Skip to content

chore(deps): bump the github-actions group across 1 directory with 10 updates#825

Merged
darccio merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-e8fd678bef
May 12, 2026
Merged

chore(deps): bump the github-actions group across 1 directory with 10 updates#825
darccio merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-e8fd678bef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 10 updates in the / directory:

Package From To
actions/setup-go 6.3.0 6.4.0
actions/upload-artifact 7.0.0 7.0.1
actions/upload-pages-artifact 4.0.0 5.0.0
github/codeql-action 4.33.0 4.35.4
crate-ci/typos 1.44.0 1.46.1
zgosalvez/github-actions-ensure-sha-pinned-actions 5.0.3 5.0.4
reviewdog/action-actionlint 1.71.0 1.72.0
DataDog/dd-trace-go/.github/workflows/orchestrion.yml ee8dce259fa5e3f266a3b92944ece08023aabc8a 937a8e83c8bfc28a9bfef9c2f53641bc57432a8e
actions/setup-node 6.3.0 6.4.0
DataDog/coverage-upload-github-action 1.0.1 1.0.3

Updates actions/setup-go from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-go's releases.

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

Commits

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • See full diff in compare view

Updates actions/upload-pages-artifact from 4.0.0 to 5.0.0

Release notes

Sourced from actions/upload-pages-artifact's releases.

v5.0.0

Changelog

See details of all code changes since previous release.

Commits

Updates github/codeql-action from 4.33.0 to 4.35.4

Release notes

Sourced from github/codeql-action's releases.

v4.35.4

  • Update default CodeQL bundle version to 2.25.4. #3881

v4.35.3

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852
  • Update default CodeQL bundle version to 2.25.3. #3865

v4.35.2

  • The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
  • The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
  • Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
  • Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
  • Update default CodeQL bundle version to 2.25.2. #3823

v4.35.1

v4.35.0

v4.34.1

  • Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

v4.34.0

  • Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
  • We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
  • Update default CodeQL bundle version to 2.25.0. #3585
Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.35.4 - 07 May 2026

  • Update default CodeQL bundle version to 2.25.4. #3881

4.35.3 - 01 May 2026

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852
  • Update default CodeQL bundle version to 2.25.3. #3865

4.35.2 - 15 Apr 2026

  • The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
  • The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
  • Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
  • Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
  • Update default CodeQL bundle version to 2.25.2. #3823

4.35.1 - 27 Mar 2026

4.35.0 - 27 Mar 2026

4.34.1 - 20 Mar 2026

  • Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

4.34.0 - 20 Mar 2026

  • Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
  • We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
  • Update default CodeQL bundle version to 2.25.0. #3585

4.33.0 - 16 Mar 2026

  • Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

... (truncated)

Commits
  • 68bde55 Merge pull request #3885 from github/update-v4.35.4-803d9e8c3
  • 9739ad2 Update changelog for v4.35.4
  • 803d9e8 Merge pull request #3883 from github/mbg/test/macro-wrapper
  • 0fd9c7d Merge pull request #3882 from github/dependabot/github_actions/dot-github/wor...
  • 922d6fb Use makeMacro instead of test.macro
  • df77e87 Update test macro snippet
  • 6e3f985 Add wrapper for test.macro
  • e7a347d Merge pull request #3881 from github/update-bundle/codeql-bundle-v2.25.4
  • 17eabb2 Rebuild
  • aaef09c Bump ruby/setup-ruby
  • Additional commits viewable in compare view

Updates crate-ci/typos from 1.44.0 to 1.46.1

Release notes

Sourced from crate-ci/typos's releases.

v1.46.1

[1.46.1] - 2026-05-08

Fixes

  • Don't correct to confidentials

v1.46.0

[1.46.0] - 2026-04-30

Features

  • Updated the dictionary with the April 2026 changes

v1.45.2

[1.45.2] - 2026-04-27

Fixes

  • Ignore ssh ed25519 public keys

v1.45.1

[1.45.1] - 2026-04-13

Fixes

  • (action) Use a temp dir for caching

v1.45.0

[1.45.0] - 2026-04-01

Features

  • Updated the dictionary with the March 2026 changes
Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.46.1] - 2026-05-08

Fixes

  • Don't correct to confidentials

[1.46.0] - 2026-04-30

Features

  • Updated the dictionary with the April 2026 changes

[1.45.2] - 2026-04-27

Fixes

  • Ignore ssh ed25519 public keys

[1.45.1] - 2026-04-13

Fixes

  • (action) Use a temp dir for caching

[1.45.0] - 2026-04-01

Features

  • Updated the dictionary with the March 2026 changes

[1.44.0] - 2026-02-27

Features

[1.43.5] - 2026-02-16

Fixes

  • (pypi) Hopefully fix the sdist build

... (truncated)

Commits

Updates zgosalvez/github-actions-ensure-sha-pinned-actions from 5.0.3 to 5.0.4

Release notes

Sourced from zgosalvez/github-actions-ensure-sha-pinned-actions's releases.

v5.0.4

What's Changed

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.4

Commits

Updates reviewdog/action-actionlint from 1.71.0 to 1.72.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.72.0

v1.72.0: PR #196 - chore(deps): update actionlint to 1.7.12

Commits
  • 6fb7acc bump v1.72.0
  • b2a904a Merge branch 'main' into releases/v1
  • 5eaffa1 Merge pull request #196 from reviewdog/depup/actionlint
  • 39a6754 chore(deps): update actionlint to 1.7.12
  • d39025c Merge pull request #195 from reviewdog/renovate/docker-setup-buildx-action-4.x
  • 2e8272d Merge pull request #194 from reviewdog/renovate/docker-setup-qemu-action-4.x
  • 128d9b7 Merge pull request #190 from reviewdog/renovate/shogo82148-actions-create-rel...
  • 1674e4f chore(deps): update docker/setup-buildx-action action to v4
  • 8fdb9d2 Merge pull request #189 from reviewdog/renovate/docker-setup-buildx-action-3.x
  • a518ce8 Merge pull request #188 from reviewdog/renovate/peter-evans-create-pull-reque...
  • Additional commits viewable in compare view

Updates DataDog/dd-trace-go/.github/workflows/orchestrion.yml from ee8dce259fa5e3f266a3b92944ece08023aabc8a to 937a8e83c8bfc28a9bfef9c2f53641bc57432a8e

Commits
  • 937a8e8 fix(internal/telemetry): add waitgroup for telemetry global client flush (#4714)
  • 55c1586 fix(internal/civisibility): avoid tests-only race condition on CIVis reset (#...
  • 87fcf6f feat: add process tags to metrics with service tag (#4724)
  • 0ebb7ee fix: strip unused process tags (#4742)
  • c28e04a perf(ddtrace/tracer): snapshot config in StartSpan to avoid RWMutex contentio...
  • 252431a fix(ci-visibility): reduce Go test wrapper overhead (#4738)
  • 7a6f899 ci(benchmarks): Fix wrong CI image link for macrobenchmarks (#4739)
  • adf1047 fix(tracer): use configurable MaxTagsHeaderLen for x-datadog-tags extraction ...
  • 0ec584d ci(benchmarks): Parellelize microbenchmarks, deprecate dependency on benchmar...
  • e8a9aad refactor(config): migrate maxTagsHeaderLen (#4730)
  • Additional commits viewable in compare view

Updates actions/setup-node from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

Commits

Updates DataDog/coverage-upload-github-action from 1.0.1 to 1.0.3

Release notes

Sourced from DataDog/coverage-upload-github-action's releases.

v1.0.3

What's Changed

Full Changelog: DataDog/coverage-upload-github-action@v1...v1.0.3

v1.0.2

What's Changed

New Contributors

Full Changelog: DataDog/coverage-upload-github-action@v1...v1.0.2

Commits
  • 6c4bd93 Merge pull request #19 from DataDog/carlos.nietopetinal/update-install-datado...
  • e6247bf Update install-datadog-ci-github-action to v1.0.3
  • f80c0e6 Merge pull request #18 from DataDog/carlos.nietopetinal/update-install-datado...
  • 3f85a7c Update install-datadog-ci-github-action to v1.0.2
  • bb2636f Merge pull request #14 from DataDog/chore/disable-dependency-updaters-inciden...
  • d249adc Update dependabot.yaml.disabled
  • e577f11 Update dependabot.yaml.disabled
  • edaacae Update and rename dependabot.yaml to dependabot.yaml.disabled
  • 10f5712 Update dependabot.yaml
  • 92eae8e Update dependabot.yaml
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 27, 2026 19:53
@github-actions github-actions Bot added the conventional-commit/chore Maintenance work that does not show up in the release notes label Apr 27, 2026
@darccio
darccio enabled auto-merge May 4, 2026 10:09
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-e8fd678bef branch from ed9951c to 13afa4a Compare May 4, 2026 20:27
@dependabot
chore(deps): bump the github-actions group across 1 directory with 10…
5f5dfe0 
… updates

Bumps the github-actions group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.3.0` | `6.4.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` |
| [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `4.0.0` | `5.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.33.0` | `4.35.4` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.44.0` | `1.46.1` |
| [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `5.0.3` | `5.0.4` |
| [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.71.0` | `1.72.0` |
| [DataDog/dd-trace-go/.github/workflows/orchestrion.yml](https://github.com/datadog/dd-trace-go) | `ee8dce259fa5e3f266a3b92944ece08023aabc8a` | `937a8e83c8bfc28a9bfef9c2f53641bc57432a8e` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.3.0` | `6.4.0` |
| [DataDog/coverage-upload-github-action](https://github.com/datadog/coverage-upload-github-action) | `1.0.1` | `1.0.3` |



Updates `actions/setup-go` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4b73464...4a36011)

Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

Updates `actions/upload-pages-artifact` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](actions/upload-pages-artifact@7b1f4a7...fc324d3)

Updates `github/codeql-action` from 4.33.0 to 4.35.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@b1bff81...68bde55)

Updates `crate-ci/typos` from 1.44.0 to 1.46.1
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@631208b...5374cbf)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](zgosalvez/github-actions-ensure-sha-pinned-actions@471d5ac...ca46236)

Updates `reviewdog/action-actionlint` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/reviewdog/action-actionlint/releases)
- [Commits](reviewdog/action-actionlint@0d952c5...6fb7acc)

Updates `DataDog/dd-trace-go/.github/workflows/orchestrion.yml` from ee8dce259fa5e3f266a3b92944ece08023aabc8a to 937a8e83c8bfc28a9bfef9c2f53641bc57432a8e
- [Release notes](https://github.com/datadog/dd-trace-go/releases)
- [Commits](DataDog/dd-trace-go@ee8dce2...937a8e8)

Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)

Updates `DataDog/coverage-upload-github-action` from 1.0.1 to 1.0.3
- [Release notes](https://github.com/datadog/coverage-upload-github-action/releases)
- [Commits](DataDog/coverage-upload-github-action@d2cf302...6c4bd93)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-pages-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: crate-ci/typos
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: DataDog/coverage-upload-github-action
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: DataDog/dd-trace-go/.github/workflows/orchestrion.yml
  dependency-version: 5de8153b97996902df366a29f8f0330109ed793c
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: reviewdog/action-actionlint
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-e8fd678bef branch from 13afa4a to 5f5dfe0 Compare May 11, 2026 23:42
@darccio
darccio disabled auto-merge May 12, 2026 13:29
@darccio
darccio enabled auto-merge May 12, 2026 14:30
@darccio
darccio added this pull request to the merge queue May 12, 2026
@codecov

codecov Bot commented May 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.80%. Comparing base (e061d12) to head (e45cc88).
⚠️ Report is 81 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main     #825      +/-   ##
==========================================
+ Coverage   65.72%   70.80%   +5.08%     
==========================================
  Files         113      117       +4     
  Lines        7926     6902    -1024     
==========================================
- Hits         5209     4887     -322     
+ Misses       2192     1444     -748     
- Partials      525      571      +46
Components Coverage Δ
Generators 83.23% <ø> (+2.98%) ⬆️
Instruments ∅ <ø> (∅)
Go Driver 75.58% <65.38%> (-0.23%) ⬇️
Toolexec Driver 74.78% <100.00%> (+7.25%) ⬆️
Aspects 76.89% <75.00%> (+4.98%) ⬆️
Injector 77.19% <76.41%> (+4.39%) ⬆️
Job Server 71.00% <55.55%> (+5.08%) ⬆️
Other 70.80% <65.11%> (+5.08%) ⬆️
see 108 files with indirect coverage changes
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@datadog-datadog-prod-us1-2

datadog-datadog-prod-us1-2 Bot commented May 12, 2026

Copy link
Copy Markdown

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 69.05%

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: e45cc88 | Docs | Datadog PR Page | Give us feedback!

Merged via the queue into main with commit 06ca916 May 12, 2026
77 of 78 checks passed
@darccio
darccio deleted the dependabot/github_actions/github-actions-e8fd678bef branch May 12, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@darccio darccio darccio approved these changes

Assignees

No one assigned

Labels

conventional-commit/chore Maintenance work that does not show up in the release notes dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@darccio