chore(deps): update workflows by renovate[bot] · Pull Request #357 · G-Rath/osv-detector

renovate · 2025-12-07T12:28:55Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	`v5.0.1` → `v5.0.3`
actions/checkout	action	patch	`v6.0.0` → `v6.0.2`
actions/setup-go	action	minor	`v6.1.0` → `v6.2.0`
actions/setup-java	action	minor	`v5.0.0` → `v5.2.0`
actions/setup-node	action	minor	`v6.0.0` → `v6.2.0`
actions/setup-python	action	minor	`v6.1.0` → `v6.2.0`
github/codeql-action	action	minor	`v4.31.5` → `v4.32.3`
golangci/golangci-lint-action	action	minor	`v9.1.0` → `v9.2.0`
ruby/setup-ruby	action	minor	`v1.268.0` → `v1.288.0`

Release Notes

actions/cache (actions/cache)

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

`v5.0.2`

Compare Source

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

actions/setup-go (actions/setup-go)

`v6.2.0`

Compare Source

What's Changed

Enhancements

Example for restore-only cache in documentation by @aparnajyothi-y in #696
Update Node.js version in action.yml by @ccoVeille in #691
Documentation update of actions/checkout by @deining in #683

Dependency updates

Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot in #682
Upgrade @actions/cache to v5 by @salmanmkc in #695
Upgrade actions/checkout from 5 to 6 by @dependabot in #686
Upgrade qs from 6.14.0 to 6.14.1 by @dependabot in #703

New Contributors

@ccoVeille made their first contribution in #691
@deining made their first contribution in #683

Full Changelog: actions/setup-go@v6...v6.2.0

actions/setup-java (actions/setup-java)

`v5.2.0`

Compare Source

What's Changed

Enhancement

Retry on HTTP 522 Connection timed out by @findepi in #964

Documentation Changes

Update gradle caching by @priya-kinthali in #972
Update checkout to v6 by @mahabaleshwars in #973

Dependency Updates

Upgrade @actions/cache to v5 by @salmanmkc in #968
Upgrade actions/checkout from 5 to 6 by @dependabot in #961

New Contributors

@findepi made their first contribution in #964

Full Changelog: actions/setup-java@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

actions/setup-node (actions/setup-node)

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

actions/setup-python (actions/setup-python)

`v6.2.0`

Compare Source

github/codeql-action (github/codeql-action)

`v4.32.3`

Compare Source

Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #3466

`v4.32.2`

Compare Source

`v4.32.1`

Compare Source

A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #3422
Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #3421

`v4.32.0`

Compare Source

Update default CodeQL bundle version to 2.24.0. #3425

`v4.31.11`

Compare Source

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
Improved error handling throughout the CodeQL Action. #3415
Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

`v4.31.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

`v4.31.9`

Compare Source

`v4.31.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

`v4.31.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

golangci/golangci-lint-action (golangci/golangci-lint-action)

`v9.2.0`

Compare Source

What's Changed

Changes

feat: add version-file option by @ldez in #1320
chore: move samples into fixtures by @ldez in #1321

Dependencies

build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot[bot] in #1317
build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #1318
build(deps-dev): bump the dev-dependencies group with 3 updates by @dependabot[bot] in #1323
build(deps): bump yaml from 2.8.1 to 2.8.2 in the dependencies group by @dependabot[bot] in #1324

Full Changelog: golangci/golangci-lint-action@v9.1.0...v9.2.0

ruby/setup-ruby (ruby/setup-ruby)

`v1.288.0`

Compare Source

What's Changed

Move check-new-windows-versions.yml workflow from ruby/ruby-builder to ruby/setup-ruby by @eregon in #870
Add jruby-10.0.3.0 by @ruby-builder-bot in #875

Full Changelog: ruby/setup-ruby@v1.287.0...v1.288.0