Skip to content

chore(deps): update github actions - #714

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

chore(deps): update github actions#714
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Aug 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
anthropics/claude-code-action action patch v1.0.183 → v1.0.193 v1.0.210 (+16)
astral-sh/setup-uv action major v9.0.0 → v10.0.1
github/codeql-action action patch v4.37.5 → v4.37.7 v4.37.9 (+1)

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.193

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.192...v1.0.193

v1.0.192

Compare Source

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1.0.191...v1.0.192

v1.0.191

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.190...v1.0.191

v1.0.190

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.190

v1.0.189

Compare Source

v1.0.188

Compare Source

v1.0.187

Compare Source

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.187

v1.0.186

Compare Source

v1.0.185

Compare Source

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.185

v1.0.184

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.184

astral-sh/setup-uv (astral-sh/setup-uv)

v10.0.1: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes
🧰 Maintenance
📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in #​984

version: latest-known
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes
🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
github/codeql-action (github/codeql-action)

v4.37.7

Compare Source

v4.37.6

Compare Source

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 AM and 05:59 AM (* 0-5 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added bot Automated pull requests or issues dependencies Pull requests that update a dependency file renovate Pull requests from Renovate skip:codecov Skip Codecov reporting and check skip:test:long_running Skip long-running tests (≥5min) labels Aug 19, 2026
@renovate
renovate Bot requested a review from a team as a code owner August 19, 2026 22:56
@renovate renovate Bot added dependencies Pull requests that update a dependency file bot Automated pull requests or issues renovate Pull requests from Renovate skip:test:long_running Skip long-running tests (≥5min) skip:codecov Skip Codecov reporting and check labels Aug 19, 2026
@renovate
renovate Bot force-pushed the renovate/github-actions branch 7 times, most recently from 49d23b2 to c1f677a Compare August 26, 2026 17:15
@renovate
renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 359a1cc to 0a9c65e Compare August 28, 2026 08:59
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 0a9c65e to bfebc36 Compare August 29, 2026 02:45
@sonarqubecloud

sonarqubecloud Bot commented Aug 29, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bot Automated pull requests or issues dependencies Pull requests that update a dependency file renovate Pull requests from Renovate skip:codecov Skip Codecov reporting and check skip:test:long_running Skip long-running tests (≥5min)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants