Skip to content

chore(deps): update github-actions#416

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions
Jan 11, 2026
Merged

chore(deps): update github-actions#416
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Jan 11, 2026

Copy link
Copy Markdown
Contributor

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
mlugg/setup-zig action minor v2.1.0v2.2.0
taiki-e/checkout-action action patch v1.3.1v1.3.2
taiki-e/install-action action minor v2.65.12v2.66.1

Release Notes

mlugg/setup-zig (mlugg/setup-zig)

v2.2.0

Compare Source

  • Update dependencies
  • Replace libsodium dependency with node:crypto, improving target support
  • Use hardcoded mirror list when ziglang.org is inaccessible
  • Fix incorrect tarball names when fetching certain versions

[!NOTE]
The setup-zig project is now hosted on Codeberg, and this GitHub repository exists as a mirror solely to work around the vendor lock-in mechanisms employed by GitHub Actions. While there are no plans to discontinue GitHub Actions support, I would nonetheless encourage users to consider upgrading to Forgejo Actions on a non-profit forge like Codeberg to avoid being affected by GitHub's profit-driven behavior (such as attempting to charge users by the minute for using their own hardware).

taiki-e/checkout-action (taiki-e/checkout-action)

v1.3.2

Compare Source

Initial release

taiki-e/install-action (taiki-e/install-action)

v2.66.1

Compare Source

Initial release


Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge (squash) January 11, 2026 17:27
Comment thread .github/workflows/CI.yml
path: ~/.napi-rs
key: ${{ matrix.settings.target }}-cargo-${{ matrix.settings.host }}
- uses: mlugg/setup-zig@fa65c4058643678a4e4a9a60513944a7d8d35440 # v2.1.0
- uses: mlugg/setup-zig@e7d1537c378b83b8049f65dda471d87a2f7b2df2 # v2.2.0

Check failure

Code scanning / zizmor

runtime artifacts potentially vulnerable to a cache poisoning attack Error

runtime artifacts potentially vulnerable to a cache poisoning attack
@renovate renovate Bot merged commit 4f698c0 into main Jan 11, 2026
55 of 56 checks passed
@renovate renovate Bot deleted the renovate/github-actions branch January 11, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant