Update GitHub Actions (major) by renovate[bot] · Pull Request #57 · CCPBioSim/biosimdb-interface

renovate · 2026-09-18T09:23:52Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	major	`v6.1.0` → `v7.0.1`
actions/checkout	action	major	`v4.4.0` → `v7.0.1`
actions/setup-python	action	major	`v6.3.0` → `v7.0.0`
docker/build-push-action	action	major	`v6.19.2` → `v7.4.0`
docker/login-action	action	major	`v3.7.0` → `v4.6.0`
docker/metadata-action	action	major	`v5.10.0` → `v6.2.0`
docker/setup-buildx-action	action	major	`v3.12.0` → `v4.3.0`	`v4.4.1` (+1)
docker/setup-qemu-action	action	major	`v3.7.0` → `v4.3.0`	`v4.4.0`

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

actions/setup-python (actions/setup-python)

`v7.0.0`

Compare Source

docker/build-push-action (docker/build-push-action)

`v7.4.0`

Compare Source

Use the shared error helper for Buildx commands by @crazy-max in #1620
Prevent workflow command injection in metadata logs by @crazy-max in #1617
Bump @docker/actions-toolkit from 0.92.0 to 0.100.0 in #1614 #1618 #1621
Bump @humanfs/node from 0.16.7 to 0.16.8 in #1609
Bump brace-expansion from 1.1.13 to 1.1.18 in #1592
Bump csv-parse from 7.0.0 to 7.0.2 in #1613
Bump js-yaml from 4.3.0 to 4.3.2 in #1605 #1615
Bump nanoid from 3.3.16 to 3.3.18 in #1611
Bump postcss from 8.5.10 to 8.5.25 in #1590
Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #1606
Bump sigstore from 4.1.0 to 4.1.1 in #1577
Bump undici from 6.27.0 to 6.28.0 in #1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

`v7.3.0`

Compare Source

`v7.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #1525
Bump @docker/actions-toolkit from 0.87.0 to 0.90.0 in #1517
Bump brace-expansion from 2.0.2 to 5.0.6 in #1534
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #1529
Bump fast-xml-parser from 5.5.7 to 5.8.0 in #1521
Bump postcss from 8.5.6 to 8.5.10 in #1526
Bump tar from 6.2.1 to 7.5.15 in #1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

`v7.1.0`

Compare Source

Git context query format support by @crazy-max in #1505
Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in #1505
Bump brace-expansion from 1.1.12 to 1.1.13 in #1500
Bump fast-xml-parser from 5.4.2 to 5.5.7 in #1489
Bump flatted from 3.3.3 to 3.4.2 in #1491
Bump glob from 10.3.12 to 10.5.0 in #1490
Bump handlebars from 4.7.8 to 4.7.9 in #1497
Bump lodash from 4.17.23 to 4.18.1 in #1510
Bump picomatch from 4.0.3 to 4.0.4 in #1496
Bump undici from 6.23.0 to 6.24.1 in #1486
Bump vite from 7.3.1 to 7.3.2 in #1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

`v7.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #1470
Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in #1473
Remove legacy export-build tool support for build summary by @crazy-max in #1474
Switch to ESM and update config/test wiring by @crazy-max in #1466
Bump @actions/core from 1.11.1 to 3.0.0 in #1454
Bump @docker/actions-toolkit from 0.62.1 to 0.79.0 in #1453 #1472 #1479
Bump minimatch from 3.1.2 to 3.1.5 in #1463

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

docker/login-action (docker/login-action)

Preserve names in esbuild bundle by @crazy-max in #1022
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
Bump js-yaml from 4.1.1 to 5.2.0 in #1028
Bump sigstore from 4.1.0 to 4.1.1 in #1031
Bump tmp from 0.2.5 to 0.2.7 in #1002
Bump undici from 6.24.1 to 6.27.0 in #1020
Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

docker/metadata-action (docker/metadata-action)

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #613
Bump brace-expansion from 1.1.12 to 5.0.6 in #658 #630
Bump csv-parse from 6.1.0 to 6.2.1 in #617
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #620
Bump flatted from 3.3.3 to 3.4.2 in #623
Bump glob from 10.3.15 to 10.5.0 in #621
Bump handlebars from 4.7.8 to 4.7.9 in #629
Bump lodash from 4.17.23 to 4.18.1 in #639
Bump moment-timezone from 0.6.0 to 0.6.1 in #619
Bump picomatch from 4.0.3 to 4.0.4 in #626
Bump postcss from 8.5.6 to 8.5.10 in #649
Bump tar from 6.2.1 to 7.5.15 in #657
Bump undici from 6.23.0 to 6.25.0 in #614
Bump vite from 7.3.1 to 7.3.2 in #637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

`v6.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #605
List inputs now preserve # inside values while still supporting full-line # comments by @crazy-max in #607
Switch to ESM and update config/test wiring by @crazy-max in #602
Bump lodash from 4.17.21 to 4.17.23 in #588
Bump @actions/core from 1.11.1 to 3.0.0 in #599
Bump @actions/github from 6.0.1 to 9.0.0 in #597
Bump @docker/actions-toolkit from 0.68.0 to 0.79.0 in #604
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #600
Bump semver from 7.7.3 to 7.7.4 in #603

Full Changelog: docker/metadata-action@v5.10.0...v6.0.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in #595
Bump brace-expansion from 1.1.13 to 1.1.18 in #600
Bump js-yaml from 5.2.0 to 5.3.0 in #585
Bump postcss from 8.5.10 to 8.5.25 in #598
Bump undici from 6.27.0 to 6.28.0 in #601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #572
Bump @actions/core from 3.0.0 to 3.0.1 in #551
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #557 #580
Bump @sigstore/core from 3.1.0 to 3.2.1 in #573
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #576
Bump js-yaml from 4.1.1 to 5.2.0 in #562
Bump sigstore from 4.1.0 to 4.1.1 in #577
Bump tmp from 0.2.5 to 0.2.7 in #556
Bump undici from 6.25.0 to 6.27.0 in #570
Bump vite from 7.3.2 to 7.3.6 in #569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

`v4.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #489
Bump brace-expansion from 1.1.12 to 5.0.6 in #547 #508
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #540
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #496
Bump flatted from 3.3.3 to 3.4.2 in #499
Bump glob from 10.3.12 to 13.0.6 in #495
Bump handlebars from 4.7.8 to 4.7.9 in #504
Bump lodash from 4.17.23 to 4.18.1 in #523
Bump picomatch from 4.0.3 to 4.0.4 in #503
Bump postcss from 8.5.6 to 8.5.10 in #537
Bump tar from 6.2.1 to 7.5.15 in #545
Bump undici from 6.23.0 to 6.25.0 in #492
Bump vite from 7.3.1 to 7.3.2 in #520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #483
Remove deprecated inputs/outputs by @crazy-max in #464
Switch to ESM and update config/test wiring by @crazy-max in #481
Bump @actions/core from 1.11.1 to 3.0.0 in #475
Bump @docker/actions-toolkit from 0.63.0 to 0.79.0 in #482 #485
Bump js-yaml from 4.1.0 to 4.1.1 in #452
Bump lodash from 4.17.21 to 4.17.23 in #472
Bump minimatch from 3.1.2 to 3.1.5 in #480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v4.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.92.0 to 0.96.0 in #336
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #316
Bump brace-expansion from 1.1.15 to 1.1.18 in #332
Bump js-yaml from 4.2.0 to 4.3.1 in #334
Bump postcss from 8.5.10 to 8.5.25 in #331
Bump sigstore from 4.1.0 to 4.1.1 in #317
Bump undici from 6.27.0 to 6.28.0 in #333

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

`v4.1.0`

Compare Source

Add reset input to uninstall current emulators by @crazy-max in #21
Bump @docker/actions-toolkit from 0.77.0 to 0.91.0 in #250 #247
Bump brace-expansion from 1.1.12 to 1.1.15 in #265
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #286
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #255
Bump flatted from 3.3.3 to 3.4.2 in #257
Bump glob from 10.3.15 to 10.5.0 in #254
Bump handlebars from 4.7.8 to 4.7.9 in #262
Bump lodash from 4.17.23 to 4.18.1 in #273
Bump postcss from 8.5.6 to 8.5.10 in #285
Bump tar from 6.2.1 to 7.5.15 in #287
Bump tmp from 0.2.5 to 0.2.6 in #291
Bump undici from 6.23.0 to 6.26.0 in #251
Bump vite from 7.3.1 to 7.3.2 in #271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #245
Switch to ESM and update config/test wiring by @crazy-max in #241
Bump @actions/core from 1.11.1 to 3.0.0 in #244
Bump @docker/actions-toolkit from 0.67.0 to 0.77.0 in #243
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #240
Bump js-yaml from 3.14.1 to 3.14.2 in #231
Bump lodash from 4.17.21 to 4.17.23 in #238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- "after 9am and before 5pm every weekday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coveralls · 2026-09-18T09:31:17Z

Coverage Report for CI Build 35330014017

Coverage remained the same at 91.609%

Details

Coverage remained the same as the base build.
Patch coverage: No coverable lines changed in this PR.
No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

Coverage Stats


Relevant Lines:	727
Covered Lines:	666
Line Coverage:	91.61%
Coverage Strength:	8.24 hits per line

💛 - Coveralls

renovate Bot added ci dependencies labels Sep 18, 2026

renovate Bot assigned jimboid and jkalayan Sep 18, 2026

Update GitHub Actions

593899d

renovate Bot force-pushed the renovate/major-github-actions branch from 692035f to 593899d Compare September 18, 2026 09:31

jimboid merged commit ce01f25 into main Sep 18, 2026
13 checks passed

renovate Bot deleted the renovate/major-github-actions branch September 18, 2026 09:36

Navigation Menu

Update GitHub Actions (major) - #57

Update GitHub Actions (major)#57
jimboid merged 1 commit into
mainfrom
renovate/major-github-actions

renovate Bot commented Sep 18, 2026 •

edited

Loading

Uh oh!

coveralls commented Sep 18, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate Bot commented Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

coveralls commented Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Coverage Report for CI Build 35330014017

Coverage remained the same at 91.609%

Details

Uncovered Changes

Coverage Regressions

Coverage Stats

💛 - Coveralls

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate Bot commented Sep 18, 2026 •

edited

Loading

coveralls commented Sep 18, 2026 •

edited

Loading