chore(deps): update github actions - #363
Merged
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/github-actions
branch
4 times, most recently
from
August 16, 2026 16:20
88b1f24 to
e0f2bc5
Compare
renovate
Bot
force-pushed
the
renovate/github-actions
branch
3 times, most recently
from
August 22, 2026 08:56
3e46a5f to
8cefbcc
Compare
renovate
Bot
force-pushed
the
renovate/github-actions
branch
from
August 22, 2026 14:44
8cefbcc to
1ce5be6
Compare
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
9.16.0→9.17.2v4.2.0→v4.6.0d7f5e7f→37fe6313.51.1→3.53.10.10.0→0.11.04.44.3→4.53.44.53.63.13→3.141.1305.2→1.1306.4Release Notes
copier-org/copier (copier)
v9.17.2Compare Source
Security
{% include %}of symlinks resolving outside template root!includepaths outside the template rootRefactor
v9.17.1Compare Source
Security
v9.17.0Compare Source
Feat
--askflag to force prompting of selected questions (#2705)Security
docker/login-action (docker/login-action)
v4.6.0Compare Source
v4.5.2Compare Source
v4.5.1Compare Source
v4.5.0Compare Source
v4.4.0Compare Source
v4.3.0Compare Source
Full Changelog: docker/login-action@v4.2.0...v4.3.0
go-task/task (go-task/task)
v3.53.1Compare Source
🚀 Features
experimental feature for 3 years, but is now enabled by default. Massive
thanks to all those that contributed and gave feedback (too many to list
here). We've also given the
Remote Taskfiles documentation a
bit of a polish (#1317, #2906 by @pd93).
timeoutthat terminates a command once it exceeds thegiven duration (Go duration syntax). It covers shell commands, task calls,
deferred commands,
depsand theifcondition, obeysignore_error, andreports exit code
124. Callers that join arun: onceorwhen_changedtask already running now honor their own
timeout, and inherit that task'sfailure instead of being told it succeeded (#1569, #2898 by @vmaerten).
(monorepos). Fingerprinting is up to 86% faster and make up to 70% fewer
memory allocations on the more advanced scenarios. Benchmarks were added as
well. We're basically skipping work when not needed. (#2853, #2883 by
@Napolitain, #2884 by @Napolitain).
source files now reuses a single buffer, reducing memory allocations by ~98%
and wall-clock time by ~7% (#2925 by @vmaerten).
includes.excludescan now exclude a whole namespace: append:*to thenamespace name, e.g.
excludes: ['debug:*']. Bare entries still match asingle task name exactly (#2300, #2959 by @xmxxc).
enum.refin--interactiveprompts. Required vars usingenum.refnow show the selection list like static enums, instead of fallingback to free-form input (#2817 by @vmaerten).
task --completion nu. They completetask names and aliases, every flag with its description, and the values of
--completion,--outputand--sort(#2966 by @vmaerten).--verbosemode, a task whosecommand exits non-zero now reports
task: "<name>" failed: <error>instead ofstopping without a trace (#2240 by @Drino).
🐛 Fixes
checksum:not being verified when a remote Taskfile came fromthe cache (#2980 by @vmaerten).
{{.CHECKSUM}}/{{.TIMESTAMP}}) ignoring amethod:set at the Taskfile level: the variable now follows the same methodresolution as the up-to-date check. Only the variable matching the effective
method is injected, so a task inheriting a Taskfile-level
method: timestampgets
{{.TIMESTAMP}}and no longer a{{.CHECKSUM}}(which now renders as anempty string), and neither variable is injected when the effective method is
none(#2924 by @vmaerten).ref:infor: matrix:andenum:only accepting literal lists. Refscomputed with template functions like
keysorsplitListno longer failwith "must resolve to a list" (#2544, #2956 by @no-hup).
Escat an interactive variable prompt not cancelling the run(#2942 by @anilnatha).
joinUrlcollapsing the//in a URL scheme (e.g. producinghttp:/localhostinstead ofhttp://localhost) (#2915 by @vsaraikin).ignore_erroron a command inside aforloop. Editors no longer flag a Taskfile that Task runs perfectly fine (#2044
by @gokeefe-atb).
ignore_erroron atask:call, andif,setandshopton a commandinside a
forloop (#2967 by @vmaerten).📚 Documentation & Website
(#2184 by @jubr).
and its frontmatter on the website (#2981 by @pd93).
v3.52.0Compare Source
order. Prompts now follow the order the vars are declared in the Taskfile.
(#2871 by @caproven)
Fish's
vendor_completions.ddirectory instead ofcompletions(#2850, #2859by @Legimity).
taskcommand, not justthe
taskbinary itself (#2852 by @kojiishi).show-aliaseszstyle can turn this off (#2865, #2864 by @vmaerten).\,_,^) leakinginto checksum/timestamp filenames, breaking
sources:/generates:up-to-datedetection (#2886 by @s3onghyun).
for: matrix:loops usingref:rows producing wrong values when thesame task was run concurrently (e.g. by parallel
deps) with different vars(#2890, #2894 by @amitmishra11).
secret: trueflag for variables that masks their value in logs,task --summary, and command output (#2514 by @vmaerten).use_gitignoresetting (global or per-task) to skip files matchedby your
.gitignorewhen fingerprintingsources/generatesand whenwatching (#2773 by @vmaerten).
--output,--output-group-begin,--output-group-end,--output-group-error-only) viathe
TASK_OUTPUT*environment variables (#2873 by @liiight).--temp-dirflag (withTASK_TEMP_DIRenv var andtemp-dirtaskrcconfig) to customise the directory where Task stores temporary files such as
checksums. Relative paths are resolved against the root Taskfile (#2891 by
@kjasn).
@vmaerten).
a
/_git/path segment rather than a.gitsuffix (#2904 by @pd93).taskfile.dev/Taskfile.yml (#2905 by
@pd93).
includes:entries (missingtaskfile/dir) reporting amisleading "include cycle detected" error instead of a clear configuration
error (#1881, #2892 by @Lewin671).
koalaman/shellcheck (koalaman/shellcheck)
v0.11.0Compare Source
Added
[ ! -o opt ]being unconditionally true in Bash.[ -o opt ].avoid-negated-conditions: suggest replacing[ ! a -eq b ]with
[ a -ne b ], and similar for -ge/-lt/=/!=/etc (SC2335).Changed
re-enabled with
--enable=useless-use-of-cator equivalent directive.[ ! -n .. ]with[ -z ]and vice versais now optional under
avoid-negated-conditions.A && B || Cno longer triggers when B is a test command.\<and\>in test/[] as specified in POSIX.1-2024Fixed
${| cmd; }andsource -pRemoved
-ot/-nt/-efare specified in POSIX.1-2024mikefarah/yq (mikefarah/yq)
v4.53.4Compare Source
v4.53.3Compare Source
--ini-preserve-quotesflag for INI round-trip quote preservation (#2728) Thanks @toller892!v4.53.2Compare Source
v4.52.5Compare Source
v4.52.4Compare Source
v4.52.2Compare Source
v4.52.1: - TOML roundtrip and more!Compare Source
Parent now supports negative indices, and added a 'root' command for referencing the top level document
Fixed scalar encoding for HCL
Add --yaml-compact-seq-indent / -c flag for compact sequence indentation (#2583) Thanks @jfenal
Add symlink check to file rename util (#2576) Thanks @Elias-elastisys
Powershell fixed default command used for __completeNoDesc alias (#2568) Thanks @teejaded
Unwrap scalars in shell output mode. (#2548) Thanks @flintwinters
Added K8S KYAML output format support (#2560) Thanks @robbat2
Bumped dependencies
Special shout out to @ccoVeille for reviewing my PRs!
Thanks to everyone that contributed ❤️
v4.50.1: - HCL!Compare Source
v4.49.2Compare Source
v4.49.1: - Security Flags and TOML fixesCompare Source
--securityflags to disable env and file ops #2515v4.48.2Compare Source
v4.48.1: - First and Parents OperatorsCompare Source
v4.47.2Compare Source
v4.47.1: - Merge Anchor fixes (with flag)Compare Source
<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv!Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes
v4.46.1: - INI support + bug fixesCompare Source
v4.45.4: - Fixing wrong map() behaviour on empty mapCompare Source
v4.45.3: - Fixes regression bug(s)Compare Source
Sorry for the regression folks! 😓
fwiw I have since added automated tests to capture the scenarios provided in the regression bug tickets
v4.45.2Compare Source
v4.45.1: - Create parent directories when --split-exp is used!Compare Source
v4.44.6Compare Source
v4.44.5Compare Source
Note: 4.44.4 was skipped as it had a release pipeline failure
actions/python-versions (python)
v3.14.7: 3.14.7Compare Source
Python 3.14.7
v3.14.6: 3.14.6Compare Source
Python 3.14.6
v3.14.5: 3.14.5Compare Source
Python 3.14.5
v3.14.4: 3.14.4Compare Source
Python 3.14.4
v3.14.3: 3.14.3Compare Source
Python 3.14.3
v3.14.2: 3.14.2Compare Source
Python 3.14.2
v3.14.1: 3.14.1Compare Source
Python 3.14.1
v3.14.0: 3.14.0Compare Source
Python 3.14.0
snyk/snyk (snyk)
v1.1306.4Compare Source
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
v1.1306.3Compare Source
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
v1.1306.2Compare Source
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
v1.1306.1Compare Source
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
CVE-2026-59869 (7673263)
CVE-2026-39244 (9bf7ce7)
v1.1306.0Compare Source
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
snyk doctorcommand to diagnose common CLI problems: generate a diagnostic report for the current system, or analyze debug log output. (ab56a0e)snyk redteamcommand has been removed from the CLI, following its deprecation (deprecation date May 31, 2026). (c7d0e3e)Bug Fixes
Configuration
📅 Schedule: (in timezone America/Chicago)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.