chore(deps): update github actions by renovate[bot] · Pull Request #45 · SonarSource/gh-action_pre-commit

renovate · 2026-01-16T22:40:27Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	patch	`v5.0.1` → `v5.0.5`	`v5.1.0`
actions/checkout	action	patch	`v6.0.1` → `v6.0.3`
actions/setup-python	action	minor	`v6.1.0` → `v6.3.0`
nick-fields/assert-action	action	pin	`v2` → `v2.0.0`

Release Notes

actions/cache (actions/cache)

`v5.0.5`

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: actions/cache@v5...v5.0.5

`v5.0.4`

Compare Source

What's Changed

Add release instructions and update maintainer docs by @Link- in #1696
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in #1697
Fix workflow permissions and cleanup workflow names / formatting by @Link- in #1699
docs: Update examples to use the latest version by @XZTDean in #1690
Fix proxy integration tests by @Link- in #1701
Fix cache key in examples.md for bun.lock by @RyPeck in #1722
Update dependencies & patch security vulnerabilities by @Link- in #1738

New Contributors

@XZTDean made their first contribution in #1690
@RyPeck made their first contribution in #1722

Full Changelog: actions/cache@v5...v5.0.4

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

`v5.0.2`: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

actions/setup-python (actions/setup-python)

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in #1259
Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in #1253 and #1264

Full Changelog: actions/setup-python@v6...v6.2.0

Configuration

📅 Schedule: (in timezone Europe/Paris)

Branch creation
- "after 7am every weekday,before 8pm every weekday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

sonarqubecloud · 2026-01-16T22:40:47Z

See all code changes, issues, and quality metrics in one place.

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate · 2026-04-20T16:03:45Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command 'pre-commit autoupdate --freeze || true' has not been added to the allowed list in allowedCommands

sonarqubecloud · 2026-04-20T16:07:30Z

Quality Gate failed

Failed conditions
2 New issues

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

sonar-review-alpha · 2026-04-20T16:07:37Z

Summary

This PR updates multiple GitHub Actions dependencies, not just actions/cache. The actual changes include:

actions/checkout: v6.0.1 → v6.0.2 (updated in 7 workflow files)
actions/setup-python: v6.1.0 → v6.2.0
actions/cache: v5.0.1 → v5.0.5 (both restore and save steps)

The PR description mentions only actions/cache at v5.0.2, but the actual changes show v5.0.5. This appears to be a Renovate-generated dependency update that includes more actions than initially documented.

What reviewers should know

What to check:

Verify the version bumps are appropriate (patch/minor versions are generally safe, but review release notes if concerned)
The changes are mechanical—only version pins and hashes change, no logic modifications
All updates are in workflow files and the action's action.yml entry point

Gotchas:

Discrepancy between PR title ("v5.0.2") and actual cache version updated (v5.0.5)—confirm this matches your update policy
Checkout update appears 7 times across workflows; ensure consistent version pinning

Generate Walkthrough
Generate Diagram

🗣️ Give feedback

sonar-review-alpha

Mechanically clean update — SHA pins are consistent across all files, version comments match their pins, and actions/cache/restore and actions/cache/save correctly share the same SHA. No logic or behaviour changes.

However, the PR title and Renovate-generated description are factually wrong in two ways that warrant confirmation before merging.

🗣️ Give feedback

sonarqubecloud · 2026-06-29T05:47:59Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate Bot added the dependencies label Jan 16, 2026

renovate Bot requested a review from a team January 16, 2026 22:40

renovate Bot added the dependencies label Jan 16, 2026

renovate Bot force-pushed the renovate/github-actions branch from e9c1e5b to 1ac49e9 Compare April 20, 2026 16:03

renovate Bot changed the title ~~chore(deps): update actions/cache action to v5.0.2~~ chore(deps): update github actions Apr 20, 2026

sonar-review-alpha Bot reviewed Apr 20, 2026

View reviewed changes

Comment thread action.yml

Comment thread action.yml Outdated

Comment thread .github/workflows/it-test.yml Outdated

renovate Bot force-pushed the renovate/github-actions branch from 1ac49e9 to 76c9ccf Compare June 2, 2026 20:12

renovate Bot requested a review from a team as a code owner June 2, 2026 20:12

renovate Bot force-pushed the renovate/github-actions branch from 76c9ccf to 1e57af6 Compare June 7, 2026 14:39

renovate Bot force-pushed the renovate/github-actions branch from 1e57af6 to 6edec76 Compare June 18, 2026 17:47

chore(deps): update github actions

7beda32

renovate Bot force-pushed the renovate/github-actions branch from 6edec76 to 7beda32 Compare June 29, 2026 05:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github actions#45

chore(deps): update github actions#45
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github-actions

renovate Bot commented Jan 16, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Jan 16, 2026

Uh oh!

renovate Bot commented Apr 20, 2026

Uh oh!

sonarqubecloud Bot commented Apr 20, 2026

Uh oh!

sonar-review-alpha Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

sonar-review-alpha Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jan 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v5.0.5

What's Changed

v5.0.4

What's Changed

New Contributors

v5.0.3

What's Changed

v5.0.2: v.5.0.2

v5.0.2

What's Changed

v6.0.3

v6.0.2

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v6.2.0

What's Changed

Dependency Upgrades

Configuration

Uh oh!

sonarqubecloud Bot commented Jan 16, 2026

Quality Gate passed

Uh oh!

renovate Bot commented Apr 20, 2026

⚠️ Artifact update problem

File name: undefined

Uh oh!

sonarqubecloud Bot commented Apr 20, 2026

Quality Gate failed

Uh oh!

sonar-review-alpha Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

What reviewers should know

Uh oh!

sonar-review-alpha Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jan 16, 2026 •

edited

Loading

`v5.0.5`

`v5.0.4`

`v5.0.3`

`v5.0.2`: v.5.0.2

`v6.0.3`

`v6.0.2`

`v6.3.0`

`v6.2.0`

sonar-review-alpha Bot commented Apr 20, 2026 •

edited

Loading