chore(deps): update maru support dependencies (major) - #227
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
from
September 25, 2025 17:57
c86fa3d to
d1ecc65
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
3 times, most recently
from
October 14, 2025 06:37
efa8863 to
c03b2ae
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
from
October 17, 2025 15:46
c03b2ae to
88f27ae
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
2 times, most recently
from
October 30, 2025 19:46
90b89e9 to
ce68236
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
2 times, most recently
from
November 14, 2025 03:03
7a4026a to
91294ab
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
5 times, most recently
from
November 24, 2025 11:26
db70706 to
58f64f7
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
4 times, most recently
from
December 5, 2025 18:45
a89c8d7 to
fc583b7
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
3 times, most recently
from
December 16, 2025 20:06
c686822 to
0b8f12f
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
4 times, most recently
from
January 15, 2026 03:28
3b90e5a to
14732ed
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
2 times, most recently
from
January 23, 2026 15:10
77431af to
49eb6a1
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
2 times, most recently
from
March 11, 2026 16:00
d62e824 to
0fbece7
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
4 times, most recently
from
March 20, 2026 18:45
36349a2 to
8673d40
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
3 times, most recently
from
March 30, 2026 06:35
6185b46 to
2fa807e
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
4 times, most recently
from
April 16, 2026 13:14
99e5c85 to
11a6b84
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
2 times, most recently
from
April 20, 2026 11:35
8147598 to
40fb1c9
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
2 times, most recently
from
May 1, 2026 15:26
e3d89f2 to
fe0e151
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
3 times, most recently
from
May 13, 2026 02:42
f71bfb5 to
bc105c4
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
4 times, most recently
from
May 22, 2026 12:01
a21e6f1 to
4d0253e
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
3 times, most recently
from
June 4, 2026 19:51
d2a4afe to
fc62a07
Compare
renovate
Bot
force-pushed
the
renovate/major-maru-support-dependencies
branch
2 times, most recently
from
June 24, 2026 06:43
811c4d9 to
f712fb3
Compare
| datasource | package | from | to | | ----------- | -------------------------------- | -------- | ------- | | github-tags | actions/checkout | v5.0.1 | v7.0.1 | | github-tags | actions/create-github-app-token | v2.2.1 | v3.2.0 | | github-tags | actions/dependency-review-action | v4.8.2 | v5.0.0 | | github-tags | actions/download-artifact | v5.0.0 | v8.0.1 | | github-tags | actions/setup-go | v5.6.0 | v7.0.0 | | github-tags | actions/setup-node | v4.4.0 | v7.0.0 | | github-tags | actions/upload-artifact | v4.6.2 | v7.0.1 | | github-tags | github/codeql-action | v3.31.10 | v4.37.9 | | github-tags | golangci/golangci-lint-action | v8.0.0 | v9.3.0 | | github-tags | goreleaser/goreleaser-action | v6.4.0 | v7.2.3 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v5.0.1→v7.0.1v2.2.1→v3.2.0v4.8.2→v5.0.0v5.0.0→v8.0.1v5.6.0→v7.0.0v4.4.0→v7.0.0v4.6.2→v7.0.1v3.31.10→v4.37.9v8.0.0→v9.3.0v6.4.0→v7.2.3Release Notes
actions/checkout (actions/checkout)
v7.0.1Compare Source
v7.0.0Compare Source
v7Compare Source
v6.1.0Compare Source
v6.0.3Compare Source
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.1.0Compare Source
actions/create-github-app-token (actions/create-github-app-token)
v3.2.0Compare Source
Features
repositoriesinput (#372) (85eb8dd)Bug Fixes
v3.1.1Compare Source
Bug Fixes
v3.1.0Compare Source
Bug Fixes
Features
client-idinput and deprecateapp-id(#353) (e6bd4e6)v3.0.0Compare Source
NODE_USE_ENV_PROXYfor proxy support (#342) (4451bcb)Bug Fixes
BREAKING CHANGES
v3Compare Source
v2.2.2Compare Source
Bug Fixes
actions/dependency-review-action (actions/dependency-review-action)
v5.0.0: 5.0.0Compare Source
This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4.9.0...v5.0.0
v4.9.0: Dependency Review Action 4.9.0Compare Source
This feature release contains a couple of notable changes:
show_patched_versionswhich will add a column to the output, showing the fix version of each vulnerable dependency. Thanks @felickz!allow-package-dependencylists, including case (in)sensitivity and url-encoded namespaces Thanks @juxtin!What's Changed
Patched VersiontoVulnerabilitiessummary by @felickz in #1045New Contributors
Full Changelog: actions/dependency-review-action@v4.8.3...v4.9.0
v4.8.3: 4.8.3Compare Source
Dependency Review Action v4.8.3
This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.
We have also updated the release process to use a long-lived
v4branch for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.What's Changed
Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter totrue.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v8Compare Source
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v7Compare Source
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v6Compare Source
actions/setup-go (actions/setup-go)
v7.0.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-go@v6...v7.0.0
v7Compare Source
v6.5.0Compare Source
v6.4.0Compare Source
What's Changed
Enhancement
Dependency update
Documentation update
New Contributors
Full Changelog: actions/setup-go@v6...v6.4.0
v6.3.0Compare Source
What's Changed
Full Changelog: actions/setup-go@v6...v6.3.0
v6.2.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.2.0
v6.1.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Breaking Changes
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
form-datato bring in fix for critical vulnerability by @matthewhughes934 in #618New Contributors
Full Changelog: actions/setup-go@v5...v6.0.0
v6Compare Source
actions/setup-node (actions/setup-node)
v7.0.0Compare Source
What's Changed
Enhancements:
Bug fixes:
mirrorTokeningetManifestif it's provided by @deiga in #1548Documentation updates:
Dependency update:
New Contributors
Full Changelog: actions/setup-node@v6...v7.0.0
v7Compare Source
v6.5.0Compare Source
What's Changed
Full Changelog: actions/setup-node@v6.4.0...v6.5.0
v6.4.0Compare Source
What's Changed
Dependency updates:
New Contributors
Full Changelog: actions/setup-node@v6...v6.4.0
v6.3.0Compare Source
What's Changed
Enhancements:
devEnginesfield by @susnux in #1283Dependency updates:
Bug fixes:
New Contributors
Full Changelog: actions/setup-node@v6...v6.3.0
v6.2.0Compare Source
What's Changed
Documentation
Dependency updates:
New Contributors
Full Changelog: actions/setup-node@v6...v6.2.0
v6.1.0Compare Source
What's Changed
Enhancement:
Dependency updates:
Documentation update:
Full Changelog: actions/setup-node@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Breaking Changes
Dependency Upgrades
Full Changelog: actions/setup-node@v5...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
Breaking Changes
This update, introduces automatic caching when a valid
packageManagerfield is present in yourpackage.json. This aims to improve workflow performance and make dependency management more seamless.To disable this automatic caching, set
package-manager-cache: falseMake sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
New Contributors
Full Changelog: actions/setup-node@v4...v5.0.0
v5Compare Source
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.