Add release instructions and update maintainer docs by @Link- in #1696
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in #1697
Fix workflow permissions and cleanup workflow names / formatting by @Link- in #1699
docs: Update examples to use the latest version by @XZTDean in #1690
Fix proxy integration tests by @Link- in #1701
Fix cache key in examples.md for bun.lock by @RyPeck in #1722
Update dependencies & patch security vulnerabilities by @Link- in #1738

New Contributors

@XZTDean made their first contribution in #1690
@RyPeck made their first contribution in #1722

Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.4

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.3

`v5.0.2`: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

`v5.0.1`

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

v5.0.1

What's Changed

fix: update @actions/cache for Node.js 24 punycode deprecation by @salmanmkc in #1685
prepare release v5.0.1 by @salmanmkc in #1686

v5.0.0

What's Changed

Upgrade to use node24 by @salmanmkc in #1630
Prepare v5.0.0 release by @salmanmkc in #1684

Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.1

`v5.0.0`

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Upgrade to use node24 by @salmanmkc in #1630
Prepare v5.0.0 release by @salmanmkc in #1684

Full Changelog: https://github.com/actions/cache/compare/v4.3.0...v5.0.0

`v4.3.0`

Compare Source

What's Changed

Add note on runner versions by @GhadimiR in #1642
Prepare v4.3.0 release by @Link- in #1655

New Contributors

@GhadimiR made their first contribution in #1642

Full Changelog: https://github.com/actions/cache/compare/v4...v4.3.0

`v4.2.4`

Compare Source

What's Changed

Update README.md by @nebuk89 in #1620
Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in #1634
Prepare release 4.2.4 by @Link- in #1636

New Contributors

@nebuk89 made their first contribution in #1620

Full Changelog: https://github.com/actions/cache/compare/v4...v4.2.4

`v4.2.3`

Compare Source

What's Changed

Update to use @actions/cache 4.0.3 package & prepare for new release by @salmanmkc in #1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

@salmanmkc made their first contribution in #1577

Full Changelog: https://github.com/actions/cache/compare/v4.2.2...v4.2.3

`v4.2.2`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Bump @actions/cache to v4.0.2 by @robherley in #1560

Full Changelog: https://github.com/actions/cache/compare/v4.2.1...v4.2.2

`v4.2.1`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

docs: GitHub is spelled incorrectly in caching-strategies.md by @janco-absa in #1526
docs: Make the "always save prime numbers" example more clear by @Tobbe in #1525
Update force deletion docs due a recent deprecation by @sebbalex in #1500
Bump @actions/cache to v4.0.1 by @robherley in #1554

New Contributors

@janco-absa made their first contribution in #1526
@Tobbe made their first contribution in #1525
@sebbalex made their first contribution in #1500

Full Changelog: https://github.com/actions/cache/compare/v4.2.0...v4.2.1

`v4.2.0`

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

@actions/core: 1.11.1
@actions/io: 1.1.3
@vercel/ncc: 0.38.3

Full Changelog: https://github.com/actions/cache/compare/v4.1.2...v4.2.0

`v4.1.2`

Compare Source

What's Changed

Add Bun example by @idleberg in #1456
Revise isGhes logic by @jww3 in #1474
Bump braces from 3.0.2 to 3.0.3 by @dependabot in #1475
Add dependabot.yml to enable automatic dependency upgrades by @Link- in #1476
Bump actions/checkout from 3 to 4 by @dependabot in #1478
Bump actions/stale from 3 to 9 by @dependabot in #1479
Bump github/codeql-action from 2 to 3 by @dependabot in #1483
Bump actions/setup-node from 3 to 4 by @dependabot in #1481
Prepare 4.1.2 release by @Link- in #1477

New Contributors

@idleberg made their first contribution in #1456
@jww3 made their first contribution in #1474
@Link- made their first contribution in #1476

Full Changelog: https://github.com/actions/cache/compare/v4.1.1...v4.1.2

`v4.1.1`

Compare Source

What's Changed

Restore original behavior of cache-hit output by @joshmgross in #1467

Full Changelog: https://github.com/actions/cache/compare/v4.1.0...v4.1.1

`v4.1.0`

Compare Source

What's Changed

Fix cache-hit output when cache missed by @fchimpan in #1404
Deprecate save-always input by @joshmgross in #1452

New Contributors

@ottlinger made their first contribution in #1437
@Olegt0rr made their first contribution in #1377
@fchimpan made their first contribution in #1404
@x612skm made their first contribution in #1434
@todgru made their first contribution in #1311
@Jcambass made their first contribution in #1463
@mackey0225 made their first contribution in #1462
@quatquatt made their first contribution in #1445

Full Changelog: https://github.com/actions/cache/compare/v4.0.2...v4.1.0

`v4.0.2`

Compare Source

What's Changed

Fix fail-on-cache-miss not working by @cdce8p in #1327

Full Changelog: https://github.com/actions/cache/compare/v4.0.1...v4.0.2

`v4.0.1`

Compare Source

What's Changed

Update README.md by @yacaovsnc in #1304
Update examples by @yacaovsnc in #1305
Update actions/cache publish flow by @bethanyj28 in #1340
Update @actions/cache by @bethanyj28 in #1341

New Contributors

@yacaovsnc made their first contribution in #1304

Full Changelog: https://github.com/actions/cache/compare/v4...v4.0.1

actions/checkout

`v7.0.1`

Compare Source

Skip running unsafe pr check if input is default by @aiqiaoy in #2518
Trim only ascii whitespace for branch by @aiqiaoy in #2521
Escape values passed to --unset by @aiqiaoy in #2530
Various dependency updates

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Various dependency updates

`v6.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v6.0.3...v6.1.0

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v5.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v5 by @aiqiaoy in #2501
backport fixes to releases-v5 by @aiqiaoy in #2523

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v5.0.1...v5.1.0

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v4.4.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v4 by @aiqiaoy in #2502
backport fixes to releases-v4 by @aiqiaoy in #2524

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v4.3.1...v4.4.0

`v4.3.1`

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

`v4.3.0`

Compare Source

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

`v4.1.0`

Compare Source

Add support for partial checkout filters

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 9am on tuesday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://github.com/actions/cache) | action | major | `v4` → `v6.1.0` | | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/cache</summary> ### [`v6.1.0`](https://github.com/actions/cache/releases/tag/v6.1.0) [Compare Source](https://github.com/actions/cache/compare/v6.0.0...v6.1.0) #### What's Changed - Bump [@actions/cache](https://github.com/actions/cache) to v6.1.0 - handle read-only cache access by [@jasongin](https://github.com/jasongin) in [#1768](https://github.com/actions/cache/pull/1768) **Full Changelog**: <https://github.com/actions/cache/compare/v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/cache/releases/tag/v6.0.0) [Compare Source](https://github.com/actions/cache/compare/v5.1.0...v6.0.0) #### What's Changed - Update packages, migrate to ESM by [@Samirat](https://github.com/Samirat) in [#1760](https://github.com/actions/cache/pull/1760) **Full Changelog**: <https://github.com/actions/cache/compare/v5...v6.0.0> ### [`v5.1.0`](https://github.com/actions/cache/releases/tag/v5.1.0) [Compare Source](https://github.com/actions/cache/compare/v5.0.5...v5.1.0) #### What's Changed - Bump [@actions/cache](https://github.com/actions/cache) to v5.1.0 - handle read-only cache access by [@jasongin](https://github.com/jasongin) in [#1775](https://github.com/actions/cache/pull/1775) **Full Changelog**: <https://github.com/actions/cache/compare/v5...v5.1.0> ### [`v5.0.5`](https://github.com/actions/cache/releases/tag/v5.0.5) [Compare Source](https://github.com/actions/cache/compare/v5.0.4...v5.0.5) #### What's Changed - Update ts-http-runtime dependency by [@yacaovsnc](https://github.com/yacaovsnc) in [#1747](https://github.com/actions/cache/pull/1747) **Full Changelog**: <https://github.com/actions/cache/compare/v5...v5.0.5> ### [`v5.0.4`](https://github.com/actions/cache/releases/tag/v5.0.4) [Compare Source](https://github.com/actions/cache/compare/v5.0.3...v5.0.4) #### What's Changed - Add release instructions and update maintainer docs by [@Link-](https://github.com/Link-) in [#1696](https://github.com/actions/cache/pull/1696) - Potential fix for code scanning alert no. 52: Workflow does not contain permissions by [@Link-](https://github.com/Link-) in [#1697](https://github.com/actions/cache/pull/1697) - Fix workflow permissions and cleanup workflow names / formatting by [@Link-](https://github.com/Link-) in [#1699](https://github.com/actions/cache/pull/1699) - docs: Update examples to use the latest version by [@XZTDean](https://github.com/XZTDean) in [#1690](https://github.com/actions/cache/pull/1690) - Fix proxy integration tests by [@Link-](https://github.com/Link-) in [#1701](https://github.com/actions/cache/pull/1701) - Fix cache key in examples.md for bun.lock by [@RyPeck](https://github.com/RyPeck) in [#1722](https://github.com/actions/cache/pull/1722) - Update dependencies & patch security vulnerabilities by [@Link-](https://github.com/Link-) in [#1738](https://github.com/actions/cache/pull/1738) #### New Contributors - [@XZTDean](https://github.com/XZTDean) made their first contribution in [#1690](https://github.com/actions/cache/pull/1690) - [@RyPeck](https://github.com/RyPeck) made their first contribution in [#1722](https://github.com/actions/cache/pull/1722) **Full Changelog**: <https://github.com/actions/cache/compare/v5...v5.0.4> ### [`v5.0.3`](https://github.com/actions/cache/releases/tag/v5.0.3) [Compare Source](https://github.com/actions/cache/compare/v5.0.2...v5.0.3) #### What's Changed - Bump `@actions/cache` to v5.0.5 (Resolves: <https://github.com/actions/cache/security/dependabot/33>) - Bump `@actions/core` to v2.0.3 **Full Changelog**: <https://github.com/actions/cache/compare/v5...v5.0.3> ### [`v5.0.2`](https://github.com/actions/cache/releases/tag/v5.0.2): v.5.0.2 [Compare Source](https://github.com/actions/cache/compare/v5.0.1...v5.0.2) ### v5.0.2 #### What's Changed When creating cache entries, 429s returned from the cache service will not be retried. ### [`v5.0.1`](https://github.com/actions/cache/releases/tag/v5.0.1) [Compare Source](https://github.com/actions/cache/compare/v5.0.0...v5.0.1) > \[!IMPORTANT] > **`actions/cache@v5` runs on the Node.js 24 runtime and requires a minimum Actions Runner version of `2.327.1`.** > > If you are using self-hosted runners, ensure they are updated before upgrading. *** ### v5.0.1 #### What's Changed - fix: update [@actions/cache](https://github.com/actions/cache) for Node.js 24 punycode deprecation by [@salmanmkc](https://github.com/salmanmkc) in [#1685](https://github.com/actions/cache/pull/1685) - prepare release v5.0.1 by [@salmanmkc](https://github.com/salmanmkc) in [#1686](https://github.com/actions/cache/pull/1686) ### v5.0.0 #### What's Changed - Upgrade to use node24 by [@salmanmkc](https://github.com/salmanmkc) in [#1630](https://github.com/actions/cache/pull/1630) - Prepare v5.0.0 release by [@salmanmkc](https://github.com/salmanmkc) in [#1684](https://github.com/actions/cache/pull/1684) **Full Changelog**: <https://github.com/actions/cache/compare/v5...v5.0.1> ### [`v5.0.0`](https://github.com/actions/cache/releases/tag/v5.0.0) [Compare Source](https://github.com/actions/cache/compare/v4.3.0...v5.0.0) > \[!IMPORTANT] > **`actions/cache@v5` runs on the Node.js 24 runtime and requires a minimum Actions Runner version of `2.327.1`.** > > If you are using self-hosted runners, ensure they are updated before upgrading. *** #### What's Changed - Upgrade to use node24 by [@salmanmkc](https://github.com/salmanmkc) in [#1630](https://github.com/actions/cache/pull/1630) - Prepare v5.0.0 release by [@salmanmkc](https://github.com/salmanmkc) in [#1684](https://github.com/actions/cache/pull/1684) **Full Changelog**: <https://github.com/actions/cache/compare/v4.3.0...v5.0.0> ### [`v4.3.0`](https://github.com/actions/cache/releases/tag/v4.3.0) [Compare Source](https://github.com/actions/cache/compare/v4.2.4...v4.3.0) #### What's Changed - Add note on runner versions by [@GhadimiR](https://github.com/GhadimiR) in [#1642](https://github.com/actions/cache/pull/1642) - Prepare `v4.3.0` release by [@Link-](https://github.com/Link-) in [#1655](https://github.com/actions/cache/pull/1655) #### New Contributors - [@GhadimiR](https://github.com/GhadimiR) made their first contribution in [#1642](https://github.com/actions/cache/pull/1642) **Full Changelog**: <https://github.com/actions/cache/compare/v4...v4.3.0> ### [`v4.2.4`](https://github.com/actions/cache/releases/tag/v4.2.4) [Compare Source](https://github.com/actions/cache/compare/v4.2.3...v4.2.4) #### What's Changed - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#1620](https://github.com/actions/cache/pull/1620) - Upgrade `@actions/cache` to `4.0.5` and move `@protobuf-ts/plugin` to dev depdencies by [@Link-](https://github.com/Link-) in [#1634](https://github.com/actions/cache/pull/1634) - Prepare release `4.2.4` by [@Link-](https://github.com/Link-) in [#1636](https://github.com/actions/cache/pull/1636) #### New Contributors - [@nebuk89](https://github.com/nebuk89) made their first contribution in [#1620](https://github.com/actions/cache/pull/1620) **Full Changelog**: <https://github.com/actions/cache/compare/v4...v4.2.4> ### [`v4.2.3`](https://github.com/actions/cache/releases/tag/v4.2.3) [Compare Source](https://github.com/actions/cache/compare/v4.2.2...v4.2.3) #### What's Changed - Update to use [@actions/cache](https://github.com/actions/cache) 4.0.3 package & prepare for new release by [@salmanmkc](https://github.com/salmanmkc) in [#1577](https://github.com/actions/cache/pull/1577) (SAS tokens for cache entries are now masked in debug logs) #### New Contributors - [@salmanmkc](https://github.com/salmanmkc) made their first contribution in [#1577](https://github.com/actions/cache/pull/1577) **Full Changelog**: <https://github.com/actions/cache/compare/v4.2.2...v4.2.3> ### [`v4.2.2`](https://github.com/actions/cache/releases/tag/v4.2.2) [Compare Source](https://github.com/actions/cache/compare/v4.2.1...v4.2.2) #### What's Changed > \[!IMPORTANT] > As a reminder, there were important backend changes to release v4.2.0, see [those release notes](https://github.com/actions/cache/releases/tag/v4.2.0) and [the announcement](https://github.com/actions/cache/discussions/1510) for more details. - Bump [@actions/cache](https://github.com/actions/cache) to v4.0.2 by [@robherley](https://github.com/robherley) in [#1560](https://github.com/actions/cache/pull/1560) **Full Changelog**: <https://github.com/actions/cache/compare/v4.2.1...v4.2.2> ### [`v4.2.1`](https://github.com/actions/cache/releases/tag/v4.2.1) [Compare Source](https://github.com/actions/cache/compare/v4.2.0...v4.2.1) #### What's Changed > \[!IMPORTANT] > As a reminder, there were important backend changes to release v4.2.0, see [those release notes](https://github.com/actions/cache/releases/tag/v4.2.0) and [the announcement](https://github.com/actions/cache/discussions/1510) for more details. - docs: GitHub is spelled incorrectly in caching-strategies.md by [@janco-absa](https://github.com/janco-absa) in [#1526](https://github.com/actions/cache/pull/1526) - docs: Make the "always save prime numbers" example more clear by [@Tobbe](https://github.com/Tobbe) in [#1525](https://github.com/actions/cache/pull/1525) - Update force deletion docs due a recent deprecation by [@sebbalex](https://github.com/sebbalex) in [#1500](https://github.com/actions/cache/pull/1500) - Bump [@actions/cache](https://github.com/actions/cache) to v4.0.1 by [@robherley](https://github.com/robherley) in [#1554](https://github.com/actions/cache/pull/1554) #### New Contributors - [@janco-absa](https://github.com/janco-absa) made their first contribution in [#1526](https://github.com/actions/cache/pull/1526) - [@Tobbe](https://github.com/Tobbe) made their first contribution in [#1525](https://github.com/actions/cache/pull/1525) - [@sebbalex](https://github.com/sebbalex) made their first contribution in [#1500](https://github.com/actions/cache/pull/1500) **Full Changelog**: <https://github.com/actions/cache/compare/v4.2.0...v4.2.1> ### [`v4.2.0`](https://github.com/actions/cache/releases/tag/v4.2.0) [Compare Source](https://github.com/actions/cache/compare/v4.1.2...v4.2.0) #### ⚠️ Important Changes The cache backend service has been rewritten from the ground up for improved performance and reliability. [actions/cache](https://github.com/actions/cache) now integrates with the new cache service (v2) APIs. The new service will gradually roll out as of **February 1st, 2025**. The legacy service will also be sunset on the same date. Changes in these release are **fully backward compatible**. **We are deprecating some versions of this action**. We recommend upgrading to version `v4` or `v3` as soon as possible before **February 1st, 2025.** (Upgrade instructions below). If you are using pinned SHAs, please use the SHAs of versions `v4.2.0` or `v3.4.0` If you do not upgrade, all workflow runs using any of the deprecated [actions/cache](https://github.com/actions/cache) will fail. Upgrading to the recommended versions will not break your workflows. Read more about the change & access the migration guide: [reference to the announcement](https://github.com/actions/cache/discussions/1510). ##### Minor changes Minor and patch version updates for these dependencies: - [@actions/core](https://github.com/actions/core): `1.11.1` - [@actions/io](https://github.com/actions/io): `1.1.3` - [@vercel/ncc](https://github.com/vercel/ncc): `0.38.3` **Full Changelog**: <https://github.com/actions/cache/compare/v4.1.2...v4.2.0> ### [`v4.1.2`](https://github.com/actions/cache/releases/tag/v4.1.2) [Compare Source](https://github.com/actions/cache/compare/v4.1.1...v4.1.2) #### What's Changed - Add Bun example by [@idleberg](https://github.com/idleberg) in [#1456](https://github.com/actions/cache/pull/1456) - Revise `isGhes` logic by [@jww3](https://github.com/jww3) in [#1474](https://github.com/actions/cache/pull/1474) - Bump braces from 3.0.2 to 3.0.3 by [@dependabot](https://github.com/dependabot) in [#1475](https://github.com/actions/cache/pull/1475) - Add dependabot.yml to enable automatic dependency upgrades by [@Link-](https://github.com/Link-) in [#1476](https://github.com/actions/cache/pull/1476) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1478](https://github.com/actions/cache/pull/1478) - Bump actions/stale from 3 to 9 by [@dependabot](https://github.com/dependabot) in [#1479](https://github.com/actions/cache/pull/1479) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1483](https://github.com/actions/cache/pull/1483) - Bump actions/setup-node from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1481](https://github.com/actions/cache/pull/1481) - Prepare `4.1.2` release by [@Link-](https://github.com/Link-) in [#1477](https://github.com/actions/cache/pull/1477) #### New Contributors - [@idleberg](https://github.com/idleberg) made their first contribution in [#1456](https://github.com/actions/cache/pull/1456) - [@jww3](https://github.com/jww3) made their first contribution in [#1474](https://github.com/actions/cache/pull/1474) - [@Link-](https://github.com/Link-) made their first contribution in [#1476](https://github.com/actions/cache/pull/1476) **Full Changelog**: <https://github.com/actions/cache/compare/v4.1.1...v4.1.2> ### [`v4.1.1`](https://github.com/actions/cache/releases/tag/v4.1.1) [Compare Source](https://github.com/actions/cache/compare/v4.1.0...v4.1.1) #### What's Changed - Restore original behavior of `cache-hit` output by [@joshmgross](https://github.com/joshmgross) in [#1467](https://github.com/actions/cache/pull/1467) **Full Changelog**: <https://github.com/actions/cache/compare/v4.1.0...v4.1.1> ### [`v4.1.0`](https://github.com/actions/cache/releases/tag/v4.1.0) [Compare Source](https://github.com/actions/cache/compare/v4.0.2...v4.1.0) #### What's Changed - Fix cache-hit output when cache missed by [@fchimpan](https://github.com/fchimpan) in [#1404](https://github.com/actions/cache/pull/1404) - Deprecate `save-always` input by [@joshmgross](https://github.com/joshmgross) in [#1452](https://github.com/actions/cache/pull/1452) #### New Contributors - [@ottlinger](https://github.com/ottlinger) made their first contribution in [#1437](https://github.com/actions/cache/pull/1437) - [@Olegt0rr](https://github.com/Olegt0rr) made their first contribution in [#1377](https://github.com/actions/cache/pull/1377) - [@fchimpan](https://github.com/fchimpan) made their first contribution in [#1404](https://github.com/actions/cache/pull/1404) - [@x612skm](https://github.com/x612skm) made their first contribution in [#1434](https://github.com/actions/cache/pull/1434) - [@todgru](https://github.com/todgru) made their first contribution in [#1311](https://github.com/actions/cache/pull/1311) - [@Jcambass](https://github.com/Jcambass) made their first contribution in [#1463](https://github.com/actions/cache/pull/1463) - [@mackey0225](https://github.com/mackey0225) made their first contribution in [#1462](https://github.com/actions/cache/pull/1462) - [@quatquatt](https://github.com/quatquatt) made their first contribution in [#1445](https://github.com/actions/cache/pull/1445) **Full Changelog**: <https://github.com/actions/cache/compare/v4.0.2...v4.1.0> ### [`v4.0.2`](https://github.com/actions/cache/releases/tag/v4.0.2) [Compare Source](https://github.com/actions/cache/compare/v4.0.1...v4.0.2) #### What's Changed - Fix `fail-on-cache-miss` not working by [@cdce8p](https://github.com/cdce8p) in [#1327](https://github.com/actions/cache/pull/1327) **Full Changelog**: <https://github.com/actions/cache/compare/v4.0.1...v4.0.2> ### [`v4.0.1`](https://github.com/actions/cache/releases/tag/v4.0.1) [Compare Source](https://github.com/actions/cache/compare/v4.0.0...v4.0.1) #### What's Changed - Update README.md by [@yacaovsnc](https://github.com/yacaovsnc) in [#1304](https://github.com/actions/cache/pull/1304) - Update examples by [@yacaovsnc](https://github.com/yacaovsnc) in [#1305](https://github.com/actions/cache/pull/1305) - Update actions/cache publish flow by [@bethanyj28](https://github.com/bethanyj28) in [#1340](https://github.com/actions/cache/pull/1340) - Update [@actions/cache](https://github.com/actions/cache) by [@bethanyj28](https://github.com/bethanyj28) in [#1341](https://github.com/actions/cache/pull/1341) #### New Contributors - [@yacaovsnc](https://github.com/yacaovsnc) made their first contribution in [#1304](https://github.com/actions/cache/pull/1304) **Full Changelog**: <https://github.com/actions/cache/compare/v4...v4.0.1> </details> <details> <summary>actions/checkout</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@aiqiaoy](https://github.com/aiqiaoy) in [#2518](https://github.com/actions/checkout/pull/2518) - Trim only ascii whitespace for branch by [@aiqiaoy](https://github.com/aiqiaoy) in [#2521](https://github.com/actions/checkout/pull/2521) - Escape values passed to --unset by [@aiqiaoy](https://github.com/aiqiaoy) in [#2530](https://github.com/actions/checkout/pull/2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v6.1.0...v7.0.0) - Block checking out fork PR for pull_request_target and workflow_run by [@aiqiaoy](https://github.com/aiqiaoy) in [#2454](https://github.com/actions/checkout/pull/2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2500](https://github.com/actions/checkout/pull/2500) - backport fixes to releases-v6 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2527](https://github.com/actions/checkout/pull/2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](https://github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](https://github.com/actions/checkout/pull/2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](https://github.com/actions/checkout/pull/2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](https://github.com/actions/checkout/compare/v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](https://github.com/actions/checkout/pull/2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](https://github.com/actions/checkout/compare/v5.1.0...v6.0.0) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](https://github.com/actions/checkout/pull/2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](https://github.com/actions/checkout/pull/2248) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](https://github.com/actions/checkout/compare/v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2501](https://github.com/actions/checkout/pull/2501) - backport fixes to releases-v5 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2523](https://github.com/actions/checkout/pull/2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](https://github.com/actions/checkout/compare/v5.0.0...v5.0.1) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](https://github.com/actions/checkout/pull/2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](https://github.com/actions/checkout/compare/v4.4.0...v5.0.0) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](https://github.com/actions/checkout/pull/2226) ### [`v4.4.0`](https://github.com/actions/checkout/releases/tag/v4.4.0) [Compare Source](https://github.com/actions/checkout/compare/v4.3.1...v4.4.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2502](https://github.com/actions/checkout/pull/2502) - backport fixes to releases-v4 by [@aiqiaoy](https://github.com/aiqiaoy) in [#2524](https://github.com/actions/checkout/pull/2524) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v4.3.1...v4.4.0> ### [`v4.3.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v431) [Compare Source](https://github.com/actions/checkout/compare/v4.3.0...v4.3.1) - Port v6 cleanup to v4 by [@ericsciple](https://github.com/ericsciple) in [#2305](https://github.com/actions/checkout/pull/2305) ### [`v4.3.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v430) [Compare Source](https://github.com/actions/checkout/compare/v4.2.2...v4.3.0) - docs: update README.md by [@motss](https://github.com/motss) in [#1971](https://github.com/actions/checkout/pull/1971) - Add internal repos for checking out multiple repositories by [@mouismail](https://github.com/mouismail) in [#1977](https://github.com/actions/checkout/pull/1977) - Documentation update - add recommended permissions to Readme by [@benwells](https://github.com/benwells) in [#2043](https://github.com/actions/checkout/pull/2043) - Adjust positioning of user email note and permissions heading by [@joshmgross](https://github.com/joshmgross) in [#2044](https://github.com/actions/checkout/pull/2044) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#2194](https://github.com/actions/checkout/pull/2194) - Update CODEOWNERS for actions by [@TingluoHuang](https://github.com/TingluoHuang) in [#2224](https://github.com/actions/checkout/pull/2224) - Update package dependencies by [@salmanmkc](https://github.com/salmanmkc) in [#2236](https://github.com/actions/checkout/pull/2236) ### [`v4.2.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422) [Compare Source](https://github.com/actions/checkout/compare/v4.2.1...v4.2.2) - `url-helper.ts` now leverages well-known environment variables by [@jww3](https://github.com/jww3) in [#1941](https://github.com/actions/checkout/pull/1941) - Expand unit test coverage for `isGhes` by [@jww3](https://github.com/jww3) in [#1946](https://github.com/actions/checkout/pull/1946) ### [`v4.2.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](https://github.com/actions/checkout/compare/v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@orhantoy](https://github.com/orhantoy) in [#1924](https://github.com/actions/checkout/pull/1924) ### [`v4.2.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](https://github.com/actions/checkout/compare/v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@lucacome](https://github.com/lucacome) in [#1180](https://github.com/actions/checkout/pull/1180) - Dependency updates by [@dependabot-](https://github.com/dependabot-) [#1777](https://github.com/actions/checkout/pull/1777), [#1872](https://github.com/actions/checkout/pull/1872) ### [`v4.1.7`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://github.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in [#1739](https://github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in [#1697](https://github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in [#1774](https://github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in [#1776](https://github.com/actions/checkout/pull/1776) ### [`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](https://github.com/actions/checkout/compare/v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@cory-miller](https://github.com/cory-miller) in [#1732](https://github.com/actions/checkout/pull/1732) ### [`v4.1.5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415) [Compare Source](https://github.com/actions/checkout/compare/v4.1.4...v4.1.5) - Update NPM dependencies by [@cory-miller](https://github.com/cory-miller) in [#1703](https://github.com/actions/checkout/pull/1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in [#1694](https://github.com/actions/checkout/pull/1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://github.com/dependabot) in [#1696](https://github.com/actions/checkout/pull/1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://github.com/dependabot) in [#1695](https://github.com/actions/checkout/pull/1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://github.com/cory-miller) in [#1707](https://github.com/actions/checkout/pull/1707) ### [`v4.1.4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](https://github.com/actions/checkout/compare/v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1692](https://github.com/actions/checkout/pull/1692) - Add dependabot config by [@cory-miller](https://github.com/cory-miller) in [#1688](https://github.com/actions/checkout/pull/1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1693](https://github.com/actions/checkout/pull/1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://github.com/dependabot) in [#1643](https://github.com/actions/checkout/pull/1643) ### [`v4.1.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413) [Compare Source](https://github.com/actions/checkout/compare/v4.1.2...v4.1.3) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://github.com/jww3) in [#1656](https://github.com/actions/checkout/pull/1656) - Add SSH user parameter by [@cory-miller](https://github.com/cory-miller) in [#1685](https://github.com/actions/checkout/pull/1685) - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://github.com/jww3) in [#1650](https://github.com/actions/checkout/pull/1650) ### [`v4.1.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://github.com/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in [#1598](https://github.com/actions/checkout/pull/1598) ### [`v4.1.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v411) [Compare Source](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1) - Correct link to GitHub Docs by [@peterbe](https://github.com/peterbe) in [#1511](https://github.com/actions/checkout/pull/1511) - Link to release page from what's new section by [@cory-miller](https://github.com/cory-miller) in [#1514](https://github.com/actions/checkout/pull/1514) ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0) - [Add support for partial checkout filters](https://github.com/actions/checkout/pull/1396) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 9am on tuesday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

harbor-bot added 1 commit

2026-10-13 01:00:22 +00:00

Update github-actions

renovate/stability-days Updates have met minimum release age requirement

Details

PR / Validate (pull_request) Successful in 31s

Details

PR / Complete (pull_request) Successful in 9s

Details

5da2aed37c

harbor-bot requested review from Developers

2026-10-13 01:00:22 +00:00