Update GitHub actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v6 → v7
actions/download-artifact	action	major	v7 → v8
actions/setup-python	action	major	v6 → v7
canonical/data-platform-workflows	action	major	v49.0.1 → v50.2.1

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​2475
• Bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​2477
• Bump docker/build-push-action from 6.5.0 to 7.2.0 by @​dependabot[bot] in #​2478
• Bump docker/login-action from 3.3.0 to 4.2.0 by @​dependabot[bot] in #​2479
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​2488
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​2476
• eslint 9 by @​dependabot[bot] in #​2474
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot[bot] in #​2499
• skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• escape values passed to --unset by @​aiqiaoy in #​2530

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

actions/download-artifact (actions/download-artifact)

v8.0.1

Compare Source

What's Changed

• Support for CJK characters in the artifact name by @​danwkennedy in #​471
• Add a regression test for artifact name + content-type mismatches by @​danwkennedy in #​472

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

Compare Source

v8 - What's new

[!IMPORTANT]
actions/download-artifact@​v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

• Don't attempt to un-zip non-zipped downloads by @​danwkennedy in #​460
• Add a setting to specify what to do on hash mismatch and default it to error by @​danwkennedy in #​461

Full Changelog: actions/download-artifact@v7...v8.0.0

v8

Compare Source

actions/setup-python (actions/setup-python)

v7.0.0

Compare Source

v7

Compare Source

canonical/data-platform-workflows (canonical/data-platform-workflows)

v50.2.1

Compare Source

What's Changed

• patch(_promote_snaps.yaml): Fix risk comparison by @​sinclert-canonical in #​379

Full Changelog: canonical/data-platform-workflows@v50.2.0...v50.2.1

v50.2.0

Compare Source

What's Changed

• compatible(_promote_snaps.yaml): Define new workflow by @​sinclert-canonical in #​377

Full Changelog: canonical/data-platform-workflows@v50.1.0...v50.2.0

v50.1.0

Compare Source

What's Changed

• compatible(build_snap.yaml): Make build-timeout configurable by @​astrojuanlu in #​375

Full Changelog: canonical/data-platform-workflows@v50.0.1...v50.1.0

v50.0.1

Compare Source

What's Changed

• patch: Ignore actionlint false positive for job.workflow_sha by @​astrojuanlu in #​376

Full Changelog: canonical/data-platform-workflows@v50.0.0...v50.0.1

v50.0.0

Compare Source

What's Changed

• breaking: Remove get-workflow-version-action by @​carlcsaposs-canonical in #​374

Full Changelog: canonical/data-platform-workflows@v49.0.5...v50.0.0

Migration instructions

Remove

      actions: read  # Needed for GitHub API call to get workflow version

from permissions for all workflows.

If no permissions are left, use

    permissions: {}

v50

Compare Source

v49.0.5

Compare Source

What's Changed

• patch: Update GitHub actions (major) by @​renovate[bot] in #​373

Full Changelog: canonical/data-platform-workflows@v49.0.4...v49.0.5

v49.0.4

Compare Source

What's Changed

• patch(release_charm_*.yaml): Capture tcpdump to debug Charmhub issue by @​carlcsaposs-canonical in #​372

Full Changelog: canonical/data-platform-workflows@v49.0.3...v49.0.4

v49.0.3

Compare Source

What's Changed

• patch(build_rock.yaml): Extend rock build timeout by @​MylesJP in #​371

New Contributors

• @​MylesJP made their first contribution in #​371

Full Changelog: canonical/data-platform-workflows@v49.0.2...v49.0.3

v49.0.2

Compare Source

What's Changed

• patch(tag_charm_edge.yaml): Fix initial no tag detection by @​carlcsaposs-canonical in #​370

Full Changelog: canonical/data-platform-workflows@v49.0.1...v49.0.2

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 01:00 AM and 07:59 AM, only on Tuesday (* 1-7 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.