github-actions Update GitHub Actions (major)#4
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
884d4aa to
77ee1ba
Compare
77ee1ba to
43a55fa
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4→v8.0.1v4→v7.0.0v6→v7.0.0v3.6.0→v4.0.0v3.12.0→v4.0.0Release Notes
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter tofalse.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaroundYou download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: actions/download-artifact@v4...v5.0.0
v4.3.0Compare Source
What's Changed
artifact-idsinput by @GrantBirki in #401New Contributors
Full Changelog: actions/download-artifact@v4.2.1...v4.3.0
v4.2.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.2.0...v4.2.1
v4.2.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4.1.9...v4.2.0
v4.1.9Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4.1.8...v4.1.9
v4.1.8Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.1.7...v4.1.8
v4.1.7Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.1.6...v4.1.7
v4.1.6Compare Source
What's Changed
@actions/artifactdependency to v2.1.6 by @eggyhead in #324Full Changelog: actions/download-artifact@v4.1.5...v4.1.6
v4.1.5Compare Source
What's Changed
@actions/coreto v1.10.1 and@actions/artifactto v2.1.5Full Changelog: actions/download-artifact@v4.1.4...v4.1.5
v4.1.4Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4...v4.1.4
v4.1.3Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4...v4.1.3
v4.1.2Compare Source
v4.1.1Compare Source
@actions/artifactsto latest versionv4.1.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4...v4.1.0
actions/upload-artifact (actions/upload-artifact)
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v6.0.0Compare Source
v5.0.0Compare Source
v4.6.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.6.2
v4.6.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.1
v4.6.0Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.0
v4.5.0Compare Source
What's Changed
Node.jsversion in action by @hamirmahal in #578artifact-digestoutput by @bdehamer in #656New Contributors
Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0
v4.4.3Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3
v4.4.2Compare Source
What's Changed
@actions/artifactto 2.1.11 by @robherley in #627Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2
v4.4.1Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1
v4.4.0Compare Source
Notice: Breaking Changes⚠️
We will no longer include hidden files and folders by default in the
upload-artifactaction of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option,include-hidden-files, to continue to do so.See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.
What's Changed
Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0
v4.3.6Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.3.6
v4.3.5Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5
v4.3.4Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4
v4.3.3Compare Source
What's Changed
@actions/artifactdependency to v2.1.6 by @eggyhead in #565Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3
v4.3.2Compare Source
What's Changed
@actions/artifactdependency to v2.1.5 and@actions/coreto v1.0.1 by @eggyhead in #562New Contributors
Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2
v4.3.1Compare Source
v4.3.0Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.3.0
v4.2.0Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.2.0
v4.1.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.1.0
docker/build-push-action (docker/build-push-action)
v7.0.0Compare Source
DOCKER_BUILD_NO_SUMMARYandDOCKER_BUILD_EXPORT_RETENTION_DAYSenvs by @crazy-max in #1473Full Changelog: docker/build-push-action@v6.19.2...v7.0.0
v6.19.2Compare Source
GIT_AUTH_TOKENhost by @crazy-max in #1458Full Changelog: docker/build-push-action@v6.19.1...v6.19.2
v6.19.1Compare Source
GIT_AUTH_TOKENhost from GitHub server URL by @crazy-max in #1456Full Changelog: docker/build-push-action@v6.19.0...v6.19.1
v6.19.0Compare Source
github.comby @crazy-max in #1451Full Changelog: docker/build-push-action@v6.18.0...v6.19.0
v6.18.0Compare Source
Full Changelog: docker/build-push-action@v6.17.0...v6.18.0
v6.17.0Compare Source
Full Changelog: docker/build-push-action@v6.16.0...v6.17.0
v6.16.0Compare Source
Full Changelog: docker/build-push-action@v6.15.0...v6.16.0
v6.15.0Compare Source
Full Changelog: docker/build-push-action@v6.14.0...v6.15.0
v6.14.0Compare Source
Full Changelog: docker/build-push-action@v6.13.0...v6.14.0
v6.13.0Compare Source
Full Changelog: docker/build-push-action@v6.12.0...v6.13.0
v6.12.0Compare Source
Full Changelog: docker/build-push-action@v6.11.0...v6.12.0
v6.11.0Compare Source
defaultContextsupport forbuild-contextsinput by @crazy-max in #1283Full Changelog: docker/build-push-action@v6.10.0...v6.11.0
v6.10.0Compare Source
callinput to set method for evaluating build by @crazy-max in #1265Full Changelog: docker/build-push-action@v6.9.0...v6.10.0
v6.9.0Compare Source
Full Changelog: docker/build-push-action@v6.8.0...v6.9.0
v6.8.0Compare Source
Full Changelog: docker/build-push-action@v6.7.0...v6.8.0
v6.7.0Compare Source
Full Changelog: docker/build-push-action@v6.6.1...v6.7.0
v6.6.1Compare Source
Full Changelog: docker/build-push-action@v6.6.0...v6.6.1
v6.6.0Compare Source
Full Changelog: docker/build-push-action@v6.5.0...v6.6.0
v6.5.0Compare Source
Full Changelog: docker/build-push-action@v6.4.1...v6.5.0
v6.4.1Compare Source
repositoryandghtokenattributes for GitHub Actions cache backend" by @crazy-max in #1183Full Changelog: docker/build-push-action@v6.4.0...v6.4.1
v6.4.0Compare Source
repositoryandghtokenattributes for GitHub Actions cache backend by @crazy-max in #1133Full Changelog: docker/build-push-action@v6.3.0...v6.4.0
v6.3.0Compare Source
DOCKER_BUILD_RECORD_UPLOADenvironment variable to enable/disable build record upload by @crazy-max in #1172DOCKER_BUILD_NO_SUMMARYhas been deprecated. SetDOCKER_BUILD_SUMMARYtofalseinstead by @crazy-max in #1170 #1173Full Changelog: docker/build-push-action@v6.2.0...v6.3.0
v6.2.0Compare Source
Full Changelog: docker/build-push-action@v6.1.0...v6.2.0
v6.1.0Compare Source
Full Changelog: docker/build-push-action@v6.0.2...v6.1.0
v6.0.2Compare Source
Full Changelog: docker/build-push-action@v6.0.1...v6.0.2
v6.0.1Compare Source
Full Changelog: docker/build-push-action@v6.0.0...v6.0.1
docker/login-action (docker/login-action)
v4.0.0Compare Source
Full Changelog: docker/login-action@v3.7.0...v4.0.0
v3.7.0Compare Source
scopeinput to set scopes for the authentication token by @crazy-max in #912registry-authinput by @crazy-max in #911Full Changelog: docker/login-action@v3.6.0...v3.7.0
docker/setup-buildx-action (docker/setup-buildx-action)
v4.0.0Compare Source
Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0
Configuration
📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.