chore(deps): update github actions by renovate[bot] · Pull Request #129 · Catglobe/Catglobe.CgScript

renovate · 2026-05-11T00:51:22Z

This PR contains the following updates:

Package	Type	Update	Change
Catglobe/save-actions-cache	action	major	`v1` → `v2`
NuGet/login	action	pinDigest	→ `8d19675`
actions/checkout	action	major	`v4` → `v7`
actions/create-github-app-token	action	major	`v1` → `v3`
actions/setup-dotnet	action	major	`v4` → `v6`
actions/setup-node	action	major	`v4` → `v7`

Release Notes

Catglobe/save-actions-cache (Catglobe/save-actions-cache)

`v2.4`

Compare Source

Add windows support

Full Changelog: Catglobe/save-actions-cache@v1...v2.4

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v5.1.0`

Compare Source

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

actions/create-github-app-token (actions/create-github-app-token)

`v3.2.0`

Compare Source

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)
support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
validate private-key input (#376) (f24bbd8)

`v3.1.1`

Compare Source

Bug Fixes

improve error message when app identifier is empty (#362) (07e2b76), closes #249

`v3.1.0`

Compare Source

Bug Fixes

deps: bump p-retry from 7.1.1 to 8.0.0 (#357) (3bbe07d)

Features

add client-id input and deprecate app-id (#353) (e6bd4e6)
update permission inputs (#358) (076e948)

`v3.0.0`

Compare Source

feat!: node 24 support (#275) (2e564a0)
fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (4451bcb)

Bug Fixes

remove custom proxy handling (#143) (dce0ab0)

BREAKING CHANGES

Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

`v3`

Compare Source

`v2.2.2`

Compare Source

Bug Fixes

deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

`v2.1.1`

Compare Source

Bug Fixes

revert "use node24 as runner" (#278) (5204204), closes actions/create-github-app-token#267

`v2.1.0`

Compare Source

Features

use node24 as runner (#267) (a1cbe0f)

`v2.0.6`

Compare Source

Bug Fixes

replace - with _ (#246) (3336784)

`v2.0.5`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#240) (d64d7d7)

`v2.0.4`

Compare Source

Bug Fixes

permission input handling (#243) (2950cbc)

`v2.0.3`

Compare Source

Bug Fixes

README: use v2 in examples (#234) (9ba274d), closes #232
use core.getBooleanInput() to retrieve boolean input values (#223) (c3c17c7)

`v2.0.2`

Compare Source

Bug Fixes

improve log messages for token creation (#226) (eaef294)

`v2.0.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group across 1 directory with 2 updates (#228) (2411bfc)

`v2.0.0`

Compare Source

feat!: remove deprecated inputs (#213) (5cc811b)

BREAKING CHANGES

Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

`v2`

Compare Source

actions/setup-dotnet (actions/setup-dotnet)

`v6.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #752
Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #751
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #756

New Contributors

@philip-gai made their first contribution in #756

Full Changelog: actions/setup-dotnet@v5...v6.0.0

`v6`

Compare Source

`v5.4.0`

Compare Source

What's Changed

Enhancements

Improve global.json SDK version validation for rollForward by @priyagupta108 in #742
Pin actions to commit SHAs in workflows by @priya-kinthali in #744
Expand the CSC problem matcher to light up more errors on GitHub. by @StephenCleary in #717

Documentation

Docs(action): Explicitly mark all optional inputs with required: false by @kranthipoturaju in #737

Bug Fixes

Fix global.json creation command by @michal2612 in #694

Dependency Updates

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #746

New Contributors

@jasongin made their first contribution in #746
@michal2612 made their first contribution in #694
@kranthipoturaju made their first contribution in #737
@StephenCleary made their first contribution in #717

Full Changelog: actions/setup-dotnet@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Enhancements

Add dotnet-version: latest support with dotnet-channel input by @mahabaleshwars in #730
Support global.json's rollForward latest* variants by @js6pak in #538
Improve version resolution by @akoeplinger in #560

Dependency Updates

Upgrade @actions/* and fast-xml-parser dependencies by @Copilot in #728
Update install scripts to v2026.05.19 (preserve archive links) by @MichaelSimons in #736
Add rollForward note in README, improve proxy health check in e2e tests and bump version to v5.3.0 by @priyagupta108 in #738

Bug Fixes

Update Test Proxy job by @priya-kinthali in #703

New Contributors

@Copilot made their first contribution in #728
@akoeplinger made their first contribution in #560
@MichaelSimons made their first contribution in #736
@js6pak made their first contribution in #538

Full Changelog: actions/setup-dotnet@v5...v5.3.0

`v5.2.0`

Compare Source

What's changed

Enhancements

Add support for workloads input by @gowridurgad in #693
Add support for optional architecture input for cross-architecture .NET installs by @priya-kinthali in #700

Dependency Updates

Upgrade fast-xml-parser from 4.4.1 to 5.3.6 by @dependabot in #671
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #705

Full Changelog: actions/setup-dotnet@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Documentation

Readme update for environment variable on self hosted linux runners by @priya-kinthali in #689
Contributor icon updates by @Falco20019 in #604

Dependency updates

Upgrade actions/checkout from 5 to 6 by @dependabot in #684
Upgrade to latest actions packages by @salmanmkc in #687
Upgrade dependencies in testproject and checkout in Readme by @priya-kinthali in #692

New Contributors

@priya-kinthali made their first contribution in #689
@Falco20019 made their first contribution in #604

Full Changelog: actions/setup-dotnet@v5...v5.1.0

`v5.0.1`

Compare Source

What's Changed

Upgrade typescript from 5.4.2 to 5.9.2 and document breaking changes in v5 by @dependabot in #624
Upgrade eslint-plugin-jest from 27.9.0 to 29.0.1 by @dependabot in #648
Upgrade actions/publish-action from 0.3.0 to 0.4.0 and update macos-13 to macos-15-intel by @dependabot in #665

Full Changelog: actions/setup-dotnet@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to Node.js 24 and modernize async usage by @salmanmkc in #654

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Updates

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #622
Upgrade husky from 8.0.3 to 9.1.7 by @dependabot[bot] in #591
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot[bot] in #594
Upgrade eslint-config-prettier from 9.1.0 to 10.1.5 by @dependabot[bot] in #639
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #641
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #652
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #662

Bug Fixes

Remove Support for older .NET Versions and Update installers scripts by @gowridurgad in #647

New Contributors

@gowridurgad made their first contribution in #647
@salmanmkc made their first contribution in #654

Full Changelog: actions/setup-dotnet@v4...v5.0.0

`v5`

Compare Source

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

`v5`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 3a20dd7 to 3c56ce2 Compare May 13, 2026 01:54

renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from a29087f to bcc0aa7 Compare June 2, 2026 15:00

renovate Bot force-pushed the renovate/github-actions branch from bcc0aa7 to dfa151e Compare June 18, 2026 19:33

renovate Bot force-pushed the renovate/github-actions branch from dfa151e to 026df8d Compare June 26, 2026 05:32

renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 2ad343d to f33ccc3 Compare July 3, 2026 14:41

renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from c42233d to 0ccde1c Compare July 16, 2026 04:42

chore(deps): update github actions

5b7bc0e

renovate Bot force-pushed the renovate/github-actions branch from 0ccde1c to 5b7bc0e Compare July 21, 2026 04:04

Navigation Menu

Uh oh!

chore(deps): update github actions - #129

chore(deps): update github actions#129
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

renovate Bot commented May 11, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

BREAKING CHANGES

What's Changed

New Contributors

What's Changed

Enhancements

Documentation

Bug Fixes

Dependency Updates

New Contributors

What's Changed

Enhancements

Dependency Updates

Bug Fixes

New Contributors

What's changed

Enhancements

Dependency Updates

What's Changed

Documentation

Dependency updates

New Contributors

What's Changed

What's Changed

Breaking Changes

Dependency Updates

Bug Fixes

New Contributors

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Documentation

Dependency updates:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

renovate Bot commented May 11, 2026 •

edited

Loading