The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.
Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet actions/toolkit#1278
In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.
In scope of this release, the filter was removed within the cache-save step by @dmitry-shibanov in actions/setup-node#831. It is filtered and checked in the toolkit/cache library.
This release contains the following breaking changes:
The ability to apply labels based on the names of base and/or head branches was added (#186 and #54). The match object for changed files was expanded with new combinations in order to make it more intuitive and flexible (#423 and #101). As a result, the configuration file structure was significantly redesigned and is not compatible with the structure of the previous version. Please read the action documentation to find out how to adapt your configuration files for use with the new action version.
The bug related to the sync-labels input was fixed (#112). Now the input value is read correctly.
By default, dot input is set to true. Now, paths starting with a dot (e.g. .github) are matched by default.
Version 5 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.
[UNRELEASED]
No user facing changes.
3.25.7 - 31 May 2024
We are rolling out a feature in May/June 2024 that will reduce the Actions cache usage of the Action by keeping only the newest TRAP cache for each language. #2306
3.25.6 - 20 May 2024
Update default CodeQL bu...
_Description has been truncated_
Bumps the github-actions group with 8 updates:
3
4
39
44
4
5
3
7
3
4
4
5
2.3.1
2.3.3
2.2.4
3.25.7
Updates
actions/download-artifact
from 3 to 4Release notes
Sourced from actions/download-artifact's releases.
Commits
65a9edc
Merge pull request #325 from bethanyj28/mainfdd1595
licensedc13dba1
update@actions/artifact
dependency0daa75e
Merge pull request #324 from actions/eggyhead/use-artifact-v2.1.69c19ed7
Merge branch 'main' into eggyhead/use-artifact-v2.1.63d3ea87
updating license89af5db
updating artifact package v2.1.6b4aefff
Merge pull request #323 from actions/eggyhead/update-artifact-v2158caf195
package lock updated7a2ec4
updating package versionUpdates
tj-actions/changed-files
from 39 to 44Release notes
Sourced from tj-actions/changed-files's releases.
... (truncated)
Changelog
Sourced from tj-actions/changed-files's changelog.
... (truncated)
Commits
d6babd6
fix: warning with fetch_missing_history_max_retries using REST API (#2114)0a79e54
chore(deps): update dependency@types/node
to v20.12.139d06a2a
chore(deps): update dependency ts-jest to v29.1.47e8e88b
chore(deps): update typescript-eslint monorepo to v7.11.0b510737
chore(deps): lock file maintenance2e70979
chore(deps): lock file maintenance625929d
Upgraded to v44.5.1 (#2108)03334d0
fix: bug detecting previous tag when workflow is rerun (#2107)8a0655f
Added missing changes and modified dist assets.98e187e
fix(deps): update dependency micromatch to v4.0.7Updates
actions/setup-python
from 4 to 5Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
82c7e63
Documentation changes for avoiding rate limit issues on GHES (#835)10aa35a
feat: fallback to raw endpoint for manifest when rate limit is reached (#766)9a7ac94
Bump undici from 5.27.2 to 5.28.3 (#817)871daa9
Fix the "Specifying multiple Python/PyPy versions" link (#782)2f07895
Fix broken README.md link (#793)e9d6f99
Replace setup-python@v4 by setup-python@v5 in README (#776)0a5c615
Update action to node20 (#772)0ae5836
Add example of GraalPy to docs (#773)b64ffca
update actions/checkout to v4 (#761)8d28961
Examples now use checkout@v4 (#738)Updates
actions/github-script
from 3 to 7Release notes
Sourced from actions/github-script's releases.
... (truncated)
Commits
60a0d83
Merge pull request #440 from actions/joshmgross/v7.0.1b7fb200
Update version to 7.0.112e22ed
Merge pull request #439 from actions/joshmgross/avoid-setting-base-urld319f8f
Avoid settingbaseUrl
to undefined when input is not providede69ef54
Merge pull request #425 from actions/joshmgross/node-20ee0914b
Update licensesd6fc56f
Use@types/node
for Node 20384d6cf
Fix quotations in tests8472492
Only validate GraphQLpreviews
84903f5
Removenode-fetch
from typeUpdates
actions/setup-node
from 3 to 4Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
60edb5d
Add support for arm64 Windows (#927)d86ebcd
Add support forvolta.extends
(#921)b39b52d
Fix node-version-file interprets entire package.json as a version (#865)7247617
Addpackage.json
tonode-version-file
list of examples. (#879)f3ec4ca
Fix README.md (#898)ec97f37
Add fix for cache (#917)5ef044f
Update reusable workflows to use Node.js v20 (#889)c45882a
update to setup-node@v4 in docs (#884)ee36e8b
Ignore engines check in Yarn 1 e2e-cache tests (#882)8f152de
Update actions/checkout for documentation and yaml (#876)Updates
actions/labeler
from 4 to 5Release notes
Sourced from actions/labeler's releases.
... (truncated)
Commits
8558fd7
Merge pull request #709 from actions/v5.0.0-beta000ca75
Merge pull request #700 from MaksimZhukov/apply-suggestions-and-update-docume...cb66c2f
Update dist9181355
Apply suggestions for the beta vesrion and update the documentationefe4c1c
Merge pull request #699 from MaksimZhukov/update-node-runtime-and-dependenciesc0957ad
Run Prettier8dc8d18
Update Node.js version in reusable workflowsd0d0bbe
Update documentation1375c42
5.0.0ab7411e
Change version of Node.js runtime to node20Updates
ossf/scorecard-action
from 2.3.1 to 2.3.3Release notes
Sourced from ossf/scorecard-action's releases.
Commits
dc50aa9
:seedling: Bump docker tag for v2.3.3 release (#1368)8ff5700
:seedling: Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0....8ba5e73
update api links to new scorecard.dev site (#1376)92ddde3
Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 (#1374)6c55905
:seedling: Bump golang.org/x/net from 0.24.0 to 0.25.0 (#1373)09bb953
:seedling: Bump distroless/base in the docker-images group (#1372)1511e13
:seedling: Bump the github-actions group across 1 directory with 6 updates (#...df66cd8
:seedling: Bump the docker-images group with 2 updates (#1370)fad9a3c
:seedling: Bump distroless/base in the docker-images group (#1364)1e01a30
:seedling: Bump the github-actions group with 3 updates (#1365)Updates
github/codeql-action
from 2.2.4 to 3.25.7Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.