@v5...v5.6.0

`v5.5.0`

Compare Source

`v5.4.0`

Compare Source

What's Changed

Bump @typescript-eslint/parser from 8.48.0 to 8.61.1 by @dependabot[bot] in #1021
Fix codeql workflow permissions by @jsoref in #993
fix CodeQL permissions by @gdams in #1025
fix: reject non-semver candidate versions in isVersionSatisfies by @sproctor in #1009
Bump @actions/cache to 5.1.0, handle cache write denied by @jasongin in #1026
Add Maven Wrapper cache feature by @mahabaleshwars in #1027
Spelling by @jsoref in #713
add link to advanced configuration for JetBrains by @robstoll in #850
docs(action): fix missing required or default fields by @kranthipoturaju in #1007
feat: add microsoft openjdk 17.0.18 by @al-kau in #1002
Update README.md - use "alert syntax for Markdown" for notes by @mhoffrog in #924
Bump undici from 6.24.1 to 6.27.0 by @dependabot[bot] in #1033
Update contributor guide with emoji for clarity by @brunoborges in #1028
add javac problem matcher by @Trass3r in #562
Clarify README version syntax and migration guidance by @brunoborges with @Copilot in #1038
Update undici artifacts to 6.27.0 (license cache + dist) by @brunoborges in #1040
docs: enhance custom jdk file installation by @stephanabel in #996
Templates for new Java distributions by @panticmilos in #429
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1032
Bump @types/node from 25.9.3 to 26.0.0 by @dependabot[bot] in #1031
docs: replace non-existent HelloWorldApp references with java --version by @brunoborges with @Copilot in #1043
docs: add JavaFX Maven project configuration instructions by @brunoborges with @Copilot in #1044
docs: self-signed certificate / internal CA handling for GitHub Enterprise by @brunoborges in #1050
docs: document importing an internal CA into the installed JDK (cacerts) by @brunoborges in #1051
chore: Harden workflows: least-privilege permissions + zizmor integration by @brunoborges in #1039
dist: Add GraalVM Community distribution support by @brunoborges with @Copilot in #1042
docs: note jdkfile approach for Early Access / unreleased JDK builds by @brunoborges in #1058
dist: Apply Copilot review suggestions from PR #1042 (GraalVM Community) by @brunoborges in #1059

New Contributors

@jsoref made their first contribution in #993
@sproctor made their first contribution in #1009
@jasongin made their first contribution in #1026
@robstoll made their first contribution in #850
@kranthipoturaju made their first contribution in #1007
@al-kau made their first contribution in #1002
@mhoffrog made their first contribution in #924
@brunoborges made their first contribution in #1028
@Trass3r made their first contribution in #562
@stephanabel made their first contribution in #996

Full Changelog: actions/setup-java@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

chore: update Java version to 25 in setup examples by @alaahong in #969
Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #984
Refactor error handling and improve test logging for installers by @chiranjib-swain in #989
chore: upgrade dependencies (@actions/core, cache, glob, http-client, tool-cache, xmlbuilder2) by @Copilot in #999
Add Oracle JDK 17 licensing limitation note by @mahabaleshwars in #1001
Update readme for ubuntu sudo java_home behavior by @mahabaleshwars in #1013
temurin: add support for Alpine Linux by @gdams in #674
fix: resolve npm audit vulnerabilities in fast-xml-builder and fast-xml-parser by @gdams in #1015
Bump @typescript-eslint/eslint-plugin from 8.35.1 to 8.48.0 by @dependabot[bot] in #952
Bump eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot[bot] in #881
Bump picomatch, @types/jest, jest, jest-circus and ts-jest by @dependabot[bot] in #1016
Bump @types/node from 24.1.0 to 25.9.3 by @dependabot[bot] in #950
Implement pagination with link headers for Adoptium based apis by @johnoliver in #1014
Make the Adoptopenjdk package type look at the Temurin repo first for latest assets by @johnoliver in #522
Bump @vercel/ncc from 0.38.1 to 0.44.0 by @dependabot[bot] in #1018

New Contributors

@alaahong made their first contribution in #969
@Copilot made their first contribution in #999
@johnoliver made their first contribution in #1014

Full Changelog: actions/setup-java@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Enhancement

Retry on HTTP 522 Connection timed out by @findepi in #964

Documentation Changes

Update gradle caching by @priya-kinthali in #972
Update checkout to v6 by @mahabaleshwars in #973

Dependency Updates

Upgrade @actions/cache to v5 by @salmanmkc in #968
Upgrade actions/checkout from 5 to 6 by @dependabot in #961

New Contributors

@findepi made their first contribution in #964

Full Changelog: actions/setup-java@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in #798
Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in #730
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #833
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #887
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in #859
Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in #848

New Contributors

@gowridurgad made their first contribution in #848
@salmanmkc made their first contribution in #888

Full Changelog: actions/setup-java@v4...v5.0.0

What's Changed

License and Audit Fixes by @HarithaVattikuti in #960
Update SapMachine URLs by @RealCLanger in #965

Full Changelog: actions/setup-java@v4...v4.8.0

`v4.7.1`

Compare Source

What's Changed

Documentation changes

Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @aparnajyothi-y in #704
Remove duplicated GraalVM section in documentation by @Marcono1234 in #716

Dependency updates:

Upgrade [@action/cache](https://redirect.github.com/actio

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update github-actions updates

8f98c70

Navigation Menu

Uh oh!

Update github-actions updates - #639

Update github-actions updates#639
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions-updates

renovate Bot commented Aug 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

Enhancements

Documentation

Bug Fixes

Dependency Updates

New Contributors

What's Changed

Enhancements

Dependency Updates

Bug Fixes

New Contributors

What's changed

Enhancements

Dependency Updates

What's Changed

Documentation

Dependency updates

New Contributors

What's Changed

What's Changed

Breaking Changes

Dependency Updates

Bug Fixes

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Bug fixes :

Dependency updates :

New Contributors

What's Changed

Documentation changes:

Dependency updates:

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Enhancement

Documentation Changes

Dependency Updates

New Contributors

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

Bug Fixes

New Contributors

What's Changed

What's Changed

Documentation changes

Dependency updates:

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

renovate Bot commented Aug 3, 2026 •

edited

Loading