Skip to content

chore(deps): update github actions#662

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

chore(deps): update github actions#662
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/attest-build-provenance action patch v4.1.0 → v4.1.1
actions/checkout action patch v6.0.2 → v6.0.3
actions/setup-go action minor v6.4.0 → v6.5.0
astral-sh/setup-uv action minor v8.1.0 → v8.3.2
docker/build-push-action action minor v7.1.0 → v7.3.0
docker/login-action action minor v4.1.0 → v4.4.0
docker/metadata-action action minor v6.0.0 → v6.2.0
docker/setup-buildx-action action minor v4.0.0 → v4.2.0
docker/setup-qemu-action action minor v4.0.0 → v4.2.0
github/codeql-action action minor v4.35.4 → v4.37.0
jdx/mise-action action minor v4.0.1 → v4.2.0
taiki-e/install-action action minor v2.65.2 → v2.83.2

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.1.1

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

actions/checkout (actions/checkout)

v6.0.3

Compare Source

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

astral-sh/setup-uv (astral-sh/setup-uv)

v8.3.2

Compare Source

v8.3.1

Compare Source

v8.3.0

Compare Source

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates
docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

v7.2.0

Compare Source

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

v4.4.0

Compare Source

v4.3.0

Compare Source

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

Full Changelog: docker/login-action@v4.1.0...v4.2.0

docker/metadata-action (docker/metadata-action)

v6.2.0

Compare Source

v6.1.0

Compare Source

  • Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​613
  • Bump brace-expansion from 1.1.12 to 5.0.6 in #​658 #​630
  • Bump csv-parse from 6.1.0 to 6.2.1 in #​617
  • Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​620
  • Bump flatted from 3.3.3 to 3.4.2 in #​623
  • Bump glob from 10.3.15 to 10.5.0 in #​621
  • Bump handlebars from 4.7.8 to 4.7.9 in #​629
  • Bump lodash from 4.17.23 to 4.18.1 in #​639
  • Bump moment-timezone from 0.6.0 to 0.6.1 in #​619
  • Bump picomatch from 4.0.3 to 4.0.4 in #​626
  • Bump postcss from 8.5.6 to 8.5.10 in #​649
  • Bump tar from 6.2.1 to 7.5.15 in #​657
  • Bump undici from 6.23.0 to 6.25.0 in #​614
  • Bump vite from 7.3.1 to 7.3.2 in #​637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

  • Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
  • Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
  • Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
  • Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
  • Bump flatted from 3.3.3 to 3.4.2 in #​499
  • Bump glob from 10.3.12 to 13.0.6 in #​495
  • Bump handlebars from 4.7.8 to 4.7.9 in #​504
  • Bump lodash from 4.17.23 to 4.18.1 in #​523
  • Bump picomatch from 4.0.3 to 4.0.4 in #​503
  • Bump postcss from 8.5.6 to 8.5.10 in #​537
  • Bump tar from 6.2.1 to 7.5.15 in #​545
  • Bump undici from 6.23.0 to 6.25.0 in #​492
  • Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

docker/setup-qemu-action (docker/setup-qemu-action)

v4.2.0

Compare Source

v4.1.0

Compare Source

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

github/codeql-action (github/codeql-action)

v4.37.0

Compare Source

  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@​ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973

v4.36.3

Compare Source

No user facing changes.

v4.36.2

Compare Source

  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948

v4.36.1

Compare Source

No user facing changes.

v4.36.0

Compare Source

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926

v4.35.5

Compare Source

  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
jdx/mise-action (jdx/mise-action)

v4.2.0: : Bootstrap mode & wget fallback

Compare Source

This release adds an opt-in bootstrap mode for projects that use mise bootstrap, and makes the action work on runner images that ship wget but not curl.

Added

Bootstrap mode (#​522) by @​jdx

Three new inputs let the action drive mise bootstrap instead of mise install:

- uses: jdx/mise-action@v4
  with:
    bootstrap: true
    bootstrap_skip: "tools,task"   # comma-separated parts to skip
    bootstrap_args: "--yes"        # extra args forwarded to mise bootstrap
  • When bootstrap: true, the action runs mise bootstrap under the existing install gate and sets MISE_EXPERIMENTAL=1 automatically.
  • If a repo mise lock file is present, it runs mise --locked bootstrap, matching the auto-lock behavior introduced for mise install in v4.1.0.
  • install_args cannot be combined with bootstrap: true — the action fails fast and tells you to use bootstrap_skip / bootstrap_args instead, because full bootstrap doesn't support partial tool install args.
  • A new {{bootstrap_hash}} template variable is included in the default cache key (and available in custom cache_key templates) so bootstrap and non-bootstrap configurations don't share caches.

bootstrap_skip relies on mise bootstrap --skip from jdx/mise#10497, so make sure you're on a recent mise version if you use it.

Fixed

  • Fall back to wget when curl is unavailable (#​521) by @​risu729 — The action used to hard-code curl for fetching the mise binary, tar/zip archives, and the latest VERSION lookup, which broke on minimal runner images that only ship wget. It now prefers curl and transparently falls back to wget, preserving the streaming download | tar fast path for .tar.gz and .tar.zst installs on Linux/macOS. Proxy support is unchanged — both tools honor HTTP_PROXY/HTTPS_PROXY. Addresses jdx/mise#10488.

Documentation

Full Changelog: jdx/mise-action@v4.1.0...v4.2.0

v4.1.0: : automatic --locked installs

Compare Source

This release adds automatic locked installs when a mise.lock is present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.

Added
Automatic --locked install when mise.lock exists (#​495) by @​zeitlinger

When a repo contains mise.lock, the action now automatically passes --locked to mise install (on mise versions that support it). This removes the need to manually set install_args: --locked and prevents mise install from silently mutating the lockfile in CI. Explicit install_args and older mise versions are still respected.

Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating mise.lock mid-run — this surfaces lockfile drift rather than hiding it.

Fixed
  • Cache key collisions across runner providers (#​456) — the default cache key now includes the runner image (e.g. macos15, ubuntu24 for GitHub-hosted runners; self-hosted otherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's ~/.local/share/mise/installs/*, causing failures like does not have an executable named '…' or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.
  • mise-shim.exe missing on Windows (#​476) by @​risu729 — the action now installs mise-shim.exe alongside mise.exe and repairs restored caches that lack the shim. Fixes #​475.
Changed
  • Migrated the bundled action build from ncc (CommonJS) to Rollup (ESM) (#​436). No user-facing behavior change.

Full Changelog: jdx/mise-action@v4.0.1...v4.1.0

taiki-e/install-action (taiki-e/install-action)

v2.83.2: 2.83.2

Compare Source

  • Update parse-dockerfile@latest to 0.1.8.

  • Update mise@latest to 2026.7.5.

  • Update just@latest to 1.56.0.

  • Update gungraun-runner@latest to 0.19.4.

  • Update cargo-neat@latest to 0.4.1.

v2.83.1: 2.83.1

Compare Source

  • Update rclone@latest to 1.74.4.

  • Update mise@latest to 2026.7.4.

  • Update cargo-deny@latest to 0.20.2.

v2.83.0: 2.83.0

Compare Source

  • Support cargo-about. (#​1924, thanks @​ruffsl)

  • Update uv@latest to 0.11.28.

  • Update martin@latest to 1.12.0.

  • Update kingfisher@latest to 1.106.0.

  • Update biome@latest to 2.5.3.

v2.82.11: 2.82.11

Compare Source

  • Update wasm-tools@latest to 1.253.0.

  • Update uv@latest to 0.11.27.

  • Update mise@latest to 2026.7.2.

  • Update mdbook@latest to 0.5.4.

v2.82.10: 2.82.10

Compare Source

  • Update tombi@latest to 1.2.0.

  • Update cargo-nextest@latest to 0.9.140.

v2.82.9: 2.82.9

Compare Source

  • Update vacuum@latest to 0.29.9.

  • Update prek@latest to 0.4.8.

  • Update cargo-tarpaulin@latest to 0.37.0.

  • Update cargo-leptos@latest to 0.3.7.

v2.82.8: 2.82.8

Compare Source

  • Update vacuum@latest to 0.29.8.

  • Update uv@latest to 0.11.26.

  • Update typos@latest to 1.48.0.

  • Update trivy@latest to 0.72.0.

  • Update tombi@latest to 1.1.7.

  • Update prek@latest to 0.4.6.

  • Update mise@latest to 2026.7.0.

  • Update just@latest to 1.55.1.

  • Update biome@latest to 2.5.2.

v2.82.7: 2.82.7

Compare Source

  • Update tombi@latest to 1.1.6.

  • Update kingfisher@latest to 1.105.0.

  • Update gungraun-runner@latest to 0.19.3.

  • Update editorconfig-checker@latest to 3.8.0.

  • Update dprint@latest to 0.55.1.

  • Update cargo-tarpaulin@latest to 0.36.0.

v2.82.6: 2.82.6

Compare Source

  • Update vacuum@latest to 0.29.7.

  • Update uv@latest to 0.11.25.

  • Update syft@latest to 1.46.0.

  • Update dprint@latest to 0.55.0.

  • Update cargo-auditable@latest to 0.7.5.

v2.82.5: 2.82.5

Compare Source

  • Update wasmtime@latest to 46.0.1.

  • Update wasm-bindgen@latest to 0.2.126.

  • Update vacuum@latest to 0.29.6.

  • Update mise@latest to 2026.6.14.

  • Update cargo-rdme@latest to 2.1.0.

v2.82.4: 2.82.4

Compare Source

  • Update uv@latest to 0.11.24.

  • Update mise@latest to 2026.6.13.

  • Update just@latest to 1.54.0.

  • Update biome@latest to 2.5.1.

v2.82.3: 2.82.3

Compare Source

  • Update zizmor@latest to 1.26.1.

  • Update wasmtime@latest to 46.0.0.

  • Update tombi@latest to 1.1.5.

  • Update mise@latest to 2026.6.12.

  • Update kingfisher@latest to 1.104.0.

  • Update cargo-tarpaulin@latest to 0.35.5.

  • Update cargo-nextest@latest to 0.9.138.

  • Update cargo-crap@latest to 0.3.0.

  • Update cargo-binstall@latest to 1.20.1.

  • Update cargo-rdme@latest to 2.0.1.

v2.82.2: 2.82.2

Compare Source

  • Update xh@latest to 0.26.1.

  • Update uv@latest to 0.11.23.

  • Update trivy@latest to 0.71.2.

  • Update sccache@latest to 0.16.0.

v2.82.1: 2.82.1

Compare Source

  • Update vacuum@latest to 0.29.4.

  • Update uv@latest to 0.11.22.

  • Update osv-scanner@latest to 2.4.0.

  • Update mise@latest to 2026.6.11.

  • Update martin@latest to 1.11.0.

  • Update just@latest to 1.53.0.

  • Update cargo-zigbuild@latest to 0.23.0.

v2.82.0: 2.82.0

Compare Source

  • Support cargo-vet. (#​1908, thanks @​jakewimmer)

  • Support cargo-crap. (#​1905, thanks @​BartoszCiesla)

  • Support cargo-leptos. (#​1903, thanks @​404Simon)

  • Update kingfisher@latest to 1.103.0.

  • Update cargo-xwin@latest to 0.23.0.

  • Update wasmtime@latest to 45.0.2.

  • Update cargo-deny@latest to 0.19.9.

  • Update prek@latest to 0.4.5.

  • Update trivy@latest to 0.71.1.

  • Update mise@latest to 2026.6.10.

v2.81.11: 2.81.11

Compare Source

  • Update wasm-tools@latest to 1.252.0.

  • Update wasm-bindgen@latest to 0.2.125.

  • Update uv@latest to 0.11.21.

  • Update protoc@latest to 3.35.1.

  • Update mise@latest to 2026.6.9.

  • Update jaq@latest to 3.1.0.

  • Update cargo-insta@latest to 1.48.0.

  • Update biome@latest to 2.5.0.

v2.81.10: 2.81.10

Compare Source

  • Update tombi@latest to 1.1.3.

  • Update release-plz@latest to 0.3.159.

  • Update cosign@latest to 3.1.1.

v2.81.9: 2.81.9

Compare Source

  • Update wasm-bindgen@latest to 0.2.123.

  • Update tombi@latest to 1.1.2.

  • Update parse-changelog@latest to 0.6.17.

  • Update just@latest to 1.52.0.

  • Update gungraun-runner@latest to 0.19.2.

  • Update cargo-binstall@latest to 1.20.0.

v2.81.8: 2.81.8

Compare Source

  • Update vacuum@latest to 0.29.2.

  • Update parse-dockerfile@latest to 0.1.7.

  • Update mise@latest to 2026.6.1.

  • Update cargo-shear@latest to 1.13.1.

v2.81.7: 2.81.7

Compare Source

  • Update wasmtime@latest to 45.0.1.

  • Update vacuum@latest to 0.29.1.

  • Update syft@latest to 1.45.1.

  • Update rclone@latest to 1.74.3.

  • Update cargo-audit@latest to 0.22.2.

v2.81.6: 2.81.6

Compare Source

  • Update prek@latest to 0.4.4.

  • Update cargo-shear@latest to 1.13.0.

v2.81.5: 2.81.5

Compare Source

  • Update vacuum@latest to 0.29.0.

  • Update uv@latest to 0.11.19.

  • Update typos@latest to 1.47.2.

  • Update mise@latest to 2026.6.0.

v2.81.4: 2.81.4

Compare Source

  • Update vacuum@latest to 0.28.4.

  • Update typos@latest to 1.47.1.

  • Update syft@latest to 1.45.0.

  • Update cargo-neat@latest to 0.4.0.

  • Update cargo-mutants@latest to 27.1.0.

v2.81.3: 2.81.3

Compare Source

  • Update vacuum@latest to 0.28.3.

  • Update uv@latest to 0.11.18.

  • Update trivy@latest to 0.71.0.

v2.81.2: 2.81.2

Compare Source

  • Update mise@latest to 2026.5.18.

  • Update cargo-semver-checks@latest to 0.48.0.

v2.81.1: 2.81.1

Compare Source

  • Update cargo-no-dev-deps@latest to 0.2.24.

  • Update cargo-hack@latest to 0.6.45.

v2.81.0: 2.81.0

Compare Source

v2.80.0: 2.80.0

Compare Source

v2.79.15: 2.79.15

Compare Source

  • Update typos@latest to 1.47.0.

  • Update wasm-tools@latest to 1.251.0.

  • Update vacuum@latest to 0.27.2.

  • Update uv@latest to 0.11.17.

  • Update tombi@latest to 1.1.1.

  • Update mise@latest to 2026.5.16.

v2.79.14: 2.79.14

Compare Source

  • Update vacuum@latest to 0.27.0.

  • Update cargo-deny@latest to 0.19.8.

v2.79.13: 2.79.13

Compare Source

  • Update gungraun-runner@latest to 0.19.1.

  • Update biome@latest to 2.4.16.

v2.79.12: 2.79.12

Compare Source

  • Update prek@latest to 0.4.3.

  • Remove uses of crates.io API, which potentially cases 403 error.

v2.79.11: 2.79.11

Compare Source

  • Update vacuum@latest to 0.26.8.

  • Update cargo-nextest@latest to 0.9.137.

v2.79.10: 2.79.10

Compare Source

  • Update tombi@latest to 1.1.0.

  • Update prek@latest to 0.4.2.

  • Update editorconfig-checker@latest to 3.7.0.

v2.79.9: 2.79.9

Compare Source

  • Update vacuum@latest to 0.26.7.

  • Update tombi@latest to 1.0.0.

v2.79.8: 2.79.8

Compare Source

  • Update parse-dockerfile@latest to 0.1.6.

  • Update knope@latest to 0.23.0.

v2.79.7: 2.79.7

Compare Source

  • Update typos@latest to 1.46.3.

  • Update rclone@latest to 1.74.2.

  • Update mise@latest to 2026.5.15.

  • Update tombi@latest to 0.11.7.

v2.79.6: 2.79.6

Compare Source

  • Update wasm-bindgen@latest to 0.2.122.

  • Update mise@latest to 2026.5.14.

  • Update cargo-deny@latest to 0.19.7.

  • Update vacuum@latest to 0.26.6.

v2.79.5: 2.79.5

Compare Source

  • Update jaq@latest to 3.0.0. (#​1861, thanks @​MusicalNinjaDad)

  • Update wasmtime@latest to 45.0.0.

  • Update wasm-tools@latest to 1.250.0.

  • Update tombi@latest to 0.11.6.

  • Update mise@latest to 2026.5.13.

v2.79.4: 2.79.4

Compare Source

  • Update martin@latest to 1.10.1.

  • Update prek@latest to 0.4.1.

  • Update protoc@latest to 3.35.0.

  • Update mdbook@latest to 0.5.3.

v2.79.3: 2.79.3

Compare Source

  • Update mise@latest to 2026.5.12.

  • Update martin@latest to 1.10.0.

  • Update uv@latest to 0.11.15.

v2.79.2: 2.79.2

Compare Source

  • Update mise@latest to 2026.5.11.

  • Update vacuum@latest to 0.26.5.

  • Update cargo-shear@latest to 1.12.4.

v2.79.1: 2.79.1

Compare Source

  • Update tombi@latest to 0.11.5.

  • Update cargo-nextest@latest to 0.9.136.

  • Update typos@latest to 1.46.2.

  • Update mise@latest to 2026.5.10.

v2.79.0: 2.79.0

Compare Source

  • Support more host architectures. (#​1841, thanks @​Gelbpunkt)

  • Deprecate mdbook-alerts because the feature now included in mdbook and the repository has been archived. (#​1844)

  • Deprecate iai-callgrind-runner because it has been renamed to gungraun-runner. gungraun-runner is also supported by this action. (#​1844)

v2.78.3: 2.78.3

Compare Source

  • Update zizmor@latest to 1.25.2.

  • Update cargo-zigbuild@latest to 0.22.3. (#​1814, thanks @​simonhollingshead)

  • Update wasm-tools@latest to 1.249.0.

  • Update gungraun-runner@latest to 0.19.0.

v2.78.2: 2.78.2

Compare Source

  • Update wasm-pack@latest to 0.15.0.

  • Update zizmor@latest to 1.25.0.

  • Update mise@latest to 2026.5.9.

  • Update cargo-nextest@latest to 0.9.135.

  • Update cyclonedx@latest to 0.32.0.

  • Update prek@latest to 0.4.0.

v2.78.1: 2.78.1

Compare Source

  • Update mise@latest to 2026.5.7.

  • Diagnostic improvements.

v2.78.0: 2.78.0

Compare Source

  • Support cargo-mutants. (#​1812, thanks @​jakewimmer)

  • Update covgate@latest to 0.2.0.

  • Update cargo-llvm-cov@latest to 0.8.7.

  • Update uv@latest to 0.11.14.

  • Update martin@latest to 1.9.1.

  • Update tombi@latest to 0.11.4.

v2.77.7: 2.77.7

Compare Source

  • Update mise@latest to 2026.5.6.

  • Update cargo-deny@latest to 0.19.6.

v2.77.6: 2.77.6

Compare Source

  • Fix wasm-pack installation failure.

  • Update mise@latest to 2026.5.5.

  • Update release-plz@latest to 0.3.158.

  • Update just@latest to 1.51.0.

v2.77.5: 2.77.5

Compare Source

  • Update biome@latest to 2.4.15.

  • Update mise@latest to 2026.5.4.

  • Update cargo-deny@latest to 0.19.5.

v2.77.4: 2.77.4

Compare Source

  • Update tombi@latest to 0.11.1.

  • Update cargo-llvm-cov@latest to 0.8.6.

  • Update uv@latest to 0.11.12.

v2.77.3: 2.77.3

Compare Source

  • Update typos@latest to 1.46.1.

  • Update rclone@latest to 1.74.1.

  • Update tombi@latest to 0.11.0.

  • Update osv-scanner@latest to 2.3.8.

  • Update mise@latest to 2026.5.3.

[v2.77.2](

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Sao_Paulo)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jun 9, 2026
@renovate renovate Bot requested a review from hcavarsan as a code owner June 9, 2026 06:44
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jun 9, 2026
@hcavarsan

hcavarsan commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codecov

codecov Bot commented Jun 9, 2026

Copy link
Copy Markdown

Bundle Report

Bundle size has no change ✅

@codecov

codecov Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 49.72%. Comparing base (5a27f10) to head (27f1dc2).
✅ All tests successful. No failed tests found.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main     #662      +/-   ##
==========================================
- Coverage   49.76%   49.72%   -0.05%     
==========================================
  Files         164      164              
  Lines       36496    36496              
==========================================
- Hits        18164    18148      -16     
- Misses      18332    18348      +16
Components Coverage Δ
kftray-commons 81.99% <ø> (ø)
kftray-http-logs 80.11% <ø> (ø)
kftray-portforward 45.28% <ø> (+0.03%) ⬆️
kftray-server 75.35% <ø> (ø)
kftray-tauri 36.26% <ø> (ø)
kftui 33.99% <ø> (ø)

@renovate renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 9640f56 to ef55aa8 Compare June 15, 2026 23:01
@renovate renovate Bot force-pushed the renovate/github-actions branch 4 times, most recently from 2f21bda to 5c233a8 Compare June 24, 2026 04:58
@renovate renovate Bot force-pushed the renovate/github-actions branch 6 times, most recently from ada05ab to 8d6d36d Compare July 2, 2026 10:04
@renovate renovate Bot force-pushed the renovate/github-actions branch 10 times, most recently from b71df0a to a88839a Compare July 9, 2026 17:15
@renovate renovate Bot force-pushed the renovate/github-actions branch from a88839a to c7e1684 Compare July 10, 2026 20:43
@renovate renovate Bot force-pushed the renovate/github-actions branch from c7e1684 to 27f1dc2 Compare July 12, 2026 09:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hcavarsan hcavarsan Awaiting requested review from hcavarsan hcavarsan is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hcavarsan