Update GitHub Actions dependencies by renovate[bot] · Pull Request #93 · SonarSource/sonar-dummy-python-oss

renovate · 2026-03-11T12:12:03Z

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/gh-action_pre-commit	action	minor	`1.1.0` → `1.2.1`
SonarSource/unified-dogfooding-actions	action	pin	`v1` → `1.1.0`
actions/checkout	action	patch	`v5.0.0` → `v5.0.1`
jdx/mise-action	action	minor	`v3.2.0` → `v3.6.3`
step-security/harden-runner	action	minor	`v2.19.0` → `v2.20.0`

Release Notes

SonarSource/gh-action_pre-commit (SonarSource/gh-action_pre-commit)

`v1.2.1`

Compare Source

What's Changed

Dependency Updates

Package	Update	Change
actions/setup-python	minor	`v6.1.0` → `v6.3.0` (#45)
nick-fields/assert-action	pin	`v4` → `v4.0.1` (#45)
actions/cache	major	`v5.0.1` → `v6.1.0` (#46)
actions/checkout	major	`v6.0.1` → `v7.0.0` (#46)
nick-fields/assert-action	major	`v2.0.0` → `v4.0.1` (#46)
nick-fields/assert-action	major	`v2` → `v4` (#46)

Internal & Chores

Added GitHub workflows (PullRequestClosed, PullRequestCreated, RequestReview, SubmitReview) to automate Jira status updates on PR review events, using SonarSource/vault-action-wrapper for credential retrieval (#49, BUILD-11517)

Full Changelog: SonarSource/gh-action_pre-commit@1.2.0...1.2.1

`v1.2.0`

Compare Source

What's Changed

BUILD-8875: Migrate to standardized GitHub runner names by @SonarTech in #39
chore(deps): update github actions by @renovate[bot] in #35
chore(deps): update github actions (major) by @renovate[bot] in #38
chore(deps): update dependency python to 3.14 by @renovate[bot] in #40
chore(deps): update actions/checkout action to v6 by @renovate[bot] in #42
chore(deps): update actions/cache action to v5 by @renovate[bot] in #44
chore(deps): update github actions by @renovate[bot] in #41

New Contributors

@SonarTech made their first contribution in #39

Full Changelog: SonarSource/gh-action_pre-commit@1.1.0...1.2.0

actions/checkout (actions/checkout)

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

jdx/mise-action (jdx/mise-action)

`v3.6.3`

Compare Source

What's Changed

fix: pass cwd to all exec calls in exportMiseEnv() by @andrewthauer in #390
chore: release v3.6.3 by @mise-en-dev in #391

New Contributors

@andrewthauer made their first contribution in #390

Full Changelog: jdx/mise-action@v3.6.2...v3.6.3

`v3.6.2`

Compare Source

What's Changed

chore(deps): update dependency prettier to v3.8.1 by @renovate[bot] in #368
chore(deps): update dependency @types/node to v24.10.9 by @renovate[bot] in #367
chore(deps): update github/codeql-action digest to 439137e by @renovate[bot] in #370
chore(deps): lock file maintenance by @renovate[bot] in #372
chore(deps): update autofix-ci/action digest to 7a166d7 by @renovate[bot] in #375
chore(deps): update actions/checkout digest to de0fac2 by @renovate[bot] in #374
chore(deps): lock file maintenance by @renovate[bot] in #377
chore(deps): update github/codeql-action digest to b5ebac6 by @renovate[bot] in #378
chore(deps): update dependency @types/node to v24.10.13 by @renovate[bot] in #379
chore(deps): update github/codeql-action digest to f5c2471 by @renovate[bot] in #380
fix: move file_hash to end of cache key template to prevent prefix matching by @altendky in #384
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #381
chore(deps): lock file maintenance by @renovate[bot] in #386
chore(deps): update github/codeql-action digest to 4558047 by @renovate[bot] in #387
chore(deps): lock file maintenance by @renovate[bot] in #389
chore: release v3.6.2 by @mise-en-dev in #385

New Contributors

@altendky made their first contribution in #384

Full Changelog: jdx/mise-action@v3.6.1...v3.6.2

`v3.6.1`

Compare Source

What's Changed

Revert "fix(cache): isolate cache keys per working_directory in monorepos" by @jdx in #364
chore: release v3.6.1 by @mise-en-dev in #365

Full Changelog: jdx/mise-action@v3.6.0...v3.6.1

`v3.6.0`

Compare Source

What's Changed

chore(deps): update dependency prettier to v3.7.1 by @renovate[bot] in #331
chore(deps): update github/codeql-action digest to 497990d by @renovate[bot] in #324
chore(deps): update dependency typescript-eslint to v8.48.1 by @renovate[bot] in #332
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #314
chore(deps): update dependency @eslint/eslintrc to v3.3.3 by @renovate[bot] in #333
chore(deps): lock file maintenance by @renovate[bot] in #336
chore(deps): lock file maintenance by @renovate[bot] in #338
fix: use mise_dir input when specified by @jdx in #339
feat: add option to disable shims in PATH by @jdx in #340
fix: pass environment variables to mise commands by @jdx in #341
chore(deps): lock file maintenance by @renovate[bot] in #344
chore(deps): update github/codeql-action digest to 45c3735 by @renovate[bot] in #346
chore(deps): lock file maintenance by @renovate[bot] in #348
chore(deps): update actions/checkout action to v6 by @renovate[bot] in #350
chore(deps): lock file maintenance by @renovate[bot] in #352
docs: fix description for mise_toml input by @quad in #351
fix: make mise self-update output visible in logs by @nikobockerman in #355
chore(deps): update actions/setup-node action to v6 by @renovate[bot] in #356
chore(deps): lock file maintenance by @renovate[bot] in #358
chore(deps): update actions/setup-node digest to 6044e13 by @renovate[bot] in #361
fix(cache): isolate cache keys per working_directory in monorepos by @chadxz in #360
chore(deps): update github/codeql-action digest to 4bdb89f by @renovate[bot] in #362
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #349
chore(deps): update actions/upload-artifact action to v6 by @renovate[bot] in #357
chore: release v3.6.0 by @mise-en-dev in #342

New Contributors

@quad made their first contribution in #351
@nikobockerman made their first contribution in #355
@chadxz made their first contribution in #360

Full Changelog: jdx/mise-action@v3.5.1...v3.6.0

`v3.5.1`

Compare Source

What's Changed

chore(deps): lock file maintenance by @renovate[bot] in #328
Revert "feat(action): moved save cache to post step" by @jdx in #329
chore: release v3.5.1 by @mise-en-dev in #330

Full Changelog: jdx/mise-action@v3.5.0...v3.5.1

`v3.5.0`

Compare Source

What's Changed

chore(deps): update github/codeql-action digest to f94c9be by @renovate[bot] in #319
chore(deps): update dependency @types/node to v24.10.1 by @renovate[bot] in #320
feat(action): moved save cache to post step by @aamkye in #321
chore(deps): update actions/checkout digest by @renovate[bot] in #323
chore: release v3.5.0 by @mise-en-dev in #322

New Contributors

@aamkye made their first contribution in #321

Full Changelog: jdx/mise-action@v3.4.1...v3.5.0

`v3.4.1`

Compare Source

What's Changed

chore(deps): lock file maintenance by @renovate[bot] in #309
chore(deps): lock file maintenance by @renovate[bot] in #310
chore(deps): pin dependencies by @renovate[bot] in #311
chore(deps): update eslint monorepo to v9.39.1 by @renovate[bot] in #313
chore(deps): lock file maintenance by @renovate[bot] in #316
fix: avoid github token downstream issue by @acesyde in #317
chore: release v3.4.1 by @mise-en-dev in #318

New Contributors

@acesyde made their first contribution in #317

Full Changelog: jdx/mise-action@v3.4.0...v3.4.1

`v3.4.0`

Compare Source

What's Changed

docs: update to v3 in README by @pdecat in #290
chore(deps): update github/codeql-action digest to a8d1ac4 by @renovate[bot] in #293
chore(deps): update github/codeql-action digest to 755f449 by @renovate[bot] in #296
chore(deps): update dependency @types/node to v24.8.1 by @renovate[bot] in #297
chore(deps): update github/codeql-action digest to 4221315 by @renovate[bot] in #299
chore(deps): update dependency @types/node to v24.9.1 by @renovate[bot] in #300
chore(deps): update github/codeql-action digest to 5d5cd55 by @renovate[bot] in #302
chore(deps): update dependency @types/node to v24.9.2 by @renovate[bot] in #303
fix: add missing await to core.group calls by @smorimoto in #305
fix: auto-update dist folder in Renovate PRs via GitHub Actions by @jdx in #306
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #294
feat: use autofix.ci to auto-update dist/ on all PRs by @jdx in #308
chore(deps): lock file maintenance by @renovate[bot] in #301
chore: release v3.4.0 by @mise-en-dev in #291

New Contributors

@pdecat made their first contribution in #290
@smorimoto made their first contribution in #305

Full Changelog: jdx/mise-action@v3.3.1...v3.4.0

`v3.3.1`

Compare Source

What's Changed

chore(deps): lock file maintenance by @renovate[bot] in #286
fix: Fix update by @zeitlinger in #287
chore: release v3.3.1 by @mise-en-dev in #288

Full Changelog: jdx/mise-action@v3.3.0...v3.3.1

`v3.3.0`

Compare Source

What's Changed

chore(deps): update github/codeql-action digest to d3678e2 by @renovate[bot] in #259
chore(deps): pin actions/checkout action to 08eba0b by @renovate[bot] in #258
chore(config): migrate renovate config by @renovate[bot] in #263
chore(deps): update dependency @types/node to v24.3.1 by @renovate[bot] in #261
chore(deps): update dependency globals to v16.4.0 by @renovate[bot] in #265
chore(deps): update dependency jest to v30.1.3 by @renovate[bot] in #262
chore(deps): update dependency typescript-eslint to v8.43.0 by @renovate[bot] in #266
chore(deps): update github/codeql-action digest to 192325c by @renovate[bot] in #269
chore(deps): update dependency @vercel/ncc to v0.38.4 by @renovate[bot] in #270
chore(deps): update dependency typescript-eslint to v8.44.0 by @renovate[bot] in #272
chore(deps): update dependency @types/node to v24.5.2 by @renovate[bot] in #271
chore(deps): update github/codeql-action digest to 303c0ae by @renovate[bot] in #274
chore(deps): update dependency typescript-eslint to v8.44.1 by @renovate[bot] in #275
fix(cache): replace , in MISE_ENV with - by @risu729 in #278
chore(deps): update github/codeql-action digest to 64d10c1 by @renovate[bot] in #279
chore(deps): update dependency typescript to v5.9.3 by @renovate[bot] in #280
feat: use self-update to modify version if mise is already installed by @ImpSy in #277
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #283
chore(deps): lock file maintenance by @renovate[bot] in #268
chore: release v3.3.0 by @mise-en-dev in #284

New Contributors

@ImpSy made their first contribution in #277
@mise-en-dev made their first contribution in #284

Full Changelog: jdx/mise-action@v3.2.0...v3.3.0

step-security/harden-runner (step-security/harden-runner)

`v2.20.0`

Compare Source

What's Changed

Support for block policy for MacOS and Windows GitHub-hosted runners
Support for Bitrise MacOS GitHub Actions runners
HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

`v2.19.4`

Compare Source

What's Changed

Improvements for HTTPS Monitoring for the Enterprise tier of Harden Runner

Full Changelog: step-security/harden-runner@v2.19.3...v2.19.4

`v2.19.3`

Compare Source

What's Changed

Default to audit mode when api-key missing with use-policy-store by @varunsh-coder in #665

Full Changelog: step-security/harden-runner@v2.19.2...v2.19.3

`v2.19.2`

Compare Source

What's Changed

Update the Harden Runner agent for enterprise tier to use go 1.26 and fix minor bugs.

Full Changelog: step-security/harden-runner@v2.19.1...v2.19.2

`v2.19.1`

Compare Source

What's Changed

fix: detect ubuntu-slim runners early and bail out by @devantler in #657

What the fix changes

Harden-Runner will detect ubuntu-slim runners and exit cleanly with an informational log message, instead of post harden runner step failing on chown: invalid user: 'undefined'.

What the fix does not do

Jobs running on ubuntu-slim will not be monitored by Harden-Runner. The agent relies on kernel-level features (that require elevated capabilities).
Per GitHub's docs on single-CPU runners: "The container for ubuntu-slim runners runs in unprivileged mode. This means that some operations requiring elevated privileges such as mounting file systems, using Docker-in-Docker, or accessing low-level kernel features are not supported." Those low-level kernel features are what the agent needs, so monitoring inside the unprivileged container is not feasible today.

For StepSecurity enterprise customers
If your security posture requires that workflows are always monitored, you can block the use of ubuntu-slim via workflow run policies see the Runner Label Policy docs. This lets you enforce that jobs only run on monitored runner types.

New Contributors

@devantler made their first contribution in #657

Full Changelog: step-security/harden-runner@v2.19.0...v2.19.1

Configuration

📅 Schedule: (in timezone CET)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

hashicorp-vault-sonar-prod · 2026-03-11T12:12:19Z

Renovate Jira issue ID: BUILD-10660

sonarqubecloud · 2026-03-11T12:13:32Z

SonarQube reviewer guide

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 Dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2026-07-17T03:23:48Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate Bot requested a review from a team March 11, 2026 12:12

renovate Bot force-pushed the renovate/github-actions-dependencies branch from 6d8ba1b to c24bff0 Compare July 8, 2026 17:59

renovate Bot requested a review from a team as a code owner July 8, 2026 17:59

renovate Bot changed the title ~~chore(deps): update github actions dependencies~~ Update GitHub Actions dependencies Jul 8, 2026

renovate Bot force-pushed the renovate/github-actions-dependencies branch from c24bff0 to 4f12798 Compare July 12, 2026 19:55

Update GitHub Actions dependencies

15f9263

renovate Bot force-pushed the renovate/github-actions-dependencies branch from 4f12798 to 15f9263 Compare July 17, 2026 03:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update GitHub Actions dependencies#93

Update GitHub Actions dependencies#93
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github-actions-dependencies

renovate Bot commented Mar 11, 2026 •

edited by atlassian Bot

Loading

Uh oh!

hashicorp-vault-sonar-prod Bot commented Mar 11, 2026 •

edited by atlassian Bot

Loading

Uh oh!

sonarqubecloud Bot commented Mar 11, 2026

Uh oh!

sonarqubecloud Bot commented Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 11, 2026 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Dependency Updates

Internal & Chores

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

hashicorp-vault-sonar-prod Bot commented Mar 11, 2026 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

sonarqubecloud Bot commented Mar 11, 2026

SonarQube reviewer guide

Quality Gate passed

Uh oh!

sonarqubecloud Bot commented Jul 17, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 11, 2026 •

edited by atlassian Bot

Loading

hashicorp-vault-sonar-prod Bot commented Mar 11, 2026 •

edited by atlassian Bot

Loading