Update GitHub Actions dependencies by renovate[bot] · Pull Request #295 · SonarSource/sonar-scanner-python

renovate · 2026-03-11T11:11:24Z

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/gh-action_release	action	minor	`6.1.0` → `6.4.0`
SonarSource/gh-action_slack-notify	action	patch	`1.0.1` → `1.0.2`
SonarSource/vault-action-wrapper	action	minor	`3.1.0` → `3.3.0`
actions/checkout	action	patch	`v4.3.0` → `v4.3.1`
actions/download-artifact	action	minor	`v4.1.8` → `v4.3.0`
actions/upload-artifact	action	minor	`v4.4.3` → `v4.6.2`
jdx/mise-action	action	minor	`v3.3.1` → `v3.6.3`
jdx/mise-action	action	minor	`v3.2.0` → `v3.6.3`

Release Notes

SonarSource/gh-action_release (SonarSource/gh-action_release)

`v6.4.0`

Compare Source

What's Changed

Fix get_artifacts_to_publish to collect artifacts from all modules by @Tim-Pohlmann in #370
PREQ-4535: Use hierarchical S3 path (version/platform) for binaries with platform qualifier by @tomverin in #373

New Contributors

@Tim-Pohlmann made their first contribution in #370

Full Changelog: SonarSource/gh-action_release@6.3.0...6.4.0

What's Changed

chore(deps): update python:3.14-slim docker digest to 1a3c6db by @renovate[bot] in #356
chore(deps): update github actions by @renovate[bot] in #352
chore(deps): update dependency mise to 2026.2.2 by @renovate[bot] in #354
chore(deps): update amazon/aws-cli docker tag to v2.33.13 by @renovate[bot] in #353
chore(deps): lock file maintenance by @renovate[bot] in #359
chore(deps): update jdx/mise-action action to v3 by @renovate[bot] in #358
chore(deps): update sonarsource/vault-action-wrapper action to v3.2.0 by @renovate[bot] in #366

Full Changelog: SonarSource/gh-action_release@6.2.1...6.2.4

`v6.2.3`

Compare Source

`v6.2.2`

Compare Source

`v6.2.1`

Compare Source

What's Changed

chore(deps): update amazon/aws-cli docker tag to v2.31.13 by @renovate[bot] in #334
chore(deps): update dependency mise to 2025.12.12 by @renovate[bot] in #347
chore(deps): update python docker tag to v3.13 by @renovate[bot] in #335
chore(deps): update amazon/aws-cli docker tag to v2.32.9 by @renovate[bot] in #345
chore(deps): update dependency mise to 2025.12.13 by @renovate[bot] in #348
chore(deps): lock file maintenance by @renovate[bot] in #318
chore(deps): update amazon/aws-cli docker tag to v2.32.29 by @renovate[bot] in #350
chore(deps): update python docker tag to v3.14 by @renovate[bot] in #351
chore(deps): update github actions (major) by @renovate[bot] in #332
chore(deps): lock file maintenance by @renovate[bot] in #355
BUILD-10207 add unified dogfooding by @tomverin in #357
BUILD-10273 Fix Artifactory authentication for download redirects by @matemoln in #360

Full Changelog: SonarSource/gh-action_release@6.2.0...6.2.1

`v6.2.0`

Compare Source

What's Changed

BUILD-8083 Update readme with v6 version by @SamirM-BE in #342
PREQ-2287 use latest releasability action by @tomverin in #343

Full Changelog: SonarSource/gh-action_release@6.1.0...6.2.0

SonarSource/gh-action_slack-notify (SonarSource/gh-action_slack-notify)

`v1.0.2`

Compare Source

What's Changed

BUILD-7892 use ubuntu-latest instead of sonar-runner for public repos by @tomverin in #13
BUILD-7892 Update LICENSE for public repository by @tomverin in #14
BUILD-8073 Migrate public repositories workflows to large runners by @SamirM-BE in #15
BUILD-8875: Migrate to standardized GitHub runner names by @SonarTech in #16
BUILD-9063 slack notification docs by @mikolaj-matuszny-ext-sonarsource in #17

New Contributors

@SamirM-BE made their first contribution in #15
@SonarTech made their first contribution in #16
@mikolaj-matuszny-ext-sonarsource made their first contribution in #17

Full Changelog: SonarSource/gh-action_slack-notify@1.0.1...1.0.2

SonarSource/vault-action-wrapper (SonarSource/vault-action-wrapper)

`v3.3.0`

Compare Source

What's Changed

PREQ-4481: Diagnose which secret path causes 403 Forbidden failures by @tomverin in #71

Full Changelog: SonarSource/vault-action-wrapper@3.2.0...3.3.0

`v3.2.0`

Compare Source

What's Changed

BUILD-10311 Auto-select Vault role based on GITHUB_REF by @jayadeep-km-sonarsource in #70

Full Changelog: SonarSource/vault-action-wrapper@3.1.1...3.2.0

`v3.1.1`

Compare Source

What's Changed

BUILD-8875: Migrate to standardized GitHub runner names by @SonarTech in #63
chore(deps): update actions/checkout action to v5 by @renovate[bot] in #62
chore(deps): update github actions by @renovate[bot] in #60
PREQ-3809 Add jwtTtl parameter to control GitHub OIDC token lifetime by @SamirM-BE in #68
PREQ-3809 Update jwtTtl default to 1h and replace RE team references by @SamirM-BE in #69

New Contributors

@SonarTech made their first contribution in #63

Full Changelog: SonarSource/vault-action-wrapper@3.1.0...3.1.1

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

actions/download-artifact (actions/download-artifact)

`v4.3.0`

Compare Source

What's Changed

feat: implement new artifact-ids input by @GrantBirki in #401
Fix workflow example for downloading by artifact ID by @joshmgross in #402
Prep for v4.3.0 release by @robherley in #404

New Contributors

@GrantBirki made their first contribution in #401

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

`v4.2.1`

Compare Source

What's Changed

Add unit tests by @GhadimiR in #392
Fix bug introduced in 4.2.0 by @GhadimiR in #391

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

`v4.2.0`

Compare Source

What's Changed

Update README.md by @lkfortuna in #384
Bump artifact version, do digest check by @GhadimiR in #383

New Contributors

@lkfortuna made their first contribution in #384
@GhadimiR made their first contribution in #383

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

`v4.1.9`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #354
docs: small migration fix by @froblesmartin in #370
Update MIGRATION.md by @andyfeller in #372
Update artifact package to 2.2.2 by @yacaovsnc in #380

New Contributors

@Jcambass made their first contribution in #354
@froblesmartin made their first contribution in #370
@andyfeller made their first contribution in #372
@yacaovsnc made their first contribution in #380

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

actions/upload-artifact (actions/upload-artifact)

`v4.6.2`

Compare Source

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in #685

New Contributors

@salmanmkc made their first contribution in #685

Full Changelog: actions/upload-artifact@v4...v4.6.2

`v4.6.1`

Compare Source

What's Changed

Update to use artifact 2.2.2 package by @yacaovsnc in #673

Full Changelog: actions/upload-artifact@v4...v4.6.1

`v4.6.0`

Compare Source

What's Changed

Expose env vars to control concurrency and timeout by @yacaovsnc in #662

Full Changelog: actions/upload-artifact@v4...v4.6.0

`v4.5.0`

Compare Source

What's Changed

fix: deprecated Node.js version in action by @hamirmahal in #578
Add new artifact-digest output by @bdehamer in #656

New Contributors

@hamirmahal made their first contribution in #578
@bdehamer made their first contribution in #656

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

jdx/mise-action (jdx/mise-action)

`v3.6.3`

Compare Source

What's Changed

fix: pass cwd to all exec calls in exportMiseEnv() by @andrewthauer in #390
chore: release v3.6.3 by @mise-en-dev in #391

New Contributors

@andrewthauer made their first contribution in #390

Full Changelog: jdx/mise-action@v3.6.2...v3.6.3

`v3.6.2`

Compare Source

What's Changed

chore(deps): update dependency prettier to v3.8.1 by @renovate[bot] in #368
chore(deps): update dependency @types/node to v24.10.9 by @renovate[bot] in #367
chore(deps): update github/codeql-action digest to 439137e by @renovate[bot] in #370
chore(deps): lock file maintenance by @renovate[bot] in #372
chore(deps): update autofix-ci/action digest to 7a166d7 by @renovate[bot] in #375
chore(deps): update actions/checkout digest to de0fac2 by @renovate[bot] in #374
chore(deps): lock file maintenance by @renovate[bot] in #377
chore(deps): update github/codeql-action digest to b5ebac6 by @renovate[bot] in #378
chore(deps): update dependency @types/node to v24.10.13 by @renovate[bot] in #379
chore(deps): update github/codeql-action digest to f5c2471 by @renovate[bot] in #380
fix: move file_hash to end of cache key template to prevent prefix matching by @altendky in #384
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #381
chore(deps): lock file maintenance by @renovate[bot] in #386
chore(deps): update github/codeql-action digest to 4558047 by @renovate[bot] in #387
chore(deps): lock file maintenance by @renovate[bot] in #389
chore: release v3.6.2 by @mise-en-dev in #385

New Contributors

@altendky made their first contribution in #384

Full Changelog: jdx/mise-action@v3.6.1...v3.6.2

`v3.6.1`

Compare Source

What's Changed

Revert "fix(cache): isolate cache keys per working_directory in monorepos" by @jdx in #364
chore: release v3.6.1 by @mise-en-dev in #365

Full Changelog: jdx/mise-action@v3.6.0...v3.6.1

`v3.6.0`

Compare Source

What's Changed

chore(deps): update dependency prettier to v3.7.1 by @renovate[bot] in #331
chore(deps): update github/codeql-action digest to 497990d by @renovate[bot] in #324
chore(deps): update dependency typescript-eslint to v8.48.1 by @renovate[bot] in #332
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #314
chore(deps): update dependency @eslint/eslintrc to v3.3.3 by @renovate[bot] in #333
chore(deps): lock file maintenance by @renovate[bot] in #336
chore(deps): lock file maintenance by @renovate[bot] in #338
fix: use mise_dir input when specified by @jdx in #339
feat: add option to disable shims in PATH by @jdx in #340
fix: pass environment variables to mise commands by @jdx in #341
chore(deps): lock file maintenance by @renovate[bot] in #344
chore(deps): update github/codeql-action digest to 45c3735 by @renovate[bot] in #346
chore(deps): lock file maintenance by @renovate[bot] in #348
chore(deps): update actions/checkout action to v6 by @renovate[bot] in #350
chore(deps): lock file maintenance by @renovate[bot] in #352
docs: fix description for mise_toml input by @quad in #351
fix: make mise self-update output visible in logs by @nikobockerman in #355
chore(deps): update actions/setup-node action to v6 by @renovate[bot] in #356
chore(deps): lock file maintenance by @renovate[bot] in #358
chore(deps): update actions/setup-node digest to 6044e13 by @renovate[bot] in #361
fix(cache): isolate cache keys per working_directory in monorepos by @chadxz in #360
chore(deps): update github/codeql-action digest to 4bdb89f by @renovate[bot] in #362
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #349
chore(deps): update actions/upload-artifact action to v6 by @renovate[bot] in #357
chore: release v3.6.0 by @mise-en-dev in #342

New Contributors

@quad made their first contribution in #351
@nikobockerman made their first contribution in #355
@chadxz made their first contribution in #360

Full Changelog: jdx/mise-action@v3.5.1...v3.6.0

`v3.5.1`

Compare Source

What's Changed

chore(deps): lock file maintenance by @renovate[bot] in #328
Revert "feat(action): moved save cache to post step" by @jdx in #329
chore: release v3.5.1 by @mise-en-dev in #330

Full Changelog: jdx/mise-action@v3.5.0...v3.5.1

`v3.5.0`

Compare Source

What's Changed

chore(deps): update github/codeql-action digest to f94c9be by @renovate[bot] in #319
chore(deps): update dependency @types/node to v24.10.1 by @renovate[bot] in #320
feat(action): moved save cache to post step by @aamkye in #321
chore(deps): update actions/checkout digest by @renovate[bot] in #323
chore: release v3.5.0 by @mise-en-dev in #322

New Contributors

@aamkye made their first contribution in #321

Full Changelog: jdx/mise-action@v3.4.1...v3.5.0

`v3.4.1`

Compare Source

What's Changed

chore(deps): lock file maintenance by @renovate[bot] in #309
chore(deps): lock file maintenance by @renovate[bot] in #310
chore(deps): pin dependencies by @renovate[bot] in #311
chore(deps): update eslint monorepo to v9.39.1 by @renovate[bot] in #313
chore(deps): lock file maintenance by @renovate[bot] in #316
fix: avoid github token downstream issue by @acesyde in #317
chore: release v3.4.1 by @mise-en-dev in #318

New Contributors

@acesyde made their first contribution in #317

Full Changelog: jdx/mise-action@v3.4.0...v3.4.1

`v3.4.0`

Compare Source

What's Changed

docs: update to v3 in README by @pdecat in #290
chore(deps): update github/codeql-action digest to a8d1ac4 by @renovate[bot] in #293
chore(deps): update github/codeql-action digest to 755f449 by @renovate[bot] in #296
chore(deps): update dependency @types/node to v24.8.1 by @renovate[bot] in #297
chore(deps): update github/codeql-action digest to 4221315 by @renovate[bot] in #299
chore(deps): update dependency @types/node to v24.9.1 by @renovate[bot] in #300
chore(deps): update github/codeql-action digest to 5d5cd55 by @renovate[bot] in #302
chore(deps): update dependency @types/node to v24.9.2 by @renovate[bot] in #303
fix: add missing await to core.group calls by @smorimoto in #305
fix: auto-update dist folder in Renovate PRs via GitHub Actions by @jdx in #306
chore(deps): update dependency @types/handlebars to v4.1.0 by @renovate[bot] in #294
feat: use autofix.ci to auto-update dist/ on all PRs by @jdx in #308
chore(deps): lock file maintenance by @renovate[bot] in #301
chore: release v3.4.0 by @mise-en-dev in #291

New Contributors

@pdecat made their first contribution in #290
@smorimoto made their first contribution in #305

Full Changelog: jdx/mise-action@v3.3.1...v3.4.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

sonarqube-next · 2026-03-11T11:16:18Z

Quality Gate passed for 'Python Scanner'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Update GitHub Actions dependencies

b7306ae

renovate bot added the dependencies label Mar 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update GitHub Actions dependencies#295

Update GitHub Actions dependencies#295
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/github-actions-dependencies

renovate bot commented Mar 11, 2026

Uh oh!

sonarqube-next bot commented Mar 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 11, 2026

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

sonarqube-next bot commented Mar 11, 2026

Quality Gate passed for 'Python Scanner'

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants