chore(deps): update github actions updates (major) by renovate[bot] · Pull Request #2115 · cloudoperators/greenhouse

renovate · 2026-07-02T17:44:45Z

This PR contains the following updates:

Package	Type	Update	Change
EndBug/add-and-commit	action	major	`v10.0.0` → `v11.1.1`
actions/checkout	action	major	`v6.0.3` → `v7.0.1`
actions/labeler	action	major	`v6.1.0` → `v7.0.0`
actions/setup-go	action	major	`v6.4.0` → `v7.0.0`
actions/setup-python	action	major	`v6.2.0` → `v7.0.0`

Release Notes

EndBug/add-and-commit (EndBug/add-and-commit)

`v11.1.1`

Compare Source

What's Changed

docs: highlight untrusted git-arg interpolation as a warning callout by @EndBug in #781
fix: Remove GH var interpolation in action.yml docstring by @dzcode in #783
fix: validate denylisted git args on every token by @EndBug in #784

New Contributors

@dzcode made their first contribution in #783

Full Changelog: EndBug/add-and-commit@v11.1.0...v11.1.1

`v11.1.0`

Compare Source

What's Changed

feat: add push_attempts to retry failed pushes by @EndBug in #764
test: add integration tests for the shipped action by @EndBug in #766
feat: add dry_run input by @EndBug in #765
docs: add nmattia as a contributor for ideas by @allcontributors[bot] in #767
docs: add jcbhmr as a contributor for ideas by @allcontributors[bot] in #768
fix: reject remote-helper overrides skipped by -u by @EndBug in #770
fix: block scheme:: remote helpers and restrict git transports by @EndBug in #771
fix: resolve absolute cwd without dumping the minified bundle (#495) by @EndBug in #772
feat: treat pull: true as a default git pull by @EndBug in #773
docs: add ross-spencer as a contributor for bug by @allcontributors[bot] in #774
docs: add louisabraham as a contributor for ideas by @allcontributors[bot] in #775
fix: reject --pathspec-from-file to prevent log disclosure by @EndBug in #777
fix: neutralize workflow-command injection in info logs by @EndBug in #776
fix: reject glued quotes that string-argv would split into extra git flags by @EndBug in #778
chore(deps): bump js-yaml from 5.2.3 to 5.3.0 by @dependabot[bot] in #780
chore(deps-dev): bump @vercel/ncc from 0.44.1 to 0.45.0 by @dependabot[bot] in #779

Full Changelog: EndBug/add-and-commit@v11.0.0...v11.1.0

`v11.0.0`

Compare Source

What's Changed

chore(deps): bump picomatch by @dependabot[bot] in #724
chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in #725
chore(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in #728
chore(deps-dev): bump ts-jest from 29.4.6 to 29.4.9 by @dependabot[bot] in #727
chore(deps): bump @actions/github from 9.0.0 to 9.1.0 by @dependabot[bot] in #729
chore(deps): bump @actions/github from 9.1.0 to 9.1.1 by @dependabot[bot] in #732
chore(deps): bump @actions/core from 3.0.0 to 3.0.1 by @dependabot[bot] in #733
ci(deps): bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in #734
chore(deps-dev): bump ts-jest from 29.4.9 to 29.4.11 by @dependabot[bot] in #736
chore(deps-dev): bump jest from 30.3.0 to 30.4.2 by @dependabot[bot] in #735
chore(deps-dev): bump eslint-plugin-prettier from 5.5.5 to 5.5.6 by @dependabot[bot] in #738
chore(deps): bump js-yaml from 4.1.1 to 4.2.0 by @dependabot[bot] in #739
ci(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #741
chore(deps): bump undici from 6.24.1 to 6.27.0 by @dependabot[bot] in #744
ci(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #749
chore(deps-dev): bump @vercel/ncc from 0.38.4 to 0.44.1 by @dependabot[bot] in #746
chore(deps): bump js-yaml from 4.2.0 to 5.2.1 by @dependabot[bot] in #747
chore(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 by @dependabot[bot] in #750
chore(deps): bump js-yaml from 5.2.1 to 5.2.2 by @dependabot[bot] in #751
chore(deps): bump undici from 6.27.0 to 6.28.0 by @dependabot[bot] in #753
fix: reject remote-helper git flags that enable RCE by @EndBug in #754
fix: prevent git option injection via new_branch by @EndBug in #755
fix: verify committed lib/ matches source in CI by @EndBug in #756
fix: stop logging full git config (credential leak) by @EndBug in #758
fix: reject -F/--file git args that can exfiltrate runner files by @EndBug in #759
fix: reject unmatched quotes in matchGitArgs to prevent flag injection by @EndBug in #760
fix: refuse unexpected gitlinks staged by git add by @EndBug in #761
fix: do not report committed=true for empty commit SHA by @EndBug in #757
ci: pin actions-tagger and restrict release workflow permissions by @EndBug in #762
fix: neutralize bidi and control chars in action logs by @EndBug in #763

Full Changelog: EndBug/add-and-commit@v10.0.0...v11.0.0

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

actions/labeler (actions/labeler)

`v7.0.0`

Compare Source

`v6.2.0`

Compare Source

What's Changed

Bug Fix

Improve PR number validation and warning messages in input handling by @chiranjib-swain in #939

Dependency Updates

Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override by @dependabot in #943
Bump @typescript-eslint/eslint-plugin from 8.59.1 to 8.61.1 by @dependabot in #942

Full Changelog: actions/labeler@v6.1.0...v6.2.0

actions/setup-go (actions/setup-go)

`v7.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #763
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #771

New Contributors

@philip-gai made their first contribution in #771

Full Changelog: actions/setup-go@v6...v7.0.0

`v6.5.0`

Compare Source

actions/setup-python (actions/setup-python)

`v7.0.0`

Compare Source

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copilot

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

Copilot AI review requested due to automatic review settings July 2, 2026 17:44

renovate Bot requested a review from a team as a code owner July 2, 2026 17:44

Copilot AI reviewed Jul 2, 2026

github-actions Bot added the size/M label Jul 2, 2026

renovate Bot force-pushed the renovate/major-github-actions branch 7 times, most recently from 4417a41 to 5fa0a9c Compare July 9, 2026 07:32

renovate Bot force-pushed the renovate/major-github-actions branch 6 times, most recently from 72c62be to 8c640ca Compare July 17, 2026 07:26

renovate Bot force-pushed the renovate/major-github-actions branch 5 times, most recently from a2015c5 to c003f76 Compare July 24, 2026 07:21

renovate Bot force-pushed the renovate/major-github-actions branch 4 times, most recently from 8afae7b to a462d17 Compare July 30, 2026 04:51

renovate Bot changed the title ~~chore(deps): update actions/checkout action to v7~~ chore(deps): update github actions updates to v7 Jul 30, 2026

renovate Bot force-pushed the renovate/major-github-actions branch 3 times, most recently from 7d44d08 to 1fd11ee Compare August 3, 2026 05:41

renovate Bot force-pushed the renovate/major-github-actions branch 8 times, most recently from 31bc86b to ec0dd82 Compare August 23, 2026 02:09

renovate Bot changed the title ~~chore(deps): update github actions updates to v7~~ chore(deps): update github actions updates (major) Aug 23, 2026

renovate Bot force-pushed the renovate/major-github-actions branch 11 times, most recently from 3f51c13 to 2c9a7fa Compare September 1, 2026 08:06

renovate Bot force-pushed the renovate/major-github-actions branch 6 times, most recently from 022adf1 to 35cfbb5 Compare September 8, 2026 21:26

renovate Bot force-pushed the renovate/major-github-actions branch 3 times, most recently from db7e5a8 to 234a0fd Compare September 9, 2026 14:15

chore(deps): update github actions updates

dc0072c

Navigation Menu

chore(deps): update github actions updates (major) - #2115

chore(deps): update github actions updates (major)#2115
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-actions

renovate Bot commented Jul 2, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Bug Fix

Dependency Updates

What's Changed

New Contributors

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Configuration

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jul 2, 2026 •

edited

Loading