Skip to content

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Aug 31, 2025

This PR contains the following updates:

Package Type Update Change
actions/setup-node action major v4.4.0 -> v5.0.0
github/codeql-action action major v3.29.9 -> v4.30.7
google-github-actions/auth action major v2.1.12 -> v3.0.0
google-github-actions/get-secretmanager-secrets action major v2.2.4 -> v3.0.0

Release Notes

actions/setup-node (actions/setup-node)

v5.0.0

Compare Source

What's Changed
Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades
New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

github/codeql-action (github/codeql-action)

v4.30.7

Compare Source

v3.30.7

Compare Source

v3.30.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #​3168

See the full CHANGELOG.md for more information.

v3.30.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #​3160

See the full CHANGELOG.md for more information.

v3.30.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025
  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #​3099 and #​3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #​3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #​3130
  • Update default CodeQL bundle version to 2.23.1. #​3118

See the full CHANGELOG.md for more information.

v3.30.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #​3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #​3064

See the full CHANGELOG.md for more information.

v3.30.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025
  • Update default CodeQL bundle version to 2.23.0. #​3077

See the full CHANGELOG.md for more information.

v3.30.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #​3054

See the full CHANGELOG.md for more information.

v3.29.11

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.11 - 21 Aug 2025

  • Update default CodeQL bundle version to 2.22.4. #​3044

See the full CHANGELOG.md for more information.

v3.29.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

google-github-actions/auth (google-github-actions/auth)

v3.0.0

Compare Source

What's Changed

Full Changelog: google-github-actions/auth@v2...v3.0.0

v2.1.13

Compare Source

What's Changed

Full Changelog: google-github-actions/auth@v2.1.12...v2.1.13

google-github-actions/get-secretmanager-secrets (google-github-actions/get-secretmanager-secrets)

v3.0.0

Compare Source

What's Changed

Full Changelog: google-github-actions/get-secretmanager-secrets@v2...v3.0.0

v2.2.5

Compare Source

What's Changed

Full Changelog: google-github-actions/get-secretmanager-secrets@v2.2.4...v2.2.5


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested a review from a team as a code owner August 31, 2025 12:03
@dpebot
Copy link

dpebot commented Aug 31, 2025

/gcbrun

@renovate-bot renovate-bot changed the title deps: Update google-github-actions/auth action to v3 deps: Update dependencies for github to v3 (major) Sep 3, 2025
@renovate-bot renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 5b2acd0 to 773474c Compare September 3, 2025 02:41
@dpebot
Copy link

dpebot commented Sep 3, 2025

/gcbrun

@renovate-bot renovate-bot changed the title deps: Update dependencies for github to v3 (major) deps: Update dependencies for github (major) Sep 4, 2025
@renovate-bot renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 773474c to 9017e24 Compare September 4, 2025 04:49
@dpebot
Copy link

dpebot commented Sep 4, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 9017e24 to d789779 Compare September 18, 2025 22:04
@dpebot
Copy link

dpebot commented Sep 18, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/major-dependencies-for-github branch from d789779 to 90ed24e Compare September 29, 2025 22:29
@dpebot
Copy link

dpebot commented Sep 29, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 90ed24e to 0951217 Compare October 7, 2025 17:32
@dpebot
Copy link

dpebot commented Oct 7, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/major-dependencies-for-github branch from 0951217 to f3449a8 Compare October 8, 2025 23:41
@dpebot
Copy link

dpebot commented Oct 8, 2025

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants