chore(deps): update github-actions by renovate[bot] · Pull Request #30 · withstudiocms/experiments

renovate · 2025-09-29T00:48:01Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4` → `v4.3.1`
actions/labeler	action	pinDigest	→ `8558fd7`
changesets/action	action	minor	`v1` → `v1.7.0`
mscharley/dependency-changesets-action	action	minor	`v1.1.1` → `v1.2.2`
stefanzweifel/git-auto-commit-action	action	minor	`v5` → `v5.2.0`

Release Notes

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

`v4.1.0`

Compare Source

Add support for partial checkout filters

changesets/action (changesets/action)

`v1.7.0`

Compare Source

Minor Changes

#564 935fe87 Thanks @Andarist! - Automatically use the GitHub-provided token to allow most users to avoid explicit GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} configuration.

Patch Changes

#545 54220dd Thanks @ryanbas21! - The .npmrc generation now intelligently handles both traditional NPM token authentication and trusted publishing scenarios by only appending the auth token when NPM_TOKEN is defined. This prevents 'undefined' from being written to the registry configuration when using OIDC tokens from GitHub Actions trusted publishing.
#563 6af4a7e Thanks @Andarist! - Don't error on already committed symlinks and executables that stay untouched

`v1.6.0`

Compare Source

Minor Changes

#558 342005d Thanks @harsha-venugopal-ledn! - Upgrade from Node.js 20 to Node.js 24 LTS

`v1.5.3`

Compare Source

Patch Changes

#477 9d933dc Thanks @Andarist! - Updated @actions/* and @octokit/* dependencies.
#479 cf373e4 Thanks @Andarist! - Switched to esbuild for bundling the dist file. This led to 45% file size reduction.
#488 022692b Thanks @s0! - Fix PRs sometimes not getting reopened with commitMode: github-api

There was a race-condition that means sometimes existing PRs would not be found,
and new PRs would be opened. This has now been fixed by fetching existing PRs
before making any changes.
#486 7ed1955 Thanks @s0! - Fixed situations in which cwd was specified as a relative path and used with (default) commitMode: git-cli
#461 e9c36b6 Thanks @nayounsang! - Avoid hitting a deprecation warning when encountering errors from @octokit/request-error

`v1.5.2`

Compare Source

Patch Changes

#473 3c24abe Thanks @s0! - Make git add work consistently with subdirectories

Ensure that when running the action from a subdirectory of a repository,
only the files from that directory are added, regardless of commitMode.

`v1.5.1`

Compare Source

Patch Changes

#471 15ab130 Thanks @h3rmanj! - Bump @changesets/ghcommit to v1.4.0, which fixes an issue running this action in monorepos with commitMode: github-api
#467 6e57550 Thanks @Vx-V! - Avoid searching for an existing pull request early.

`v1.5.0`

Compare Source

Minor Changes

#391 207dc3d Thanks @s0! - Introduce a new input commitMode that allows using the GitHub API for pushing tags and commits instead of the Git CLI.

When used with "github-api" value all tags and commits will be attributed to the user whose GITHUB_TOKEN is used, and also signed using GitHub's internal GPG key.

`v1.4.10`

Compare Source

Patch Changes

#448 8b16070 Thanks @bluwy! - Use full git email (41898282+github-actions[bot]@users.noreply.github.com) for github-actions bot when making commits

`v1.4.9`

Compare Source

Patch Changes

#415 57ab80c Thanks @benmccann! - Improve error message when attempting to publish without publish script defined

`v1.4.8`

Compare Source

Patch Changes

#393 48ab0d2 Thanks @s0! - Ensure the PR remains open when updated
#393 48ab0d2 Thanks @s0! - Switch to cheaper API for querying existing PRs

`v1.4.7`

Compare Source

Patch Changes

#255 f2660aa Thanks @ernestognw! - Allow customize PR branch field

`v1.4.6`

Compare Source

Patch Changes

#350 9385be9 Thanks @m-shaka! - Bump the used node.js from 16 to 20

`v1.4.5`

Compare Source

Patch Changes

#282 eb19e25 Thanks @mark-omarov! - Updated a few dependencies to patch the security vulnerabilities that were reported for their older versions.

`v1.4.4`

Compare Source

Patch Changes

#291 db8a109 Thanks @varl! - Wire up @octokit/plugin-throttling with all GitHub Octokit instances

`v1.4.3`

Compare Source

Patch Changes

#289 8b28186 Thanks @varl! - Use logging provided by @actions/core

`v1.4.2`

Compare Source

Patch Changes

#286 225a1e8 Thanks @varl! - This patch implements the @octokit/plugin-throttling plugin and wires
it up with the internal GitHub Octokit instance.

This plugin is recommended by the Octokit docs as it implements all the GitHub best practices for integrators.

This should help with changesets/action gitting spurious secondary rate limits and failing CI jobs, for which the only known workaround is to simply re-run the job.

`v1.4.1`

Compare Source

Patch Changes

#123 b78f480 Thanks @Andarist! - Updated @actions/* dependencies to avoid using deprecated features of the runner.

`v1.4.0`

Compare Source

Minor Changes

#216 398d7ed Thanks @quinnjn! - Execute action with node16 instead of node12.

Patch Changes

#228 bff53cc Thanks @iansan5653! - Add is:pull-request to search query when looking for existing PR. This fixes an issue with user-owned PATs.
#206 8c3f5f5 Thanks @glasser! - Skip creating a PR when all existing changesets are empty.

`v1.3.0`

Compare Source

Minor Changes

#167 993a0a0 Thanks @dmregister! - Added pullRequestNumber to the action's outputs

Patch Changes

#157 521c27b Thanks @emmenko! - Automatically adjust GitHub PR message if it exceeds a size limit of 60k characters by omitting some of the changelog information.

`v1.2.2`

Compare Source

Patch Changes

#161 52c9ce7 Thanks @bicknellr! - Change directory to cwd before running git user setup. This fixes an issue when the action starts its execution not in a git repository.

`v1.2.1`

Compare Source

Patch Changes

#144 898d125 Thanks @Andarist! - Updated all Changesets dependencies. This should fix parsing issues for completely empty summaries that has been fixed in @changesets/parse@0.3.11.

`v1.2.0`

Compare Source

Minor Changes

#130 5c0997b Thanks @akphi! - Added createGithubReleases input option (defaults to true) to control whether to create Github releases during publish or not.
#134 1ed9bc2 Thanks @dmregister! - Added cwd input option that can be used in projects that are not in the root directory.

`v1.1.0`

Compare Source

Minor Changes

#128 1937303 Thanks @dhruvdutt! - Setup the git user in the local config instead of the global one.
#131 d3db9ec Thanks @jacklesliewise! - Added setupGitUser option to enable or disable setting up a default git user

mscharley/dependency-changesets-action (mscharley/dependency-changesets-action)

`v1.2.2`

Compare Source

What's Changed

fix: add a warning if there is no lockfile for pnpm catalog updates by @mscharley in #578

Full Changelog: mscharley/dependency-changesets-action@v1.2.1...v1.2.2

`v1.2.1`

Compare Source

What's Changed

fix: use an up to date github client by @mscharley in #547
fix: handle package files correctly when downloading them by @mscharley

Full Changelog: mscharley/dependency-changesets-action@v1.2.0...v1.2.1

`v1.2.0`

Compare Source

What's Changed

fix: bump to running on node24 by @mscharley in #543
feat: add support for updates to pnpm's catalog feature by @mscharley in #546

Full Changelog: mscharley/dependency-changesets-action@v1.1.9...v1.2.0

`v1.1.9`

Compare Source

What's Changed

Allow dashes in conventional commit messages by @jonathanmorley in #509
fix: slightly expand the updated tests for scopes by @mscharley in #517

New Contributors

@jonathanmorley made their first contribution in #509

Full Changelog: mscharley/dependency-changesets-action@v1.1.8...v1.1.9

`v1.1.8`

Compare Source

What's Changed

fix: allow ignored packages to match using a glob by @mscharley in #439

Full Changelog: mscharley/dependency-changesets-action@v1.1.7...v1.1.8

`v1.1.7`

Compare Source

What's Changed

fix: add support for using dco in generated commits by @mscharley in #437

Full Changelog: mscharley/dependency-changesets-action@v1.1.6...v1.1.7

`v1.1.6`

Compare Source

What's Changed

Fix error reporting by @mscharley in #429
fix: allow stringified private property in package.json by @breadadams in #431

New Contributors

@breadadams made their first contribution in #431

Full Changelog: mscharley/dependency-changesets-action@v1.1.5...v1.1.6

`v1.1.5`

Compare Source

What's Changed

fix(deps): update dependency generic-type-guard to ^5.0.5 by @renovate in #384
fix(deps): update dependency @actions/github to ^6.0.1 by @renovate in #399
Don't include packages in changesets which shouldn't be allowed by @mscharley in #411

Full Changelog: mscharley/dependency-changesets-action@v1.1.4...v1.1.5

`v1.1.4`

Compare Source

What's Changed

fix(deps): update dependency @actions/core to ^1.11.1 by @renovate in #341
fix(deps): update dependency generic-type-guard to ^5.0.2 by @renovate in #343
fix(deps): update dependency generic-type-guard to ^5.0.3 by @renovate in #347

Full Changelog: mscharley/dependency-changesets-action@v1.1.3...v1.1.4

`v1.1.3`

Compare Source

What's Changed

Fixed a bug in the migration to ESM in 1.1.2 that meant the action couldn't launch successfully.

Full Changelog: mscharley/dependency-changesets-action@v1.1.2...v1.1.3

`v1.1.2`

Compare Source

What's Changed

chore: migrate to pnpm by @mscharley in #248
fix: migrate to rollup so that we can do treeshaking by @mscharley in #259
fix: add some extra debugging information by @mscharley in #316

Full Changelog: mscharley/dependency-changesets-action@v1.1.1...v1.1.2

stefanzweifel/git-auto-commit-action (stefanzweifel/git-auto-commit-action)

`v5.2.0`

Compare Source

Added

Add create_git_tag_only option to skip commiting and always create a git-tag. (#364) @zMynxx
Add Test for create_git_tag_only feature (#367) @stefanzweifel

Fixed

docs: Update README.md per #354 (#361) @rasa

`v5.1.0`

Compare Source

Changed

Include github.actor_id in default commit_author (#354) @parkerbxyz

Fixed

docs(README): fix broken protected branch docs link (#346) @scarf005
Update README.md (#343) @Kludex

Dependency Updates

Bump bats from 1.11.0 to 1.11.1 (#353) @dependabot
Bump github/super-linter from 6 to 7 (#342) @dependabot
Bump github/super-linter from 5 to 6 (#335) @dependabot

`v5.0.1`

Compare Source

Fixed

Fail if attempting to execute git commands in a directory that is not a git-repo. (#326) @ccomendant

Dependency Updates

Bump bats from 1.10.0 to 1.11.0 (#325) @dependabot
Bump release-drafter/release-drafter from 5 to 6 (#319) @dependabot

Misc

Clarify commit_author input option (#315) @npanuhin
Add step id explanation for output in README.md (#324) @ChristianVermeulen
Linux is not UNIX (#321) @couling

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2025-09-29T00:48:04Z

⚠️ No Changeset found

Latest commit: 38d3c08

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

coderabbitai · 2025-09-29T00:48:11Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

renovate bot requested a review from a team as a code owner September 29, 2025 00:48

renovate bot added the github-actions label Sep 29, 2025

renovate bot force-pushed the renovate/workflows-github-actions branch from 0b6374f to fc32c43 Compare October 11, 2025 12:32

renovate bot force-pushed the renovate/workflows-github-actions branch 3 times, most recently from 57524ff to f8352a3 Compare November 18, 2025 03:59

renovate bot force-pushed the renovate/workflows-github-actions branch from f8352a3 to 956f705 Compare January 1, 2026 06:33

renovate bot force-pushed the renovate/workflows-github-actions branch from 956f705 to 9165a78 Compare January 21, 2026 12:55

chore(deps): update github-actions

38d3c08

renovate bot force-pushed the renovate/workflows-github-actions branch from 9165a78 to 38d3c08 Compare February 12, 2026 18:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github-actions#30

chore(deps): update github-actions#30
renovate[bot] wants to merge 1 commit intomainfrom
renovate/workflows-github-actions

renovate bot commented Sep 29, 2025 •

edited

Loading

Uh oh!

changeset-bot bot commented Sep 29, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Sep 29, 2025

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Minor Changes

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

Added

Fixed

Changed

Fixed

Dependency Updates

Fixed

Dependency Updates

Misc

Configuration

Uh oh!

changeset-bot bot commented Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

coderabbitai bot commented Sep 29, 2025

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Sep 29, 2025 •

edited

Loading

changeset-bot bot commented Sep 29, 2025 •

edited

Loading