chore(deps): update github workflow dependencies #1709

renovate · 2026-01-01T04:31:03Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	patch	`v2.2.0` → `v2.2.1`
actions/setup-node	action	minor	`v6.0.0` → `v6.1.0`
actions/setup-python	action	minor	`v5` → `v5.6.0`
codecov/codecov-action	action	patch	`v5.5.1` → `v5.5.2`
docker/setup-buildx-action	action	minor	`v3.7.1` → `v3.12.0`
dtolnay/rust-toolchain	action	digest	`6d653ac` → `f7ccc83`
github/codeql-action	action	patch	`v4.31.6` → `v4.31.9`
go	uses-with	patch	`1.25.4` → `1.25.5`
python	uses-with	minor	`3.11` → `3.14`
step-security/harden-runner	action	minor	`v2.13.2` → `v2.14.0`
taiki-e/install-action	action	minor	`v2.62.60` → `v2.65.12`

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

actions/setup-node (actions/setup-node)

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

actions/setup-python (actions/setup-python)

`v5.6.0`

Compare Source

What's Changed

Workflow updates related to Ubuntu 20.04 by @aparnajyothi-y in #1065
Fix for Candidate Not Iterable Error by @aparnajyothi-y in #1082
Upgrade semver and @types/semver by @dependabot in #1091
Upgrade prettier from 2.8.8 to 3.5.3 by @dependabot in #1046
Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in #1081

Full Changelog: actions/setup-python@v5...v5.6.0

`v5.5.0`

Compare Source

What's Changed

Enhancements:

Support free threaded Python versions like '3.13t' by @colesbury in #973
Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @action/cache from 4.0.0 to 4.0.3 by @priya-kinthali in #1056
Add support for .tool-versions file in setup-python by @mahabaleshwars in #1043

Bug fixes:

Fix architecture for pypy on Linux ARM64 by @mayeut in #1011
This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1016
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1015

New Contributors

@colesbury made their first contribution in #973
@mahabaleshwars made their first contribution in #1043

Full Changelog: actions/setup-python@v5...v5.5.0

`v5.4.0`

Compare Source

What's Changed

Enhancements:

Update cache error message by @aparnajyothi-y in #968
Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @priya-kinthali in #985
Configure Dependabot settings by @HarithaVattikuti in #1008

Documentation changes:

Readme update - recommended permissions by @benwells in #1009
Improve Advanced Usage examples by @lrq3000 in #645

Dependency updates:

Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #1012
Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @dependabot in #895
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #1014
Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in #1020
Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @dependabot in #1019
Upgrade @actions/cache to ^4.0.0 by @priyagupta108 in #1007

New Contributors

@benwells made their first contribution in #1009
@HarithaVattikuti made their first contribution in #1008
@lrq3000 made their first contribution in #645

Full Changelog: actions/setup-python@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #941
Upgrade IA publish by @Jcambass in #943

Bug Fixes:

Normalise Line Endings to Ensure Cross-Platform Consistency by @priya-kinthali in #938
Revise isGhes logic by @jww3 in #963
Bump pillow from 7.2 to 10.2.0 by @aparnajyothi-y in #956

Enhancements:

Enhance workflows and documentation updates by @priya-kinthali in #965
Bump default versions to latest by @jeffwidman in #905

New Contributors

@Jcambass made their first contribution in #941
@jww3 made their first contribution in #963

Full Changelog: actions/setup-python@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Bug fixes:

Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @priyagupta108 in #916
This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
Add arch to cache key by @Zxilly in #896
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.

Documentation changes:

Fix display of emojis in contributors doc by @sciencewhiz in #899
Documentation update for caching poetry dependencies by @gowridurgad in #908

Dependency updates:

Bump @iarna/toml version from 2.2.5 to 3.0.0 by @priya-kinthali in #912
Bump pyinstaller from 3.6 to 5.13.1 by @aparnajyothi-y in #923

New Contributors

@sciencewhiz made their first contribution in #899
@priyagupta108 made their first contribution in #916
@Zxilly made their first contribution in #896
@aparnajyothi-y made their first contribution in #923

Full Changelog: actions/setup-python@v5...v5.2.0

`v5.1.1`

Compare Source

What's Changed

Bug fixes:

fix(ci): update all failing workflows by @mayeut in #863
This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

Documentation update for cache by @gowridurgad in #873

Dependency updates:

Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @dependabot in #893

New Contributors

@gowridurgad made their first contribution in #873

Full Changelog: actions/setup-python@v5...v5.1.1

`v5.1.0`

Compare Source

What's Changed

Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @Shegox in #766.
Dependency updates by @dependabot and @HarithaVattikuti in #817
Documentation changes for version in README by @basnijholt in #776
Documentation changes for link in README by @ukd1 in #793
Documentation changes for link in Advanced Usage by @Jamim in #782
Documentation changes for avoiding rate limit issues on GHES by @priya-kinthali in #835

New Contributors

@basnijholt made their first contribution in #776
@ukd1 made their first contribution in #793
@Jamim made their first contribution in #782
@Shegox made their first contribution in #766
@priya-kinthali made their first contribution in #835

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

codecov/codecov-action (codecov/codecov-action)

`v5.5.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.12.0`

Compare Source

Deprecate install input by @crazy-max in #455
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #434
Bump brace-expansion from 1.1.11 to 1.1.12 in #436
Bump form-data from 2.5.1 to 2.5.5 in #432
Bump undici from 5.28.4 to 5.29.0 in #435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

`v3.11.1`

Compare Source

Fix keep-state not being respected by @crazy-max in #429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

`v3.11.0`

Compare Source

Keep BuildKit state support by @crazy-max in #427
Remove aliases created when installing by default by @hashhar in #139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #422 #425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

`v3.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in #408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

`v3.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.48.0 to 0.54.0 in #402 #404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

`v3.8.0`

Compare Source

Make cloud prefix optional to download buildx if driver is cloud by @crazy-max in #390
Bump @actions/core from 1.10.1 to 1.11.1 in #370
Bump @docker/actions-toolkit from 0.39.0 to 0.48.0 in #389
Bump cross-spawn from 7.0.3 to 7.0.6 in #382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

github/codeql-action (github/codeql-action)

`v4.31.9`

Compare Source

`v4.31.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

actions/go-versions (go)

`v1.25.5`: 1.25.5

Compare Source

Go 1.25.5

actions/python-versions (python)

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

`v3.13.11`: 3.13.11

Compare Source

Python 3.13.11

`v3.13.10`: 3.13.10

Compare Source

Python 3.13.10

`v3.13.9`: 3.13.9

Compare Source

Python 3.13.9

`v3.13.8`: 3.13.8

Compare Source

Python 3.13.8

`v3.13.7`: 3.13.7

Compare Source

Python 3.13.7

`v3.13.6`: 3.13.6

Compare Source

Python 3.13.6

`v3.13.5`: 3.13.5

Compare Source

Python 3.13.5

`v3.13.4`: 3.13.4

Compare Source

Python 3.13.4

`v3.13.3`: 3.13.3

Compare Source

Python 3.13.3

`v3.13.2`: 3.13.2

Compare Source

Python 3.13.2

`v3.13.1`: 3.13.1

Compare Source

Python 3.13.1

`v3.13.0`: 3.13.0

Compare Source

Python 3.13.0

`v3.12.12`: 3.12.12

Compare Source

Python 3.12.12

`v3.12.11`: 3.12.11

Compare Source

Python 3.12.11

`v3.12.10`: 3.12.10

Compare Source

Python 3.12.10

`v3.12.9`: 3.12.9

Compare Source

Python 3.12.9

`v3.12.8`: 3.12.8

Compare Source

Python 3.12.8

`v3.12.7`: 3.12.7

Compare Source

Python 3.12.7

`v3.12.6`: 3.12.6

Compare Source

Python 3.12.6

`v3.12.5`: 3.12.5

Compare Source

Python 3.12.5

`v3.12.4`: 3.12.4

Compare Source

Python 3.12.4

`v3.12.3`: 3.12.3

Compare Source

Python 3.12.3

`v3.12.2`: 3.12.2

Compare Source

Python 3.12.2

`v3.12.1`: 3.12.1

Compare Source

Python 3.12.1

`v3.12.0`: 3.12.0

Compare Source

Python 3.12.0

step-security/harden-runner (step-security/harden-runner)

`v2.14.0`

Compare Source

What's Changed

Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0

`v2.13.3`

Compare Source

What's Changed

Fixed an issue where process events were not uploaded in certain edge cases.

Full Changelog: step-security/harden-runner@v2.13.2...v2.13.3

taiki-e/install-action (taiki-e/install-action)

`v2.65.12`

Compare Source

Initial release

Configuration

📅 Schedule: Branch creation - "before 8am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-01-01T04:34:02Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.84%. Comparing base (1af4d28) to head (911eb9e).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1709      +/-   ##
==========================================
- Coverage   84.08%   83.84%   -0.24%     
==========================================
  Files         467      464       -3     
  Lines      137359   134434    -2925     
==========================================
- Hits       115500   112721    -2779     
+ Misses      21325    21179     -146     
  Partials      534      534

Components	Coverage Δ
otap-dataflow	`85.02% <ø> (-0.34%)`	⬇️
query_abstraction	`80.61% <ø> (ø)`
query_engine	`90.39% <ø> (ø)`
syslog_cef_receivers	`∅ <ø> (∅)`
otel-arrow-go	`53.50% <ø> (ø)`

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate bot added the dependencies Pull requests that update a dependency file label Jan 1, 2026

renovate bot requested a review from a team as a code owner January 1, 2026 04:31

github-project-automation bot added this to OTel-Arrow Jan 1, 2026

github-actions bot added the ci-repo Repository maintenance, build, GH workflows, repo cleanup, or other chores label Jan 1, 2026

renovate bot force-pushed the renovate/github-workflow-dependencies branch from 577c987 to 7ba1868 Compare January 1, 2026 16:39

chore(deps): update github workflow dependencies

911eb9e

renovate bot force-pushed the renovate/github-workflow-dependencies branch from 7ba1868 to 911eb9e Compare January 2, 2026 12:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github workflow dependencies #1709

chore(deps): update github workflow dependencies #1709

renovate bot commented Jan 1, 2026 •

edited

Loading

Uh oh!

codecov bot commented Jan 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update github workflow dependencies #1709

Are you sure you want to change the base?

chore(deps): update github workflow dependencies #1709

Conversation

renovate bot commented Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Enhancements:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug Fixes:

Enhancements:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

New Contributors

What's Changed

CodeQL Action Changelog

4.31.8 - 11 Dec 2025

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

v1.25.5: 1.25.5

v3.14.2: 3.14.2

v3.14.1: 3.14.1

v3.14.0: 3.14.0

v3.13.11: 3.13.11

v3.13.10: 3.13.10

v3.13.9: 3.13.9

v3.13.8: 3.13.8

v3.13.7: 3.13.7

v3.13.6: 3.13.6

v3.13.5: 3.13.5

v3.13.4: 3.13.4

v3.13.3: 3.13.3

v3.13.2: 3.13.2

v3.13.1: 3.13.1

v3.13.0: 3.13.0

v3.12.12: 3.12.12

v3.12.11: 3.12.11

v3.12.10: 3.12.10

v3.12.9: 3.12.9

v3.12.8: 3.12.8

v3.12.7: 3.12.7

v3.12.6: 3.12.6

v3.12.5: 3.12.5

v3.12.4: 3.12.4

v3.12.3: 3.12.3

v3.12.2: 3.12.2

v3.12.1: 3.12.1

v3.12.0: 3.12.0

What's Changed

What's Changed

Configuration

Uh oh!

codecov bot commented Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

renovate bot commented Jan 1, 2026 •

edited

Loading

`v1.25.5`: 1.25.5

`v3.14.2`: 3.14.2

`v3.14.1`: 3.14.1

`v3.14.0`: 3.14.0

`v3.13.11`: 3.13.11

`v3.13.10`: 3.13.10

`v3.13.9`: 3.13.9

`v3.13.8`: 3.13.8

`v3.13.7`: 3.13.7

`v3.13.6`: 3.13.6

`v3.13.5`: 3.13.5

`v3.13.4`: 3.13.4

`v3.13.3`: 3.13.3

`v3.13.2`: 3.13.2

`v3.13.1`: 3.13.1

`v3.13.0`: 3.13.0

`v3.12.12`: 3.12.12

`v3.12.11`: 3.12.11

`v3.12.10`: 3.12.10

`v3.12.9`: 3.12.9

`v3.12.8`: 3.12.8

`v3.12.7`: 3.12.7

`v3.12.6`: 3.12.6

`v3.12.5`: 3.12.5

`v3.12.4`: 3.12.4

`v3.12.3`: 3.12.3

`v3.12.2`: 3.12.2

`v3.12.1`: 3.12.1

`v3.12.0`: 3.12.0

codecov bot commented Jan 1, 2026 •

edited

Loading