Update GitHub Actions (major) by renovate[bot] · Pull Request #177 · nf-core/ops

renovate · 2025-09-05T18:01:54Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v5` → `v7`
actions/github-script	action	major	`v7` → `v9`
actions/setup-python	action	major	`v5` → `v6`
aws-actions/configure-aws-credentials	action	major	`v4` → `v6`
pulumi/actions	action	major	`v6` → `v7`
softprops/turnstyle	action	major	`v2` → `v3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/github-script (actions/github-script)

`v9.0.0`

Compare Source

New features:

getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in #695
ci: use deployment: false for integration test environments by @salmanmkc in #712
feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in #700

New Contributors

@Copilot made their first contribution in #695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

What's Changed

Update Node.js version support to 24.x by @salmanmkc in #637
README for updating actions/github-script from v7 to v8 by @sneha-krip in #653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

@salmanmkc made their first contribution in #637
@sneha-krip made their first contribution in #653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

actions/setup-python (actions/setup-python)

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in #1259
Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in #1253 and #1264

Full Changelog: actions/setup-python@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements:

Add support for pip-install input by @gowridurgad in #1201
Add graalpy early-access and windows builds by @timfel in #880

Dependency and Documentation updates:

Enhanced wording and updated example usage for allow-prereleases by @yarikoptic in #979
Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @dependabot in #1139
Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @dependabot in #1094
Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @dependabot in #1199
Upgrade requests from 2.32.2 to 2.32.4 by @dependabot in #1130
Upgrade prettier from 3.5.3 to 3.6.2 by @dependabot in #1234
Upgrade @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @dependabot in #1235

New Contributors

@yarikoptic made their first contribution in #979

Full Changelog: actions/setup-python@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Add support for pip-version by @priyagupta108 in #1129
Enhance reading from .python-version by @krystof-k in #787
Add version parsing from Pipfile by @aradkdj in #1067

Bug fixes:

Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @aparnajyothi-y in #1183
Change missing cache directory error to warning by @aparnajyothi-y in #1182
Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @aparnajyothi-y in #1122
Include python version in PyPy python-version output by @cdce8p in #1110
Update docs: clarification on pip authentication with setup-python by @priya-kinthali in #1156

Dependency updates:

Upgrade idna from 2.9 to 3.7 in /tests/data by @dependabot[bot] in #843
Upgrade form-data to fix critical vulnerabilities #182 & #183 by @aparnajyothi-y in #1163
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @aparnajyothi-y in #1165
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1181
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #1095

New Contributors

@krystof-k made their first contribution in #787
@cdce8p made their first contribution in #1110
@aradkdj made their first contribution in #1067

Full Changelog: actions/setup-python@v5...v6.0.0

`v6`

Compare Source

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

`v6.2.2`

Compare Source

`v6.2.1`

Compare Source

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

`v6.2.0`

Compare Source

Features

add additional session tags by default (#1775) (e0ba768)
add more retry logic and better logging (#1764) (540d0c1)
add regex validation to role-session-name (#1765) (e354499)
Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
expose run id in STS client user-agent (#1774) (29d1be3)
support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

skip credential check on output-env-credentials: false (#1778) (58e7c47)
assumeRole failing from session tag size too large (#1808) (d6f5dc3)

`v6.1.3`

Compare Source

Bug Fixes

fix: allow kubelet token symlink in #1805

`v6.1.2`

Compare Source

Bug Fixes

additional filesystem checks (#1799) (c39f282)

`v6.1.1`

Compare Source

What's Changed

chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @dependabot[bot] in #1722
chore(deps-dev): bump @types/node from 25.5.0 to 25.5.2 by @dependabot[bot] in #1723
chore(deps-dev): bump @smithy/property-provider from 4.2.12 to 4.2.13 by @dependabot[bot] in #1724
chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @dependabot[bot] in #1726
chore(deps): bump @smithy/node-http-handler from 4.5.1 to 4.5.2 by @dependabot[bot] in #1725
chore(deps): bump @aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @dependabot[bot] in #1727
chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @dependabot[bot] in #1728
chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @dependabot[bot] in #1729
chore(deps-dev): bump @types/node from 25.5.2 to 25.6.0 by @dependabot[bot] in #1730
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.24 to 3.972.25 by @dependabot[bot] in #1733
chore(deps): bump @aws-sdk/client-sts from 3.1025.0 to 3.1030.0 by @dependabot[bot] in #1732
chore(deps-dev): bump @biomejs/biome from 2.4.10 to 2.4.11 by @dependabot[bot] in #1734
chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by @dependabot[bot] in #1736
chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by @dependabot[bot] in #1737
chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in #1740
chore(deps-dev): bump @smithy/property-provider from 4.2.13 to 4.2.14 by @dependabot[bot] in #1741
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.25 to 3.972.28 by @dependabot[bot] in #1742
chore(deps): bump @aws-sdk/client-sts from 3.1030.0 to 3.1033.0 by @dependabot[bot] in #1743
chore(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12 by @dependabot[bot] in #1739
chore(deps-dev): bump @biomejs/biome from 2.4.12 to 2.4.13 by @dependabot[bot] in #1747
chore(deps): bump postcss from 8.5.6 to 8.5.12 by @dependabot[bot] in #1752
chore(deps): bump @smithy/node-http-handler from 4.6.0 to 4.6.1 by @dependabot[bot] in #1750
chore(deps-dev): bump @aws-sdk/credential-provider-env from 3.972.28 to 3.972.32 by @dependabot[bot] in #1751
chore(deps): bump @aws-sdk/client-sts from 3.1033.0 to 3.1038.0 by @dependabot[bot] in #1749
chore: release 6.1.1 by @lehmanmj in #1757

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

`v6.1.0`

Compare Source

Features

add skip cleanup option (#1716) (11b1c58), closes #1545
Support usage of AWS Profiles (#1696) (a7f0c82)

`v6.0.0`

Compare Source

⚠ BREAKING CHANGES

Update action to use node24 Note this requires GitHub action runner version v2.327.1 or later (#1632) (a7a2c11)

Features

add support to define transitive tag keys (#1316) (232435c) (930ebd9)

Bug Fixes

properly output aws-account-id and authenticated-arn when using role-chaining (#1633) (7ceaf96)

`v6`

Compare Source

`v5.1.1`

Compare Source

Miscellaneous Chores

release 5.1.1 (56d6a58)
various dependency updates

`v5.1.0`

Compare Source

Features

Add global timeout support (#1487) (1584b8b)
add no-proxy support (#1482) (dde9b22)
Improve debug logging in retry logic (#1485) (97ef425)

Bug Fixes

properly expose getProxyForUrl (introduced in #1482) (#1486) (cea4298)

`v5.0.0`

Compare Source

⚠ BREAKING CHANGES

Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

add skip OIDC option (#1458) (8c45f6b)
Cleanup input handling. Changes invalid boolean input behavior (see #1445) (74b3e27)
support account id allowlist (#1456) (c4be498)

`v5`

Compare Source

pulumi/actions (pulumi/actions)

`v7.0.0`

Compare Source

What's Changed

minor style fixups for CONTRIBUTING.md by @tgummerer in #1396
Allow downloading PR artifacts by @iwahbe in #1397
Bump Node runtime from 20 to 24 by @nelsonfigueroa in #1404
Bump TypeScript and jest toolchain by @nelsonfigueroa in #1405
chore: update ESLint stack and migrate to flat config by @nelsonfigueroa in #1406

New Contributors

@iwahbe made their first contribution in #1397
@nelsonfigueroa made their first contribution in #1404

Full Changelog: pulumi/actions@v6...v7.0.0

`v7`

Compare Source

softprops/turnstyle (softprops/turnstyle)

`v3.3.2`

Compare Source

Bug fixes 🐛

Update the bundled undici dependency to the patched 6.27.0 release.

Other Changes 🔄

Update the Node 24 development toolchain and GitHub Actions/npm dependencies, including TypeScript 7 in #155.
Improve internal type safety, test coverage, test type-checking, and failure reporting in #156.

Full Changelog: v3.3.1...v3.3.2

`v3.3.1`

Compare Source

Bug fixes 🐛

Limit workflow run discovery to active runs, use repo-level active run lookup for queue-name, and surface rate-limit throttling in default logs to avoid excessive API usage in busy repositories. Fixes #146

`v3.3.0`

Compare Source

Exciting New Features 🎉

Add configurable retries input to retry transient GitHub API 5xx errors with exponential backoff (defaults to 0, preserving the existing no-retry behavior), originally contributed by @mateusz-krainski-revoize in #148 and merged via #150
Document reusable workflow usage and queue naming behavior by @chenrui333 in #143
Allow same-branch filtering to target an explicit branch by @chenrui333 in #144
Expose previous run ID and URL outputs by @chenrui333 in #145

`v3.2.4`

Compare Source

Bug fixes 🐛

Fix runtime input parsing and GitHub API throttling by @chenrui333 in #140
Resolve workflows by ref path for more reliable workflow discovery by @chenrui333 in #141
Improve workflow run discovery and rerun ordering so active predecessors are not missed in busy repositories by @chenrui333 in #142

`v3.2.3`

Compare Source

maintenance release with updated dependencies

`v3.2.2`

Compare Source

What's Changed

Other Changes 🔄

chore(deps): bump the npm group with 5 updates by @dependabot[bot] in #126
chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 in the npm group by @dependabot[bot] in #125

Full Changelog: softprops/turnstyle@v3.2.1...v3.2.2

`v3.2.1`

Compare Source

maintenance release with updated dependencies

Full Changelog: softprops/turnstyle@v3.2.0...v3.2.1

`v3.2.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat: filter grouping multiple workflows by queue-name by @cdiaz-nex in #120

Other Changes 🔄

chore(deps): bump the npm group with 5 updates by @dependabot[bot] in #122

Full Changelog: softprops/turnstyle@v3...v3.2.0

`v3.1.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat: filter workflows by queue-name by @cdiaz-nex in #117

New Contributors

@cdiaz-nex made their first contribution in #117

Full Changelog: softprops/turnstyle@v3...v3.1.0

`v3.0.0`

Compare Source

Upgrade Node.js version to 24 in action
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

`v3`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 9am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot requested review from a team, edmundmiller and maxulysse as code owners September 5, 2025 18:01

renovate Bot force-pushed the renovate/major-github-actions branch from 8a7d3d4 to 5cd7517 Compare September 7, 2025 04:56

renovate Bot force-pushed the renovate/major-github-actions branch from 5cd7517 to f11570c Compare September 23, 2025 22:38

renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 4630944 to a9c64a9 Compare October 7, 2025 04:47

renovate Bot force-pushed the renovate/major-github-actions branch from a9c64a9 to b1773f2 Compare October 29, 2025 11:48

renovate Bot force-pushed the renovate/major-github-actions branch from b1773f2 to 9146f85 Compare November 8, 2025 20:26

renovate Bot force-pushed the renovate/major-github-actions branch 3 times, most recently from f8abe62 to 33bad4e Compare November 25, 2025 04:33

renovate Bot force-pushed the renovate/major-github-actions branch 4 times, most recently from f24d6cc to 96e9238 Compare December 6, 2025 20:57

renovate Bot force-pushed the renovate/major-github-actions branch from 96e9238 to 0cf0ef0 Compare December 15, 2025 13:01

renovate Bot force-pushed the renovate/major-github-actions branch from 0cf0ef0 to 33044ce Compare January 11, 2026 04:45

renovate Bot force-pushed the renovate/major-github-actions branch from 33044ce to 140cf73 Compare January 22, 2026 04:58

renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from fa458fe to e8d2f80 Compare February 5, 2026 01:47

renovate Bot force-pushed the renovate/major-github-actions branch from e8d2f80 to 6583bd8 Compare March 1, 2026 13:01

renovate Bot force-pushed the renovate/major-github-actions branch from 6583bd8 to 4ba03f4 Compare March 9, 2026 11:30

renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 775d5e8 to 78ae972 Compare April 10, 2026 01:00

renovate Bot changed the title ~~chore(deps): update github actions (major)~~ Update GitHub Actions (major) Apr 17, 2026

renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from b5667a5 to e0eee7d Compare April 20, 2026 11:24

renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from a6f567d to ddb1a68 Compare May 4, 2026 11:16

renovate Bot force-pushed the renovate/major-github-actions branch from ddb1a68 to e6fffd9 Compare May 5, 2026 19:16

renovate Bot force-pushed the renovate/major-github-actions branch 4 times, most recently from f375398 to ef35db9 Compare June 2, 2026 19:38

renovate Bot force-pushed the renovate/major-github-actions branch from ef35db9 to 6a330b5 Compare June 8, 2026 02:08

renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from ca5271f to 4dd267f Compare June 24, 2026 05:40

renovate Bot force-pushed the renovate/major-github-actions branch from 4dd267f to 35d9510 Compare June 26, 2026 22:15

renovate Bot force-pushed the renovate/major-github-actions branch from 35d9510 to 12dfcfc Compare July 7, 2026 19:12

Update GitHub Actions

26b31f0

renovate Bot force-pushed the renovate/major-github-actions branch from 12dfcfc to 26b31f0 Compare July 13, 2026 05:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update GitHub Actions (major)#177

Update GitHub Actions (major)#177
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-actions

renovate Bot commented Sep 5, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

v8: .0.0

What's Changed

⚠️ Minimum Compatible Runner Version

New Contributors

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

What's Changed

Dependency Upgrades

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

What's Changed

Breaking Changes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

Features

⚠ BREAKING CHANGES

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

⚠ BREAKING CHANGES

Features

What's Changed

New Contributors

Bug fixes 🐛

Other Changes 🔄

Bug fixes 🐛

Exciting New Features 🎉

Bug fixes 🐛

What's Changed

Other Changes 🔄

What's Changed

Exciting New Features 🎉

Other Changes 🔄

What's Changed

Exciting New Features 🎉

New Contributors

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 5, 2025 •

edited

Loading

`v8`: .0.0