Skip to content

🚨 Update github actions (main) (major)#3284

Open
red-hat-konflux[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main-main/major-github-actions
Open

🚨 Update github actions (main) (major)#3284
red-hat-konflux[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main-main/major-github-actions

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/configure-pages action major v5.0.0v6.0.0
actions/create-github-app-token action major v2.2.2v3.1.1
actions/deploy-pages action major v4.0.5v5.0.0
actions/download-artifact action major v7.0.0v8.0.1
actions/upload-artifact action major v6.0.0v7.0.1
actions/upload-pages-artifact action major v4.0.0v5.0.0
codecov/codecov-action action major v5.5.4v6.0.0
docker/setup-qemu-action action major v3.7.0v4.0.0
softprops/action-gh-release action major v2v3

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

actions/configure-pages (actions/configure-pages)

v6.0.0

Compare Source

Changelog

See details of all code changes since previous release.

actions/create-github-app-token (actions/create-github-app-token)

v3.1.1

Compare Source

Bug Fixes

v3.1.0

Compare Source

Bug Fixes
Features

v3.0.0

Compare Source

Bug Fixes
BREAKING CHANGES
  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
  • Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.
actions/deploy-pages (actions/deploy-pages)

v5.0.0

Compare Source

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

actions/download-artifact (actions/download-artifact)

v8.0.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

Compare Source

v8 - What's new

[!IMPORTANT]
actions/download-artifact@​v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new
Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed
New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

actions/upload-pages-artifact (actions/upload-pages-artifact)

v5.0.0

Compare Source

Changelog

See details of all code changes since previous release.

codecov/codecov-action (codecov/codecov-action)

v6.0.0

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

docker/setup-qemu-action (docker/setup-qemu-action)

v4.0.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

softprops/action-gh-release (softprops/action-gh-release)

v3

Compare Source


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@codecov
Copy link
Copy Markdown

codecov Bot commented May 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
acceptance 55.58% <ø> (-0.01%) ⬇️
generative 17.82% <ø> (ø)
integration 26.56% <ø> (ø)
unit 69.03% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants