chore(deps): update github workflow dependencies #1709

renovate · 2026-01-01T04:31:03Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	patch	`v2.2.0` → `v2.2.1`
actions/setup-node	action	minor	`v6.0.0` → `v6.1.0`
actions/setup-python	action	minor	`v5` → `v5.6.0`
codecov/codecov-action	action	patch	`v5.5.1` → `v5.5.2`
docker/setup-buildx-action	action	minor	`v3.7.1` → `v3.12.0`
dtolnay/rust-toolchain	action	digest	`6d653ac` → `f7ccc83`
github/codeql-action	action	patch	`v4.31.6` → `v4.31.9`
go	uses-with	patch	`1.25.4` → `1.25.5`
python	uses-with	minor	`3.11` → `3.14`
step-security/harden-runner	action	minor	`v2.13.2` → `v2.14.0`
taiki-e/install-action	action	minor	`v2.62.60` → `v2.65.13`

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

actions/setup-node (actions/setup-node)

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

actions/setup-python (actions/setup-python)

`v5.6.0`

Compare Source

What's Changed

Workflow updates related to Ubuntu 20.04 by @aparnajyothi-y in #1065
Fix for Candidate Not Iterable Error by @aparnajyothi-y in #1082
Upgrade semver and @types/semver by @dependabot in #1091
Upgrade prettier from 2.8.8 to 3.5.3 by @dependabot in #1046
Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in #1081

Full Changelog: actions/setup-python@v5...v5.6.0

`v5.5.0`

Compare Source

What's Changed

Enhancements:

Support free threaded Python versions like '3.13t' by @colesbury in #973
Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @action/cache from 4.0.0 to 4.0.3 by @priya-kinthali in #1056
Add support for .tool-versions file in setup-python by @mahabaleshwars in #1043

Bug fixes:

Fix architecture for pypy on Linux ARM64 by @mayeut in #1011
This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1016
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1015

New Contributors

@colesbury made their first contribution in #973
@mahabaleshwars made their first contribution in #1043

Full Changelog: actions/setup-python@v5...v5.5.0

`v5.4.0`

Compare Source

What's Changed

Enhancements:

Update cache error message by @aparnajyothi-y in #968
Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @priya-kinthali in #985
Configure Dependabot settings by @HarithaVattikuti in #1008

Documentation changes:

Readme update - recommended permissions by @benwells in #1009
Improve Advanced Usage examples by @lrq3000 in #645

Dependency updates:

Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #1012
Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @dependabot in #895
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #1014
Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in #1020
Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @dependabot in #1019
Upgrade @actions/cache to ^4.0.0 by @priyagupta108 in #1007

New Contributors

@benwells made their first contribution in #1009
@HarithaVattikuti made their first contribution in #1008
@lrq3000 made their first contribution in #645

Full Changelog: actions/setup-python@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #941
Upgrade IA publish by @Jcambass in #943

Bug Fixes:

Normalise Line Endings to Ensure Cross-Platform Consistency by @priya-kinthali in #938
Revise isGhes logic by @jww3 in #963
Bump pillow from 7.2 to 10.2.0 by @aparnajyothi-y in #956

Enhancements:

Enhance workflows and documentation updates by @priya-kinthali in #965
Bump default versions to latest by @jeffwidman in #905

New Contributors

@Jcambass made their first contribution in #941
@jww3 made their first contribution in #963

Full Changelog: actions/setup-python@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Bug fixes:

Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @priyagupta108 in #916
This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
Add arch to cache key by @Zxilly in #896
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.

Documentation changes:

Fix display of emojis in contributors doc by @sciencewhiz in #899
Documentation update for caching poetry dependencies by @gowridurgad in #908

Dependency updates:

Bump @iarna/toml version from 2.2.5 to 3.0.0 by @priya-kinthali in #912
Bump pyinstaller from 3.6 to 5.13.1 by @aparnajyothi-y in #923

New Contributors

@sciencewhiz made their first contribution in #899
@priyagupta108 made their first contribution in #916
@Zxilly made their first contribution in #896
@aparnajyothi-y made their first contribution in #923

Full Changelog: actions/setup-python@v5...v5.2.0

`v5.1.1`

Compare Source

What's Changed

Bug fixes:

fix(ci): update all failing workflows by @mayeut in #863
This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

Documentation update for cache by @gowridurgad in #873

Dependency updates:

Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @dependabot in #893

New Contributors

@gowridurgad made their first contribution in #873

Full Changelog: actions/setup-python@v5...v5.1.1

`v5.1.0`

Compare Source

What's Changed

Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @Shegox in #766.
Dependency updates by @dependabot and @HarithaVattikuti in #817
Documentation changes for version in README by @basnijholt in #776
Documentation changes for link in README by @ukd1 in #793
Documentation changes for link in Advanced Usage by @Jamim in #782
Documentation changes for avoiding rate limit issues on GHES by @priya-kinthali in #835

New Contributors

@basnijholt made their first contribution in #776
@ukd1 made their first contribution in #793
@Jamim made their first contribution in #782
@Shegox made their first contribution in #766
@priya-kinthali made their first contribution in #835

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

codecov/codecov-action (codecov/codecov-action)

`v5.5.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.12.0`

Compare Source

Deprecate install input by @crazy-max in #455
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #434
Bump brace-expansion from 1.1.11 to 1.1.12 in #436
Bump form-data from 2.5.1 to 2.5.5 in #432
Bump undici from 5.28.4 to 5.29.0 in #435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

`v3.11.1`

Compare Source

Fix keep-state not being respected by @crazy-max in #429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

`v3.11.0`

Compare Source

Keep BuildKit state support by @crazy-max in #427
Remove aliases created when installing by default by @hashhar in #139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #422 #425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

`v3.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in #408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

`v3.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.48.0 to 0.54.0 in #402 #404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

`v3.8.0`

Compare Source

Make cloud prefix optional to download buildx if driver is cloud by @crazy-max in #390
Bump @actions/core from 1.10.1 to 1.11.1 in #370
Bump @docker/actions-toolkit from 0.39.0 to 0.48.0 in #389
Bump cross-spawn from 7.0.3 to 7.0.6 in #382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

github/codeql-action (github/codeql-action)

`v4.31.9`

Compare Source

`v4.31.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

actions/go-versions (go)

`v1.25.5`: 1.25.5

Compare Source

Go 1.25.5

actions/python-versions (python)

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

`v3.13.11`: 3.13.11

Compare Source

Python 3.13.11

`v3.13.10`: 3.13.10

Compare Source

Python 3.13.10

`v3.13.9`: 3.13.9

Compare Source

Python 3.13.9

`v3.13.8`: 3.13.8

Compare Source

Python 3.13.8

`v3.13.7`: 3.13.7

Compare Source

Python 3.13.7

`v3.13.6`: 3.13.6

Compare Source

Python 3.13.6

`v3.13.5`: 3.13.5

Compare Source

Python 3.13.5

`v3.13.4`: 3.13.4

Compare Source

Python 3.13.4

`v3.13.3`: 3.13.3

Compare Source

Python 3.13.3

`v3.13.2`: 3.13.2

Compare Source

Python 3.13.2

`v3.13.1`: 3.13.1

Compare Source

Python 3.13.1

`v3.13.0`: 3.13.0

Compare Source

Python 3.13.0

`v3.12.12`: 3.12.12

Compare Source

Python 3.12.12

`v3.12.11`: 3.12.11

Compare Source

Python 3.12.11

`v3.12.10`: 3.12.10

Compare Source

Python 3.12.10

`v3.12.9`: 3.12.9

Compare Source

Python 3.12.9

`v3.12.8`: 3.12.8

Compare Source

Python 3.12.8

`v3.12.7`: 3.12.7

Compare Source

Python 3.12.7

`v3.12.6`: 3.12.6

Compare Source

Python 3.12.6

`v3.12.5`: 3.12.5

Compare Source

Python 3.12.5

`v3.12.4`: 3.12.4

Compare Source

Python 3.12.4

`v3.12.3`: 3.12.3

Compare Source

Python 3.12.3

`v3.12.2`: 3.12.2

Compare Source

Python 3.12.2

`v3.12.1`: 3.12.1

Compare Source

Python 3.12.1

`v3.12.0`: 3.12.0

Compare Source

Python 3.12.0

step-security/harden-runner (step-security/harden-runner)

`v2.14.0`

Compare Source

What's Changed

Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0

`v2.13.3`

Compare Source

What's Changed

Fixed an issue where process events were not uploaded in certain edge cases.

Full Changelog: step-security/harden-runner@v2.13.2...v2.13.3

taiki-e/install-action (taiki-e/install-action)

`v2.65.13`

Compare Source

Initial release

Configuration

📅 Schedule: Branch creation - "before 8am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-01-01T04:34:02Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.87%. Comparing base (32a6fbb) to head (81ca81b).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1709      +/-   ##
==========================================
- Coverage   84.08%   83.87%   -0.22%     
==========================================
  Files         469      466       -3     
  Lines      137651   134726    -2925     
==========================================
- Hits       115746   112999    -2747     
+ Misses      21371    21193     -178     
  Partials      534      534

Components	Coverage Δ
otap-dataflow	`85.05% <ø> (-0.31%)`	⬇️
query_abstraction	`80.61% <ø> (ø)`
query_engine	`90.39% <ø> (ø)`
syslog_cef_receivers	`∅ <ø> (∅)`
otel-arrow-go	`53.50% <ø> (ø)`

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate · 2026-01-05T18:01:41Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Perf test run on GH runners were broken by #1709 as it bumped python version to 3.14. This PR reverts it back to 3.11 (Dedicated runners used 3.11 and has no change)

renovate bot added the dependencies Pull requests that update a dependency file label Jan 1, 2026

renovate bot requested a review from a team as a code owner January 1, 2026 04:31

github-project-automation bot added this to OTel-Arrow Jan 1, 2026

github-actions bot added the ci-repo Repository maintenance, build, GH workflows, repo cleanup, or other chores label Jan 1, 2026

renovate bot force-pushed the renovate/github-workflow-dependencies branch 2 times, most recently from 7ba1868 to 911eb9e Compare January 2, 2026 12:26

chore(deps): update github workflow dependencies

9f4d9ce

renovate bot force-pushed the renovate/github-workflow-dependencies branch from 911eb9e to 9f4d9ce Compare January 5, 2026 04:38

Merge branch 'main' into renovate/github-workflow-dependencies

81ca81b

drewrelmas enabled auto-merge January 5, 2026 18:00

drewrelmas approved these changes Jan 5, 2026

View reviewed changes

drewrelmas added this pull request to the merge queue Jan 5, 2026

Merged via the queue into main with commit 813c485 Jan 5, 2026
41 of 43 checks passed

drewrelmas deleted the renovate/github-workflow-dependencies branch January 5, 2026 18:22

github-project-automation bot moved this to Done in OTel-Arrow Jan 5, 2026

cijothomas mentioned this pull request Jan 5, 2026

Use python 3.11 in perf run #1723

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github workflow dependencies #1709

chore(deps): update github workflow dependencies #1709

Uh oh!

renovate bot commented Jan 1, 2026 •

edited

Loading

Uh oh!

codecov bot commented Jan 1, 2026 •

edited

Loading

Uh oh!

renovate bot commented Jan 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): update github workflow dependencies #1709

chore(deps): update github workflow dependencies #1709

Uh oh!

Conversation

renovate bot commented Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Enhancements:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug Fixes:

Enhancements:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

New Contributors

What's Changed

CodeQL Action Changelog

4.31.8 - 11 Dec 2025

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

v1.25.5: 1.25.5

v3.14.2: 3.14.2

v3.14.1: 3.14.1

v3.14.0: 3.14.0

v3.13.11: 3.13.11

v3.13.10: 3.13.10

v3.13.9: 3.13.9

v3.13.8: 3.13.8

v3.13.7: 3.13.7

v3.13.6: 3.13.6

v3.13.5: 3.13.5

v3.13.4: 3.13.4

v3.13.3: 3.13.3

v3.13.2: 3.13.2

v3.13.1: 3.13.1

v3.13.0: 3.13.0

v3.12.12: 3.12.12

v3.12.11: 3.12.11

v3.12.10: 3.12.10

v3.12.9: 3.12.9

v3.12.8: 3.12.8

v3.12.7: 3.12.7

v3.12.6: 3.12.6

v3.12.5: 3.12.5

v3.12.4: 3.12.4

v3.12.3: 3.12.3

v3.12.2: 3.12.2

v3.12.1: 3.12.1

v3.12.0: 3.12.0

What's Changed

What's Changed

Configuration

Uh oh!

codecov bot commented Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

renovate bot commented Jan 1, 2026 •

edited

Loading

`v1.25.5`: 1.25.5

`v3.14.2`: 3.14.2

`v3.14.1`: 3.14.1

`v3.14.0`: 3.14.0

`v3.13.11`: 3.13.11

`v3.13.10`: 3.13.10

`v3.13.9`: 3.13.9

`v3.13.8`: 3.13.8

`v3.13.7`: 3.13.7

`v3.13.6`: 3.13.6

`v3.13.5`: 3.13.5

`v3.13.4`: 3.13.4

`v3.13.3`: 3.13.3

`v3.13.2`: 3.13.2

`v3.13.1`: 3.13.1

`v3.13.0`: 3.13.0

`v3.12.12`: 3.12.12

`v3.12.11`: 3.12.11

`v3.12.10`: 3.12.10

`v3.12.9`: 3.12.9

`v3.12.8`: 3.12.8

`v3.12.7`: 3.12.7

`v3.12.6`: 3.12.6

`v3.12.5`: 3.12.5

`v3.12.4`: 3.12.4

`v3.12.3`: 3.12.3

`v3.12.2`: 3.12.2

`v3.12.1`: 3.12.1

`v3.12.0`: 3.12.0

codecov bot commented Jan 1, 2026 •

edited

Loading