chore(deps): update github actions by renovate[bot] · Pull Request #63 · enddzone/servestead

renovate · 2026-07-21T05:26:01Z

This PR contains the following updates:

Package	Type	Update	Change
actions/attest-build-provenance	action	minor	`v4.1.1` → `v4.2.2`
actions/checkout	action	patch	`v7.0.0` → `v7.0.1`
docker/login-action	action	minor	`v4.4.0` → `v4.6.0`
docker/setup-buildx-action	action	minor	`v4.2.0` → `v4.3.0`
github/codeql-action	action	patch	`v4.37.1` → `v4.37.8`
renovatebot/github-action	action	minor	`v46.1.19` → `v46.2.2`

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

`v4.2.2`

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group by @dependabot[bot] in #862

Full Changelog: actions/attest-build-provenance@v4.1.1...v4.2.2

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

docker/login-action (docker/login-action)

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in #595
Bump brace-expansion from 1.1.13 to 1.1.18 in #600
Bump js-yaml from 5.2.0 to 5.3.0 in #585
Bump postcss from 8.5.10 to 8.5.25 in #598
Bump undici from 6.27.0 to 6.28.0 in #601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

github/codeql-action (github/codeql-action)

`v4.37.8`

Compare Source

`v4.37.7`

Compare Source

Update default CodeQL bundle version to 2.26.3. #4085

`v4.37.6`

Compare Source

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

`v4.37.5`

Compare Source

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

`v4.37.4`

Compare Source

`v4.37.3`

Compare Source

No user facing changes.

`v4.37.2`

Compare Source

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

renovatebot/github-action (renovatebot/github-action)

`v46.2.2`

Compare Source

Documentation

update references to renovatebot/github-action to v46.2.1 (7cb7826)

Miscellaneous Chores

deps: update dependency globals to v17.9.0 (fe8cd8f)
deps: update dependency lint-staged to v17.3.0 (0170d05)
deps: update dependency npm-run-all2 to v9.0.3 (28cc32f)
deps: update node.js to v24.19.0 (7871c30)
deps: update pnpm/action-setup action to v6.0.10 (d50b9ec)

Build System

deps: lock file maintenance (aff7566)

Continuous Integration

deps: update ghcr.io/renovatebot/renovate docker tag to v44.10.0 (06d3a61)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.0 (01f82e1)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.1 (cbdd6e6)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.3 (b198ad1)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.4 (08eadc2)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.6 (90ab0cf)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.8 (7450504)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.12.0 (7e359f7)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.13.1 (8a0db28)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.13.2 (aaca99e)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.13.3 (a0789b3)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.1 (3c34056)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.10 (e7b39a3)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.12 (043e499)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.3 (#1069) (c2d39c0)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.5 (ed777cd)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.7 (670a1df)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.8 (b057f09)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.16.1 (7b73ff6)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.0 (28c55b1)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.1 (216aee1)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.4 (9d9a18a)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.8.0 (a339330)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.8.1 (f82ef19)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.9.2 (2a6f771)

`v46.2.1`

Compare Source

Documentation

update references to renovatebot/github-action to v46.2.0 (b48aa6c)

Miscellaneous Chores

deps: update dependency globals to v17.8.0 (3e46bd7)
deps: update dependency lint-staged to v17.2.0 (9c685f2)
deps: update node.js to v24.18.1 (f525256)

Build System

deps: lock file maintenance (3d8211a)

Continuous Integration

deps: update ghcr.io/renovatebot/renovate docker tag to v44.0.1 (d471d52)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.2.1 (5cb64df)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.2.2 (a6b5808)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.2.3 (ab4d1eb)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.3.0 (a427843)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.3.3 (2ac8329)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.0 (7665449)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.2 (0166c9f)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.3 (8662b55)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.5 (1e71262)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.6 (7bec40c)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.0 (d146e8b)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.1 (ddd5dca)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.2 (0731dab)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.3 (700f3b5)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.6.0 (7edb80e)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.0 (127e8ef)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.1 (f7532d1)
deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.2 (0fcd35b)
deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.29.0 (#1068) (581f6ac)
deps: update zizmorcore/zizmor-action action to v0.6.2 (e36e81c)

`v46.2.0`

Compare Source

Features

deps: Update ghcr.io/renovatebot/renovate Docker tag to v44 (#1067) (efa6654)

Documentation

update references to renovatebot/github-action to v46.1.21 (66c62f6)

Miscellaneous Chores

deps: update dependency lint-staged to v17.1.1 (403000c)
deps: update dependency prettier to v3.9.6 (6787cf2)
deps: update dependency typescript-eslint to v8.65.0 (656e12f)

Continuous Integration

deps: update ghcr.io/renovatebot/renovate docker tag to v43.283.0 (560e916)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.284.0 (92c373e)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.284.1 (b0f9fee)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.0 (bfb9d5d)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.3 (91ba9dc)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.4 (e41061b)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.6 (e8a7a1c)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.7 (7a22a55)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.286.0 (7590e1e)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.286.1 (cae6616)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.287.0 (#1066) (4f87158)

`v46.1.21`

Compare Source

Documentation

mention that GITHUB_TOKEN can be used (#1064) (13e8ee8)
update references to actions/checkout to v6.1.0 (fab6a17)
update references to renovatebot/github-action to v46.1.20 (9296462)

Miscellaneous Chores

deps: update dependency lint-staged to v17.1.0 (f528fd4)
deps: update dependency semantic-release to v25.0.7 (8771fb6)
deps: update dependency semantic-release to v25.0.8 (9efb0fc)
deps: update dependency typescript-eslint to v8.64.0 (4eed979)

Build System

deps: lock file maintenance (6e7b049)

Continuous Integration

deps: update actions/checkout action to v6.1.0 (c4fc050)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.1 (9355a07)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.3 (91aae03)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.4 (be1b582)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.5 (1885f40)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.6 (99c53af)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.9 (3946100)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.273.0 (143ca70)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.274.0 (b25398a)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.0 (d84cbc1)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.1 (42a4757)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.2 (f53dbc7)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.277.0 (091f8fd)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.277.1 (c5ab157)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.2 (0ffec41)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.3 (9586883)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.4 (a571ddf)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.5 (b018556)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.279.0 (f5099e2)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.279.1 (0a6a7a9)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.0 (c97e3db)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.2 (b8f0962)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.3 (1194ce5)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.4 (2fbf14d)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.5 (9f45e34)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.281.0 (e1ffcae)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.281.1 (8ebe465)
deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.28.0 (#1065) (05b68f0)
deps: update zizmorcore/zizmor-action action to v0.6.1 (344a7d4)

`v46.1.20`

Compare Source

Documentation

recommend custom environment prefix (#1063) (f56eac1)
update references to renovatebot/github-action to v46.1.19 (6fe62a1)
use official cache actions (#1057) (ad1a024)

Miscellaneous Chores

deps: update actions/setup-node action to v6.5.0 (cbedd5e)
deps: update dependency @types/node to v24.13.3 (#1060) (5c068a8)
deps: update dependency prettier to v3.9.5 (f8141d2)
deps: update dependency semantic-release to v25.0.6 (396e45b)
deps: update dependency typescript-eslint to v8.63.0 (66615be)
deps: update linters to v9.39.5 (a03a325)
deps: update pnpm to v10.34.5 (05421e6)

Build System

deps: lock file maintenance (f0e6951)

Continuous Integration

deps: update ghcr.io/renovatebot/renovate docker tag to v43.260.3 (2f29148)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.261.3 (6991c7e)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.261.4 (4790ba3)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.262.1 (95a5e84)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.262.2 (5b019c4)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.0 (9bbc4d2)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.1 (b8172a3)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.3 (baf9d38)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.4 (334f4bb)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.5 (4110e54)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.6 (#1059) (70337d5)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.7 (#1061) (dc96e2f)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.263.9 (#1062) (eaa2576)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.264.0 (e89ff47)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.264.2 (8642046)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.265.0 (48f0836)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.265.1 (91edce1)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.265.2 (cf1a1a6)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.265.3 (fcade71)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.265.4 (c306fcf)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.268.2 (fc26d44)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.268.4 (d6e8156)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.269.1 (a97d0cf)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.269.2 (073b661)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.270.0 (cfb0cc7)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.270.1 (1305074)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.270.2 (f081e03)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.271.1 (9c6abfa)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.271.2 (35e7e2a)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.271.3 (b4908da)
deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.0 (73ff369)
deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.27.0 (#1058) (c571c24)
deps: update zizmorcore/zizmor-action action to v0.6.0 (336e806)

Configuration

📅 Schedule: (in timezone America/Chicago)

Branch creation
- "before 6am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026

renovate Bot force-pushed the renovate/github-actions branch 6 times, most recently from 300a1f3 to ce85b51 Compare July 28, 2026 09:13

renovate Bot force-pushed the renovate/github-actions branch 5 times, most recently from 22a6ce2 to 6d955ff Compare August 4, 2026 18:39

renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 00fab3a to 5371d6f Compare August 13, 2026 18:46

renovate Bot force-pushed the renovate/github-actions branch from 5371d6f to 15b6481 Compare August 19, 2026 16:54

chore(deps): update github actions

0f6a99a

renovate Bot force-pushed the renovate/github-actions branch from 15b6481 to 0f6a99a Compare August 21, 2026 16:38

Navigation Menu

Uh oh!

chore(deps): update github actions - #63

chore(deps): update github actions#63
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

renovate Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Documentation

Miscellaneous Chores

Build System

Continuous Integration

Documentation

Miscellaneous Chores

Build System

Continuous Integration

Features

Documentation

Miscellaneous Chores

Continuous Integration

Documentation

Miscellaneous Chores

Build System

Continuous Integration

Documentation

Miscellaneous Chores

Build System

Continuous Integration

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 21, 2026 •

edited

Loading