[dependencies] Update github-actions (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	v3 → v6
actions/checkout	action	major	v4 → v7
actions/setup-go	action	major	v5 → v6
actions/setup-go	action	major	v4 → v6
golangci/golangci-lint-action	action	major	v3 → v9

---

Release Notes

actions/cache (actions/cache)

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

v5.0.5

Compare Source

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in #​1747

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

What's Changed

• Add release instructions and update maintainer docs by @​Link- in #​1696
• Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @​Link- in #​1697
• Fix workflow permissions and cleanup workflow names / formatting by @​Link- in #​1699
• docs: Update examples to use the latest version by @​XZTDean in #​1690
• Fix proxy integration tests by @​Link- in #​1701
• Fix cache key in examples.md for bun.lock by @​RyPeck in #​1722
• Update dependencies & patch security vulnerabilities by @​Link- in #​1738

New Contributors

• @​XZTDean made their first contribution in #​1690
• @​RyPeck made their first contribution in #​1722

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

v5.0.2: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

v5.0.1

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

---

v5.0.1

What's Changed

• fix: update @​actions/cache for Node.js 24 punycode deprecation by @​salmanmkc in #​1685
• prepare release v5.0.1 by @​salmanmkc in #​1686

v5.0.0

What's Changed

• Upgrade to use node24 by @​salmanmkc in #​1630
• Prepare v5.0.0 release by @​salmanmkc in #​1684

Full Changelog: actions/cache@v5...v5.0.1

v5.0.0

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

---

What's Changed

• Upgrade to use node24 by @​salmanmkc in #​1630
• Prepare v5.0.0 release by @​salmanmkc in #​1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

v5

Compare Source

v4.3.0

Compare Source

What's Changed

• Add note on runner versions by @​GhadimiR in #​1642
• Prepare v4.3.0 release by @​Link- in #​1655

New Contributors

• @​GhadimiR made their first contribution in #​1642

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed

• Update README.md by @​nebuk89 in #​1620
• Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @​Link- in #​1634
• Prepare release 4.2.4 by @​Link- in #​1636

New Contributors

• @​nebuk89 made their first contribution in #​1620

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

Compare Source

What's Changed

• Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in #​1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

• @​salmanmkc made their first contribution in #​1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

• Bump @​actions/cache to v4.0.2 by @​robherley in #​1560

Full Changelog: actions/cache@v4.2.1...v4.2.2

v4.2.1

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

• docs: GitHub is spelled incorrectly in caching-strategies.md by @​janco-absa in #​1526
• docs: Make the "always save prime numbers" example more clear by @​Tobbe in #​1525
• Update force deletion docs due a recent deprecation by @​sebbalex in #​1500
• Bump @​actions/cache to v4.0.1 by @​robherley in #​1554

New Contributors

• @​janco-absa made their first contribution in #​1526
• @​Tobbe made their first contribution in #​1525
• @​sebbalex made their first contribution in #​1500

Full Changelog: actions/cache@v4.2.0...v4.2.1

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

• @​actions/core: 1.11.1
• @​actions/io: 1.1.3
• @​vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4.1.2...v4.2.0

v4.1.2

Compare Source

What's Changed

• Add Bun example by @​idleberg in #​1456
• Revise isGhes logic by @​jww3 in #​1474
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in #​1475
• Add dependabot.yml to enable automatic dependency upgrades by @​Link- in #​1476
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1478
• Bump actions/stale from 3 to 9 by @​dependabot in #​1479
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1483
• Bump actions/setup-node from 3 to 4 by @​dependabot in #​1481
• Prepare 4.1.2 release by @​Link- in #​1477

New Contributors

• @​idleberg made their first contribution in #​1456
• @​jww3 made their first contribution in #​1474
• @​Link- made their first contribution in #​1476

Full Changelog: actions/cache@v4.1.1...v4.1.2

v4.1.1

Compare Source

What's Changed

• Restore original behavior of cache-hit output by @​joshmgross in #​1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed

• Fix cache-hit output when cache missed by @​fchimpan in #​1404
• Deprecate save-always input by @​joshmgross in #​1452

New Contributors

• @​ottlinger made their first contribution in #​1437
• @​Olegt0rr made their first contribution in #​1377
• @​fchimpan made their first contribution in #​1404
• @​x612skm made their first contribution in #​1434
• @​todgru made their first contribution in #​1311
• @​Jcambass made their first contribution in #​1463
• @​mackey0225 made their first contribution in #​1462
• @​quatquatt made their first contribution in #​1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

v4.0.2

Compare Source

What's Changed

• Fix fail-on-cache-miss not working by @​cdce8p in #​1327

Full Changelog: actions/cache@v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed

• Update README.md by @​yacaovsnc in #​1304
• Update examples by @​yacaovsnc in #​1305
• Update actions/cache publish flow by @​bethanyj28 in #​1340
• Update @​actions/cache by @​bethanyj28 in #​1341

New Contributors

• @​yacaovsnc made their first contribution in #​1304

Full Changelog: actions/cache@v4...v4.0.1

v4.0.0

Compare Source

What's Changed

• Update action to node20 by @​takost in #​1284
• feat: save-always flag by @​to-s in #​1242

New Contributors

• @​takost made their first contribution in #​1284
• @​to-s made their first contribution in #​1242

Full Changelog: actions/cache@v3...v4.0.0

v4

Compare Source

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327

v6.0.0

Compare Source

• Persist creds to a separate file by @​ericsciple in #​2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in #​2248

v6

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v5.0.1

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

v5.0.0

Compare Source

• Update actions checkout to use node 24 by @​salmanmkc in #​2226

v5

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

v6.4.0

Compare Source

What's Changed

Enhancement

• Add go-download-base-url input for custom Go distributions by @​gdams in #​721

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​727

Documentation update

• Rearrange README.md, add advanced-usage.md by @​priyagupta108 in #​724
• Fix Microsoft build of Go link by @​gdams in #​734

New Contributors

• @​gdams made their first contribution in #​721

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

Compare Source

What's Changed

• Update default Go module caching to use go.mod by @​priyagupta108 in #​705
• Fix golang download url to go.dev by @​178inaba in #​469

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

Compare Source

What's Changed

Enhancements

• Example for restore-only cache in documentation by @​aparnajyothi-y in #​696
• Update Node.js version in action.yml by @​ccoVeille in #​691
• Documentation update of actions/checkout by @​deining in #​683

Dependency updates

• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot in #​682
• Upgrade @​actions/cache to v5 by @​salmanmkc in #​695
• Upgrade actions/checkout from 5 to 6 by @​dependabot in #​686
• Upgrade qs from 6.14.0 to 6.14.1 by @​dependabot in #​703

New Contributors

• @​ccoVeille made their first contribution in #​691
• @​deining made their first contribution in #​683

Full Changelog: actions/setup-go@v6...v6.2.0

v6.1.0

Compare Source

What's Changed

Enhancements

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​nicholasngai in #​665
• Add support for .tool-versions file and update workflow by @​priya-kinthali in #​673
• Add comprehensive breaking changes documentation for v6 by @​mahabaleshwars in #​674

Dependency updates

• Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @​dependabot in #​617
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot in #​641
• Upgrade semver and @​types/semver by @​dependabot in #​652

New Contributors

• @​nicholasngai made their first contribution in #​665
• @​priya-kinthali made their first contribution in #​673
• @​mahabaleshwars made their first contribution in #​674

Full Changelog: actions/setup-go@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Breaking Changes

• Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @​matthewhughes934 in #​460
• Upgrade Nodejs runtime from node20 to node 24 by @​salmanmkc in #​624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot[bot] in #​589
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot[bot] in #​591
• Upgrade @​typescript-eslint/parser from 8.31.1 to 8.35.1 by @​dependabot[bot] in #​590
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in #​594
• Upgrade typescript from 5.4.2 to 5.8.3 by @​dependabot[bot] in #​538
• Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @​dependabot[bot] in #​603
• Upgrade form-data to bring in fix for critical vulnerability by @​matthewhughes934 in #​618
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in #​631

New Contributors

• @​matthewhughes934 made their first contribution in #​618
• @​salmanmkc made their first contribution in #​624

Full Changelog: actions/setup-go@v5...v6.0.0

v6

Compare Source

golangci/golangci-lint-action (golangci/golangci-lint-action)

v9.2.1

Compare Source

What's Changed

IMPORTANT: this is the first immutable release.

Changes

• chore: improve workflows by @​ldez in #​1394

Dependencies

• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1325
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1326
• build(deps): bump the dependencies group with 4 updates by @​dependabot[bot] in #​1327
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1328
• build(deps): bump @​types/node from 25.0.2 to 25.0.3 in the dependencies group by @​dependabot[bot] in #​1329
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1330
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1332
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1333
• build(deps): bump the dependencies group with 6 updates by @​dependabot[bot] in #​1334
• build(deps-dev): bump the dev-dependencies group with 4 updates by @​dependabot[bot] in #​1335
• build(deps): bump the dependencies group with 2 updates by @​dependabot[bot] in #​1336
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1337
• build(deps): bump @​types/node from 25.0.9 to 25.0.10 in the dependencies group by @​dependabot[bot] in #​1338
• build(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 by @​dependabot[bot] in #​1339
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1340
• build(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​1344
• build(deps): bump fast-xml-parser from 5.3.4 to 5.3.6 by @​dependabot[bot] in #​1346
• build(deps): bump minimatch by @​dependabot[bot] in #​1348
• build(deps): bump minimatch from 3.1.3 to 3.1.5 by @​dependabot[bot] in #​1350
• build(deps): bump fast-xml-parser from 5.3.6 to 5.4.1 by @​dependabot[bot] in #​1351
• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @​dependabot[bot] in #​1357
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @​dependabot[bot] in #​1358
• build(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @​dependabot[bot] in #​1359
• build(deps): bump picomatch from 4.0.3 to 4.0.4 by @​dependabot[bot] in #​1364
• build(deps): bump yaml from 2.8.2 to 2.8.3 by @​dependabot[bot] in #​1365
• build(deps): bump brace-expansion by @​dependabot[bot] in #​1370
• build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates by @​ldez in #​1374
• build(deps): bump github/codeql-action from 4 to 4.35.2 by @​dependabot[bot] in #​1384
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by @​dependabot[bot] in #​1386
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @​dependabot[bot] in #​1389
• build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @​dependabot[bot] in #​1391

Full Changelog: golangci/golangci-lint-action@v9.2.0...v9.2.1

v9.2.0

Compare Source

What's Changed

Changes

• feat: add version-file option by @​ldez in #​1320
• chore: move samples into fixtures by @​ldez in #​1321

Dependencies

• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1317
• build(deps): bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​1318
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1323
• build(deps): bump yaml from 2.8.1 to 2.8.2 in the dependencies group by @​dependabot[bot] in #​1324

Full Changelog: golangci/golangci-lint-action@v9.1.0...v9.2.0

v9.1.0

Compare Source

What's Changed

Changes

• feat: automatic module directories by @​ldez in #​1315

Documentation

• docs: organize options by @​ldez in #​1314

Dependencies

• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1307
• build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​1309
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1310
• build(deps): bump the dependencies group with 2 updates by @​dependabot[bot] in #​1311

Full Changelog: golangci/golangci-lint-action@v9.0.0...v9.1.0

v9.0.0

Compare Source

In the scope of this release, we change Nodejs runtime from node20 to node24 (https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/).

What's Changed

Changes

• feat: add install-only option by @​ldez in #​1305
• feat: support Module Plugin System by @​ldez in #​1306

Full Changelog: golangci/golangci-lint-action@v8.0.0...v9.0.0

v9

Compare Source

v8.0.0

Compare Source

Requires golangci-lint version >= v2.1.0

What's Changed

Changes

• feat: use absolute paths by default when using working-directory option by @​ldez in #​1231

Full Changelog: golangci/golangci-lint-action@v7...v8.0.0

v8

Compare Source

v7.0.1

Compare Source

What's Changed

Documentation

• docs: add note about github.workspace by @​mattjohnsonpint in #​1218
• docs: clarify that ’args: --path-mode=abs’ is needed for working-directory by @​HaraldNordgren in #​1230

Dependencies

• build(deps): bump the dependencies group across 1 directory with 3 updates by @​dependabot in #​1213
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot in #​1215
• build(deps-dev): bump the dev-dependencies group with 4 updates by @​dependabot in #​1220
• build(deps): bump @​types/node from 22.13.14 to 22.14.0 in the dependencies group by @​dependabot in #​1221
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot in #​1224
• build(deps): bump @​types/node from 22.14.0 to 22.14.1 in the dependencies group by @​dependabot in #​1225
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot in #​1227

New Contributors

• @​mattjohnsonpint made their first contribution in #​1218
• @​HaraldNordgren made their first contribution in #​1230

Full Changelog: golangci/golangci-lint-action@v7.0.0...v7.0.1

v7.0.0

Compare Source

⚠️ The GitHub Action v7 supports golangci-lint v2 only. ⚠️

What's Changed

Changes

• feat: golangci-lint v2 support by @​ldez in #​1198

Documentation

• docs: update annotation permissions by @​ldez in #​1203
• docs: fix checks permissions for annotations by @​kema-dev in #​1204

Dependencies

• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot in #​1207

New Contributors

• @​kema-dev made their first contribution in #​1204

Full Changelog: golangci/golangci-lint-action@v6.5.2...v7.0.0

v7

Compare Source

v6.5.2

Compare Source

What's Changed

Changes

• fix: update max version by @​ldez in #​1201

Dependencies

• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot in #​1199

Full Changelog: golangci/golangci-lint-action@v6.5.1...v6.5.2

v6.5.1

Compare Source

What's Changed

Changes

• fix: octokit retry by @​ldez in #​1193
• feat: restrict action v6 on golangci-lint v1 by @​ldez in #​1194

Documentation

• docs: add notes for annotation config by @​dveeden in #​1173
• docs: improve verify option explanation by @​ldez in #​1175

Dependencies

• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot in #​1177
• build(deps): bump the dependencies group with 2 updates by @​dependabot in #​1178
• build(deps): bump @​octokit/request from 8.4.0 to 8.4.1 by @​dependabot in #​1181
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot in #​1185
• build(deps): bump @​types/node from 22.13.4 to 22.13.5 in the dependencies group by [@​dependabot](https://redir

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.