Skip to content

chore(deps): update github-actions - #11288

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

chore(deps): update github-actions#11288
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
actions/attest-build-provenance action minor v4.1.1v4.2.2
dorny/paths-filter action patch v4.0.2v4.0.3
node uses-with minor 24.18.124.19.0
pnpm/action-setup action patch v6.0.9v6.0.10
taiki-e/install-action action patch v2.85.5v2.85.9 v2.85.11 (+1)
tombi-toml/setup-tombi action patch v1.2.5v1.2.7 v1.2.8
zizmorcore/zizmor-action action patch v0.6.1v0.6.2

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.2.2

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.1...v4.2.2

dorny/paths-filter (dorny/paths-filter)

v4.0.3

Compare Source

actions/node-versions (node)

v24.19.0: 24.19.0

Compare Source

Node.js 24.19.0

pnpm/action-setup (pnpm/action-setup)

v6.0.10

Compare Source

taiki-e/install-action (taiki-e/install-action)

v2.85.9: 2.85.9

Compare Source

  • Update zola@latest to 0.23.1.

  • Update wild@latest to 0.10.0.

  • Update mise@latest to 2026.8.2.

  • Update just@latest to 1.58.0.

  • Update jaq@latest to 3.1.1.

  • Update cargo-nextest@latest to 0.9.143.

  • Update cargo-crap@latest to 0.4.2.

  • Update biome@latest to 2.5.7.

v2.85.8: 2.85.8

Compare Source

  • Update zizmor@latest to 1.29.0.

  • Update typos@latest to 1.49.0.

  • Update trivy@latest to 0.73.0.

  • Update tombi@latest to 1.2.6.

  • Update prek@latest to 0.4.12.

  • Update mise@latest to 2026.8.1.

  • Update convco@latest to 0.7.1.

  • Update cargo-semver-checks@latest to 0.50.0.

  • Update cargo-crap@latest to 0.4.1.

v2.85.7: 2.85.7

Compare Source

  • Update wasmtime@latest to 47.0.3.

  • Update uv@latest to 0.12.1.

  • Update rclone@latest to 1.75.0.

  • Update kingfisher@latest to 1.110.0.

v2.85.6: 2.85.6

Compare Source

  • Update wasm-tools@latest to 1.255.0.

  • Update tombi@latest to 1.2.5.

  • Update mise@latest to 2026.7.18.

  • Update cargo-neat@latest to 0.5.3.

  • Update cargo-crap@latest to 0.4.0.

tombi-toml/setup-tombi (tombi-toml/setup-tombi)

v1.2.7

Compare Source

This setup-tombi release matches tombi v1.2.7.

What's Changed

Full Changelog: tombi-toml/setup-tombi@v1...v1.2.7

v1.2.6

Compare Source

This setup-tombi release matches tombi v1.2.6.

Full Changelog: tombi-toml/setup-tombi@v1...v1.2.6

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.6.2

Compare Source

zizmor 1.29.0 is now the default version.


Configuration

📅 Schedule: (in timezone Europe/Gibraltar)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot

changeset-bot Bot commented Aug 10, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 5566a02

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codspeed-hq

codspeed-hq Bot commented Aug 10, 2026

Copy link
Copy Markdown

Merging this PR will regress 1 benchmark

⚡ 2 improved benchmarks
❌ 1 regressed benchmark
✅ 272 untouched benchmarks
🆕 7 new benchmarks
⏩ 4 skipped benchmarks1

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

Benchmark BASE HEAD Efficiency
js_analyzer[index_3894593175024091846.js] 73.8 ms 86.5 ms -14.67%
tsconfig_json 626.7 µs 440.3 µs +42.34%
db_17847247775464589309.json[uncached] 14.5 ms 13.8 ms +5.2%
🆕 install_12423756835123908095.yaml[cached] N/A 101.4 ms N/A
🆕 install_12423756835123908095.yaml[uncached] N/A 108.9 ms N/A
🆕 values_5348008171103604788.yaml[cached] N/A 9.5 ms N/A
🆕 values_5348008171103604788.yaml[uncached] N/A 10.9 ms N/A
🆕 ascii N/A 10.8 µs N/A
🆕 sanitized N/A 322 µs N/A
🆕 unicode_without_colors N/A 442 µs N/A

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.


Comparing renovate/github-actions (5566a02) with main (23c0369)

Open in CodSpeed

Footnotes

  1. 4 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants