This is an automated email from the ASF dual-hosted git repository.
PragmaTwice pushed a commit to branch unstable
in repository https://gitbox.apache.org/repos/asf/kvrocks.git
The following commit(s) were added to refs/heads/unstable by this push:
new b497f2784 ci: bump the github-actions group with 8 updates (#3614)
b497f2784 is described below
commit b497f278417c181b35109036010cf88be242e45b
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Sep 10 18:47:45 2026 +0800
ci: bump the github-actions group with 8 updates (#3614)
Bumps the github-actions group with 8 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1`
| `4.0.3` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.49.0` |
`1.50.1` |
| [actions/cache](https://github.com/actions/cache) | `5` | `6` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6`
| `7` |
|
[SonarSource/sonarqube-scan-action/install-build-wrapper](https://github.com/sonarsource/sonarqube-scan-action)
| `8.2.0` | `8.2.1` |
| [actions/github-script](https://github.com/actions/github-script) |
`8` | `9` |
|
[SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action)
| `8.2.0` | `8.2.1` |
Updates `actions/checkout` from 6 to 7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases";>actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>block checking out fork pr for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li>
<li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2458";>actions/checkout#2458</a></li>
<li>Bump flatted from 3.3.1 to 3.4.2 by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2460";>actions/checkout#2460</a></li>
<li>Bump js-yaml from 4.1.0 to 4.2.0 by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2461";>actions/checkout#2461</a></li>
<li>Bump <code>@actions/core</code> and
<code>@actions/tool-cache</code> and Remove uuid by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2459";>actions/checkout#2459</a></li>
<li>upgrade module to esm and update dependencies by <a
href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2463";>actions/checkout#2463</a></li>
<li>Bump the minor-npm-dependencies group across 1 directory with 3
updates by <a
href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2462";>actions/checkout#2462</a></li>
<li>getting ready for checkout v7 release by <a
href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2464";>actions/checkout#2464</a></li>
<li>update error wording by <a
href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2467";>actions/checkout#2467</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0";>https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p>
<h2>v6.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li><strong>[BREAKING]</strong> backport
<code>allow-unsafe-pr-checkout</code> to v6 by <a
href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2500";>actions/checkout#2500</a></li>
<li>backport fixes to releases-v6 by <a
href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2527";>actions/checkout#2527</a></li>
</ul>
<p><a
href="https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/";>https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/</a>
for more details about this breaking change</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6.0.3...v6.1.0";>https://github.com/actions/checkout/compare/v6.0.3...v6.1.0</a></p>
<h2>v6.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Update changelog by <a
href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2357";>actions/checkout#2357</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a
href="https://github.com/yaananth";><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li>
<li>Fix checkout init for SHA-256 repositories by <a
href="https://github.com/yaananth";><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2439";>actions/checkout#2439</a></li>
<li>Update changelog for v6.0.3 by <a
href="https://github.com/yaananth";><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2446";>actions/checkout#2446</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/yaananth";><code>@yaananth</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6...v6.0.3";>https://github.com/actions/checkout/compare/v6...v6.0.3</a></p>
<h2>v6.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID
is set by <a
href="https://github.com/TingluoHuang";><code>@TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2355";>actions/checkout#2355</a></li>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356";>actions/checkout#2356</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2";>https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update all references from v5 and v4 to v6 by <a
href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2314";>actions/checkout#2314</a></li>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327";>actions/checkout#2327</a></li>
<li>Clarify v6 README by <a
href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2328";>actions/checkout#2328</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1";><code>3d3c42e</code></a>
prep v7.0.1 release (<a
href="https://redirect.github.com/actions/checkout/issues/2531";>#2531</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07";><code>2880268</code></a>
escape values passed to --unset (<a
href="https://redirect.github.com/actions/checkout/issues/2530";>#2530</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1";><code>12cd223</code></a>
trim only ascii whitespace for branch (<a
href="https://redirect.github.com/actions/checkout/issues/2521";>#2521</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541";><code>62661c4</code></a>
skip running unsafe pr check if input is default (<a
href="https://redirect.github.com/actions/checkout/issues/2518";>#2518</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f";><code>e8d4307</code></a>
Bump the minor-actions-dependencies group with 2 updates (<a
href="https://redirect.github.com/actions/checkout/issues/2499";>#2499</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87";><code>631c942</code></a>
eslint 9 (<a
href="https://redirect.github.com/actions/checkout/issues/2474";>#2474</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e";><code>4f1f4ae</code></a>
Bump actions/upload-artifact from 4 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2476";>#2476</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92";><code>ba09753</code></a>
Bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2488";>#2488</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22";><code>b9e0990</code></a>
Bump docker/login-action from 3.3.0 to 4.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2479";>#2479</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2";><code>e8cb398</code></a>
Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2478";>#2478</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/checkout/compare/v6...v7";>compare
view</a></li>
</ul>
</details>
<br />
Updates `dorny/paths-filter` from 4.0.1 to 4.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/releases";>dorny/paths-filter's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Update Outputs in readme to account for the 'every'
predicate-quantifier by <a
href="https://github.com/hintron";><code>@hintron</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/247";>dorny/paths-filter#247</a></li>
<li>fix: scope base-ignored warning to API path by <a
href="https://github.com/saschabratton";><code>@saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/319";>dorny/paths-filter#319</a></li>
<li>docs: add contents permission to PR example by <a
href="https://github.com/134130";><code>@134130</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/248";>dorny/paths-filter#248</a></li>
<li>feat: add 'some-with-excludes' predicate quantifier by <a
href="https://github.com/arxeiss";><code>@arxeiss</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/322";>dorny/paths-filter#322</a></li>
<li>Document safe handling of file list outputs in workflows by <a
href="https://github.com/dorny";><code>@dorny</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/326";>dorny/paths-filter#326</a></li>
</ul>
<h2>Security</h2>
<ul>
<li>Escape multi-line filenames in list-files shell and csv output] by
<a href="https://github.com/ken-matsui";><code>@ken-matsui</code></a>
and <a href="https://github.com/tjswlsgg";><code>@tjswlsgg</code></a> in
<a
href="https://github.com/advisories/GHSA-7hc6-8hq5-9q2m";>https://github.com/advisories/GHSA-7hc6-8hq5-9q2m</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/hintron";><code>@hintron</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/247";>dorny/paths-filter#247</a></li>
<li><a href="https://github.com/134130";><code>@134130</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/248";>dorny/paths-filter#248</a></li>
<li><a href="https://github.com/arxeiss";><code>@arxeiss</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/322";>dorny/paths-filter#322</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dorny/paths-filter/compare/v4...v4.0.3";>https://github.com/dorny/paths-filter/compare/v4...v4.0.3</a></p>
<h2>v4.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix warning message by <a
href="https://github.com/cgundy";><code>@cgundy</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282";>dorny/paths-filter#282</a></li>
<li>chore: fix GitHub spelling in logs by <a
href="https://github.com/squat";><code>@squat</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278";>dorny/paths-filter#278</a></li>
<li>fix: use rev-parse instead of branch --show-current for older git
compat by <a
href="https://github.com/saschabratton";><code>@saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/303";>dorny/paths-filter#303</a></li>
<li>fix: work around git dubious ownership errors in container jobs by
<a
href="https://github.com/saschabratton";><code>@saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/317";>dorny/paths-filter#317</a></li>
<li>docs: update changelog for v4.0.2 by <a
href="https://github.com/saschabratton";><code>@saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/318";>dorny/paths-filter#318</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cgundy";><code>@cgundy</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282";>dorny/paths-filter#282</a></li>
<li><a href="https://github.com/squat";><code>@squat</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278";>dorny/paths-filter#278</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2";>https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md";>dorny/paths-filter's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.0.3</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/326";>Document
safe handling of file list outputs in workflows</a></li>
<li><a href="https://github.com/advisories/GHSA-7hc6-8hq5-9q2m";>Escape
multi-line filenames in list-files shell and csv output</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/322";>Add
'some-with-excludes' predicate quantifier</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/248";>Add
contents permission to PR example</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/319";>Scope
base-ignored warning to API path</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/247";>Update
outputs in readme to account for the 'every'
predicate-quantifier</a></li>
</ul>
<h2>v4.0.2</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/317";>Work
around git dubious ownership errors in container jobs</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/303";>Use
rev-parse instead of branch --show-current for older git compat</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/282";>Fix
warning message</a></li>
</ul>
<h2>v4.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/255";>Support
merge queue</a></li>
</ul>
<h2>v4.0.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/294";>Update
action runtime to node24</a></li>
</ul>
<h2>v3.0.4</h2>
<ul>
<li><a href="https://github.com/advisories/GHSA-7hc6-8hq5-9q2m";>Escape
multi-line filenames in list-files shell and csv output</a></li>
</ul>
<h2>v3.0.3</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/279";>Add
missing predicate-quantifier</a></li>
</ul>
<h2>v3.0.2</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/224";>Add
config parameter for predicate quantifier</a></li>
</ul>
<h2>v3.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/133";>Compare
base and ref when token is empty</a></li>
</ul>
<h2>v3.0.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/210";>Update to
Node.js 20</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/215";>Update
all dependencies</a></li>
</ul>
<h2>v2.11.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/167";>Update
@actions/core to v1.10.0 - Fixes warning about deprecated
set-output</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/168";>Document
need for pull-requests: read permission</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/164";>Updating
to actions/checkout@v3</a></li>
</ul>
<h2>v2.11.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/157";>Set
list-files input parameter as not required</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/161";>Update
Node.js</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/162";>Fix
incorrect handling of Unicode characters in exec()</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/163";>Use
Octokit pagination</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/160";>Updates
real world links</a></li>
</ul>
<h2>v2.10.2</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dorny/paths-filter/commit/ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d";><code>ceb8a2b</code></a>
Update CHANGELOG.md for v4.0.3 and v3.0.4 (<a
href="https://redirect.github.com/dorny/paths-filter/issues/327";>#327</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/ef09b88f3eacdbec6ce135a7c9a193a6849545c1";><code>ef09b88</code></a>
Document safe handling of file list outputs in workflows (<a
href="https://redirect.github.com/dorny/paths-filter/issues/326";>#326</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/44adc5b06dc135dba334efce9bf3cf0624512d2d";><code>44adc5b</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/4711b7a31b4aa89103d8c6ffab2e3b8e7b6381c7";><code>4711b7a</code></a>
feat: add 'some-with-excludes' predicate quantifier (<a
href="https://redirect.github.com/dorny/paths-filter/issues/322";>#322</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/93c889f9e58fca66f35a0c83d8673ac7e88bb70a";><code>93c889f</code></a>
fix: escape multi-line filenames in list-files shell and csv output</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/b41dfa943b1939b9b646f67753bfe35cf6e4de03";><code>b41dfa9</code></a>
docs: add contents permission to PR example (<a
href="https://redirect.github.com/dorny/paths-filter/issues/248";>#248</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/9af6e5a9d010d1ae8ec570390b3d793e2b70a402";><code>9af6e5a</code></a>
fix: scope base-ignored warning to API path (<a
href="https://redirect.github.com/dorny/paths-filter/issues/319";>#319</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/cae9006b65a1a53044b518c68e13e835c54948a7";><code>cae9006</code></a>
docs: update outputs in readme to account for the 'every'
predicate-quantifie...</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/7b450fff21473bca461d4b92ce414b9d0420d706";><code>7b450ff</code></a>
docs: update changelog for v4.0.2 (<a
href="https://redirect.github.com/dorny/paths-filter/issues/318";>#318</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/928037783a71f24983ea250c6e55290c1b2de54f";><code>9280377</code></a>
fix: work around git dubious ownership errors in container jobs (<a
href="https://redirect.github.com/dorny/paths-filter/issues/317";>#317</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/dorny/paths-filter/compare/fbd0ab8f3e69293af611ebaee6363fc25e6d187d...ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d";>compare
view</a></li>
</ul>
</details>
<br />
Updates `crate-ci/typos` from 1.49.0 to 1.50.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/crate-ci/typos/releases";>crate-ci/typos's
releases</a>.</em></p>
<blockquote>
<h2>v1.50.1</h2>
<h2>[1.50.1] - 2026-09-01</h2>
<h3>Fixes</h3>
<ul>
<li>Don't correct <code>asend</code> in Python code</li>
</ul>
<h2>v1.50.0</h2>
<h2>[1.50.0] - 2026-08-28</h2>
<h3>Features</h3>
<ul>
<li>Updated the dictionary with the <a
href="https://redirect.github.com/crate-ci/typos/issues/1587";>August
2026</a> changes</li>
</ul>
<h2>v1.49.1</h2>
<h2>[1.49.1] - 2026-08-27</h2>
<h3>Fixes</h3>
<ul>
<li>Don't correct the brand name <code>HashiCorp</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/crate-ci/typos/blob/master/CHANGELOG.md";>crate-ci/typos's
changelog</a>.</em></p>
<blockquote>
<h2>[1.50.1] - 2026-09-01</h2>
<h3>Fixes</h3>
<ul>
<li>Don't correct <code>asend</code> in Python code</li>
</ul>
<h2>[1.50.0] - 2026-08-28</h2>
<h3>Features</h3>
<ul>
<li>Updated the dictionary with the <a
href="https://redirect.github.com/crate-ci/typos/issues/1587";>August
2026</a> changes</li>
</ul>
<h2>[1.49.1] - 2026-08-27</h2>
<h3>Fixes</h3>
<ul>
<li>Don't correct the brand name <code>HashiCorp</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/crate-ci/typos/commit/d43b6c087ac471e2ea7b8af622ff15f05c0c365b";><code>d43b6c0</code></a>
chore: Release</li>
<li><a
href="https://github.com/crate-ci/typos/commit/84aa9630a9832cedb7be976b3a3e4e4cd9ad68e8";><code>84aa963</code></a>
docs: Update changelog</li>
<li><a
href="https://github.com/crate-ci/typos/commit/79e6746de5fb3fe58bb2d7a2128c22fd01e9e5e0";><code>79e6746</code></a>
Merge pull request <a
href="https://redirect.github.com/crate-ci/typos/issues/1608";>#1608</a>
from nightcityblade/fix/python-asend</li>
<li><a
href="https://github.com/crate-ci/typos/commit/aba69857f2fe31f16eb41990c92c0a3fa3244be1";><code>aba6985</code></a>
Merge pull request <a
href="https://redirect.github.com/crate-ci/typos/issues/1616";>#1616</a>
from crate-ci/renovate/clap-cargo-0.x</li>
<li><a
href="https://github.com/crate-ci/typos/commit/92ed824f4f7394e08eb031378ac49112ec496efd";><code>92ed824</code></a>
chore(deps): Update compatible (<a
href="https://redirect.github.com/crate-ci/typos/issues/1615";>#1615</a>)</li>
<li><a
href="https://github.com/crate-ci/typos/commit/e575a6c8a0e161ad343c1b11e2bf6ee464fff115";><code>e575a6c</code></a>
chore(deps): Update Rust crate clap-cargo to 0.19.0</li>
<li><a
href="https://github.com/crate-ci/typos/commit/4d9c206a77c041268485162b8e2579ad7a5cb9a3";><code>4d9c206</code></a>
chore: Release</li>
<li><a
href="https://github.com/crate-ci/typos/commit/67e851f0011378f3c32597df0225931cb6ee56a8";><code>67e851f</code></a>
chore: Release</li>
<li><a
href="https://github.com/crate-ci/typos/commit/fed981dab10d95fb6178e7f95e975713e5837c3b";><code>fed981d</code></a>
docs: Update changelog</li>
<li><a
href="https://github.com/crate-ci/typos/commit/30a35149762ce930813e3571c50908a7cd355587";><code>30a3514</code></a>
Merge pull request <a
href="https://redirect.github.com/crate-ci/typos/issues/1611";>#1611</a>
from epage/aug</li>
<li>Additional commits viewable in <a
href="https://github.com/crate-ci/typos/compare/v1.49.0...v1.50.1";>compare
view</a></li>
</ul>
</details>
<br />
Updates `actions/cache` from 5 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases";>actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update packages, migrate to ESM by <a
href="https://github.com/Samirat";><code>@Samirat</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1760";>actions/cache#1760</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v6.0.0";>https://github.com/actions/cache/compare/v5...v6.0.0</a></p>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@actions/cache</code> to v5.1.0 - handle read-only cache
access by <a
href="https://github.com/jasongin";><code>@jasongin</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1775";>actions/cache#1775</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.1.0";>https://github.com/actions/cache/compare/v5...v5.1.0</a></p>
<h2>v5.0.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Update ts-http-runtime dependency by <a
href="https://github.com/yacaovsnc";><code>@yacaovsnc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1747";>actions/cache#1747</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.5";>https://github.com/actions/cache/compare/v5...v5.0.5</a></p>
<h2>v5.0.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Add release instructions and update maintainer docs by <a
href="https://github.com/Link";><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1696";>actions/cache#1696</a></li>
<li>Potential fix for code scanning alert no. 52: Workflow does not
contain permissions by <a
href="https://github.com/Link";><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1697";>actions/cache#1697</a></li>
<li>Fix workflow permissions and cleanup workflow names / formatting by
<a href="https://github.com/Link";><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1699";>actions/cache#1699</a></li>
<li>docs: Update examples to use the latest version by <a
href="https://github.com/XZTDean";><code>@XZTDean</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1690";>actions/cache#1690</a></li>
<li>Fix proxy integration tests by <a
href="https://github.com/Link";><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1701";>actions/cache#1701</a></li>
<li>Fix cache key in examples.md for bun.lock by <a
href="https://github.com/RyPeck";><code>@RyPeck</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1722";>actions/cache#1722</a></li>
<li>Update dependencies & patch security vulnerabilities by <a
href="https://github.com/Link";><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1738";>actions/cache#1738</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/XZTDean";><code>@XZTDean</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1690";>actions/cache#1690</a></li>
<li><a href="https://github.com/RyPeck";><code>@RyPeck</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1722";>actions/cache#1722</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.4";>https://github.com/actions/cache/compare/v5...v5.0.4</a></p>
<h2>v5.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33";>https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.3";>https://github.com/actions/cache/compare/v5...v5.0.3</a></p>
<h2>v.5.0.2</h2>
<h1>v5.0.2</h1>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md";>actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h2>How to prepare a release</h2>
<blockquote>
<p>[!NOTE]
Relevant for maintainers with write access only.</p>
</blockquote>
<ol>
<li>Switch to a new branch from <code>main</code>.</li>
<li>Run <code>npm test</code> to ensure all tests are passing.</li>
<li>Update the version in <a
href="https://github.com/actions/cache/blob/main/package.json";><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li>
<li>Run <code>npm run build</code> to update the compiled files.</li>
<li>Update this <a
href="https://github.com/actions/cache/blob/main/RELEASES.md";><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a>
with the new version and changes in the <code>## Changelog</code>
section.</li>
<li>Run <code>licensed cache</code> to update the license report.</li>
<li>Run <code>licensed status</code> and resolve any warnings by
updating the <a
href="https://github.com/actions/cache/blob/main/.licensed.yml";><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a>
file with the exceptions.</li>
<li>Commit your changes and push your branch upstream.</li>
<li>Open a pull request against <code>main</code> and get it reviewed
and merged.</li>
<li>Draft a new release <a
href="https://github.com/actions/cache/releases";>https://github.com/actions/cache/releases</a>
use the same version number used in <code>package.json</code>
<ol>
<li>Create a new tag with the version number.</li>
<li>Auto generate release notes and update them to match the changes you
made in <code>RELEASES.md</code>.</li>
<li>Toggle the set as the latest release option.</li>
<li>Publish the release.</li>
</ol>
</li>
<li>Navigate to <a
href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml";>https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a>
<ol>
<li>There should be a workflow run queued with the same version
number.</li>
<li>Approve the run to publish the new version and update the major tags
for this action.</li>
</ol>
</li>
</ol>
<h2>Changelog</h2>
<h3>6.1.0</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a
href="https://redirect.github.com/actions/toolkit/pull/2435";>actions/toolkit#2435
Handle cache write error due to read-only token</a></li>
<li>Switch redundant "Cache save failed" warning to debug log
in save-only</li>
</ul>
<h3>6.0.0</h3>
<ul>
<li>Updated <code>@actions/cache</code> to ^6.0.1,
<code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to
^3.0.0, <code>@actions/io</code> to ^3.0.2</li>
<li>Migrated to ESM module system</li>
<li>Upgraded Jest to v30 and test infrastructure to be ESM
compatible</li>
</ul>
<h3>5.0.4</h3>
<ul>
<li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar
patterns)</li>
<li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb
protection, header validation fixes)</li>
<li>Bump <code>fast-xml-parser</code> to v5.5.6</li>
</ul>
<h3>5.0.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33";>https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<h3>5.0.2</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9";><code>55cc834</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1768";>#1768</a>
from jasongin/readonly-cache</li>
<li><a
href="https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337";><code>d8cd72f</code></a>
Bump <code>@actions/cache</code> to v6.1.0 - handle cache write error
due to RO token</li>
<li><a
href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8";><code>2c8a9bd</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1760";>#1760</a>
from actions/samirat/esm_migration_and_package_update</li>
<li><a
href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023";><code>e9b91fd</code></a>
Prettier fixes</li>
<li><a
href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb";><code>e4884b8</code></a>
Rebuild dist</li>
<li><a
href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f";><code>10baf01</code></a>
Fixed licenses</li>
<li><a
href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37";><code>e39b386</code></a>
Fix test mock return order</li>
<li><a
href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06";><code>b692820</code></a>
PR feedback</li>
<li><a
href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1";><code>6074912</code></a>
Rebuild dist bundles as ESM to match type:module</li>
<li><a
href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e";><code>5a912e8</code></a>
Fix lint and jest issues</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/cache/compare/v5...v6";>compare
view</a></li>
</ul>
</details>
<br />
Updates `actions/setup-python` from 6 to 7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases";>actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108";><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1330";>actions/setup-python#1330</a></li>
<li>Pin SHA commits and update docs with latest versions by <a
href="https://github.com/HarithaVattikuti";><code>@HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1338";>actions/setup-python#1338</a></li>
<li>Remove the pip-install input by <a
href="https://github.com/gowridurgad";><code>@gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1336";>actions/setup-python#1336</a></li>
</ul>
<h3>Bug Fix</h3>
<ul>
<li>Fix to Classify stderr warning messages as warnings instead of
errors in annotations by <a
href="https://github.com/lmvysakh";><code>@lmvysakh</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1335";>actions/setup-python#1335</a></li>
<li>Validate and retry manifest fetch to prevent silent failures by <a
href="https://github.com/priyagupta108";><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1332";>actions/setup-python#1332</a></li>
</ul>
<h3>Dependency Upgrade</h3>
<ul>
<li>Bump certifi from 2020.6.20 to 2024.7.4 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot";><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1328";>actions/setup-python#1328</a></li>
<li>Remove EOL Python versions and Bumps numpy text fixture by <a
href="https://github.com/priya-kinthali";><code>@priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1333";>actions/setup-python#1333</a></li>
<li>Upgrade <code>@actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai";><code>@philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1337";>actions/setup-python#1337</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lmvysakh";><code>@lmvysakh</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1335";>actions/setup-python#1335</a></li>
<li><a
href="https://github.com/philip-gai";><code>@philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1337";>actions/setup-python#1337</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6...v7.0.0";>https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Add RHEL support and include Linux distro in cache keys by <a
href="https://github.com/priyagupta108";><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1323";>actions/setup-python#1323</a></li>
<li>Fix pip cache error handling on Windows by <a
href="https://github.com/priyagupta108";><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1040";>actions/setup-python#1040</a></li>
</ul>
<h3>Dependency update</h3>
<ul>
<li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a
href="https://github.com/dependabot";><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1281";>actions/setup-python#1281</a></li>
<li>Upgrade actions dependencies by <a
href="https://github.com/gowridurgad";><code>@gowridurgad</code></a>
with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1303";>actions/setup-python#1303</a></li>
<li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin";><code>@jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1324";>actions/setup-python#1324</a></li>
<li>Upgrade dependency versions and test workflow configuration by <a
href="https://github.com/HarithaVattikuti";><code>@HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1322";>actions/setup-python#1322</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Update advanced-usage.md by <a
href="https://github.com/Dunky-Z";><code>@Dunky-Z</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/811";>actions/setup-python#811</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/gowridurgad";><code>@gowridurgad</code></a>
with <a href="https://github.com/Copilot";><code>@Copilot</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1303";>actions/setup-python#1303</a></li>
<li><a href="https://github.com/jasongin";><code>@jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1324";>actions/setup-python#1324</a></li>
<li><a href="https://github.com/Dunky-Z";><code>@Dunky-Z</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/811";>actions/setup-python#811</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0";>https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0</a></p>
<h2>v6.2.0</h2>
<h2>What's Changed</h2>
<h3>Dependency Upgrades</h3>
<ul>
<li>Upgrade dependencies to Node 24 compatible versions by <a
href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1259";>actions/setup-python#1259</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97";><code>5fda3b9</code></a>
Pin SHA commits and update docs with latest versions (<a
href="https://redirect.github.com/actions/setup-python/issues/1338";>#1338</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e";><code>4ab7e95</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-python/issues/1337";>#1337</a>
from actions/philip-gai/bump-actions-cache-6-2-0</li>
<li><a
href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c";><code>0f3a009</code></a>
Remove the pip-install input (<a
href="https://redirect.github.com/actions/setup-python/issues/1336";>#1336</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932";><code>f8cf429</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-python/issues/1330";>#1330</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5";><code>54baeea</code></a>
Validate and retry manifest fetch to prevent silent failures (<a
href="https://redirect.github.com/actions/setup-python/issues/1332";>#1332</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5";><code>c709277</code></a>
Annotation code fix (<a
href="https://redirect.github.com/actions/setup-python/issues/1335";>#1335</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a";><code>6849080</code></a>
remove EOL Python versions and Bumps numpy text fixture (<a
href="https://redirect.github.com/actions/setup-python/issues/1333";>#1333</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e";><code>0903b46</code></a>
Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data
(<a
href="https://redirect.github.com/actions/setup-python/issues/1328";>#1328</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-python/compare/v6...v7";>compare
view</a></li>
</ul>
</details>
<br />
Updates `SonarSource/sonarqube-scan-action/install-build-wrapper` from
8.2.0 to 8.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sonarsource/sonarqube-scan-action/releases";>SonarSource/sonarqube-scan-action/install-build-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>v8.2.1</h2>
<h2>What's Changed</h2>
<h3>Bug fix</h3>
<ul>
<li><a
href="https://sonarsource.atlassian.net/browse/SQSCANGHA-156";>SQSCANGHA-156</a>
GPG signature verification fails when temporary directory path is too
long</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/SonarSource/sonarqube-scan-action/compare/v8.2.0...v8.2.1";>https://github.com/SonarSource/sonarqube-scan-action/compare/v8.2.0...v8.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/SonarSource/sonarqube-scan-action/commit/22918119ff8e1ca75a623e15c8296b6ea4fbe28f";><code>2291811</code></a>
SQSCANGHA-156 GPG signature verification fails when temporary directory
path ...</li>
<li><a
href="https://github.com/SonarSource/sonarqube-scan-action/commit/7cdc154593ec10cd3c019fceab40f415f9218437";><code>7cdc154</code></a>
SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (<a
href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/255";>#255</a>)</li>
<li><a
href="https://github.com/SonarSource/sonarqube-scan-action/commit/45f27363d4ff7d6b16baa0516490f10c52bdd5fc";><code>45f2736</code></a>
SQSCANGHA-151 Change Code Owners (<a
href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/254";>#254</a>)</li>
<li>See full diff in <a
href="https://github.com/sonarsource/sonarqube-scan-action/compare/713881670b6b3676cda39549040e2d88c70d582e...22918119ff8e1ca75a623e15c8296b6ea4fbe28f";>compare
view</a></li>
</ul>
</details>
<br />
Updates `actions/github-script` from 8 to 9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/github-script/releases";>actions/github-script's
releases</a>.</em></p>
<blockquote>
<h2>v9.0.0</h2>
<p><strong>New features:</strong></p>
<ul>
<li><strong><code>getOctokit</code> factory function</strong> —
Available directly in the script context. Create additional
authenticated Octokit clients with different tokens for multi-token
workflows, GitHub App tokens, and cross-org access. See <a
href="https://github.com/actions/github-script#creating-additional-clients-with-getoctokit";>Creating
additional clients with <code>getOctokit</code></a> for details and
examples.</li>
<li><strong>Orchestration ID in user-agent</strong> — The
<code>ACTIONS_ORCHESTRATION_ID</code> environment variable is
automatically appended to the user-agent string for request
tracing.</li>
</ul>
<p><strong>Breaking changes:</strong></p>
<ul>
<li><strong><code>require('@actions/github')</code> no longer works in
scripts.</strong> The upgrade to <code>@actions/github</code> v9
(ESM-only) means <code>require('@actions/github')</code> will fail at
runtime. If you previously used patterns like <code>const { getOctokit }
= require('@actions/github')</code> to create secondary clients, use the
new injected <code>getOctokit</code> function instead — it's available
directly in the script context with no imports needed.</li>
<li><code>getOctokit</code> is now an injected function parameter.
Scripts that declare <code>const getOctokit = ...</code> or <code>let
getOctokit = ...</code> will get a <code>SyntaxError</code> because
JavaScript does not allow <code>const</code>/<code>let</code>
redeclaration of function parameters. Use the injected
<code>getOctokit</code> directly, or use <code>var getOctokit =
...</code> if you need to redeclare it.</li>
<li>If your script accesses other <code>@actions/github</code> internals
beyond the standard <code>github</code>/<code>octokit</code> client, you
may need to update those references for v9 compatibility.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Add ACTIONS_ORCHESTRATION_ID to user-agent string by <a
href="https://github.com/Copilot";><code>@Copilot</code></a> in <a
href="https://redirect.github.com/actions/github-script/pull/695";>actions/github-script#695</a></li>
<li>ci: use deployment: false for integration test environments by <a
href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/github-script/pull/712";>actions/github-script#712</a></li>
<li>feat!: add getOctokit to script context, upgrade
<code>@actions/github</code> v9, <code>@octokit/core</code> v7, and
related packages by <a
href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/github-script/pull/700";>actions/github-script#700</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Copilot";><code>@Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/github-script/pull/695";>actions/github-script#695</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/github-script/compare/v8.0.0...v9.0.0";>https://github.com/actions/github-script/compare/v8.0.0...v9.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/github-script/commit/3a2844b7e9c422d3c10d287c895573f7108da1b3";><code>3a2844b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/github-script/issues/700";>#700</a>
from actions/salmanmkc/expose-getoctokit + prepare re...</li>
<li><a
href="https://github.com/actions/github-script/commit/ca10bbdd1a7739de09e99a200c7a59f5d73a4079";><code>ca10bbd</code></a>
fix: use <code>@octokit/core/</code>types import for v7
compatibility</li>
<li><a
href="https://github.com/actions/github-script/commit/86e48e20ac85c970ed1f96e718fd068173948b7b";><code>86e48e2</code></a>
merge: incorporate main branch changes</li>
<li><a
href="https://github.com/actions/github-script/commit/c1084728b5b935ec4ddc1e4cee877b01797b3ff9";><code>c108472</code></a>
chore: rebuild dist for v9 upgrade and getOctokit factory</li>
<li><a
href="https://github.com/actions/github-script/commit/afff112e4f8b57c718168af75b89ce00bc8d091d";><code>afff112</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/github-script/issues/712";>#712</a>
from actions/salmanmkc/deployment-false + fix user-ag...</li>
<li><a
href="https://github.com/actions/github-script/commit/ff8117e5b78c415f814f39ad6998f424fee7b817";><code>ff8117e</code></a>
ci: fix user-agent test to handle orchestration ID</li>
<li><a
href="https://github.com/actions/github-script/commit/81c6b7876079abe10ff715951c9fc7b3e1ab389d";><code>81c6b78</code></a>
ci: use deployment: false to suppress deployment noise from integration
tests</li>
<li><a
href="https://github.com/actions/github-script/commit/3953caf8858d318f37b6cc53a9f5708859b5a7b7";><code>3953caf</code></a>
docs: update README examples from <a
href="https://github.com/v8";><code>@v8</code></a> to <a
href="https://github.com/v9";><code>@v9</code></a>, add getOctokit docs
and v9 brea...</li>
<li><a
href="https://github.com/actions/github-script/commit/c17d55b90dcdb3d554d0027a6c180a7adc2daf78";><code>c17d55b</code></a>
ci: add getOctokit integration test job</li>
<li><a
href="https://github.com/actions/github-script/commit/a047196d9a02fe92098771cafbb98c2f1814e408";><code>a047196</code></a>
test: add getOctokit integration tests via callAsyncFunction</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/github-script/compare/v8...v9";>compare
view</a></li>
</ul>
</details>
<br />
Updates `SonarSource/sonarqube-scan-action` from 8.2.0 to 8.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sonarsource/sonarqube-scan-action/releases";>SonarSource/sonarqube-scan-action's
releases</a>.</em></p>
<blockquote>
<h2>v8.2.1</h2>
<h2>What's Changed</h2>
<h3>Bug fix</h3>
<ul>
<li><a
href="https://sonarsource.atlassian.net/browse/SQSCANGHA-156";>SQSCANGHA-156</a>
GPG signature verification fails when temporary directory path is too
long</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/SonarSource/sonarqube-scan-action/compare/v8.2.0...v8.2.1";>https://github.com/SonarSource/sonarqube-scan-action/compare/v8.2.0...v8.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/SonarSource/sonarqube-scan-action/commit/22918119ff8e1ca75a623e15c8296b6ea4fbe28f";><code>2291811</code></a>
SQSCANGHA-156 GPG signature verification fails when temporary directory
path ...</li>
<li><a
href="https://github.com/SonarSource/sonarqube-scan-action/commit/7cdc154593ec10cd3c019fceab40f415f9218437";><code>7cdc154</code></a>
SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (<a
href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/255";>#255</a>)</li>
<li><a
href="https://github.com/SonarSource/sonarqube-scan-action/commit/45f27363d4ff7d6b16baa0516490f10c52bdd5fc";><code>45f2736</code></a>
SQSCANGHA-151 Change Code Owners (<a
href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/254";>#254</a>)</li>
<li>See full diff in <a
href="https://github.com/sonarsource/sonarqube-scan-action/compare/713881670b6b3676cda39549040e2d88c70d582e...22918119ff8e1ca75a623e15c8296b6ea4fbe28f";>compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/asf-allowlist-check.yaml | 2 +-
.github/workflows/kvrocks.yaml | 34 +++++++++++++++---------------
.github/workflows/nightly.yaml | 2 +-
.github/workflows/sonar.yaml | 10 ++++-----
4 files changed, 24 insertions(+), 24 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yaml
b/.github/workflows/asf-allowlist-check.yaml
index b08540722..06f6b8feb 100644
--- a/.github/workflows/asf-allowlist-check.yaml
+++ b/.github/workflows/asf-allowlist-check.yaml
@@ -39,7 +39,7 @@ jobs:
runs-on: ubuntu-24.04
timeout-minutes: 10
steps:
- - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 #
v6.1.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- uses:
apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# allowlist-check/v1.0.0
diff --git a/.github/workflows/kvrocks.yaml b/.github/workflows/kvrocks.yaml
index 760f8a5d0..0b1cdf867 100644
--- a/.github/workflows/kvrocks.yaml
+++ b/.github/workflows/kvrocks.yaml
@@ -42,8 +42,8 @@ jobs:
outputs:
docs_only: ${{ steps.result.outputs.docs_only }}
steps:
- - uses: actions/checkout@v6
- - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
+ - uses: actions/checkout@v7
+ - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d
id: changes
with:
filters: .github/config/changes.yml
@@ -59,9 +59,9 @@ jobs:
env:
FORCE_COLOR: 1
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@v7
- name: Check typos
- uses: crate-ci/[email protected]
+ uses: crate-ci/[email protected]
with:
config: .github/config/typos.toml
- uses: apache/skywalking-eyes/[email protected]
@@ -74,10 +74,10 @@ jobs:
if: ${{ needs.precondition.outputs.docs_only != 'true' }}
runs-on: ubuntu-24.04
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@v7
- name: Restore Kvrocks dependency cache
id: cache-kvrocks-deps
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: ${{ env.KVROCKS_DEPS_CACHE_DIR }}
key: kvrocks-full-deps-${{ hashFiles('x.py', 'CMakeLists.txt',
'cmake/**/*.cmake') }}
@@ -308,14 +308,14 @@ jobs:
- name: Cache redis
id: cache-redis
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: |
~/local/bin/redis-cli
key: ${{ matrix.os }}-redis-cli
- name: Cache redis server
id: cache-redis-server
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: |
~/local/bin/redis-server
@@ -329,16 +329,16 @@ jobs:
pushd redis-6.2.14 && BUILD_TLS=yes make -j$NPROC redis-cli && mv
src/redis-cli $HOME/local/bin/ && popd
pushd redis-6.2.14 && BUILD_TLS=yes make -j$NPROC redis-server && mv
src/redis-server $HOME/local/bin/ && popd
- - uses: actions/checkout@v6
+ - uses: actions/checkout@v7
with:
fetch-depth: 0
- name: Restore Kvrocks dependency cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: ${{ env.KVROCKS_DEPS_CACHE_DIR }}
key: kvrocks-full-deps-${{ hashFiles('x.py', 'CMakeLists.txt',
'cmake/**/*.cmake') }}
enableCrossOsArchive: true
- - uses: actions/setup-python@v6
+ - uses: actions/setup-python@v7
if: ${{ !matrix.arm_linux }}
with:
python-version: 3.x
@@ -352,7 +352,7 @@ jobs:
if: ${{ matrix.sonarcloud }}
- name: Install Build Wrapper
- uses:
SonarSource/sonarqube-scan-action/install-build-wrapper@713881670b6b3676cda39549040e2d88c70d582e
# v8.2.0
+ uses:
SonarSource/sonarqube-scan-action/install-build-wrapper@22918119ff8e1ca75a623e15c8296b6ea4fbe28f
# v8.2.1
if: ${{ matrix.sonarcloud }}
- name: Build Kvrocks
@@ -492,7 +492,7 @@ jobs:
matrix:
os: [ubuntu-24.04, ubuntu-24.04-arm]
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@v7
- name: Get core numbers
run: echo "NPROC=$(nproc)" >> $GITHUB_ENV
- uses:
docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
@@ -622,7 +622,7 @@ jobs:
- name: Cache redis
id: cache-redis
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: |
~/local/bin/redis-cli
@@ -630,7 +630,7 @@ jobs:
- name: Cache redis server
id: cache-redis-server
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: |
~/local/bin/redis-server
@@ -646,9 +646,9 @@ jobs:
pushd redis-6.2.14 && USE_JEMALLOC=no make -j$NPROC redis-cli && mv
src/redis-cli $HOME/local/bin/ && popd
pushd redis-6.2.14 && USE_JEMALLOC=no make -j$NPROC redis-server &&
mv src/redis-server $HOME/local/bin/ && popd
- - uses: actions/checkout@v6
+ - uses: actions/checkout@v7
- name: Restore Kvrocks dependency cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: ${{ env.KVROCKS_DEPS_CACHE_DIR }}
key: kvrocks-full-deps-${{ hashFiles('x.py', 'CMakeLists.txt',
'cmake/**/*.cmake') }}
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index 091cac34a..983694931 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -42,7 +42,7 @@ jobs:
platform=${{ matrix.platform }}
echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
- - uses: actions/checkout@v6
+ - uses: actions/checkout@v7
with:
fetch-depth: 0
diff --git a/.github/workflows/sonar.yaml b/.github/workflows/sonar.yaml
index 9f25d9c53..46a3b186c 100644
--- a/.github/workflows/sonar.yaml
+++ b/.github/workflows/sonar.yaml
@@ -28,15 +28,15 @@ jobs:
runs-on: ubuntu-22.04
if: github.event.workflow_run.conclusion == 'success' &&
github.repository_owner == 'apache'
steps:
- - uses: actions/checkout@v6
+ - uses: actions/checkout@v7
with:
repository: ${{ github.event.workflow_run.head_repository.full_name
}}
ref: ${{ github.event.workflow_run.head_sha }}
fetch-depth: 0
- name: Install Build Wrapper
- uses:
SonarSource/sonarqube-scan-action/install-build-wrapper@713881670b6b3676cda39549040e2d88c70d582e
# v8.2.0
+ uses:
SonarSource/sonarqube-scan-action/install-build-wrapper@22918119ff8e1ca75a623e15c8296b6ea4fbe28f
# v8.2.1
- name: 'Download code coverage'
- uses: actions/github-script@v8
+ uses: actions/github-script@v9
with:
script: |
let allArtifacts = await
github.rest.actions.listWorkflowRunArtifacts({
@@ -62,7 +62,7 @@ jobs:
mkdir -p build/CMakeFiles/CMakeTmp
ls -a sonarcloud-data build
- - uses: actions/setup-python@v6
+ - uses: actions/setup-python@v7
with:
python-version: 3.x
@@ -73,7 +73,7 @@ jobs:
echo "The PR number is ${PR_NUMBER:-<none>}"
- name: SonarQube Scan
- uses:
SonarSource/sonarqube-scan-action@713881670b6b3676cda39549040e2d88c70d582e #
v8.2.0
+ uses:
SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f #
v8.2.1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
