:seedling: Update github-actions group (major) by cluster-stack-bot[bot] · Pull Request #326 · SovereignCloudStack/cluster-stack-operator · GitHub

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	v4.2.4 -> v6.1.0
actions/cache	action	major	v4 -> v6
actions/checkout	action	major	v4.3.0 -> v6.1.0
actions/checkout	action	major	v4 -> v6
actions/upload-artifact	action	major	v4.6.2 -> v6.0.0
docker/metadata-action	action	major	v5.8.0 -> v6.2.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in #1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Update packages, migrate to ESM by @Samirat in #1760

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

Compare Source

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in #1775

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

What's Changed

Add release instructions and update maintainer docs by @Link- in #1696
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in #1697
Fix workflow permissions and cleanup workflow names / formatting by @Link- in #1699
docs: Update examples to use the latest version by @XZTDean in #1690
Fix proxy integration tests by @Link- in #1701
Fix cache key in examples.md for bun.lock by @RyPeck in #1722
Update dependencies & patch security vulnerabilities by @Link- in #1738

New Contributors

@XZTDean made their first contribution in #1690
@RyPeck made their first contribution in #1722

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

v5.0.2: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

v5.0.1

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

v5.0.1

What's Changed

fix: update @actions/cache for Node.js 24 punycode deprecation by @salmanmkc in #1685
prepare release v5.0.1 by @salmanmkc in #1686

v5.0.0

What's Changed

Upgrade to use node24 by @salmanmkc in #1630
Prepare v5.0.0 release by @salmanmkc in #1684

Full Changelog: actions/cache@v5...v5.0.1

v5.0.0

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Upgrade to use node24 by @salmanmkc in #1630
Prepare v5.0.0 release by @salmanmkc in #1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

v4.3.0

Compare Source

What's Changed

Add note on runner versions by @GhadimiR in #1642
Prepare v4.3.0 release by @Link- in #1655

New Contributors

@GhadimiR made their first contribution in #1642

Full Changelog: actions/cache@v4...v4.3.0

actions/checkout (actions/checkout)

v6.1.0

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

v6.0.2

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

v6.0.1

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

v6.0.0

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

v5.1.0

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v5 by @aiqiaoy in #2501
backport fixes to releases-v5 by @aiqiaoy in #2523

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v5.0.1...v5.1.0

v5.0.1

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

v5.0.0

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

v4.4.0

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v4 by @aiqiaoy in #2502
backport fixes to releases-v4 by @aiqiaoy in #2524

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v4.3.1...v4.4.0

v4.3.1

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

actions/upload-artifact (actions/upload-artifact)

v6.0.0

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in #719
fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in #744
prepare release v6.0.0 for Node.js 24 support by @salmanmkc in #745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README.md by @GhadimiR in #681
Update README.md by @nebuk89 in #712
Readme: spell out the first use of GHES by @danwkennedy in #727
Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #725
Bump @actions/artifact to v4.0.0
Prepare v5.0.0 by @danwkennedy in #734

New Contributors

@GhadimiR made their first contribution in #681
@nebuk89 made their first contribution in #712
@danwkennedy made their first contribution in #727
@patrikpolyak made their first contribution in #725

Full Changelog: actions/upload-artifact@v4...v5.0.0

docker/metadata-action (docker/metadata-action)

v6.2.0

Compare Source

Preserve names in esbuild bundle by @crazy-max in #689
Bump @actions/core from 3.0.0 to 3.0.1 in #663
Bump @actions/github from 9.0.0 to 9.1.1 in #666
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #672 #696
Bump @sigstore/core from 3.1.0 to 3.2.1 in #690
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #693
Bump csv-parse from 6.2.1 to 7.0.0 in #683
Bump js-yaml from 4.1.1 to 4.3.0 in #688
Bump moment-timezone from 0.6.1 to 0.6.2 in #664
Bump semver from 7.7.4 to 7.8.5 in #665 #695
Bump sigstore from 4.1.0 to 4.1.1 in #694
Bump tmp from 0.2.5 to 0.2.7 in #673
Bump undici from 6.25.0 to 6.27.0 in #686
Bump vite from 7.3.2 to 7.3.6 in #685

Full Changelog: docker/metadata-action@v6.1.0...v6.2.0

v6.1.0

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #613
Bump brace-expansion from 1.1.12 to 5.0.6 in #658 #630
Bump csv-parse from 6.1.0 to 6.2.1 in #617
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #620
Bump flatted from 3.3.3 to 3.4.2 in #623
Bump glob from 10.3.15 to 10.5.0 in #621
Bump handlebars from 4.7.8 to 4.7.9 in #629
Bump lodash from 4.17.23 to 4.18.1 in #639
Bump moment-timezone from 0.6.0 to 0.6.1 in #619
Bump picomatch from 4.0.3 to 4.0.4 in #626
Bump postcss from 8.5.6 to 8.5.10 in #649
Bump tar from 6.2.1 to 7.5.15 in #657
Bump undici from 6.23.0 to 6.25.0 in #614
Bump vite from 7.3.1 to 7.3.2 in #637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

v6.0.0

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #605
List inputs now preserve # inside values while still supporting full-line # comments by @crazy-max in #607
Switch to ESM and update config/test wiring by @crazy-max in #602
Bump lodash from 4.17.21 to 4.17.23 in #588
Bump @actions/core from 1.11.1 to 3.0.0 in #599
Bump @actions/github from 6.0.1 to 9.0.0 in #597
Bump @docker/actions-toolkit from 0.68.0 to 0.79.0 in #604
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #600
Bump semver from 7.7.3 to 7.7.4 in #603

Full Changelog: docker/metadata-action@v5.10.0...v6.0.0

v5.10.0

Compare Source

Bump @docker/actions-toolkit from 0.66.0 to 0.68.0 in #559 #569
Bump js-yaml from 3.14.1 to 3.14.2 in #564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

Add tag-names output to return tag names without image base name by @crazy-max in #553
Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in #539
Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in #555
Bump brace-expansion from 1.1.11 to 1.1.12 in #540
Bump csv-parse from 5.6.0 to 6.1.0 in #532
Bump semver from 7.7.2 to 7.7.3 in in #554
Bump tmp from 0.2.3 to 0.2.5 in #541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

Configuration

📅 Schedule: Branch creation - "on monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

| datasource | package | from | to | | ----------- | ----------------------- | ------ | ------ | | github-tags | actions/cache | v4.2.4 | v6.1.0 | | github-tags | actions/cache | v4 | v6 | | github-tags | actions/checkout | v4.3.0 | v6.1.0 | | github-tags | actions/checkout | v4 | v6 | | github-tags | actions/upload-artifact | v4.6.2 | v6.0.0 | | github-tags | docker/metadata-action | v5.8.0 | v6.2.0 |

cluster-stack-bot Bot added type/major update/github-action labels Nov 24, 2025

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from 9449501 to f6992f0 Compare December 3, 2025 11:28

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from f6992f0 to 268318f Compare December 13, 2025 11:24

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from 268318f to 70da6e8 Compare January 23, 2026 11:28

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from 70da6e8 to 95a1744 Compare February 4, 2026 11:39

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from 95a1744 to f9865df Compare March 6, 2026 11:38

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from f9865df to a02c97b Compare May 22, 2026 13:37

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch 2 times, most recently from 102fa7e to 75a4da9 Compare June 3, 2026 15:51

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch 2 times, most recently from 3415fae to 610746d Compare June 27, 2026 12:14

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from 610746d to 4cb1e37 Compare July 2, 2026 13:04

cluster-stack-bot Bot force-pushed the renovate/major-6-github-actions branch from 4cb1e37 to 4d03f4d Compare July 21, 2026 12:27

:seedling: Update github-actions group (major) by cluster-stack-bot[bot] · Pull Request #326 · SovereignCloudStack/cluster-stack-operator · GitHub

Uh oh!

🌱 Update github-actions group (major) - #326

🌱 Update github-actions group (major)#326
cluster-stack-bot[bot] wants to merge 1 commit into
mainfrom
renovate/major-6-github-actions

cluster-stack-bot Bot commented Nov 24, 2025 •
edited
Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

:seedling: Update github-actions group (major) by cluster-stack-bot[bot] · Pull Request #326 · SovereignCloudStack/cluster-stack-operator · GitHub

Uh oh!

🌱 Update github-actions group (major) - #326

🌱 Update github-actions group (major)#326cluster-stack-bot[bot] wants to merge 1 commit intomainSovereignCloudStack/cluster-stack-operator:mainfrom renovate/major-6-github-actionsSovereignCloudStack/cluster-stack-operator:renovate/major-6-github-actionsCopy head branch name to clipboard

Conversation

cluster-stack-bot Bot commented Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

v5.0.2: v.5.0.2

v5.0.2

What's Changed

v5.0.1

What's Changed

v5.0.0

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

v6 - What's new

Node.js 24

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

🌱 Update github-actions group (major)#326
cluster-stack-bot[bot] wants to merge 1 commit into
mainfrom
renovate/major-6-github-actions

cluster-stack-bot Bot commented Nov 24, 2025 •
edited
Loading