dependabot[bot] opened a new pull request, #6187: URL: https://github.com/apache/texera/pull/6187
Bumps the github-actions group with 15 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5` | `7` | | [actions/github-script](https://github.com/actions/github-script) | `8` | `9` | | [sbt/setup-sbt](https://github.com/sbt/setup-sbt) | `1.1.22` | `1.5.0` | | [coursier/cache-action](https://github.com/coursier/cache-action) | `8.1.0` | `8.1.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `6` | `8` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.4.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.3.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.2.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `5` | `6` | | [actions/cache](https://github.com/actions/cache) | `5` | `6` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.4` | `7.0.0` | | [apache/skywalking-eyes](https://github.com/apache/skywalking-eyes) | `0.7.0` | `0.8.0` | | [actions/stale](https://github.com/actions/stale) | `9` | `10` | Updates `actions/checkout` from 5 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases";>actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458";>actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460";>actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461";>actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459";>actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463";>actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462";>actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464";>actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467";>actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0";>https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357";>actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439";>actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446";>actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth";><code>@yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3";>https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang";><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355";>actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356";>actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2";>https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314";>actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327";>actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328";>actions/checkout#2328</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.1";>https://github.com/actions/checkout/compare/v6...v6.0.1</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248";>actions/checkout#2248</a></li> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286";>actions/checkout#2286</a></li> <li>v6-beta by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2298";>actions/checkout#2298</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md";>actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458";>actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460";>actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461";>actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459";>actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463";>actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462";>actions/checkout#2462</a></li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439";>actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356";>actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327";>actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286";>actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248";>actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301";>actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226";>actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305";>actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss";><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971";>actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail";><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977";>actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells";><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043";>actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross";><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044";>actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89";><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194";>actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang";><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224";>actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236";>actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3";><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941";>actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3";><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946";>actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy";><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924";>actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0";><code>9c091bb</code></a> update error wording (<a href="https://redirect.github.com/actions/checkout/issues/2467";>#2467</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a";><code>1044a6d</code></a> getting ready for checkout v7 release (<a href="https://redirect.github.com/actions/checkout/issues/2464";>#2464</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f";><code>f028218</code></a> Bump the minor-npm-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/actions/checkout/issues/2462";>#2462</a>)</li> <li><a href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d";><code>d914b26</code></a> upgrade module to esm and update dependencies (<a href="https://redirect.github.com/actions/checkout/issues/2463";>#2463</a>)</li> <li><a href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d";><code>537c7ef</code></a> Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid (<a href="https://redirect.github.com/actions/checkout/issues/2459";>#2459</a>)</li> <li><a href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6";><code>130a169</code></a> Bump js-yaml from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2461";>#2461</a>)</li> <li><a href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3";><code>7d09575</code></a> Bump flatted from 3.3.1 to 3.4.2 (<a href="https://redirect.github.com/actions/checkout/issues/2460";>#2460</a>)</li> <li><a href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e";><code>0f9f3aa</code></a> Bump actions/publish-immutable-action (<a href="https://redirect.github.com/actions/checkout/issues/2458";>#2458</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7";><code>f9e715a</code></a> block checking out fork pr for pull_request_target and workflow_run (<a href="https://redirect.github.com/actions/checkout/issues/2454";>#2454</a>)</li> <li><a href="https://github.com/actions/checkout/commit/df4cb1c069e1874edd31b4311f1884172cec0e10";><code>df4cb1c</code></a> Update changelog for v6.0.3 (<a href="https://redirect.github.com/actions/checkout/issues/2446";>#2446</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v5...v7";>compare view</a></li> </ul> </details> <br /> Updates `actions/github-script` from 8 to 9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/github-script/releases";>actions/github-script's releases</a>.</em></p> <blockquote> <h2>v9.0.0</h2> <p><strong>New features:</strong></p> <ul> <li><strong><code>getOctokit</code> factory function</strong> — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See <a href="https://github.com/actions/github-script#creating-additional-clients-with-getoctokit";>Creating additional clients with <code>getOctokit</code></a> for details and examples.</li> <li><strong>Orchestration ID in user-agent</strong> — The <code>ACTIONS_ORCHESTRATION_ID</code> environment variable is automatically appended to the user-agent string for request tracing.</li> </ul> <p><strong>Breaking changes:</strong></p> <ul> <li><strong><code>require('@actions/github')</code> no longer works in scripts.</strong> The upgrade to <code>@actions/github</code> v9 (ESM-only) means <code>require('@actions/github')</code> will fail at runtime. If you previously used patterns like <code>const { getOctokit } = require('@actions/github')</code> to create secondary clients, use the new injected <code>getOctokit</code> function instead — it's available directly in the script context with no imports needed.</li> <li><code>getOctokit</code> is now an injected function parameter. Scripts that declare <code>const getOctokit = ...</code> or <code>let getOctokit = ...</code> will get a <code>SyntaxError</code> because JavaScript does not allow <code>const</code>/<code>let</code> redeclaration of function parameters. Use the injected <code>getOctokit</code> directly, or use <code>var getOctokit = ...</code> if you need to redeclare it.</li> <li>If your script accesses other <code>@actions/github</code> internals beyond the standard <code>github</code>/<code>octokit</code> client, you may need to update those references for v9 compatibility.</li> </ul> <h2>What's Changed</h2> <ul> <li>Add ACTIONS_ORCHESTRATION_ID to user-agent string by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/695";>actions/github-script#695</a></li> <li>ci: use deployment: false for integration test environments by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/712";>actions/github-script#712</a></li> <li>feat!: add getOctokit to script context, upgrade <code>@actions/github</code> v9, <code>@octokit/core</code> v7, and related packages by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/700";>actions/github-script#700</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Copilot";><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/695";>actions/github-script#695</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/github-script/compare/v8.0.0...v9.0.0";>https://github.com/actions/github-script/compare/v8.0.0...v9.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/github-script/commit/3a2844b7e9c422d3c10d287c895573f7108da1b3";><code>3a2844b</code></a> Merge pull request <a href="https://redirect.github.com/actions/github-script/issues/700";>#700</a> from actions/salmanmkc/expose-getoctokit + prepare re...</li> <li><a href="https://github.com/actions/github-script/commit/ca10bbdd1a7739de09e99a200c7a59f5d73a4079";><code>ca10bbd</code></a> fix: use <code>@octokit/core/</code>types import for v7 compatibility</li> <li><a href="https://github.com/actions/github-script/commit/86e48e20ac85c970ed1f96e718fd068173948b7b";><code>86e48e2</code></a> merge: incorporate main branch changes</li> <li><a href="https://github.com/actions/github-script/commit/c1084728b5b935ec4ddc1e4cee877b01797b3ff9";><code>c108472</code></a> chore: rebuild dist for v9 upgrade and getOctokit factory</li> <li><a href="https://github.com/actions/github-script/commit/afff112e4f8b57c718168af75b89ce00bc8d091d";><code>afff112</code></a> Merge pull request <a href="https://redirect.github.com/actions/github-script/issues/712";>#712</a> from actions/salmanmkc/deployment-false + fix user-ag...</li> <li><a href="https://github.com/actions/github-script/commit/ff8117e5b78c415f814f39ad6998f424fee7b817";><code>ff8117e</code></a> ci: fix user-agent test to handle orchestration ID</li> <li><a href="https://github.com/actions/github-script/commit/81c6b7876079abe10ff715951c9fc7b3e1ab389d";><code>81c6b78</code></a> ci: use deployment: false to suppress deployment noise from integration tests</li> <li><a href="https://github.com/actions/github-script/commit/3953caf8858d318f37b6cc53a9f5708859b5a7b7";><code>3953caf</code></a> docs: update README examples from <a href="https://github.com/v8";><code>@v8</code></a> to <a href="https://github.com/v9";><code>@v9</code></a>, add getOctokit docs and v9 brea...</li> <li><a href="https://github.com/actions/github-script/commit/c17d55b90dcdb3d554d0027a6c180a7adc2daf78";><code>c17d55b</code></a> ci: add getOctokit integration test job</li> <li><a href="https://github.com/actions/github-script/commit/a047196d9a02fe92098771cafbb98c2f1814e408";><code>a047196</code></a> test: add getOctokit integration tests via callAsyncFunction</li> <li>Additional commits viewable in <a href="https://github.com/actions/github-script/compare/v8...v9";>compare view</a></li> </ul> </details> <br /> Updates `sbt/setup-sbt` from 1.1.22 to 1.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sbt/setup-sbt/releases";>sbt/setup-sbt's releases</a>.</em></p> <blockquote> <h2>1.5.0</h2> <h2>updates</h2> <ul> <li>Update default runner to sbt 2.0.1 by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/106";>sbt/setup-sbt#106</a></li> </ul> <h2>behind the scenes</h2> <ul> <li>Bump actions/checkout from 6 to 7 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sbt/setup-sbt/pull/102";>sbt/setup-sbt#102</a></li> <li>Update sbt, scripted-plugin to 1.12.13 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/103";>sbt/setup-sbt#103</a></li> <li>Bump actions/cache from 5.0.5 to 6.1.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sbt/setup-sbt/pull/104";>sbt/setup-sbt#104</a></li> <li>Update sbt to 2.0.1 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/105";>sbt/setup-sbt#105</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sbt/setup-sbt/compare/v1...v1.5.0";>https://github.com/sbt/setup-sbt/compare/v1...v1.5.0</a></p> <h2>v1.4.0</h2> <h2>What's Changed</h2> <ul> <li>Revert "sbt 2.0.0" by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/100";>sbt/setup-sbt#100</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sbt/setup-sbt/compare/v1...v1.4.0";>https://github.com/sbt/setup-sbt/compare/v1...v1.4.0</a></p> <h2>v1.3.0</h2> <h2>Update</h2> <ul> <li>sbt 2.0.0 by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/99";>sbt/setup-sbt#99</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sbt/setup-sbt/compare/v1...v1.3.0";>https://github.com/sbt/setup-sbt/compare/v1...v1.3.0</a></p> <h2>v1.2.2</h2> <h2>What's Changed</h2> <ul> <li>Bump carabiner-dev/actions from 1.2.0 to 1.2.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sbt/setup-sbt/pull/96";>sbt/setup-sbt#96</a></li> <li>Avoid using environment variables in the <code>with</code> parameter by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/98";>sbt/setup-sbt#98</a></li> <li>Update sbt, scripted-plugin to 1.12.12 by <a href="https://github.com/scala-steward";><code>@scala-steward</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/97";>sbt/setup-sbt#97</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sbt/setup-sbt/compare/v1...v1.2.2";>https://github.com/sbt/setup-sbt/compare/v1...v1.2.2</a></p> <h2>v1.2.1</h2> <h2>Updates</h2> <ul> <li>fix: Fixes disk cache by reducing the number of files to be hashed by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/95";>sbt/setup-sbt#95</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sbt/setup-sbt/compare/v1...v1.2.1";>https://github.com/sbt/setup-sbt/compare/v1...v1.2.1</a></p> <h2>v1.2.0</h2> <h2>bug fixes</h2> <ul> <li>fix: Fixes Windows disk cache path by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/90";>sbt/setup-sbt#90</a></li> <li>fix: Fixes disk cache saving and restoration by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/91";>sbt/setup-sbt#91</a> + <a href="https://redirect.github.com/sbt/setup-sbt/pull/92";>sbt/setup-sbt#92</a></li> <li>fix: Include JDK version in the cache key by <a href="https://github.com/eed3si9n";><code>@eed3si9n</code></a> in <a href="https://redirect.github.com/sbt/setup-sbt/pull/93";>sbt/setup-sbt#93</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sbt/setup-sbt/compare/v1...v1.2.0";>https://github.com/sbt/setup-sbt/compare/v1...v1.2.0</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sbt/setup-sbt/commit/66fb4376e81982c7d92a4074170846fff88e2e30";><code>66fb437</code></a> Merge pull request <a href="https://redirect.github.com/sbt/setup-sbt/issues/106";>#106</a> from sbt/wip/sbt-2.0.1</li> <li><a href="https://github.com/sbt/setup-sbt/commit/b1f5a174656641b40a0c48a32960696a0df78cfd";><code>b1f5a17</code></a> Update default runner to sbt 2.0.1</li> <li><a href="https://github.com/sbt/setup-sbt/commit/fe88a15004530cb10e3278ed2597ab8ce81eedf1";><code>fe88a15</code></a> Merge pull request <a href="https://redirect.github.com/sbt/setup-sbt/issues/105";>#105</a> from scala-steward/update/sbt-2.0.1</li> <li><a href="https://github.com/sbt/setup-sbt/commit/a6b05cde62a152db884a4ea9431435a37eeae21a";><code>a6b05cd</code></a> Update sbt to 2.0.1</li> <li><a href="https://github.com/sbt/setup-sbt/commit/f77da664caeed661b000ffc5606e97a58eeb3088";><code>f77da66</code></a> Merge pull request <a href="https://redirect.github.com/sbt/setup-sbt/issues/104";>#104</a> from sbt/dependabot/github_actions/actions/cache-6.1.0</li> <li><a href="https://github.com/sbt/setup-sbt/commit/2fb2396f99db825e64a9b9a4c848afbb9bc9ea86";><code>2fb2396</code></a> Bump actions/cache from 5.0.5 to 6.1.0</li> <li><a href="https://github.com/sbt/setup-sbt/commit/e832248fc1e43de731fac23a86ba4e18826c581e";><code>e832248</code></a> Merge pull request <a href="https://redirect.github.com/sbt/setup-sbt/issues/103";>#103</a> from scala-steward/update/sbt-1.12.13</li> <li><a href="https://github.com/sbt/setup-sbt/commit/2240d3c1344424e9aee6b8b00074fa80b2c15fbb";><code>2240d3c</code></a> Merge pull request <a href="https://redirect.github.com/sbt/setup-sbt/issues/102";>#102</a> from sbt/dependabot/github_actions/actions/checkout-7</li> <li><a href="https://github.com/sbt/setup-sbt/commit/17d87eaca39d928f34c10a15c80e3579136954e8";><code>17d87ea</code></a> Regenerated action.yml</li> <li><a href="https://github.com/sbt/setup-sbt/commit/03b53e3e80ba60c07b5c3bd05e2feacc02207a4a";><code>03b53e3</code></a> Update sbt, scripted-plugin to 1.12.13</li> <li>Additional commits viewable in <a href="https://github.com/sbt/setup-sbt/compare/508b753e53cb6095967669e0911487d2b9bc9f41...66fb4376e81982c7d92a4074170846fff88e2e30";>compare view</a></li> </ul> </details> <br /> Updates `coursier/cache-action` from 8.1.0 to 8.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/coursier/cache-action/releases";>coursier/cache-action's releases</a>.</em></p> <blockquote> <h2>v8.1.1</h2> <h2>Documentation updates</h2> <ul> <li>Document <code>disableFallback</code> input in README by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/coursier/cache-action/pull/824";>coursier/cache-action#824</a></li> </ul> <h2>Updates / maintenance</h2> <ul> <li>Bump prettier from 3.8.1 to 3.8.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/823";>coursier/cache-action#823</a></li> <li>Bump <code>@types/node</code> from 25.5.0 to 25.6.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/822";>coursier/cache-action#822</a></li> <li>Bump <code>@typescript-eslint/parser</code> from 8.57.1 to 8.58.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/821";>coursier/cache-action#821</a></li> <li>Bump eslint from 10.0.2 to 10.2.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/818";>coursier/cache-action#818</a></li> <li>Add .gitattributes to fix Windows CI prettier format-check failure by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/coursier/cache-action/pull/826";>coursier/cache-action#826</a></li> <li>Bump <code>@typescript-eslint/eslint-plugin</code> from 8.57.1 to 8.59.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/820";>coursier/cache-action#820</a></li> <li>Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/831";>coursier/cache-action#831</a></li> <li>Bump <code>@actions/glob</code> from 0.6.1 to 0.7.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/830";>coursier/cache-action#830</a></li> <li>Bump <code>@types/node</code> from 25.6.0 to 25.7.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/828";>coursier/cache-action#828</a></li> <li>Bump prettier from 3.8.2 to 3.8.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/827";>coursier/cache-action#827</a></li> <li>Bump typescript from 5.9.3 to 6.0.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/829";>coursier/cache-action#829</a></li> <li>Update dist by <a href="https://github.com/github-actions";><code>@github-actions</code></a>[bot] in <a href="https://redirect.github.com/coursier/cache-action/pull/832";>coursier/cache-action#832</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/coursier/cache-action/compare/v8...v8.1.1";>https://github.com/coursier/cache-action/compare/v8...v8.1.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/coursier/cache-action/commit/95e5b1029b6b86e7bac033ee44a0697d8a527d2d";><code>95e5b10</code></a> Update dist (<a href="https://redirect.github.com/coursier/cache-action/issues/832";>#832</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/03d2e022a734c0025d94d1e55d3ef190f79c85c6";><code>03d2e02</code></a> Bump typescript from 5.9.3 to 6.0.3 (<a href="https://redirect.github.com/coursier/cache-action/issues/829";>#829</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/43116bbb404c8172f54c784085be233c82f9a111";><code>43116bb</code></a> Bump prettier from 3.8.2 to 3.8.3 (<a href="https://redirect.github.com/coursier/cache-action/issues/827";>#827</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/5794b17455cee29ac0e515c68faf99252c98f428";><code>5794b17</code></a> Bump <code>@types/node</code> from 25.6.0 to 25.7.0 (<a href="https://redirect.github.com/coursier/cache-action/issues/828";>#828</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/cee848f471790ab3d9599d8a244654c568e35f32";><code>cee848f</code></a> Bump <code>@actions/glob</code> from 0.6.1 to 0.7.0 (<a href="https://redirect.github.com/coursier/cache-action/issues/830";>#830</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/e5bcda8eafd6d951f0cb661612ebd7a35e5b6b64";><code>e5bcda8</code></a> Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 (<a href="https://redirect.github.com/coursier/cache-action/issues/831";>#831</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/52ed32a031b57ab71c9a8f4d0418f9051c310e03";><code>52ed32a</code></a> Bump <code>@typescript-eslint/eslint-plugin</code> from 8.57.1 to 8.59.3 (<a href="https://redirect.github.com/coursier/cache-action/issues/820";>#820</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/95b07c5c73e36b973f274da368f01cb3cf25ca80";><code>95b07c5</code></a> Add .gitattributes to enforce LF line endings on all platforms (<a href="https://redirect.github.com/coursier/cache-action/issues/826";>#826</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/9bd58529fef7d9bc7bfaf6bb30da171e766fc182";><code>9bd5852</code></a> Bump eslint from 10.0.2 to 10.2.0 (<a href="https://redirect.github.com/coursier/cache-action/issues/818";>#818</a>)</li> <li><a href="https://github.com/coursier/cache-action/commit/0aa3fe3de429e6f8477735d7efb2593184a0a71b";><code>0aa3fe3</code></a> Bump <code>@typescript-eslint/parser</code> from 8.57.1 to 8.58.1 (<a href="https://redirect.github.com/coursier/cache-action/issues/821";>#821</a>)</li> <li>Additional commits viewable in <a href="https://github.com/coursier/cache-action/compare/90c37294538be80a558fd665531fcdc2b467b475...95e5b1029b6b86e7bac033ee44a0697d8a527d2d";>compare view</a></li> </ul> </details> <br /> Updates `actions/upload-artifact` from 4 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases";>actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>v7 What's new</h2> <h3>Direct Uploads</h3> <p>Adds support for uploading single files directly (unzipped). Callers can set the new <code>archive</code> parameter to <code>false</code> to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The <code>name</code> parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.</p> <h3>ESM</h3> <p>To support new versions of the <code>@actions/*</code> packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Add proxy integration test by <a href="https://github.com/Link";><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/upload-artifact/pull/754";>actions/upload-artifact#754</a></li> <li>Upgrade the module to ESM and bump dependencies by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/762";>actions/upload-artifact#762</a></li> <li>Support direct file uploads by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/764";>actions/upload-artifact#764</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Link";><code>@Link</code></a>- made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/754";>actions/upload-artifact#754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0";>https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p> <h2>v6.0.0</h2> <h2>v6 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Upload Artifact Node 24 support by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/719";>actions/upload-artifact#719</a></li> <li>fix: update <code>@actions/artifact</code> for Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/744";>actions/upload-artifact#744</a></li> <li>prepare release v6.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/745";>actions/upload-artifact#745</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0";>https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p><strong>BREAKING CHANGE:</strong> this update supports Node <code>v24.x</code>. This is not a breaking change per-se but we're treating it as such.</p> <ul> <li>Update README.md by <a href="https://github.com/GhadimiR";><code>@GhadimiR</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/681";>actions/upload-artifact#681</a></li> <li>Update README.md by <a href="https://github.com/nebuk89";><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/712";>actions/upload-artifact#712</a></li> <li>Readme: spell out the first use of GHES by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/727";>actions/upload-artifact#727</a></li> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak";><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/725";>actions/upload-artifact#725</a></li> <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li> <li>Prepare <code>v5.0.0</code> by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/734";>actions/upload-artifact#734</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a";><code>043fb46</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/797";>#797</a> from actions/yacaovsnc/update-dependency</li> <li><a href="https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94";><code>634250c</code></a> Include changes in typespec/ts-http-runtime 0.3.5</li> <li><a href="https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8";><code>e454baa</code></a> Readme: bump all the example versions to v7 (<a href="https://redirect.github.com/actions/upload-artifact/issues/796";>#796</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e";><code>74fad66</code></a> Update the readme with direct upload details (<a href="https://redirect.github.com/actions/upload-artifact/issues/795";>#795</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f";><code>bbbca2d</code></a> Support direct file uploads (<a href="https://redirect.github.com/actions/upload-artifact/issues/764";>#764</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296";><code>589182c</code></a> Upgrade the module to ESM and bump dependencies (<a href="https://redirect.github.com/actions/upload-artifact/issues/762";>#762</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/47309c993abb98030a35d55ef7ff34b7fa1074b5";><code>47309c9</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/754";>#754</a> from actions/Link-/add-proxy-integration-tests</li> <li><a href="https://github.com/actions/upload-artifact/commit/02a8460834e70dab0ce194c64360c59dc1475ef0";><code>02a8460</code></a> Add proxy integration test</li> <li><a href="https://github.com/actions/upload-artifact/commit/b7c566a772e6b6bfb58ed0dc250532a479d7789f";><code>b7c566a</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/745";>#745</a> from actions/upload-artifact-v6-release</li> <li><a href="https://github.com/actions/upload-artifact/commit/e516bc8500aaf3d07d591fcd4ae6ab5f9c391d5b";><code>e516bc8</code></a> docs: correct description of Node.js 24 support in README</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-artifact/compare/v4...v7";>compare view</a></li> </ul> </details> <br /> Updates `actions/download-artifact` from 6 to 8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases";>actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h2>v8 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.</p> </blockquote> <blockquote> <p>[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).</p> </blockquote> <h3>Direct downloads</h3> <p>To support direct uploads in <code>actions/upload-artifact</code>, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the <code>Content-Type</code> header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new <code>skip-decompress</code> parameter to <code>true</code>.</p> <h3>Enforced checks (breaking)</h3> <p>A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the <code>digest-mismatch</code> parameter. To be secure by default, we are now defaulting the behavior to <code>error</code> which will fail the workflow run.</p> <h3>ESM</h3> <p>To support new versions of the @actions/* packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Don't attempt to un-zip non-zipped downloads by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/460";>actions/download-artifact#460</a></li> <li>Add a setting to specify what to do on hash mismatch and default it to <code>error</code> by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/461";>actions/download-artifact#461</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v7...v8.0.0";>https://github.com/actions/download-artifact/compare/v7...v8.0.0</a></p> <h2>v7.0.0</h2> <h2>v7 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak";><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/440";>actions/download-artifact#440</a></li> <li>Download Artifact Node24 support by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/415";>actions/download-artifact#415</a></li> <li>fix: update <code>@actions/artifact</code> to fix Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/451";>actions/download-artifact#451</a></li> <li>prepare release v7.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/452";>actions/download-artifact#452</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/patrikpolyak";><code>@patrikpolyak</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/440";>actions/download-artifact#440</a></li> <li><a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/415";>actions/download-artifact#415</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0";>https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c";><code>3e5f45b</code></a> Add regression tests for CJK characters (<a href="https://redirect.github.com/actions/download-artifact/issues/471";>#471</a>)</li> <li><a href="https://github.com/actions/download-artifact/commit/e6d03f67377d4412c7aa56a8e2e4988e6ec479dd";><code>e6d03f6</code></a> Add a regression test for artifact name + content-type mismatches (<a href="https://redirect.github.com/actions/download-artifact/issues/472";>#472</a>)</li> <li><a href="https://github.com/actions/download-artifact/commit/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3";><code>70fc10c</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/461";>#461</a> from actions/danwkennedy/digest-mismatch-behavior</li> <li><a href="https://github.com/actions/download-artifact/commit/f258da9a506b755b84a09a531814700b86ccfc62";><code>f258da9</code></a> Add change docs</li> <li><a href="https://github.com/actions/download-artifact/commit/ccc058e5fbb0bb2352213eaec3491e117cbc4a5c";><code>ccc058e</code></a> Fix linting issues</li> <li><a href="https://github.com/actions/download-artifact/commit/bd7976ba57ecea96e6f3df575eb922d11a12a9fd";><code>bd7976b</code></a> Add a setting to specify what to do on hash mismatch and default it to <code>error</code></li> <li><a href="https://github.com/actions/download-artifact/commit/ac21fcf45e0aaee541c0f7030558bdad38d77d6c";><code>ac21fcf</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/460";>#460</a> from actions/danwkennedy/download-no-unzip</li> <li><a href="https://github.com/actions/download-artifact/commit/15999bff51058bc7c19b50ebbba518eaef7c26c0";><code>15999bf</code></a> Add note about package bumps</li> <li><a href="https://github.com/actions/download-artifact/commit/974686ed5098c7f9c9289ec946b9058e496a2561";><code>974686e</code></a> Bump the version to <code>v8</code> and add release notes</li> <li><a href="https://github.com/actions/download-artifact/commit/fbe48b1d2756394be4cd4358ed3bc1343b330e75";><code>fbe48b1</code></a> Update test names to make it clearer what they do</li> <li>Additional commits viewable in <a href="https://github.com/actions/download-artifact/compare/v6...v8";>compare view</a></li> </ul> </details> <br /> Updates `docker/setup-buildx-action` from 4.0.0 to 4.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-buildx-action/releases";>docker/setup-buildx-action's releases</a>.</em></p> <blockquote> <h2>v4.2.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/572";>docker/setup-buildx-action#572</a></li> <li>Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/551";>docker/setup-buildx-action#551</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/557";>docker/setup-buildx-action#557</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/580";>docker/setup-buildx-action#580</a></li> <li>Bump <code>@sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/573";>docker/setup-buildx-action#573</a></li> <li>Bump <code>@sigstore/verify</code> from 3.1.0 to 3.1.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/576";>docker/setup-buildx-action#576</a></li> <li>Bump js-yaml from 4.1.1 to 5.2.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/562";>docker/setup-buildx-action#562</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/577";>docker/setup-buildx-action#577</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/556";>docker/setup-buildx-action#556</a></li> <li>Bump undici from 6.25.0 to 6.27.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/570";>docker/setup-buildx-action#570</a></li> <li>Bump vite from 7.3.2 to 7.3.6 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/569";>docker/setup-buildx-action#569</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0";>https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0</a></p> <h2>v4.1.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.79.0 to 0.90.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/489";>docker/setup-buildx-action#489</a></li> <li>Bump brace-expansion from 1.1.12 to 5.0.6 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/547";>docker/setup-buildx-action#547</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/508";>docker/setup-buildx-action#508</a></li> <li>Bump fast-xml-builder from 1.0.0 to 1.2.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/540";>docker/setup-buildx-action#540</a></li> <li>Bump fast-xml-parser from 5.4.2 to 5.8.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/496";>docker/setup-buildx-action#496</a></li> <li>Bump flatted from 3.3.3 to 3.4.2 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/499";>docker/setup-buildx-action#499</a></li> <li>Bump glob from 10.3.12 to 13.0.6 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/495";>docker/setup-buildx-action#495</a></li> <li>Bump handlebars from 4.7.8 to 4.7.9 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/504";>docker/setup-buildx-action#504</a></li> <li>Bump lodash from 4.17.23 to 4.18.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/523";>docker/setup-buildx-action#523</a></li> <li>Bump picomatch from 4.0.3 to 4.0.4 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/503";>docker/setup-buildx-action#503</a></li> <li>Bump postcss from 8.5.6 to 8.5.10 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/537";>docker/setup-buildx-action#537</a></li> <li>Bump tar from 6.2.1 to 7.5.15 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/545";>docker/setup-buildx-action#545</a></li> <li>Bump undici from 6.23.0 to 6.25.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/492";>docker/setup-buildx-action#492</a></li> <li>Bump vite from 7.3.1 to 7.3.2 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/520";>docker/setup-buildx-action#520</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v4.0.0...v4.1.0";>https://github.com/docker/setup-buildx-action/compare/v4.0.0...v4.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-buildx-action/commit/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c";><code>bb05f3f</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/580";>#580</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/321c814cb51fbe4af8eca00249525cc0973ea66f";><code>321c814</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/b9a36ef79ba42cfc611885a1e8c388fbf8b8cb3f";><code>b9a36ef</code></a> build(deps): bump <code>@docker/actions-toolkit</code> from 0.91.0 to 0.92.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/ebeab241289497cd564ac98b3cfc9e64607bb276";><code>ebeab24</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/570";>#570</a> from docker/dependabot/npm_and_yarn/undici-6.27.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/5c7b8ae78cec97a3215d4d86679b1d072eaa80cb";><code>5c7b8ae</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/037e618cd98e95e81525b15ff0e9c96f507e6a0e";><code>037e618</code></a> build(deps): bump undici from 6.25.0 to 6.27.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/66080e5802281ec2e72b7f3108915643e702db85";><code>66080e5</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/577";>#577</a> from docker/dependabot/npm_and_yarn/sigstore-4.1.1</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/409aef0aa3f48f0a742e7dec4e0e04ab19afe93c";><code>409aef0</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/562";>#562</a> from docker/dependabot/npm_and_yarn/js-yaml-4.2.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/49c6e42949280fa0d70fb327633591be54efbfb6";><code>49c6e42</code></a> build(deps): bump sigstore from 4.1.0 to 4.1.1</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/2211273e8121ecf9ecb7d6c7c0fcd55526d530c7";><code>2211273</code></a> [dependabot skip] chore: update generated content</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c";>compare view</a></li> </ul> </details> <br /> Updates `docker/login-action` from 4.1.0 to 4.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/login-action/releases";>docker/login-action's releases</a>.</em></p> <blockquote> <h2>v4.4.0</h2> <ul> <li>Skip empty <code>registry-auth</code> secret mask by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1035";>docker/login-action#1035</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1077.0 <a href="https://redirect.github.com/docker/login-action/pull/1034";>docker/login-action#1034</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.3.0...v4.4.0";>https://github.com/docker/login-action/compare/v4.3.0...v4.4.0</a></p> <h2>v4.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1022";>docker/login-action#1022</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1076.0 <a href="https://redirect.github.com/docker/login-action/pull/999";>docker/login-action#999</a> <a href="https://redirect.github.com/docker/login-action/pull/1030";>docker/login-action#1030</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/login-action/pull/1004";>docker/login-action#1004</a> <a href="https://redirect.github.com/docker/login-action/pull/1027";>docker/login-action#1027</a></li> <li>Bump <code>@sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/login-action/pull/1023";>docker/login-action#1023</a></li> <li>Bump <code>@sigstore/verify</code> from 3.1.0 to 3.1.1 in <a href="https://redirect.github.com/docker/login-action/pull/1029";>docker/login-action#1029</a></li> <li>Bump http-proxy-agent and https-proxy-agent to 9.1.0 in <a href="https://redirect.github.com/docker/login-action/pull/1017";>docker/login-action#1017</a></li> <li>Bump js-yaml from 4.1.1 to 5.2.0 in <a href="https://redirect.github.com/docker/login-action/pull/1028";>docker/login-action#1028</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/login-action/pull/1031";>docker/login-action#1031</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/login-action/pull/1002";>docker/login-action#1002</a></li> <li>Bump undici from 6.24.1 to 6.27.0 in <a href="https://redirect.github.com/docker/login-action/pull/1020";>docker/login-action#1020</a></li> <li>Bump vite from 7.3.3 to 7.3.6 in <a href="https://redirect.github.com/docker/login-action/pull/1019";>docker/login-action#1019</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.2.0...v4.3.0";>https://github.com/docker/login-action/compare/v4.2.0...v4.3.0</a></p> <h2>v4.2.0</h2> <ul> <li>Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 in <a href="https://redirect.github.com/docker/login-action/pull/976";>docker/login-action#976</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1050.0 in <a href="https://redirect.github.com/docker/login-action/pull/960";>docker/login-action#960</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.86.0 to 0.90.0 in <a href="https://redirect.github.com/docker/login-action/pull/970";>docker/login-action#970</a></li> <li>Bump brace-expansion from 2.0.1 to 5.0.6 in <a href="https://redirect.github.com/docker/login-action/pull/993";>docker/login-action#993</a></li> <li>Bump fast-xml-builder from 1.1.4 to 1.2.0 in <a href="https://redirect.github.com/docker/login-action/pull/985";>docker/login-action#985</a></li> <li>Bump fast-xml-parser from 5.3.6 to 5.8.0 in <a href="https://redirect.github.com/docker/login-action/pull/963";>docker/login-action#963</a></li> <li>Bump http-proxy-agent and https-proxy-agent to 9.0.0 in <a href="https://redirect.github.com/docker/login-action/pull/961";>docker/login-action#961</a></li> <li>Bump postcss from 8.5.6 to 8.5.10 in <a href="https://redirect.github.com/docker/login-action/pull/979";>docker/login-action#979</a></li> <li>Bump tar from 6.2.1 to 7.5.15 in <a href="https://redirect.github.com/docker/login-action/pull/991";>docker/login-action#991</a></li> <li>Bump vite from 7.3.1 to 7.3.3 in <a href="https://redirect.github.com/docker/login-action/pull/986";>docker/login-action#986</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.1.0...v4.2.0";>https://github.com/docker/login-action/compare/v4.1.0...v4.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/af1e73f918a031802d376d3c8bbc3fe56130a9b0";><code>af1e73f</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1034";>#1034</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li> <li><a href="https://github.com/docker/login-action/commit/da722bde43bacb027adfc67d42dbaa4c0f9e550b";><code>da722bd</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/2916ad60bd5cb72f07aa54c69fdcc61749c09b7a";><code>2916ad6</code></a> build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...</li> <li><a href="https://github.com/docker/login-action/commit/ca0a662f786e4cfddce972005bd68f3dafc3a903";><code>ca0a662</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1035";>#1035</a> from crazy-max/fix-registry-auth-empty-mask</li> <li><a href="https://github.com/docker/login-action/commit/c455755a579833bf0d2e4e54e3beb413ef10cc80";><code>c455755</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/48351901f89581a7c12870c787d3f06d1f498438";><code>4835190</code></a> skip empty registry-auth secret mask</li> <li><a href="https://github.com/docker/login-action/commit/992421c6e6806a7f6df609d1bfff374f9eca3004";><code>992421c</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1033";>#1033</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li><a href="https://github.com/docker/login-action/commit/b249b43765525dd7951068267a34cf63f22ab4f0";><code>b249b43</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1032";>#1032</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li><a href="https://github.com/docker/login-action/commit/1b67977736863551a88ff218642a2d7628b10520";><code>1b67977</code></a> build(deps): bump docker/bake-action from 7.2.0 to 7.3.0</li> <li><a href="https://github.com/docker/login-action/commit/9d49d6a3234c78daa10c3c12183ef7b6caa8e69e";><code>9d49d6a</code></a> build(deps): bump docker/bake-action/subaction/matrix</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...af1e73f918a031802d376d3c8bbc3fe56130a9b0";>compare view</a></li> </ul> </details> <br /> Updates `docker/build-push-action` from 7.1.0 to 7.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases";>docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v7.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https:/... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
