Skip to content

chore(deps): update github-actions#433

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions
Jan 25, 2026
Merged

chore(deps): update github-actions#433
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Jan 25, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v6.0.1v6.0.2
github/codeql-action action patch v4.31.10v4.31.11
mlugg/setup-zig action patch v2.2.0v2.2.1
taiki-e/checkout-action action minor v1.3.2v1.4.0
taiki-e/install-action action minor v2.66.6v2.67.10

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

github/codeql-action (github/codeql-action)

v4.31.11

Compare Source

  • When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #​3409
  • Improved error handling throughout the CodeQL Action. #​3415
  • Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #​3318
  • The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #​3403
mlugg/setup-zig (mlugg/setup-zig)

v2.2.1

Compare Source

  • Print which version of Zig was installed
  • Add a little more log output (helps debug cache issues)

[!NOTE]
The setup-zig project is now hosted on Codeberg, and this GitHub repository exists as a mirror solely to work around the vendor lock-in mechanisms employed by GitHub Actions. While there are no plans to discontinue GitHub Actions support, I would nonetheless encourage users to consider upgrading to Forgejo Actions on a non-profit forge like Codeberg to avoid being affected by GitHub's profit-driven behavior (such as attempting to charge users by the minute for using their own hardware).

taiki-e/checkout-action (taiki-e/checkout-action)

v1.4.0

Compare Source

Initial release

taiki-e/install-action (taiki-e/install-action)

v2.67.10

Compare Source

Initial release


Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge (squash) January 25, 2026 17:04
Comment thread .github/workflows/CI.yml
path: ~/.napi-rs
key: ${{ matrix.settings.target }}-cargo-${{ matrix.settings.host }}
- uses: mlugg/setup-zig@e7d1537c378b83b8049f65dda471d87a2f7b2df2 # v2.2.0
- uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1

Check failure

Code scanning / zizmor

runtime artifacts potentially vulnerable to a cache poisoning attack Error

runtime artifacts potentially vulnerable to a cache poisoning attack
@renovate renovate Bot merged commit a30c773 into main Jan 25, 2026
55 of 56 checks passed
@renovate renovate Bot deleted the renovate/github-actions branch January 25, 2026 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant