Repository navigation
fix(deps): update github actions - #615
Merged
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/github-actions
branch
from
October 5, 2026 17:19
f4c39da to
9053d1d
Compare
kgrubb
force-pushed
the
renovate/github-actions
branch
from
October 5, 2026 17:29
9053d1d to
e6647c2
Compare
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
hadolint 2.15 fails on USER root (DL3066). Switch those stages to uid 0. The actions update set toolchain to nightly-2026-10-05, and setup-rust-toolchain then overrode rust-toolchain.toml. The eBPF build script still invokes nightly-2026-04-11, which the runner never installed. Drop the workflow toolchain input so the action installs the nightly from rust-toolchain.toml. Disable renovate's rust uses-with bump so that pin stays out.
Semgrep blocks packageRules entries that omit minimumReleaseAge.
kgrubb
requested review from
maksym-iv-ef and
svencowart
and removed request for
maksym-iv-ef
October 6, 2026 13:57
Keep USER root. Those stages need root for eBPF, so ignore DL3066 there.
Docker treated the nosemgrep comment on the USER line as the username. DL3066 is ignored beside the existing root exception instead.
maksym-iv-ef
approved these changes
Oct 6, 2026
Merged
kgrubb
added a commit
that referenced
this pull request
Oct 6, 2026
# Description Release the v0.5.2 version # Changelog ## [v0.5.2] - 2026-10-06 ### Bug Fixes - **deps:** Update docker (#614) - **deps:** Update github actions (#615) [v0.5.1..v0.5.2](v0.5.1...v0.5.2) Co-authored-by: kgrubb <8471701+kgrubb@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v6.1.0→v6.3.0v5.0.0→v5.0.1v1.23.0→v1.25.1v4.1.0→v4.4.1v3.3.0→v3.5.0v1.14.0→v1.15.0v1.2.2→v1.3.0nightly-2026-04-11→nightly-2026-10-05v3.0.0→v3.0.3Release Notes
aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)
v6.3.0Compare Source
v6.2.4Compare Source
v6.2.3Compare Source
v6.2.2Compare Source
v6.2.1Compare Source
Bug Fixes
v6.2.0Compare Source
Features
Bug Fixes
v6.1.3Compare Source
Bug Fixes
v6.1.2Compare Source
Bug Fixes
v6.1.1Compare Source
What's Changed
Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1
azure/setup-helm (azure/setup-helm)
v5.0.1Compare Source
cargo-bins/cargo-binstall (cargo-bins/cargo-binstall)
v1.25.1Compare Source
Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for
cargo installin most cases. Install it today withcargo install cargo-binstall, from the binaries below, or if you already have it, upgrade withcargo binstall cargo-binstall.In this release:
cargo binstall cargo-binstallon and Windows ARM @rscorer (#2692)v1.25.0Compare Source
Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for
cargo installin most cases. Install it today withcargo install cargo-binstall, from the binaries below, or if you already have it, upgrade withcargo binstall cargo-binstall.In this release:
--listand--pruneto inspect and reconcile manifests @rscorer (#2675 #2677)Fixed
Other changes:
v1.24.0Compare Source
Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for
cargo installin most cases. Install it today withcargo install cargo-binstall, from the binaries below, or if you already have it, upgrade withcargo binstall cargo-binstall.In this release:
--featureflag when falling back tocargo-install(#2668)Other changes:
docker/setup-buildx-action (docker/setup-buildx-action)
v4.4.1Compare Source
v4.4.0Compare Source
Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0
v4.3.0Compare Source
Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0
v4.2.0Compare Source
Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0
hadolint/hadolint-action (hadolint/hadolint-action)
v3.5.0Compare Source
Features
v3.4.0Compare Source
Features
helm/kind-action (helm/kind-action)
v1.15.0Compare Source
What's Changed
New Contributors
Full Changelog: helm/kind-action@v1.14.0...v1.15.0
re-actors/alls-green (re-actors/alls-green)
v1.3.0Compare Source
Sometimes these releases take time. Cherish it.
🛡️ What's Unmessed
✨ What's Improved
I did a bunch of internal refactoring including hints of what @max-sixty💰 reported in #23. And took a small patch of @krokofant💰 in. This involved a bunch of preparatory infra work with testing infra.
One notable improvement is that now thanks to @tomasr8💰's and @hugovk💰's UX suggestions in #31, the gate status output is colored in the console and should be easier to scan in the log output per line. They entries now have leading
✓/❌acceptance marks and the actual incoming job outcomes are labeled with🟢/🔴/⬜/⚫.🐛 What's Fixed
The job-statuses summary could print "Some of the allowed to be skipped jobs did not succeed" based on the wrong condition — it's now tied to
allowed-skipsas intended, notallowed-failures.💪 New Contributors
🪞 Full Diff: re-actors/alls-green@v1.2.2...v1.3.0
🧔♂️ Release Manager: @webknjaz 🇺🇦
💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.
softprops/action-gh-release (softprops/action-gh-release)
v3.0.3Compare Source
3.0.3is a maintenance release with updated dependencies. It also safelyclassifies malformed GitHub API errors to avoid secondary failures (#822).
What's Changed
Bug fixes 🐛
Other Changes 🔄
v3.0.2Compare Source
3.0.2is a patch release focused on release reliability and compatibility. Itreuses existing draft releases when publishing prereleases, supports replacing
release assets on Gitea, hardens streamed asset uploads, and provides clearer
release-creation diagnostics. It also includes TypeScript, coverage, and tooling
maintenance merged since
3.0.1.This release fixes #795, #438, and #803. The upload transport hardening covers the
historical failure reported in #790, although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to #786 and does not
claim a reproducible release-creation fix.
What's Changed
Exciting New Features 🎉
Bug fixes 🐛
Other Changes 🔄
3.0.1v3.0.1Compare Source
3.0.1
Configuration
📅 Schedule: (UTC)
* 17 1-7 * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.