chore(deps): update all action update (major) by renovate[bot] · Pull Request #60 · naa0yama/chezmage

renovate · 2026-03-02T20:45:17Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/attest-build-provenance	action	major	`v3.2.0` → `v4.1.0`
actions/download-artifact	action	major	`v7.0.0` → `v8.0.0`	`v8.0.1`
actions/upload-artifact	action	major	`v6.0.0` → `v7.0.0`
docker/login-action	action	major	`v3.7.0` → `v4.0.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

`v4.1.0`

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Update RELEASE.md docs by @bdehamer in #836
Bump actions/attest from 4.0.0 to 4.1.0 by @bdehamer in #838
- Bump @actions/attest from 3.0.0 to 3.1.0 by @bdehamer in actions/attest#362
- Bump @actions/attest from 3.1.0 to 3.2.0 by @bdehamer in actions/attest#365
- Add new subject-version input for inclusion in storage record by @bdehamer in actions/attest#364
- Add storage record content to README by @bdehamer in actions/attest#366

Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Prepare v4 release by @bdehamer in #835

Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0

actions/download-artifact (actions/download-artifact)

`v8.0.0`

Compare Source

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461

Full Changelog: actions/download-artifact@v7...v8.0.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

docker/login-action (docker/login-action)

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@naa0yama

## What's Changed ### Documentation 🗒️ * refactor(skills): apply boilerplate-rust template to skills hierarchy by @naa0yama in #91 ### Dependency Updates 📦 * chore(deps): update taiki-e/install-action action to v2.68.1 by @renovate[bot] in #45 * chore(deps): update taiki-e/install-action action to v2.68.2 by @renovate[bot] in #47 * chore(deps): update dependency usage to v2.17.4 by @renovate[bot] in #48 * chore(deps): update taiki-e/install-action action to v2.68.3 by @renovate[bot] in #50 * chore(deps): update taiki-e/install-action action to v2.68.4 by @renovate[bot] in #51 * chore(deps): update github/codeql-action action to v4.32.4 by @renovate[bot] in #52 * chore(deps): update taiki-e/install-action action to v2.68.5 by @renovate[bot] in #53 * chore(deps): update taiki-e/install-action action to v2.68.6 by @renovate[bot] in #54 * chore(deps): update taiki-e/install-action action to v2.68.7 by @renovate[bot] in #55 * chore(deps): update actions/attest-build-provenance action to v3 by @renovate[bot] in #13 * chore(deps): update taiki-e/install-action action to v2.68.8 by @renovate[bot] in #58 * chore(deps): update jdx/mise-action digest to e79ddf6 by @renovate[bot] in #59 * chore(deps): update rust crate tempfile to v3.26.0 by @renovate[bot] in #61 * chore(deps): update taiki-e/install-action action to v2.68.9 by @renovate[bot] in #65 * chore(deps): update dependency usage to v2.18.1 by @renovate[bot] in #64 * chore(deps): update songmu/tagpr action to v1.17.1 by @renovate[bot] in #66 * chore(deps): update taiki-e/install-action action to v2.68.10 by @renovate[bot] in #68 * chore(deps): update taiki-e/install-action action to v2.68.11 by @renovate[bot] in #69 * chore(deps): update taiki-e/install-action action to v2.68.12 by @renovate[bot] in #70 * chore(deps): update all action update by @renovate[bot] in #71 * chore(deps): update taiki-e/install-action action to v2.68.14 by @renovate[bot] in #72 * chore(deps): update taiki-e/install-action action to v2.68.15 by @renovate[bot] in #73 * chore(deps): update actions-rust-lang/setup-rust-toolchain action to v1.15.3 by @renovate[bot] in #74 * chore(deps): update dependency usage to v2.18.2 by @renovate[bot] in #75 * chore(deps): update taiki-e/install-action action to v2.68.16 by @renovate[bot] in #76 * chore(deps): update github/codeql-action action to v4.32.5 by @renovate[bot] in #78 * chore(deps): update taiki-e/install-action action to v2.68.17 by @renovate[bot] in #79 * chore(deps): update dependency github:rust-secure-code/cargo-auditable to v0.7.3 by @renovate[bot] in #80 * chore(deps): update taiki-e/install-action action to v2.68.18 by @renovate[bot] in #81 * chore(deps): update rust docker tag to v1.93.1 by @renovate[bot] in #82 * chore(deps): update taiki-e/install-action action to v2.68.19 by @renovate[bot] in #85 * chore(deps): update github/codeql-action action to v4.32.6 by @renovate[bot] in #86 * chore(deps): update taiki-e/install-action action to v2.68.20 by @renovate[bot] in #87 * chore(deps): update taiki-e/install-action action to v2.68.21 by @renovate[bot] in #88 * chore(deps): update taiki-e/install-action action to v2.68.22 by @renovate[bot] in #89 * chore(deps): update taiki-e/install-action action to v2.68.23 by @renovate[bot] in #90 * chore(deps): update dependency github:rust-secure-code/cargo-auditable to v0.7.4 by @renovate[bot] in #83 * chore(deps): update dependency aqua:ast-grep/ast-grep to v0.41.0 by @renovate[bot] in #57 * chore(deps): update dependency dprint to v0.52.0 by @renovate[bot] in #67 * chore(deps): update all action update (major) by @renovate[bot] in #60 * chore(deps): update all action update by @renovate[bot] in #94 * chore(deps): update taiki-e/install-action action to v2.68.25 by @renovate[bot] in #95 * chore(deps): update zizmorcore/zizmor-action action to v0.5.2 by @renovate[bot] in #96 ### Other Changes * chore: backport-2 by @naa0yama in #56 * feat(deps): cargo target cleanup by @naa0yama in #62 * chore: claude skills update by @naa0yama in #63 * Change command to postVersionCommand in .tagpr by @naa0yama in #77 * Update PATH export logic in Dockerfile by @naa0yama in #84 * Update postStartCommand.sh by @naa0yama in #92 * Update initializeCommand.sh by @naa0yama in #93 * fix(otel): harden tracing to prevent sensitive data leakage by @naa0yama in #97 * fix(ci): replace softprops/action-gh-release with gh CLI by @naa0yama in #98 * Update release.yml by @naa0yama in #99 **Full Changelog**: v0.3.0...tagpr-from-v0.3.0 --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

@naa0yama

## What's Changed ### Documentation 🗒️ * refactor(skills): apply boilerplate-rust template to skills hierarchy by @naa0yama in #91 ### Dependency Updates 📦 * chore(deps): update rust crate tempfile to v3.26.0 by @renovate[bot] in #61 ### Development Environment 🔧 * chore(deps): update taiki-e/install-action action to v2.68.1 by @renovate[bot] in #45 * chore(deps): update taiki-e/install-action action to v2.68.2 by @renovate[bot] in #47 * chore(deps): update dependency usage to v2.17.4 by @renovate[bot] in #48 * chore(deps): update taiki-e/install-action action to v2.68.3 by @renovate[bot] in #50 * chore(deps): update taiki-e/install-action action to v2.68.4 by @renovate[bot] in #51 * chore(deps): update github/codeql-action action to v4.32.4 by @renovate[bot] in #52 * chore(deps): update taiki-e/install-action action to v2.68.5 by @renovate[bot] in #53 * chore(deps): update taiki-e/install-action action to v2.68.6 by @renovate[bot] in #54 * chore(deps): update taiki-e/install-action action to v2.68.7 by @renovate[bot] in #55 * chore: backport-2 by @naa0yama in #56 * chore(deps): update actions/attest-build-provenance action to v3 by @renovate[bot] in #13 * chore(deps): update taiki-e/install-action action to v2.68.8 by @renovate[bot] in #58 * chore(deps): update jdx/mise-action digest to e79ddf6 by @renovate[bot] in #59 * feat(deps): cargo target cleanup by @naa0yama in #62 * chore(deps): update taiki-e/install-action action to v2.68.9 by @renovate[bot] in #65 * chore(deps): update dependency usage to v2.18.1 by @renovate[bot] in #64 * chore(deps): update songmu/tagpr action to v1.17.1 by @renovate[bot] in #66 * chore(deps): update taiki-e/install-action action to v2.68.10 by @renovate[bot] in #68 * chore(deps): update taiki-e/install-action action to v2.68.11 by @renovate[bot] in #69 * chore(deps): update taiki-e/install-action action to v2.68.12 by @renovate[bot] in #70 * chore(deps): update all action update by @renovate[bot] in #71 * chore(deps): update taiki-e/install-action action to v2.68.14 by @renovate[bot] in #72 * chore(deps): update taiki-e/install-action action to v2.68.15 by @renovate[bot] in #73 * chore(deps): update actions-rust-lang/setup-rust-toolchain action to v1.15.3 by @renovate[bot] in #74 * chore(deps): update dependency usage to v2.18.2 by @renovate[bot] in #75 * chore(deps): update taiki-e/install-action action to v2.68.16 by @renovate[bot] in #76 * chore(deps): update github/codeql-action action to v4.32.5 by @renovate[bot] in #78 * chore(deps): update taiki-e/install-action action to v2.68.17 by @renovate[bot] in #79 * chore(deps): update dependency github:rust-secure-code/cargo-auditable to v0.7.3 by @renovate[bot] in #80 * chore(deps): update taiki-e/install-action action to v2.68.18 by @renovate[bot] in #81 * chore(deps): update rust docker tag to v1.93.1 by @renovate[bot] in #82 * chore(deps): update taiki-e/install-action action to v2.68.19 by @renovate[bot] in #85 * Update PATH export logic in Dockerfile by @naa0yama in #84 * chore(deps): update github/codeql-action action to v4.32.6 by @renovate[bot] in #86 * chore(deps): update taiki-e/install-action action to v2.68.20 by @renovate[bot] in #87 * chore(deps): update taiki-e/install-action action to v2.68.21 by @renovate[bot] in #88 * chore(deps): update taiki-e/install-action action to v2.68.22 by @renovate[bot] in #89 * chore(deps): update taiki-e/install-action action to v2.68.23 by @renovate[bot] in #90 * chore(deps): update dependency github:rust-secure-code/cargo-auditable to v0.7.4 by @renovate[bot] in #83 * chore(deps): update dependency aqua:ast-grep/ast-grep to v0.41.0 by @renovate[bot] in #57 * chore(deps): update dependency dprint to v0.52.0 by @renovate[bot] in #67 * chore(deps): update all action update (major) by @renovate[bot] in #60 * chore(deps): update all action update by @renovate[bot] in #94 * chore(deps): update taiki-e/install-action action to v2.68.25 by @renovate[bot] in #95 * chore(deps): update zizmorcore/zizmor-action action to v0.5.2 by @renovate[bot] in #96 * fix(ci): fix release build and changelog label categorisation by @naa0yama in #100 * fix(ci): allow tagpr workflow to run on workflow_dispatch by @naa0yama in #102 * fix(ci): upload assets to tagpr-created release instead of creating a new one by @naa0yama in #104 ### Other Changes * chore: claude skills update by @naa0yama in #63 * Change command to postVersionCommand in .tagpr by @naa0yama in #77 * Update postStartCommand.sh by @naa0yama in #92 * Update initializeCommand.sh by @naa0yama in #93 * fix(otel): harden tracing to prevent sensitive data leakage by @naa0yama in #97 * fix(ci): replace softprops/action-gh-release with gh CLI by @naa0yama in #98 * Update release.yml by @naa0yama in #99 **Full Changelog**: v0.3.0...tagpr-from-v0.3.0 --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

renovate Bot added datasource:github-tags Source: GitHub Tags depType:action Dependency type: GitHub Actions manager:github-actions Manager: GitHub Actions renovate Dependency update by Renovate update-major Update type: major versioning:docker Versioning: Docker labels Mar 2, 2026

github-actions Bot added the github_actions label Mar 2, 2026

renovate Bot force-pushed the renovate/major-all-action-update branch 8 times, most recently from 1de7576 to 24af68f Compare March 4, 2026 22:43

renovate Bot changed the title ~~chore(deps): update actions/download-artifact action to v8~~ chore(deps): update all action update (major) Mar 4, 2026

renovate Bot force-pushed the renovate/major-all-action-update branch 14 times, most recently from 9c59cb8 to a086725 Compare March 11, 2026 04:04

renovate Bot force-pushed the renovate/major-all-action-update branch 12 times, most recently from 2ce1b81 to 5f9f7dc Compare March 15, 2026 12:40

chore(deps): update all action update

8ab6b59

renovate Bot force-pushed the renovate/major-all-action-update branch from 5f9f7dc to 8ab6b59 Compare March 15, 2026 12:44

naa0yama merged commit 0f45f10 into main Mar 15, 2026
16 checks passed

naa0yama deleted the renovate/major-all-action-update branch March 15, 2026 13:48

github-actions Bot mentioned this pull request Mar 15, 2026

Release for v0.3.1 #46

Merged

This was referenced Mar 16, 2026

Release for v0.3.1 #103

Merged

Release for v0.3.1 #105

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all action update (major)#60

chore(deps): update all action update (major)#60
naa0yama merged 1 commit intomainfrom
renovate/major-all-action-update

renovate Bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.1.0

What's Changed

v4.0.0

What's Changed

v8.0.0

v8 - What's new

Direct downloads

Enforced checks (breaking)

ESM

What's Changed

v7.0.0

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v4.0.0

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Mar 2, 2026 •

edited

Loading

`v4.1.0`

`v4.0.0`

`v8.0.0`

`v7.0.0`

`v4.0.0`