Skip to content

chore(deps): update github-actions (maint-27) (major) - #11458

Open
renovate-bot wants to merge 1 commit into
erlang:maint-27from
renovate-bot:renovate/maint-27-major-github-actions
Open

chore(deps): update github-actions (maint-27) (major)#11458
renovate-bot wants to merge 1 commit into
erlang:maint-27from
renovate-bot:renovate/maint-27-major-github-actions

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
Vampire/setup-wsl action major v6.0.0v7.0.0
actions/cache action major v5.0.3v6.1.0
actions/checkout action major v6.0.2v7.0.1
actions/create-github-app-token action major v2.2.1v3.2.0
actions/github-script action major v8.0.0v9.0.0
docker/login-action action major v3.7.0v4.6.0
dorny/paths-filter action major v3.0.2v4.0.3
macos github-runner major 1526
softprops/action-gh-release action major v2.5.0v3.0.2

Release Notes

Vampire/setup-wsl (Vampire/setup-wsl)

v7.0.0

Compare Source

Breaking Changes

  • Updated Node.js to 24 (#​83)
  • Changed default distributon to Debian-13
  • Changed Alpine-3.17 wslId to contain the version
  • Changed Ubuntu-20.04 wslId to contain the version
  • Changed Ubuntu-22.04 wslId to contain the version
  • Removed deprecated Debian distributon
  • Removed deprecated Alpine distributon

Details

  • Use Debian-11 instead of Debian in tests [953e6c3]
  • Increase version to 7.0.0 [efe0179]
  • Update Node.js to 24 (#​83) [04ef237]
  • Change default distributon to Debian-13 [b67c897]
  • Remove deprecated Debian [ab5ed27]
  • Remove deprecated Alpine [0dc99a1]
  • Change Alpine-3.17 wslId to contain the version [4e9c3b1]
  • Use wsl-file distribution for Ubuntu 20.04+ [9928f17]
  • Change Ubuntu-20.04 and Ubuntu-22.04 wslIds to contain the version [f9577ca]
  • Continue tests for specific wrapper script on installation failure [cf87199]

v6.1.0

Compare Source

Highlights

  • Alpine (3.17) support fixed (#​82)
  • Debian (11) support fixed (#​76)
  • Alpine 3.18 - 3.23 support added
  • Debian 12 - 13 support added

Deprecations

  • Using Alpine is deprecated, Alpine-3.17 is almost a drop-in replacement
  • Using Debian explicitly or as default is deprecated, Debian-11 is almost a drop-in replacement

Details

  • Fix verify-release workflow generation [6819906]
  • Disable testing on Alpine for the time being [1462529]
  • Fix apt update on Debian (#​76) [6eb7639]
  • Update snakeyaml to 2.6 [90a7832]
  • Update release Gradle plugin to 3.1.0 [44828e1]
  • Update versions Gradle plugin to 0.51.0 [168ff3d]
  • Update Wooga GitHub Gradle plugin to 4.0.0 [47d527f]
  • Update Grgit to 5.3.3 [6391a34]
  • Update Gradle to 8.14.4 [6f851d3]
  • Get version update notifications for refresh versions plugin [01972ad]
  • Update refreshVersions Gradle plugin to 0.60.6 [b00071d]
  • Update github-api to 1.330 [b38a1f9]
  • Update Dependency Analysis Gradle plugin to 3.1.0 [25def4e]
  • Update Gradle to 9.4.1 [0f597b6]
  • Allow newer wrapper versions in validateGradleWrapperJar [0e1d30d]
  • Update versions Gradle plugin to 0.53.0 [8632db7]
  • Update Dependency Analysis Gradle plugin to 3.6.1 [df43e2e]
  • Update kotlinx-serialization to 1.10.0 [0261a4f]
  • Update Kotlin for workflow preprocessing to 2.3.20 [685f117]
  • Increase daemon max heap [f103acb]
  • Update Kotlin to 2.3.20 [7bab382]
  • Remove obsolete ktor work-around [857582f]
  • Update ktor to 3.4.2 [b0a9492]
  • Remove obsolete IDE helper comments [14f968f]
  • Update github-workflows-kt to 3.7.0 [2a205c6]
  • Update actions/checkout to v6 [9e3e4a6]
  • Update gradle/actions to v6 [0507b3e]
  • Update actions/cache to v5 [f96ebd2]
  • Update actions/setup-java to v5 [e491558]
  • Update kotlin wrappers to 2026.4.5 [24fd3b7]
  • Increase version to 6.1.0 [648c2a1]
  • Deprecate Debian and add Debian-11 as almost drop-in replacement [9c2948a]
  • Replace dynamic Microsoft store download by wsl --import (#​82) [d5fc1c9]
  • Deprecate Alpine and add Alpine-3.17 as almost drop-in replacement [9d61a27]
  • Add support for Alpine 3.18 - 3.23 [d859bad]
  • Improve test conditions when overwriting wsl.conf file [818d233]
  • Add support for Debian 12 using wsl --install --from-file [a0d3bcd]
  • Add support for Debian 13 [e8092cd]
  • Add a readme that explains the workflow files handling [7d4bd70]
  • Update common-custom-user-data-gradle-plugin to 2.6.0 [ade4ee0]
  • Update kotlinx-serialization to 1.11.0 [02217b0]
actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

v5.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v5...v5.0.4

actions/checkout (actions/checkout)

v7.0.1

Compare Source

v7.0.0

Compare Source

v7

Compare Source

v6.1.0

Compare Source

v6.0.3

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

v3.2.0

Compare Source

Features
Bug Fixes

v3.1.1

Compare Source

Bug Fixes

v3.1.0

Compare Source

Bug Fixes
Features

v3.0.0

Compare Source

Bug Fixes
BREAKING CHANGES
  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
  • Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

v3

Compare Source

v2.2.2

Compare Source

Bug Fixes
actions/github-script (actions/github-script)

v9.0.0

Compare Source

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.
What's Changed
New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

v9

Compare Source

docker/login-action (docker/login-action)

v4.6.0

Compare Source

v4.5.2

Compare Source

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.0

Compare Source

v4.3.0

Compare Source

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

Full Changelog: docker/login-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

Full Changelog: docker/login-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Full Changelog: docker/login-action@v3.7.0...v4.0.0

v4

Compare Source

dorny/paths-filter (dorny/paths-filter)

v4.0.3

Compare Source

v4.0.2

Compare Source

v4.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v4.0.0...v4.0.1

v4.0.0

Compare Source

v4

Compare Source

v3.0.4

Compare Source

v3.0.3

Compare Source

actions/runner-images (macos)

v26: macos-26-arm64 (20260427) Image Update

Announcements
macOS 26 (Tahoe) is now generally available in GitHub Actions
[macOS] The macOS 14 Sonoma based runner images will begin deprecation on July 6th and will be fully unsupported by November 2nd for GitHub Actions and Azure DevOps

🖥️ Actions Runner Image: macOS 26

  • OS Version: macOS 26.3 (25D125)
  • Kernel Version: Darwin 25.3.0
  • Image Version: 2026042.0026.1

📣 What's changed?

Updated
Category Tool name Previous (20260422.0012.1) Current (20260427.0026.1)
Language and Runtime Kotlin 2.3.20-release-208 2.3.21-release-298
Package Management Vcpkg 2026 (build from commit 3fb54e6717) 2026 (build from commit 40717e4517)
Utilities GitHub CLI 2.90.0 2.91.0
gpg (GnuPG) 2.5.18 2.5.19
Packer 1.15.1 1.15.2
Tools AWS CLI 2.34.34 2.34.37
Browsers Google Chrome 147.0.7727.102 147.0.7727.117
Google Chrome for Testing 147.0.7727.57 147.0.7727.117
ChromeDriver 147.0.7727.57 147.0.7727.117
Microsoft Edge 147.0.3912.72 147.0.3912.86
Microsoft Edge WebDriver 147.0.3912.72 147.0.3912.86
Java
Version Environment Variable
25.0.2+10.0 JAVA_HOME_25_arm64
25.0.3+9.0 JAVA_HOME_25_arm64
Android
Package Name Version
Android Emulator 36.5.10
Android Emulator 36.5.11

For comprehensive list of software installed on this image please click here.

softprops/action-gh-release (softprops/action-gh-release)

v3.0.2

Compare Source

3.0.2 is a patch release focused on release reliability and compatibility. It
reuses existing draft releases when publishing prereleases, supports replacing
release assets on Gitea, hardens streamed asset uploads, and provides clearer
release-creation diagnostics. It also includes TypeScript, coverage, and tooling
maintenance merged since 3.0.1.

This release fixes #​795, #​438, and #​803. The upload transport hardening covers the
historical failure reported in #​790, although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to #​786 and does not
claim a reproducible release-creation fix.

What's Changed
Exciting New Features 🎉
Bug fixes 🐛
Other Changes 🔄

v3.0.1

Compare Source

3.0.1

  • maintenance release with updated dependencies

v3.0.0

Compare Source

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24.
Use v3 on GitHub-hosted runners and self-hosted fleets that already support the
Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on
v2.6.2.

What's Changed

Other Changes 🔄
  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

v3

Compare Source

v2.6.2

Compare Source

What's Changed

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2...v2.6.2

v2.6.1

Compare Source

2.6.1 is a patch release focused on restoring linked discussion thread creation when
discussion_category_name is set. It fixes #764, where the draft-first publish flow
stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

v2.6.0

Compare Source

2.6.0 is a minor release centered on previous_tag support for generate_release_notes,
which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range.
It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync,
a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where
GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Exciting New Features 🎉
Bug fixes 🐛
Other Changes 🔄

v2.5.3

Compare Source

2.5.3 is a patch release focused on the remaining path-handling and release-selection bugs uncovered after 2.5.2.
It fixes #639, #571, #280, #614, #311, #403, and #368.
It also adds documentation clarifications for #541, #645, #542, #393, and #411,
where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛
Other Changes 🔄
  • docs: clarify token precedence by @​chenrui333 in #​752
  • docs: clarify GitHub release limits by @​chenrui333 in #​758
  • documentation clarifications for empty-token handling, preserve_order, and special-character asset filename behavior

Full Changelog: softprops/action-gh-release@v2...v2.5.3

v2.5.2

Compare Source

2.5.2 is a patch release focused on the remaining release-creation and prerelease regressions in the 2.5.x bug-fix cycle.
It fixes #705, fixes #708, fixes #740, fixes #741, and fixes #722.
Regression testing covers the shared-tag race, prerelease event behavior, dotfile asset labels,
same-filename concurrent uploads, and blocked-tag cleanup behavior.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛
  • fix: canonicalize releases after conc

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 2am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the team:VM Assigned to OTP team VM label Aug 10, 2026
@renovate-bot renovate-bot added the team:VM Assigned to OTP team VM label Aug 10, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

CT Test Results

  1 files   11 suites   12m 47s ⏱️
 95 tests  93 ✅ 2 💤 0 ❌
111 runs  109 ✅ 2 💤 0 ❌

Results for commit e7f7484.

♻️ This comment has been updated with latest results.

To speed up review, make sure that you have read Contributing to Erlang/OTP and that all checks pass.

See the TESTING and DEVELOPMENT HowTo guides for details about how to run test locally.

Artifacts

// Erlang/OTP Github Action Bot

@renovate-bot renovate-bot changed the title Update github-actions (maint-27) (major) chore(deps): update github-actions (maint-27) (major) Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

team:VM Assigned to OTP team VM

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants