Bump the github-actions group with 8 updates (intel#20526)

Bumps the github-actions group with 8 updates: | Package | From | To | | --- | --- | --- | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `5` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `5` | `6` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.4.0` | `6.0.0` | | [hendrikmuhs/ccache-action](https://github.com/hendrikmuhs/ccache-action) | `1.2.17` | `1.2.19` | | [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.20.0` | `2.21.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `6.0.0` | | [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) | `3.0.1` | `3.1.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.3.3` | `2.4.1` | Updates `actions/upload-artifact` from 4 to 5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p><strong>BREAKING CHANGE:</strong> this update supports Node <code>v24.x</code>. This is not a breaking change per-se but we're treating it as such.</p> <ul> <li>Update README.md by <a href="https://github.com/GhadimiR"><code>@​GhadimiR</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li> <li>Readme: spell out the first use of GHES by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li> <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li> <li>Prepare <code>v5.0.0</code> by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/734">actions/upload-artifact#734</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/GhadimiR"><code>@​GhadimiR</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li> <li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li> <li><a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li> <li><a href="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v4...v5.0.0">https://github.com/actions/upload-artifact/compare/v4...v5.0.0</a></p> <h2>v4.6.2</h2> <h2>What's Changed</h2> <ul> <li>Update to use artifact 2.3.2 package &amp; prepare for new upload-artifact release by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/685">actions/upload-artifact#685</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/685">actions/upload-artifact#685</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v4...v4.6.2">https://github.com/actions/upload-artifact/compare/v4...v4.6.2</a></p> <h2>v4.6.1</h2> <h2>What's Changed</h2> <ul> <li>Update to use artifact 2.2.2 package by <a href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/673">actions/upload-artifact#673</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v4...v4.6.1">https://github.com/actions/upload-artifact/compare/v4...v4.6.1</a></p> <h2>v4.6.0</h2> <h2>What's Changed</h2> <ul> <li>Expose env vars to control concurrency and timeout by <a href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/662">actions/upload-artifact#662</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v4...v4.6.0">https://github.com/actions/upload-artifact/compare/v4...v4.6.0</a></p> <h2>v4.5.0</h2> <h2>What's Changed</h2> <ul> <li>fix: deprecated <code>Node.js</code> version in action by <a href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/578">actions/upload-artifact#578</a></li> <li>Add new <code>artifact-digest</code> output by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/656">actions/upload-artifact#656</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/578">actions/upload-artifact#578</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/330a01c490aca151604b8cf639adc76d48f6c5d4"><code>330a01c</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/734">#734</a> from actions/danwkennedy/prepare-5.0.0</li> <li><a href="https://github.com/actions/upload-artifact/commit/03f282445299bbefc96171af272a984663b63a26"><code>03f2824</code></a> Update <code>github.dep.yml</code></li> <li><a href="https://github.com/actions/upload-artifact/commit/905a1ecb5915b264cbc519e4eb415b5d82916018"><code>905a1ec</code></a> Prepare <code>v5.0.0</code></li> <li><a href="https://github.com/actions/upload-artifact/commit/2d9f9cdfa99fedaddba68e9b5b5c281eca26cc63"><code>2d9f9cd</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/725">#725</a> from patrikpolyak/patch-1</li> <li><a href="https://github.com/actions/upload-artifact/commit/9687587dec67f2a8bc69104e183d311c42af6d6f"><code>9687587</code></a> Merge branch 'main' into patch-1</li> <li><a href="https://github.com/actions/upload-artifact/commit/2848b2cda0e5190984587ec6bb1f36730ca78d50"><code>2848b2c</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/727">#727</a> from danwkennedy/patch-1</li> <li><a href="https://github.com/actions/upload-artifact/commit/9b511775fd9ce8c5710b38eea671f856de0e70a7"><code>9b51177</code></a> Spell out the first use of GHES</li> <li><a href="https://github.com/actions/upload-artifact/commit/cd231ca1eda77976a84805c4194a1954f56b0727"><code>cd231ca</code></a> Update GHES guidance to include reference to Node 20 version</li> <li><a href="https://github.com/actions/upload-artifact/commit/de65e23aa2b7e23d713bb51fbfcb6d502f8667d8"><code>de65e23</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/712">#712</a> from actions/nebuk89-patch-1</li> <li><a href="https://github.com/actions/upload-artifact/commit/8747d8cd7632611ad6060b528f3e0f654c98869c"><code>8747d8c</code></a> Update README.md</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-artifact/compare/v4...v5">compare view</a></li> </ul> </details> <br /> Updates `actions/download-artifact` from 5 to 6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases">actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <p><strong>BREAKING CHANGE:</strong> this update supports Node <code>v24.x</code>. This is not a breaking change per-se but we're treating it as such.</p> <ul> <li>Update README for download-artifact v5 changes by <a href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/417">actions/download-artifact#417</a></li> <li>Update README with artifact extraction details by <a href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/424">actions/download-artifact#424</a></li> <li>Readme: spell out the first use of GHES by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/431">actions/download-artifact#431</a></li> <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li> <li>Prepare <code>v6.0.0</code> by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/438">actions/download-artifact#438</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/431">actions/download-artifact#431</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v5...v6.0.0">https://github.com/actions/download-artifact/compare/v5...v6.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53"><code>018cc2c</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/438">#438</a> from actions/danwkennedy/prepare-6.0.0</li> <li><a href="https://github.com/actions/download-artifact/commit/815651c680ffe1c95719d0ed08aba1a2f9d5c177"><code>815651c</code></a> Revert &quot;Remove <code>github.dep.yml</code>&quot;</li> <li><a href="https://github.com/actions/download-artifact/commit/bb3a066a8babc8ed7b3e4218896c548fe34e7115"><code>bb3a066</code></a> Remove <code>github.dep.yml</code></li> <li><a href="https://github.com/actions/download-artifact/commit/fa1ce46bbd11b8387539af12741055a76dfdf804"><code>fa1ce46</code></a> Prepare <code>v6.0.0</code></li> <li><a href="https://github.com/actions/download-artifact/commit/4a24838f3d5601fd639834081e118c2995d51e1c"><code>4a24838</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/431">#431</a> from danwkennedy/patch-1</li> <li><a href="https://github.com/actions/download-artifact/commit/5e3251c4ff5a32e4cf8dd4adaee0e692365237ae"><code>5e3251c</code></a> Readme: spell out the first use of GHES</li> <li><a href="https://github.com/actions/download-artifact/commit/abefc31eafcfbdf6c5336127c1346fdae79ff41c"><code>abefc31</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/424">#424</a> from actions/yacaovsnc/update_readme</li> <li><a href="https://github.com/actions/download-artifact/commit/ac43a6070aa7db8a41e756e7a2846221edca7027"><code>ac43a60</code></a> Update README with artifact extraction details</li> <li><a href="https://github.com/actions/download-artifact/commit/de96f4613b77ec03b5cf633e7c350c32bd3c5660"><code>de96f46</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/417">#417</a> from actions/yacaovsnc/update_readme</li> <li><a href="https://github.com/actions/download-artifact/commit/7993cb44e9052f2f08f9b828ae5ef3ecca7d2ac7"><code>7993cb4</code></a> Remove migration guide for artifact download changes</li> <li>Additional commits viewable in <a href="https://github.com/actions/download-artifact/compare/v5...v6">compare view</a></li> </ul> </details> <br /> Updates `actions/setup-python` from 5.4.0 to 6.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-python/releases">actions/setup-python's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <h3>Breaking Changes</h3> <ul> <li>Upgrade to node 24 by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1164">actions/setup-python#1164</a></li> </ul> <p>Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. <a href="https://github.com/actions/runner/releases/tag/v2.327.1">See Release Notes</a></p> <h3>Enhancements:</h3> <ul> <li>Add support for <code>pip-version</code> by <a href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1129">actions/setup-python#1129</a></li> <li>Enhance reading from .python-version by <a href="https://github.com/krystof-k"><code>@​krystof-k</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/787">actions/setup-python#787</a></li> <li>Add version parsing from Pipfile by <a href="https://github.com/aradkdj"><code>@​aradkdj</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1067">actions/setup-python#1067</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1183">actions/setup-python#1183</a></li> <li>Change missing cache directory error to warning by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1182">actions/setup-python#1182</a></li> <li>Add Architecture-Specific PATH Management for Python with --user Flag on Windows by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1122">actions/setup-python#1122</a></li> <li>Include python version in PyPy python-version output by <a href="https://github.com/cdce8p"><code>@​cdce8p</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1110">actions/setup-python#1110</a></li> <li>Update docs: clarification on pip authentication with setup-python by <a href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1156">actions/setup-python#1156</a></li> </ul> <h3>Dependency updates:</h3> <ul> <li>Upgrade idna from 2.9 to 3.7 in /<strong>tests</strong>/data by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-python/pull/843">actions/setup-python#843</a></li> <li>Upgrade form-data to fix critical vulnerabilities <a href="https://redirect.github.com/actions/setup-python/issues/182">#182</a> &amp; <a href="https://redirect.github.com/actions/setup-python/issues/183">#183</a> by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1163">actions/setup-python#1163</a></li> <li>Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1165">actions/setup-python#1165</a></li> <li>Upgrade actions/checkout from 4 to 5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-python/pull/1181">actions/setup-python#1181</a></li> <li>Upgrade <code>@​actions/tool-cache</code> from 2.0.1 to 2.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-python/pull/1095">actions/setup-python#1095</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/krystof-k"><code>@​krystof-k</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/787">actions/setup-python#787</a></li> <li><a href="https://github.com/cdce8p"><code>@​cdce8p</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1110">actions/setup-python#1110</a></li> <li><a href="https://github.com/aradkdj"><code>@​aradkdj</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1067">actions/setup-python#1067</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v5...v6.0.0">https://github.com/actions/setup-python/compare/v5...v6.0.0</a></p> <h2>v5.6.0</h2> <h2>What's Changed</h2> <ul> <li>Workflow updates related to Ubuntu 20.04 by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1065">actions/setup-python#1065</a></li> <li>Fix for Candidate Not Iterable Error by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1082">actions/setup-python#1082</a></li> <li>Upgrade semver and <code>@​types/semver</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1091">actions/setup-python#1091</a></li> <li>Upgrade prettier from 2.8.8 to 3.5.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1046">actions/setup-python#1046</a></li> <li>Upgrade ts-jest from 29.1.2 to 29.3.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1081">actions/setup-python#1081</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v5...v5.6.0">https://github.com/actions/setup-python/compare/v5...v5.6.0</a></p> <h2>v5.5.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Support free threaded Python versions like '3.13t' by <a href="https://github.com/colesbury"><code>@​colesbury</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/973">actions/setup-python#973</a></li> <li>Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade <code>@​action/cache</code> from 4.0.0 to 4.0.3 by <a href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1056">actions/setup-python#1056</a></li> <li>Add support for .tool-versions file in setup-python by <a href="https://github.com/mahabaleshwars"><code>@​mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1043">actions/setup-python#1043</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Fix architecture for pypy on Linux ARM64 by <a href="https://github.com/mayeut"><code>@​mayeut</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1011">actions/setup-python#1011</a> This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-python/commit/e797f83bcb11b83ae66e0230d6156d7c80228e7c"><code>e797f83</code></a> Upgrade to node 24 (<a href="https://redirect.github.com/actions/setup-python/issues/1164">#1164</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/3d1e2d2ca0a067f27da6fec484fce7f5256def85"><code>3d1e2d2</code></a> Revert &quot;Enhance cache-dependency-path handling to support files outside the w...</li> <li><a href="https://github.com/actions/setup-python/commit/65b071217a8539818fdb8b54561bcbae40380a54"><code>65b0712</code></a> Clarify pythonLocation behavior for PyPy and GraalPy in environment variables...</li> <li><a href="https://github.com/actions/setup-python/commit/5b668cf7652160527499ee14ceaff4be9306cb88"><code>5b668cf</code></a> Bump actions/checkout from 4 to 5 (<a href="https://redirect.github.com/actions/setup-python/issues/1181">#1181</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/f62a0e252fe7114e86949abfa6e1e89f85bb38c2"><code>f62a0e2</code></a> Change missing cache directory error to warning (<a href="https://redirect.github.com/actions/setup-python/issues/1182">#1182</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/9322b3ca74000aeb2c01eb777b646334015ddd72"><code>9322b3c</code></a> Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIn...</li> <li><a href="https://github.com/actions/setup-python/commit/fbeb884f69f0ac1c0257302f62aa524c2824b649"><code>fbeb884</code></a> Bump form-data to fix critical vulnerabilities <a href="https://redirect.github.com/actions/setup-python/issues/182">#182</a> &amp; <a href="https://redirect.github.com/actions/setup-python/issues/183">#183</a> (<a href="https://redirect.github.com/actions/setup-python/issues/1163">#1163</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/03bb6152f4f691b9d64579a1bd791904a083c452"><code>03bb615</code></a> Bump idna from 2.9 to 3.7 in /<strong>tests</strong>/data (<a href="https://redirect.github.com/actions/setup-python/issues/843">#843</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/36da51d563b70a972897150555bb025096d65565"><code>36da51d</code></a> Add version parsing from Pipfile (<a href="https://redirect.github.com/actions/setup-python/issues/1067">#1067</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/3c6f142cc0036d53007e92fa1e327564a4cfb7aa"><code>3c6f142</code></a> update documentation (<a href="https://redirect.github.com/actions/setup-python/issues/1156">#1156</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-python/compare/v5.4.0...v6">compare view</a></li> </ul> </details> <br /> Updates `hendrikmuhs/ccache-action` from 1.2.17 to 1.2.19 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hendrikmuhs/ccache-action/releases">hendrikmuhs/ccache-action's releases</a>.</em></p> <blockquote> <h2>v1.2.19</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@​types/node</code> from 22.15.2 to 22.15.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/319">hendrikmuhs/ccache-action#319</a></li> <li>Fix installing on windows/ARM64 by <a href="https://github.com/mstorsjo"><code>@​mstorsjo</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/318">hendrikmuhs/ccache-action#318</a></li> <li>Bump <code>@​types/node</code> from 22.15.3 to 22.15.16 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/322">hendrikmuhs/ccache-action#322</a></li> <li>Bump <code>@​types/node</code> from 22.15.16 to 22.15.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/324">hendrikmuhs/ccache-action#324</a></li> <li>Bump <code>@​types/node</code> from 22.15.18 to 22.15.23 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/329">hendrikmuhs/ccache-action#329</a></li> <li>Bump ts-jest from 29.3.2 to 29.3.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/327">hendrikmuhs/ccache-action#327</a></li> <li>Bump ts-jest from 29.3.4 to 29.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/336">hendrikmuhs/ccache-action#336</a></li> <li>Bump <code>@​types/node</code> from 22.15.23 to 24.0.10 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/344">hendrikmuhs/ccache-action#344</a></li> <li>Bump jest and <code>@​types/jest</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/341">hendrikmuhs/ccache-action#341</a></li> <li>Bump <code>@​types/node</code> from 24.0.10 to 24.0.12 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/346">hendrikmuhs/ccache-action#346</a></li> <li>Bump jest from 30.0.4 to 30.0.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/350">hendrikmuhs/ccache-action#350</a></li> <li>Bump <code>@​types/node</code> from 24.0.12 to 24.1.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/351">hendrikmuhs/ccache-action#351</a></li> <li>Bump typescript from 5.8.3 to 5.9.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/352">hendrikmuhs/ccache-action#352</a></li> <li>Bump <code>@​types/node</code> from 24.1.0 to 24.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/354">hendrikmuhs/ccache-action#354</a></li> <li>Bump ts-jest from 29.4.0 to 29.4.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/353">hendrikmuhs/ccache-action#353</a></li> <li>Bump <code>@​types/node</code> from 24.2.0 to 24.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/356">hendrikmuhs/ccache-action#356</a></li> <li>Bump actions/checkout from 4 to 5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/357">hendrikmuhs/ccache-action#357</a></li> <li>Bump brace-expansion from 1.1.11 to 1.1.12 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/358">hendrikmuhs/ccache-action#358</a></li> <li>Bump <code>@​actions/cache</code> from 4.0.3 to 4.0.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/355">hendrikmuhs/ccache-action#355</a></li> <li>Bump <code>@​types/node</code> from 24.2.1 to 24.3.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/364">hendrikmuhs/ccache-action#364</a></li> <li>Bump jest from 30.0.5 to 30.1.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/363">hendrikmuhs/ccache-action#363</a></li> <li>Bump form-data by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/365">hendrikmuhs/ccache-action#365</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mstorsjo"><code>@​mstorsjo</code></a> made their first contribution in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/318">hendrikmuhs/ccache-action#318</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/hendrikmuhs/ccache-action/compare/v1...v1.2.19">https://github.com/hendrikmuhs/ccache-action/compare/v1...v1.2.19</a></p> <h2>v1.2.18</h2> <h2>What's Changed</h2> <ul> <li>Bump ts-jest from 29.2.5 to 29.2.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/291">hendrikmuhs/ccache-action#291</a></li> <li>Bump typescript from 5.7.3 to 5.8.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/294">hendrikmuhs/ccache-action#294</a></li> <li>Bump <code>@​types/node</code> from 22.13.0 to 22.13.9 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/296">hendrikmuhs/ccache-action#296</a></li> <li>set cache to readonly if skipping save by <a href="https://github.com/planetmarshall"><code>@​planetmarshall</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/301">hendrikmuhs/ccache-action#301</a></li> <li>Update sccache version to v0.10.0 by <a href="https://github.com/mhegazy"><code>@​mhegazy</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/315">hendrikmuhs/ccache-action#315</a></li> <li>Bump <code>@​types/node</code> from 22.13.9 to 22.15.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/316">hendrikmuhs/ccache-action#316</a></li> <li>Bump ts-jest from 29.2.6 to 29.3.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/312">hendrikmuhs/ccache-action#312</a></li> <li>Bump typescript from 5.8.2 to 5.8.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/311">hendrikmuhs/ccache-action#311</a></li> <li>Bump <code>@​actions/cache</code> from 4.0.0 to 4.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/299">hendrikmuhs/ccache-action#299</a></li> <li>Don't append <code>-</code> when <code>append-timestamp</code> is disabled. by <a href="https://github.com/Naros"><code>@​Naros</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/306">hendrikmuhs/ccache-action#306</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mhegazy"><code>@​mhegazy</code></a> made their first contribution in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/315">hendrikmuhs/ccache-action#315</a></li> <li><a href="https://github.com/Naros"><code>@​Naros</code></a> made their first contribution in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/306">hendrikmuhs/ccache-action#306</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/hendrikmuhs/ccache-action/compare/v1...v1.2.18">https://github.com/hendrikmuhs/ccache-action/compare/v1...v1.2.18</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716"><code>bfa03e1</code></a> update code</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/f33f8a96df032dc98f4f1be906324f1bebd2a986"><code>f33f8a9</code></a> Bump form-data (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/365">#365</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/a3627aeda749b0e5bc16a451bd522bb49e226b60"><code>a3627ae</code></a> Bump jest from 30.0.5 to 30.1.3 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/363">#363</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/832d41f55d238ba13c37d818e29f2c0c6ca95ff7"><code>832d41f</code></a> Bump <code>@​types/node</code> from 24.2.1 to 24.3.1 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/364">#364</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/9eb8b7a50af98b743c606d4520e9a098c5733bef"><code>9eb8b7a</code></a> update code</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/43df442a9bc62c0248897f9b04ed3a7a6445915b"><code>43df442</code></a> Bump <code>@​actions/cache</code> from 4.0.3 to 4.0.5 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/355">#355</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/ed66a3f3bd201453644b1a9288c4a671b4bcdc32"><code>ed66a3f</code></a> Bump brace-expansion from 1.1.11 to 1.1.12 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/358">#358</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/8782512e827099c27ddff0d31058444eb87de822"><code>8782512</code></a> Bump actions/checkout from 4 to 5 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/357">#357</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/8c8b5e7df70448c8f10afc87e1875223c1f24d02"><code>8c8b5e7</code></a> Bump <code>@​types/node</code> from 24.2.0 to 24.2.1 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/356">#356</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/4f314b2aaa5118b9e49eb811277df5b0906bce93"><code>4f314b2</code></a> Bump ts-jest from 29.4.0 to 29.4.1 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/353">#353</a>)</li> <li>Additional commits viewable in <a href="https://github.com/hendrikmuhs/ccache-action/compare/v1.2.17...bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716">compare view</a></li> </ul> </details> <br /> Updates `EnricoMi/publish-unit-test-result-action` from 2.20.0 to 2.21.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/enricomi/publish-unit-test-result-action/releases">EnricoMi/publish-unit-test-result-action's releases</a>.</em></p> <blockquote> <h2>v2.21.0</h2> <p>Adds the following improvements:</p> <ul> <li>Add Docker action to allow setting Docker registry and image <a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/688">#688</a></li> <li>Fix class name matching for NUnit3 <a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/689">#689</a></li> <li>Upgrade all Python dependencies to latest version <a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/695">#695</a></li> <li>Fix <code>@2</code> tag in <code>README.md</code> to <code>@v2</code> <a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/687">#687</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/EnricoMi/publish-unit-test-result-action/compare/v2.20.0...v2.21.0">https://github.com/EnricoMi/publish-unit-test-result-action/compare/v2.20.0...v2.21.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/34d7c956a59aed1bfebf31df77b8de55db9bbaaf"><code>34d7c95</code></a> Releasing v2.21.0 (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/699">#699</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/578fa893100519afac1357ec8b06176ea713fc8f"><code>578fa89</code></a> Add <code>docker/action.yml</code> to allow setting docker registry and image (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/688">#688</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/45cb7880601f317e29f6c27209bf0baccb1330be"><code>45cb788</code></a> Bump actions/download-artifact from 4 to 5 (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/683">#683</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/8c9138290beb21d6e58171bb78760f3b33b732d8"><code>8c91382</code></a> Bump actions/checkout from 4 to 5 (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/684">#684</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/694bceb3b60aa0323fe10b06ecc3672ea7e11c6b"><code>694bceb</code></a> Fix <code>@2</code> tag in <code>README.md</code> to <code>@v2</code> (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/687">#687</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/980d9de572fcd08b7e621c529070e4db1319332c"><code>980d9de</code></a> Fix class name matching in <code>nunit3-to-junit.xslt</code> (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/689">#689</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/d243703707d99929e6ef3244e5f98da35ed47c88"><code>d243703</code></a> Remove <code>macos-13</code>, and <code>macos-26</code> github runners (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/697">#697</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/c965d1ea530cf8302e4fc7c431d1e33da55e00e5"><code>c965d1e</code></a> Bump actions/setup-python from 5 to 6 (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/692">#692</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/c88cf3f34330d3fa67f591c103369df1060647dd"><code>c88cf3f</code></a> Add Python 3.14 to CI (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/694">#694</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/37526f58f558a191cca6e4c6b0e4c0dfdd2d8ec8"><code>37526f5</code></a> Upgrade all Python dependencies to latest version (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/695">#695</a>)</li> <li>Additional commits viewable in <a href="https://github.com/enricomi/publish-unit-test-result-action/compare/3a74b2957438d0b6e2e61d67b05318aa25c9e6c6...34d7c956a59aed1bfebf31df77b8de55db9bbaaf">compare view</a></li> </ul> </details> <br /> Updates `actions/setup-node` from 5.0.0 to 6.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <p><strong>Breaking Changes</strong></p> <ul> <li>Limit automatic caching to npm, update workflows and documentation by <a href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1374">actions/setup-node#1374</a></li> </ul> <p><strong>Dependency Upgrades</strong></p> <ul> <li>Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-node/pull/1336">#1336</a></li> <li>Upgrade prettier from 2.8.8 to 3.6.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-node/pull/1334">#1334</a></li> <li>Upgrade actions/publish-action from 0.3.0 to 0.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-node/pull/1362">#1362</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v5...v6.0.0">https://github.com/actions/setup-node/compare/v5...v6.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/2028fbc5c25fe9cf00d9f06a71cc4710d4507903"><code>2028fbc</code></a> Limit automatic caching to npm, update workflows and documentation (<a href="https://redirect.github.com/actions/setup-node/issues/1374">#1374</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/13427813f706a0f6c9b74603b31103c40ab1c35a"><code>1342781</code></a> Bump actions/publish-action from 0.3.0 to 0.4.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1362">#1362</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/89d709d423dc495668cd762a18dd4a070611be3f"><code>89d709d</code></a> Bump prettier from 2.8.8 to 3.6.2 (<a href="https://redirect.github.com/actions/setup-node/issues/1334">#1334</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/cd2651c46231bc0d6f48d6b34433b845331235fe"><code>cd2651c</code></a> Bump ts-jest from 29.1.2 to 29.4.1 (<a href="https://redirect.github.com/actions/setup-node/issues/1336">#1336</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-node/compare/a0853c24544627f65ddf259abe73b1d18a591444...2028fbc5c25fe9cf00d9f06a71cc4710d4507903">compare view</a></li> </ul> </details> <br /> Updates `sigstore/gh-action-sigstore-python` from 3.0.1 to 3.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.1.0</h2> <p><code>gh-action-sigstore-python</code> is now compatible with <a href="https://blog.sigstore.dev/rekor-v2-ga/">Rekor v2</a> transparency log (but produced signature bundles still contain Rekor v1 entries by default).</p> <h3>Changed</h3> <ul> <li>The action now uses sigstore-python 4.1. All other dependencies are also updated (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/220">#220</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fixed incompatibility with Python 3.14 by upgrading dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/225">#225</a>)</li> </ul> <h3>Added</h3> <ul> <li><code>rekor-version</code> argument was added to control the Rekor transparency log version when signing. The default version in the gh-action-sigstore-python 3.x series will remain 1 (except when using <code>staging: true</code>). (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/228">#228</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.1.0]</h2> <p><code>gh-action-sigstore-python</code> is now compatible with <a href="https://blog.sigstore.dev/rekor-v2-ga/">Rekor v2</a> transparency log (but produced signature bundles still contain Rekor v1 entries by default).</p> <h3>Changed</h3> <ul> <li>The action now uses sigstore-python 4.1. All other dependencies are also updated (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/220">#220</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fixed incompatibility with Python 3.14 by upgrading dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/225">#225</a>)</li> </ul> <h3>Added</h3> <ul> <li><code>rekor-version</code> argument was added to control the Rekor transparency log version when signing. The default version in the gh-action-sigstore-python 3.x series will remain 1 (except when using <code>staging: true</code>). (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/228">#228</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f832326173235dcb00dd5d92cd3f353de3188e6c"><code>f832326</code></a> Prepare 3.1.0 release (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/230">#230</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/3385d3ad524c66915d8fcfa82f74b905058b2ad4"><code>3385d3a</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/232">#232</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/35fff1e5bf90fac1298692cee891e1f65fce1a93"><code>35fff1e</code></a> Add rekor-version argument (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/228">#228</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/be60bbea7f8770c9c9673a8fabafec00df7f458f"><code>be60bbe</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/231">#231</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/72e7431cf7415752b53e3e537861872efa4b59b1"><code>72e7431</code></a> Actually upgrade dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/225">#225</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/ccdc279cc26afbb1ce2849748d6263f076b7e3e3"><code>ccdc279</code></a> ci, action: address zizmor findings, bump versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/222">#222</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/709f8a40efe9f4d3bf38feb831ffc930b9688c93"><code>709f8a4</code></a> build(deps): bump sigstore from 3.6.3 to 4.0.0 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/220">#220</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/5ce4031dd209da1deb84a18c41259d0c46478e48"><code>5ce4031</code></a> requirements: Include main.in contents within dev.in (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/221">#221</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/ea888adbde89b79cda7612fd09c99bdcc8b129b5"><code>ea888ad</code></a> build(deps): bump the actions group with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/218">#218</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/17565e2406fc237359e19a217a7b03242eb60c36"><code>17565e2</code></a> build(deps): bump the python-dependencies group with 6 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/219">#219</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.1...v3.1.0">compare view</a></li> </ul> </details> <br /> Updates `softprops/action-gh-release` from 2.3.3 to 2.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/softprops/action-gh-release/releases">softprops/action-gh-release's releases</a>.</em></p> <blockquote> <h2>v2.4.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Other Changes 🔄</h3> <ul> <li>fix(util): support brace expansion globs containing commas in parseInputFiles by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/672">softprops/action-gh-release#672</a></li> <li>fix: gracefully fallback to body when body_path cannot be read by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/671">softprops/action-gh-release#671</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/softprops/action-gh-release/compare/v2...v2.4.1">https://github.com/softprops/action-gh-release/compare/v2...v2.4.1</a></p> <h2>v2.4.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Exciting New Features 🎉</h3> <ul> <li>feat(action): respect working_directory for files globs by <a href="https://github.com/stephenway"><code>@​stephenway</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/667">softprops/action-gh-release#667</a></li> </ul> <h3>Other Changes 🔄</h3> <ul> <li>chore(deps): bump the npm group with 2 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/668">softprops/action-gh-release#668</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/softprops/action-gh-release/compare/v2.3.4...v2.4.0">https://github.com/softprops/action-gh-release/compare/v2.3.4...v2.4.0</a></p> <h2>v2.3.4</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Bug fixes 🐛</h3> <ul> <li>fix(action): handle 422 already_exists race condition by <a href="https://github.com/stephenway"><code>@​stephenway</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/665">softprops/action-gh-release#665</a></li> </ul> <h3>Other Changes 🔄</h3> <ul> <li>chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 in the github-actions group by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/656">softprops/action-gh-release#656</a></li> <li>chore(deps): bump <code>@​types/node</code> from 20.19.11 to 20.19.13 in the npm group by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/655">softprops/action-gh-release#655</a></li> <li>chore(deps): bump vite from 7.0.0 to 7.1.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/657">softprops/action-gh-release#657</a></li> <li>chore(deps): bump the npm group across 1 directory with 2 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/662">softprops/action-gh-release#662</a></li> <li>chore(deps): bump the npm group with 3 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/666">softprops/action-gh-release#666</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/softprops/action-gh-release/compare/v2...v2.3.4">https://github.com/softprops/action-gh-release/compare/v2...v2.3.4</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md">softprops/action-gh-release's changelog</a>.</em></p> <blockquote> <h2>2.4.1</h2> <h2>What's Changed</h2> <h3>Other Changes 🔄</h3> <ul> <li>fix(util): support brace expansion globs containing commas in parseInputFiles by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/672">softprops/action-gh-release#672</a></li> <li>fix: gracefully fallback to body when body_path cannot be read by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/671">softprops/action-gh-release#671</a></li> </ul> <h2>2.4.0</h2> <h2>What's Changed</h2> <h3>Exciting New Features 🎉</h3> <ul> <li>feat(action): respect working_directory for files globs by <a href="https://github.com/stephenway"><code>@​stephenway</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/667">softprops/action-gh-release#667</a></li> </ul> <h2>2.3.4</h2> <h2>What's Changed</h2> <h3>Bug fixes 🐛</h3> <ul> <li>fix(action): handle 422 already_exists race condition by <a href="https://github.com/stephenway"><code>@​stephenway</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/665">softprops/action-gh-release#665</a></li> </ul> <h3>Other Changes 🔄</h3> <ul> <li>dependency updates</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/softprops/action-gh-release/commit/6da8fa9354ddfdc4aeace5fc48d7f679b5214090"><code>6da8fa9</code></a> release 2.4.1</li> <li><a href="https://github.com/softprops/action-gh-release/commit/f38efdea4c5ffe13e9424b0aa2833bee28f1e34c"><code>f38efde</code></a> fix: gracefully fallback to body when body_path cannot be read (<a href="https://redirect.github.com/softprops/action-gh-release/issues/671">#671</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/cec1a1113b630bc5ae75fe5204e1b22f8d699e94"><code>cec1a11</code></a> fix(util): support brace expansion globs containing commas in parseInputFiles...</li> <li><a href="https://github.com/softprops/action-gh-release/commit/aec2ec56f94eb8180ceec724245f64ef008b89f5"><code>aec2ec5</code></a> release 2.4.0</li> <li><a href="https://github.com/softprops/action-gh-release/commit/4db716b1675d78def1254daf8ba4bf42b0806748"><code>4db716b</code></a> feat: respect working_directory for files globs; add input and tests (<a href="https://redirect.github.com/softprops/action-gh-release/issues/667">#667</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/14820f2cee95a6ff4a1054a5eeb951fe197b73fe"><code>14820f2</code></a> chore(deps): bump the npm group with 2 updates (<a href="https://redirect.github.com/softprops/action-gh-release/issues/668">#668</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/62c96d0c4e8a889135c1f3a25910db8dbe0e85f7"><code>62c96d0</code></a> release 2.3.4</li> <li><a href="https://github.com/softprops/action-gh-release/commit/7dc9b8ac0f2368b3a87cf0705832afc474fc7cd8"><code>7dc9b8a</code></a> fix(action): handle 422 already_exists race condition (<a href="https://redirect.github.com/softprops/action-gh-release/issues/665">#665</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/0f0e0b98e953d8219f04f51a8608dd41c902f012"><code>0f0e0b9</code></a> chore(deps): bump the npm group with 3 updates (<a href="https://redirect.github.com/softprops/action-gh-release/issues/666">#666</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/97d42c1b50f585f357413698aa1b779307aa0d52"><code>97d42c1</code></a> chore(deps): bump the npm group across 1 directory with 2 updates (<a href="https://redirect.github.com/softprops/action-gh-release/issues/662">#662</a>)</li> <li>Additional commits viewable in <a href="https://github.com/softprops/action-gh-release/compare/v2.3.3...v2.4.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/build-ci-container-windows.yml

@@ -44,7 +44,7 @@ jobs:
  run: |
  docker save ${{ steps.vars.outputs.container-name-tag }} > ${{ steps.vars.outputs.container-filename }}
  - name: Upload container image
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
  with:
  name: container
  path: ${{ steps.vars.outputs.container-filename }}
@@ -61,7 +61,7 @@ jobs:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  steps:
  - name: Download container
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+ uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
  with:
  name: container
  - name: Push Container

.github/workflows/build-ci-container.yml

@@ -64,7 +64,7 @@ jobs:
  podman save ${{ steps.vars.outputs.container-name-agent-tag }} > ${{ steps.vars.outputs.container-agent-filename }}
 
  - name: Upload container image
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
  with:
  name: container-${{ matrix.arch }}
  path: "*.tar"
@@ -88,7 +88,7 @@ jobs:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  steps:
  - name: Download container
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+ uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
 
  - name: Push Container
  run: |

.github/workflows/build-metrics-container.yml

@@ -49,7 +49,7 @@ jobs:
  run: |
  podman save ${{ steps.vars.outputs.container-name-tag }} > ${{ steps.vars.outputs.container-filename }}
  - name: Upload Container Image
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
  with:
  name: container
  path: ${{ steps.vars.outputs.container-filename }}
@@ -66,7 +66,7 @@ jobs:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  steps:
  - name: Download Container
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+ uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
  with:
  name: container
  - name: Push Container

.github/workflows/ci-post-commit-analyzer.yml

@@ -87,7 +87,7 @@ jobs:
  scan-build --generate-index-only build/analyzer-results
 
  - name: Upload Results
- uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 #v4.3.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 #v5.0.0
  if: always()
  with:
  name: analyzer-results

.github/workflows/commit-access-review.yml

@@ -28,7 +28,7 @@ jobs:
  python3 .github/workflows/commit-access-review.py $GITHUB_TOKEN
 
  - name: Upload Triage List
- uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 #v4.3.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 #v5.0.0
  with:
  name: triagers
  path: triagers.log

.github/workflows/docs.yml

@@ -209,7 +209,7 @@ jobs:
  mkdir built-docs/flang
  cp -r flang-build/docs/* built-docs/flang/
  - name: Upload docs
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
  with:
  name: docs-output
  path: built-docs/

.github/workflows/email-check.yaml

@@ -40,7 +40,7 @@ jobs:
  [{"body" : "$COMMENT"}]
  EOF
 
- - uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 #v4.3.0
+ - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 #v5.0.0
  if: always()
  with:
  name: workflow-args

.github/workflows/hlsl-test-all.yaml

@@ -80,7 +80,7 @@ jobs:
  ninja check-hlsl-unit
  ninja ${{ inputs.TestTarget }}
  - name: Publish Test Results
- uses: EnricoMi/publish-unit-test-result-action/macos@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2
+ uses: EnricoMi/publish-unit-test-result-action/macos@34d7c956a59aed1bfebf31df77b8de55db9bbaaf # v2
  if: always() && runner.os == 'macOS'
  with:
  comment_mode: off

.github/workflows/libclang-abi-tests.yml

@@ -131,7 +131,7 @@ jobs:
  sed -i 's/LLVM_[0-9]\+/LLVM_NOVERSION/' $lib-${{ matrix.ref }}.abi
  done
  - name: Upload ABI file
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # 4.6.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # 5.0.0
  with:
  name: ${{ matrix.name }}
  path: '*${{ matrix.ref }}.abi'
@@ -144,12 +144,12 @@ jobs:
  - abi-dump
  steps:
  - name: Download baseline
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # 5.0.0
+ uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # 6.0.0
  with:
  name: build-baseline
  path: build-baseline
  - name: Download latest
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # 5.0.0
+ uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # 6.0.0
  with:
  name: build-latest
  path: build-latest
@@ -165,7 +165,7 @@ jobs:
  done
  - name: Upload ABI Comparison
  if: always()
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # 4.6.0
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # 5.0.0
  with:
  name: compat-report-${{ github.sha }}
  path: compat_reports/

.github/workflows/libclang-python-tests.yml

@@ -34,11 +34,11 @@ jobs:
  steps:
  - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
  - name: Setup Python
- uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
+ uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
  with:
  python-version: ${{ matrix.python-version }}
  - name: Setup ccache
- uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+ uses: hendrikmuhs/ccache-action@bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
  with:
  max-size: 2G
  key: spirv-ubuntu-24.04