:seedling: Update github-actions group (major) by syself-bot[bot] · Pull Request #2114 · syself/cluster-api-provider-hetzner

syself-bot · 2026-06-22T12:57:05Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4.3.1` → `v7.0.1`
actions/checkout	action	major	`v4` → `v7`
actions/labeler	action	major	`v5` → `v7`
actions/setup-go	action	major	`v5.6.0` → `v7.0.0`
actions/setup-node	action	major	`v4` → `v7`

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Skip running unsafe pr check if input is default by @aiqiaoy in #2518
Trim only ascii whitespace for branch by @aiqiaoy in #2521
Escape values passed to --unset by @aiqiaoy in #2530
Various dependency updates

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Various dependency updates

`v7`

Compare Source

Skip running unsafe pr check if input is default by @aiqiaoy in #2518
Trim only ascii whitespace for branch by @aiqiaoy in #2521
Escape values passed to --unset by @aiqiaoy in #2530
Various dependency updates

`v6.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v5.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v5 by @aiqiaoy in #2501
backport fixes to releases-v5 by @aiqiaoy in #2523

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v5.0.1...v5.1.0

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v4.4.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v4 by @aiqiaoy in #2502
backport fixes to releases-v4 by @aiqiaoy in #2524

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v4.3.1...v4.4.0

actions/labeler (actions/labeler)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Migrate to ESM and update dependencies by @chiranjib-swain in #949

Full Changelog: actions/labeler@v6...v7.0.0

`v7`

Compare Source

`v6.2.0`

Compare Source

What's Changed

Bug Fix

Improve PR number validation and warning messages in input handling by @chiranjib-swain in #939

Dependency Updates

Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override by @dependabot in #943
Bump @typescript-eslint/eslint-plugin from 8.59.1 to 8.61.1 by @dependabot in #942

Full Changelog: actions/labeler@v6.1.0...v6.2.0

`v6.1.0`

Compare Source

Enhancements

Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by @bluca in #923

Bug Fixes

Improve Labeler Action documentation and permission error handling by @chiranjib-swain in #897
Preserve manually added labels during workflow runs and refine label synchronization logic by @chiranjib-swain in #917

Dependency Updates

Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by @dependabot in #877
Upgrade minimatch from 10.0.1 to 10.2.3 by @dependabot in #926
Upgrade dependencies (@actions/core, @actions/github, js-yaml, minimatch, @typescript-eslint) by @Copilot in #934

New Contributors

@chiranjib-swain made their first contribution in #897
@bluca made their first contribution in #923
@Copilot made their first contribution in #934

Full Changelog: actions/labeler@v6...v6.1.0

`v6.0.1`

Compare Source

What's Changed

Upgrade publish-action from 0.2.2 to 0.4.0 by @aparnajyothi-y in #901

New Contributors

@aparnajyothi-y made their first contribution in #901

Full Changelog: actions/labeler@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @jcambass in #802

Breaking Changes

Upgrade Node.js version to 24 in action and dependencies @salmanmkc in #891
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

Dependency Upgrades

Upgrade eslint-config-prettier from 9.0.0 to 9.1.0 by @dependabot[bot] in #711
Upgrade eslint from 8.52.0 to 8.55.0 by @dependabot[bot] in #720
Upgrade @types/jest from 29.5.6 to 29.5.11 by @dependabot[bot] in #719
Upgrade @types/js-yaml from 4.0.8 to 4.0.9 by @dependabot[bot] in #718
Upgrade @typescript-eslint/parser from 6.9.0 to 6.14.0 by @dependabot[bot] in #717
Upgrade prettier from 3.0.3 to 3.1.1 by @dependabot[bot] in #726
Upgrade eslint from 8.55.0 to 8.56.0 by @dependabot[bot] in #725
Upgrade @typescript-eslint/parser from 6.14.0 to 6.19.0 by @dependabot[bot] in #745
Upgrade eslint-plugin-jest from 27.4.3 to 27.6.3 by @dependabot[bot] in #744
Upgrade @typescript-eslint/eslint-plugin from 6.9.0 to 6.20.0 by @dependabot[bot] in #750
Upgrade prettier from 3.1.1 to 3.2.5 by @dependabot[bot] in #752
Upgrade undici from 5.26.5 to 5.28.3 by @dependabot[bot] in #757
Upgrade braces from 3.0.2 to 3.0.3 by @dependabot[bot] in #789
Upgrade minimatch from 9.0.3 to 10.0.1 by @dependabot[bot] in #805
Upgrade @actions/core from 1.10.1 to 1.11.1 by @dependabot[bot] in #811
Upgrade typescript from 5.4.3 to 5.7.2 by @dependabot[bot] in #819
Upgrade @typescript-eslint/parser from 7.3.1 to 8.17.0 by @dependabot[bot] in #824
Upgrade prettier from 3.2.5 to 3.4.2 by @dependabot[bot] in #825
Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #827
Upgrade eslint-plugin-jest from 27.9.0 to 28.9.0 by @dependabot[bot] in #832
Upgrade ts-jest from 29.1.2 to 29.2.5 by @dependabot[bot] in #831
Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot[bot] in #830
Upgrade typescript from 5.7.2 to 5.7.3 by @dependabot[bot] in #835
Upgrade eslint-plugin-jest from 28.9.0 to 28.11.0 by @dependabot[bot] in #839
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot[bot] in #842
Upgrade @octokit/request-error from 5.0.1 to 5.1.1 by @dependabot[bot] in #846

Documentation changes

Add note regarding pull_request_target to README.md by @silverwind in #669
Update readme with additional examples and important note about pull_request_target event by @IvanZosimov in #721
Document update - permission section by @harithavattikuti in #840
Improvement in documentation for pull_request_target event usage in README by @suyashgaonkar in #871
Fix broken links in documentation by @suyashgaonkar in #822

New Contributors

@silverwind made their first contribution in #669
@Jcambass made their first contribution in #802
@suyashgaonkar made their first contribution in #822
@HarithaVattikuti made their first contribution in #840
@salmanmkc made their first contribution in #891

Full Changelog: actions/labeler@v5...v6.0.0

`v6`

Compare Source

actions/setup-go (actions/setup-go)

`v7.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #763
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #771

New Contributors

@philip-gai made their first contribution in #771

Full Changelog: actions/setup-go@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Dependency update

Upgrade actions dependencies by @priyagupta108 with @Copilot in #744
Upgrade @types/node and typescript-eslint dependencies to resolve npm audit findings by @HarithaVattikuti in #755
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #758
Upgrade version to 6.5.0 in package.json and package-lock.json by @HarithaVattikuti in #762

New Contributors

@priyagupta108 with @Copilot made their first contribution in #744
@jasongin made their first contribution in #758

Full Changelog: actions/setup-go@v6...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in #721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in #724
Fix Microsoft build of Go link by @gdams in #734

New Contributors

@gdams made their first contribution in #721

Full Changelog: actions/setup-go@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in #705
Fix golang download url to go.dev by @178inaba in #469

Full Changelog: actions/setup-go@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Enhancements

Example for restore-only cache in documentation by @aparnajyothi-y in #696
Update Node.js version in action.yml by @ccoVeille in #691
Documentation update of actions/checkout by @deining in #683

Dependency updates

Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot in #682
Upgrade @actions/cache to v5 by @salmanmkc in #695
Upgrade actions/checkout from 5 to 6 by @dependabot in #686
Upgrade qs from 6.14.0 to 6.14.1 by @dependabot in #703

New Contributors

@ccoVeille made their first contribution in #691
@deining made their first contribution in #683

Full Changelog: actions/setup-go@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in #665
Add support for .tool-versions file and update workflow by @priya-kinthali in #673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in #674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in #617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #641
Upgrade semver and @types/semver by @dependabot in #652

New Contributors

@nicholasngai made their first contribution in #665
@priya-kinthali made their first contribution in #673
@mahabaleshwars made their first contribution in #674

Full Changelog: actions/setup-go@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in #460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in #624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #589
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #591
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in #590
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #594
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in #538
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in #603
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in #618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #631

New Contributors

@matthewhughes934 made their first contribution in #618
@salmanmkc made their first contribution in #624

Full Changelog: actions/setup-go@v5...v6.0.0

`v6`

Compare Source

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

`v5`

Compare Source

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- "on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

| datasource | package | from | to | | ----------- | ------------------ | ------ | ------ | | github-tags | actions/checkout | v4.3.1 | v7.0.1 | | github-tags | actions/checkout | v4.4.0 | v7.0.1 | | github-tags | actions/labeler | v5.0.0 | v7.0.0 | | github-tags | actions/setup-go | v5.6.0 | v7.0.0 | | github-tags | actions/setup-node | v4.4.0 | v7.0.0 |

syself-bot Bot added type/major update/github-action labels Jun 22, 2026

github-actions Bot added size/M Denotes a PR that changes 50-200 lines, ignoring generated files. area/github Changes made in the github directory labels Jun 22, 2026

syself-bot Bot changed the title ~~🌱 Update github-actions group (major)~~ 🌱 Update Github Actions group to v7.0.0 Jun 23, 2026

syself-bot Bot force-pushed the renovate/major-7-github-actions branch from 947b170 to 53a5aec Compare July 14, 2026 12:07

syself-bot Bot changed the title ~~🌱 Update Github Actions group to v7.0.0~~ 🌱 Update github-actions group to v7.0.0 Jul 14, 2026

syself-bot Bot force-pushed the renovate/major-7-github-actions branch from 53a5aec to b54e2b5 Compare July 16, 2026 12:14

syself-bot Bot force-pushed the renovate/major-7-github-actions branch from b54e2b5 to 56af3aa Compare July 21, 2026 12:19

syself-bot Bot changed the title ~~🌱 Update github-actions group to v7.0.0~~ 🌱 Update github-actions group (major) Jul 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🌱 Update github-actions group (major)#2114

🌱 Update github-actions group (major)#2114
syself-bot[bot] wants to merge 1 commit into
mainfrom
renovate/major-7-github-actions

syself-bot Bot commented Jun 22, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

syself-bot Bot commented Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

Enhancements:

What's Changed

Bug Fix

Dependency Updates

Enhancements

Bug Fixes

Dependency Updates

New Contributors

What's Changed

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

Documentation changes

New Contributors

What's Changed

New Contributors

What's Changed

Dependency update

New Contributors

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

What's Changed

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Documentation

Dependency updates:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

Configuration

Uh oh!

Reviewers

Assignees

Labels

syself-bot Bot commented Jun 22, 2026 •

edited

Loading