Skip to content

chore(deps): update github-actions#4

Merged
marcschaeferger merged 1 commit into
mainfrom
renovate/github-actions
May 11, 2026
Merged

chore(deps): update github-actions#4
marcschaeferger merged 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 16, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending OpenSSF
DavidAnson/markdownlint-cli2-action action minor v23.0.0v23.2.0 OpenSSF Scorecard
actions/cache action patch v5.0.4v5.0.5 OpenSSF Scorecard
actions/setup-go action minor v6.3.0v6.4.0 OpenSSF Scorecard
actions/upload-artifact action patch v7.0.0v7.0.1 OpenSSF Scorecard
anchore/sbom-action action minor v0.23.0v0.24.0 OpenSSF Scorecard
aquasecurity/trivy uses-with minor v0.69.3v0.70.0 OpenSSF Scorecard
aquasecurity/trivy-action action minor 0.35.0v0.36.0 OpenSSF Scorecard
docker/build-push-action action minor v7.0.0v7.1.0 OpenSSF Scorecard
docker/login-action action minor v4.0.0v4.1.0 OpenSSF Scorecard
golangci/golangci-lint uses-with minor v2.11.1v2.12.2 OpenSSF Scorecard
renovatebot/github-action action patch v46.1.3v46.1.13 v46.1.14 OpenSSF Scorecard
reviewdog/action-actionlint action minor v1.71.0v1.72 OpenSSF Scorecard
sigstore/cosign-installer action minor v4.0.0v4.1.2 OpenSSF Scorecard
softprops/action-gh-release action major v2.5.0v3 OpenSSF Scorecard

Release Notes

DavidAnson/markdownlint-cli2-action (DavidAnson/markdownlint-cli2-action)

v23.2.0: Add package-lock.json.

Compare Source

v23.1.0: Update markdownlint-cli2 version (markdownlint-cli2 v0.22.1, markdownlint v0.40.0).

Compare Source

actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

actions/setup-go (actions/setup-go)

v6.4.0

Compare Source

What's Changed
Enhancement
  • Add go-download-base-url input for custom Go distributions by @​gdams in #​721
Dependency update
Documentation update
New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

anchore/sbom-action (anchore/sbom-action)

v0.24.0

Compare Source

v0.24.0

⬆️ Dependencies

v0.23.1

Compare Source

v0.23.1

⬆️ Dependencies

aquasecurity/trivy (aquasecurity/trivy)

v0.70.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10546

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0700-2026-04-16

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.36.0

Compare Source

What's Changed
New Contributors

Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0

docker/build-push-action (docker/build-push-action)

v7.1.0

Compare Source

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

docker/login-action (docker/login-action)

v4.1.0

Compare Source

Full Changelog: docker/login-action@v4.0.0...v4.1.0

golangci/golangci-lint (golangci/golangci-lint)

v2.12.2

Compare Source

Released on 2026-05-06

  1. Linters bug fixes
    • gomodguard_v2: fix blocked configuration
    • gomodguard_v2: from 2.1.0 to 2.1.3
    • iface: from 1.4.1 to 1.4.2

v2.12.1

Compare Source

Released on 2026-05-01

  1. Linters bug fixes
    • gomodguard_v2: fix panic with migration suggestion
  2. Misc.
    • fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Compare Source

Released on 2026-05-01

  1. New linters
  2. Linters new features or changes
    • dupl: from f665c8d to c99c5cf (extended detection)
    • funcorder: from 0.5.0 to 0.6.0 (new option: function)
    • goconst: add an option to ignore strings from tests
    • goconst: from 1.8.2 to 1.10.0 (extended detection)
    • gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
    • gosec: from 619ce21 to 2.26.1 (new checks: G124, G708, G709, G710)
    • govet: add inline analyzer
    • makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
    • paralleltest: expose checkcleanup option
    • sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
    • wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
  3. Linters bug fixes
    • forbidigo: from 2.3.0 to 2.3.1
    • godot: from 1.5.4 to 1.5.6
    • govet-modernize: from 0.43.0 to 0.44.0
    • ireturn: from 0.4.0 to 0.4.1
    • rowserrcheck: from 1.1.1 to c5f79b8
  4. Misc.
    • Decrease cache entropy
    • Embed the JSON schema in the binary
    • Filter env vars when cloning the repository with the custom command

v2.11.4

Compare Source

Released on 2026-03-22

  1. Linters bug fixes
    • govet-modernize: from 0.42.0 to 0.43.0
    • noctx: from 0.5.0 to 0.5.1
    • sqlclosecheck: from 0.5.1 to 0.6.0

v2.11.3

Compare Source

Released on 2026-03-10

  1. Linters bug fixes

v2.11.2

Compare Source

Released on 2026-03-07

  1. Fixes
    • fmt: fix error when using the fmt command with explicit paths.
renovatebot/github-action (renovatebot/github-action)

v46.1.13

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.12 (a871d4d)
Miscellaneous Chores
Build System
  • deps: lock file maintenance (d044e7d)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.159.1 (a7db9c3)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.159.2 (f9133ef)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.160.0 (212d525)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.160.1 (e3443ce)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.160.2 (833041b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.160.4 (60cc865)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.160.5 (2c7567a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.160.6 (35caad2)

v46.1.12

Compare Source

Bug Fixes
Documentation
  • update references to renovatebot/github-action to v46.1.11 (317011a)
Miscellaneous Chores
  • deps: update dependency typescript-eslint to v8.59.0 (8e3560a)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.142.0 (0fee00d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.142.1 (c7cfc88)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.144.0 (39e7d09)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.145.0 (0bbd415)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.146.0 (889c739)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.147.0 (7addce6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.150.0 (804ce16)

v46.1.11

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.10 (0b264d2)
Miscellaneous Chores
  • deps: update actions/setup-node action to v6.4.0 (951a814)
  • deps: update dependency prettier to v3.8.3 (a763833)
  • deps: update dependency typescript-eslint to v8.58.2 (119d68e)
Build System
  • deps: lock file maintenance (f82feed)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.132.3 (99cc805)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.133.0 (a63d39b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.135.0 (955b000)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.136.0 (65167cd)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.136.1 (7b21b86)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.136.3 (28a2dc0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.137.0 (b0cf2a4)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.138.0 (3700882)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.138.1 (f516ce2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.138.3 (3411548)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.139.0 (5201886)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.139.1 (5856263)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.139.4 (999691d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.139.5 (f703a54)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.139.6 (3ba85c2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.139.7 (96f2f09)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.139.8 (5af45e5)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.140.0 (01e9139)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.141.0 (814a2a4)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.141.1 (fb3abdf)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.141.2 (e3a9af5)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.141.5 (4f14b2f)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.141.6 (2357784)

v46.1.10

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.9 (ed96e8a)
Miscellaneous Chores
  • deps: update actions/cache action to v5.0.5 (0b43175)
  • deps: update dependency globals to v17.5.0 (429b645)
  • deps: update dependency prettier to v3.8.2 (8bfc8a3)
  • deps: update dependency typescript-eslint to v8.58.1 (#​1026) (f0c5d61)
  • deps: update node.js to v24.15.0 (c493ede)
Build System
  • deps: lock file maintenance (5f318b8)
Continuous Integration
  • add Zizmor for GitHub Actions linting (#​1025) (3ce6ef9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.111.1 (77016cf)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.111.2 (d4ee47a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.111.3 (9533edc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.113.0 (7028a3e)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.115.1 (00ae40b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.123.0 (4d39d22)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.123.3 (06b71b8)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.123.4 (bd145c9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.123.5 (59cbcc3)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.123.6 (195ddbe)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.123.8 (9286cb7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.124.1 (dbcd02c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.125.0 (754b499)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.125.1 (5ee1022)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.126.0 (a4188be)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.127.2 (#​1027) (b962e40)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.127.3 (6e1df28)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.128.1 (5429eaa)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.129.0 (9f025e5)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.130.1 (#​1028) (0f49bd4)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.131.0 (8c3b0ff)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.132.0 (81c8ffb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.132.1 (f84cc28)

v46.1.9

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.8 (65fadb1)
Miscellaneous Chores
Build System
  • deps: lock file maintenance (646e9b0)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.6 (e6e6157)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.7 (38c3a5d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.8 (34a118b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.108.1 (d946ea8)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.109.0 (16020af)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.109.1 (22a6725)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.109.3 (f9ce60c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.10 (8e63580)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.12 (4700a42)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.13 (2155516)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.14 (747253b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.16 (84e3bcc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.17 (b649498)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.2 (c149fdf)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.4 (9deca28)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.7 (eb7409a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.8 (2e39b3e)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.110.9 (b45c6e7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.111.0 (9feb404)

v46.1.8

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.7 (784cabc)
Miscellaneous Chores
  • configure pnpm (42adbac)
  • deps: update dependency conventional-changelog-conventionalcommits to v9.3.1 (0dd322f)
  • deps: update dependency typescript-eslint to v8.57.2 (91d6038)
  • deps: update pnpm to v10.33.0 (10556c1)
  • deps: update pnpm/action-setup action to v5 (#​1022) (97c4175)
  • update lodash to v4.18.1 (8a6b3d7)
  • update lodash-es to v4.18.1 (b99db03)
Build System
  • deps: lock file maintenance (768a348)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.100.0 (9cf5ad2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.1 (b404d85)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.2 (7045453)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.4 (b48791f)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.101.7 (e606f42)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.0 (4ec3adc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.10 (a064167)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.11 (5bae778)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.2 (9d053ec)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.3 (641d4cb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.6 (e59ffc6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.102.8 (234aba7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.103.0 (36d2aba)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.0 (4cea95b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.1 (5274e54)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.2 (2ef116f)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.3 (db16b25)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.104.4 (a45eeac)

v46.1.7

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.6 (3afa29f)
Miscellaneous Chores
  • deps: update dependency typescript-eslint to v8.57.1 (3a47fac)
  • deps: update node.js to v24.14.1 (28bb013)
Build System
  • deps: lock file maintenance (be2fc08)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.86.1 (8795f0b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.86.2 (9853f69)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.87.0 (f43553b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.87.1 (266e52c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.0 (15d8db4)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.1 (b711f08)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.2 (06c1ac0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.3 (4509fbc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.4 (8dd874b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.5 (908aecf)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.6 (1a40ecc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.89.8 (82662d1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.1 (40328d7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.4 (977b086)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.5 (398a399)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.91.6 (a416aeb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.92.1 (8c59289)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.95.0 (5312d97)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.96.0 (6016202)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.98.0 (d4812c2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.99.0 (47f20b6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.99.1 (dadfa2f)

v46.1.6

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.5 (f73dab3)
Miscellaneous Chores
  • deps: update actions/cache action to v5.0.4 (5d78527)
  • deps: update commitlint monorepo to v20.4.4 (797b143)
  • deps: update commitlint monorepo to v20.5.0 (1f1c4d0)
  • deps: update dependency esbuild to v0.27.4 (f5e1677)
  • deps: update dependency lint-staged to v16.3.3 (a40b316)
  • deps: update dependency lint-staged to v16.3.4 (db5bf53)
  • deps: update dependency lint-staged to v16.4.0 (24e6832)
  • deps: update dependency typescript-eslint to v8.57.0 (5c3cd2d)
  • deps: update pnpm to v10.32.0 (f8ce6e7)
  • deps: update pnpm to v10.32.1 (75912db)
Build System
  • deps: lock file maintenance (f21c5d7)
Continuous Integration

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file github-actions labels Apr 16, 2026
@renovate renovate Bot requested a review from marcschaeferger as a code owner April 16, 2026 01:41
@renovate renovate Bot added dependencies Pull requests that update a dependency file github-actions labels Apr 16, 2026
@renovate renovate Bot force-pushed the renovate/github-actions branch from bd00d05 to 0b99f50 Compare April 19, 2026 05:40
@renovate renovate Bot force-pushed the renovate/github-actions branch 5 times, most recently from d973993 to 2c1369c Compare May 6, 2026 11:45
@renovate renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from f78a4a6 to fef54eb Compare May 11, 2026 18:50
@renovate renovate Bot force-pushed the renovate/github-actions branch from fef54eb to 5675430 Compare May 11, 2026 21:27
@sonarqubecloud
Copy link
Copy Markdown

@marcschaeferger marcschaeferger merged commit eb092ce into main May 11, 2026
9 checks passed
@marcschaeferger marcschaeferger deleted the renovate/github-actions branch May 14, 2026 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github-actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant