chore(deps): Update gradle and github actions #5

renovate · 2025-11-02T19:49:18Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	`v4.2.0` -> `v4.3.0`
actions/download-artifact	action	minor	`v4.1.8` -> `v4.3.0`
actions/upload-artifact	action	patch	`v4.6.0` -> `v4.6.2`
pypa/gh-action-pypi-publish	action	minor	`v1.12.4` -> `v1.13.0`
reviewdog/action-setup	action	minor	`v1.3.0` -> `v1.5.0`
softprops/action-gh-release	action	minor	`v2.2.1` -> `v2.4.2`

Release Notes

actions/cache (actions/cache)

`v4.3.0`

Compare Source

What's Changed

Add note on runner versions by @GhadimiR in #1642
Prepare v4.3.0 release by @Link- in #1655

New Contributors

@GhadimiR made their first contribution in #1642

Full Changelog: actions/cache@v4...v4.3.0

`v4.2.4`

Compare Source

What's Changed

Update README.md by @nebuk89 in #1620
Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in #1634
Prepare release 4.2.4 by @Link- in #1636

New Contributors

@nebuk89 made their first contribution in #1620

Full Changelog: actions/cache@v4...v4.2.4

`v4.2.3`

Compare Source

What's Changed

Update to use @actions/cache 4.0.3 package & prepare for new release by @salmanmkc in #1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

@salmanmkc made their first contribution in #1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

`v4.2.2`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Bump @actions/cache to v4.0.2 by @robherley in #1560

Full Changelog: actions/cache@v4.2.1...v4.2.2

`v4.2.1`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

docs: GitHub is spelled incorrectly in caching-strategies.md by @janco-absa in #1526
docs: Make the "always save prime numbers" example more clear by @Tobbe in #1525
Update force deletion docs due a recent deprecation by @sebbalex in #1500
Bump @actions/cache to v4.0.1 by @robherley in #1554

New Contributors

@janco-absa made their first contribution in #1526
@Tobbe made their first contribution in #1525
@sebbalex made their first contribution in #1500

Full Changelog: actions/cache@v4.2.0...v4.2.1

actions/download-artifact (actions/download-artifact)

`v4.3.0`

Compare Source

What's Changed

feat: implement new artifact-ids input by @GrantBirki in #401
Fix workflow example for downloading by artifact ID by @joshmgross in #402
Prep for v4.3.0 release by @robherley in #404

New Contributors

@GrantBirki made their first contribution in #401

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

`v4.2.1`

Compare Source

What's Changed

Add unit tests by @GhadimiR in #392
Fix bug introduced in 4.2.0 by @GhadimiR in #391

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

`v4.2.0`

Compare Source

What's Changed

Update README.md by @lkfortuna in #384
Bump artifact version, do digest check by @GhadimiR in #383

New Contributors

@lkfortuna made their first contribution in #384
@GhadimiR made their first contribution in #383

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

`v4.1.9`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #354
docs: small migration fix by @froblesmartin in #370
Update MIGRATION.md by @andyfeller in #372
Update artifact package to 2.2.2 by @yacaovsnc in #380

New Contributors

@Jcambass made their first contribution in #354
@froblesmartin made their first contribution in #370
@andyfeller made their first contribution in #372
@yacaovsnc made their first contribution in #380

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

actions/upload-artifact (actions/upload-artifact)

`v4.6.2`

Compare Source

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in #685

New Contributors

@salmanmkc made their first contribution in #685

Full Changelog: actions/upload-artifact@v4...v4.6.2

`v4.6.1`

Compare Source

What's Changed

Update to use artifact 2.2.2 package by @yacaovsnc in #673

Full Changelog: actions/upload-artifact@v4...v4.6.1

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

`v1.13.0`

Compare Source

Take the 2025 Python Packaging Survey if you still haven't!

[!important]
🚨 This release includes fixes for GHSA-vxmw-7h4f-hqxh discovered by @woodruffw 💰.
We've also integrated Zizmor to catch similar issues in the future and you should too.

✨ New Stuff

@woodruffw 💰 updated the README to no longer mention the attestations feature being experimental in #347: it's been rather stable for a year already 🎉
He also added more diagnostic output which includes printing out the GitHub Environment claim via #371 and warning about the unsupported reusable workflows configurations #306, when using Trusted Publishing.

[!tip]
The official support for reusable workflows is currently blocked on changes to PyPI. To get updates about progress on the action side, you may want to subscribe to #166.
At PyCon US 2025 Sprints, @facutuesca 💰, @miketheman 💰, @woodruffw 💰 and I💰 spent several hours IRL brainstorming how to fix this and migrate projects that happen to rely on an obscure corner case with reusable workflows that temporarily allows them to function by accident.
The result of that discussion is posted @ pypi/warehouse#11096 (comment).
Note that this is a volunteer-led effort and there is no ETA. If you need this soon, make your employer sponsor the PSF and maybe they'll be able to hire somebody for this work on Warehouse.

In addition to that, @konstin 💰 sent #378 to pin actions/setup-python to a SHA hash. This makes pypi-publish compatible with new GitHub policies that allow organizations to mandate hash-pinning actions used in workflows.

🛠️ Internal Dependencies

@webknjaz 💰 made a bunch of updates to the action runtime which includes bumping it to Python 3.13 in #331 and updating the dependency tree across the board. pip-with-requires-python is no longer being installed (#332). Some related bumps were contributed by @woodruffw 💰 (#359) and @kurtmckee 💰 sent a contributor-facing PR, bumping the linting configuration via #335.

💪 New Contributors

@kurtmckee made their first contribution in #335
@konstin made their first contribution in #378

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.12.4...v1.13.0

🧔‍♂️ Release Manager: @webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

reviewdog/action-setup (reviewdog/action-setup)

`v1.5.0`

Compare Source

What's Changed

update hash in README by @haya14busa in #72
feat: Add GitHub Actions workflow permissions and signed commits by @haya14busa in #63
chore(deps): update actions/checkout action to v5 - autoclosed by @renovate[bot] in #70
chore(deps): update haya14busa/action-update-semver action to v1.5.1 by @renovate[bot] in #65
chore(deps): update actions/checkout action to v5.0.1 by @renovate[bot] in #76
chore(deps): update haya14busa/action-bumpr action to v1.11.4 by @renovate[bot] in #64
chore(deps): update reviewdog/action-actionlint action to v1.68.0 by @renovate[bot] in #67
chore(deps): update reviewdog/action-shellcheck action to v1.32.0 by @renovate[bot] in #68
chore(deps): update chainguard-dev/actions digest to 4aa3402 - autoclosed by @renovate[bot] in #73
chore(deps): update reviewdog/action-misspell action to v1.27.0 by @renovate[bot] in #75
chore(deps): update reviewdog to 0.21.0 by @github-actions[bot] in #74

Full Changelog: reviewdog/action-setup@v1.4.0...v1.5.0

`v1.4.0`

Compare Source

What's Changed

chore(deps): update haya14busa/action-depup action to v1.6.4 by @renovate[bot] in #52
Pin reviewdog/action-setup version in README by @haya14busa in #55
chore(deps): update reviewdog/action-actionlint action to v1.65.1 by @renovate[bot] in #53
chore(deps): update reviewdog/action-actionlint action to v1.65.2 by @renovate[bot] in #56
chore(deps): update reviewdog/action-alex action to v1.15.4 by @renovate[bot] in #57
chore(deps): update reviewdog/action-alex action to v1.16.0 by @renovate[bot] in #59
chore(deps): update reviewdog/action-misspell action to v1.26.3 by @renovate[bot] in #58
chore(deps): update reviewdog/action-shellcheck action to v1.30.0 by @renovate[bot] in #60
Update install scripts with binst by @haya14busa in #71

Full Changelog: reviewdog/action-setup@v1.3.2...v1.4.0

`v1.3.2`

Compare Source

What's Changed

Pin reviewdog install script version with commit SHA by @haya14busa in #51

Full Changelog: reviewdog/action-setup@v1.3.1...v1.3.2

`v1.3.1`

Compare Source

What's Changed

chore(deps): update reviewdog to 0.17.4 by @github-actions in #37
Update test case reviewdog version to work with Apple Silicon Mac runner by @sksat in #38
chore(deps): update reviewdog to 0.17.5 by @github-actions in #39
Add used-by counter badge by @haya14busa in #40
chore(deps): update reviewdog to 0.18.0 by @github-actions in #41
chore(deps): update reviewdog to 0.18.1 by @github-actions in #42
chore(deps): update reviewdog to 0.19.0 by @github-actions in #44
chore(deps): update reviewdog to 0.20.0 by @github-actions in #45
chore(deps): update reviewdog to 0.20.1 by @github-actions in #46
chore(deps): update reviewdog to 0.20.2 by @github-actions in #48
chore(deps): update peter-evans/create-pull-request action to v7 by @renovate in #47
chore(deps): update reviewdog to 0.20.3 by @github-actions in #49
Pin GitHub Actions with commit SHA using pinact by @haya14busa in #50

New Contributors

@sksat made their first contribution in #38

Full Changelog: reviewdog/action-setup@v1.3.0...v1.3.1

softprops/action-gh-release (softprops/action-gh-release)

`v2.4.2`

Compare Source

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in #684

Other Changes 🔄

dependency updates

New Contributors

@BeryJu made their first contribution in #684

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

`v2.4.1`

Compare Source

What's Changed

Other Changes 🔄

fix(util): support brace expansion globs containing commas in parseInputFiles by @Copilot in #672
fix: gracefully fallback to body when body_path cannot be read by @Copilot in #671

Full Changelog: softprops/action-gh-release@v2...v2.4.1

`v2.4.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat(action): respect working_directory for files globs by @stephenway in #667

Other Changes 🔄

chore(deps): bump the npm group with 2 updates by @dependabot[bot] in #668

Full Changelog: softprops/action-gh-release@v2.3.4...v2.4.0

`v2.3.4`

Compare Source

What's Changed

Bug fixes 🐛

fix(action): handle 422 already_exists race condition by @stephenway in #665

Other Changes 🔄

chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 in the github-actions group by @dependabot[bot] in #656
chore(deps): bump @types/node from 20.19.11 to 20.19.13 in the npm group by @dependabot[bot] in #655
chore(deps): bump vite from 7.0.0 to 7.1.5 by @dependabot[bot] in #657
chore(deps): bump the npm group across 1 directory with 2 updates by @dependabot[bot] in #662
chore(deps): bump the npm group with 3 updates by @dependabot[bot] in #666

Full Changelog: softprops/action-gh-release@v2...v2.3.4

`v2.3.3`

Compare Source

What's Changed

Exciting New Features 🎉

feat: add input option overwrite_files by @asfernandes in #343

Other Changes 🔄

dependency updates

New Contributors

@asfernandes made their first contribution in #343

Full Changelog: softprops/action-gh-release@v2...v2.3.3

`v2.3.2`

Compare Source

fix: revert fs readableWebStream change

`v2.3.1`

Compare Source

What's Changed

Bug fixes 🐛

fix: fix file closing issue by @WailGree in #629

New Contributors

@WailGree made their first contribution in #629

Full Changelog: softprops/action-gh-release@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

Migrate from jest to vitest
Replace mime with mime-types
Bump to use node 24
Dependency updates

Full Changelog: softprops/action-gh-release@v2.2.2...v2.3.0

`v2.2.2`

Compare Source

What's Changed

Bug fixes 🐛

fix: updating release draft status from true to false by @galargh in #316

Other Changes 🔄

chore: simplify ref_type test by @steinybot in #598
fix(docs): clarify the default for tag_name by @muzimuzhi in #599
test(release): add unit tests when searching for a release by @rwaskiewicz in #603
dependency updates

New Contributors

@steinybot made their first contribution in #598
@muzimuzhi made their first contribution in #599
@galargh made their first contribution in #316
@rwaskiewicz made their first contribution in #603

Full Changelog: softprops/action-gh-release@v2.2.1...v2.2.2

Configuration

📅 Schedule: Branch creation - "after 5pm on the 2nd day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the type: dependencies label Nov 2, 2025

renovate bot force-pushed the renovate/gradle-and-github-actions branch from 45ef24d to 8856905 Compare November 15, 2025 11:35

chore(deps): Update gradle and github actions

b1068cb

renovate bot force-pushed the renovate/gradle-and-github-actions branch from 8856905 to b1068cb Compare November 19, 2025 23:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Update gradle and github actions #5

chore(deps): Update gradle and github actions #5

Uh oh!

renovate bot commented Nov 2, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): Update gradle and github actions #5

Are you sure you want to change the base?

chore(deps): Update gradle and github actions #5

Uh oh!

Conversation

renovate bot commented Nov 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

✨ New Stuff

🛠️ Internal Dependencies

💪 New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

What's Changed

Other Changes 🔄

What's Changed

Exciting New Features 🎉

Other Changes 🔄

What's Changed

Bug fixes 🐛

Other Changes 🔄

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

What's Changed

Bug fixes 🐛

New Contributors

What's Changed

Bug fixes 🐛

Other Changes 🔄

New Contributors

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Nov 2, 2025 •

edited

Loading