chore(deps): update github actions dependencies (major) by renovate[bot] · Pull Request #143 · Lendable/phpunit-extensions

renovate · 2025-10-05T11:16:02Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	major	`v4` → `v5`	`v5.0.5`
actions/checkout	action	major	`v4` → `v6`
actions/create-github-app-token	action	major	`v1` → `v3`
ramsey/composer-install	action	major	`v3` → `v4`

Release Notes

actions/cache (actions/cache)

`v5.0.4`

Compare Source

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

What's Changed

Add note on runner versions by @GhadimiR in #1642
Prepare v4.3.0 release by @Link- in #1655

New Contributors

@GhadimiR made their first contribution in #1642

Full Changelog: actions/cache@v4...v4.3.0

`v4.2.4`

Compare Source

What's Changed

Update README.md by @nebuk89 in #1620
Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in #1634
Prepare release 4.2.4 by @Link- in #1636

New Contributors

@nebuk89 made their first contribution in #1620

Full Changelog: actions/cache@v4...v4.2.4

`v4.2.3`

Compare Source

What's Changed

Update to use @actions/cache 4.0.3 package & prepare for new release by @salmanmkc in #1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

@salmanmkc made their first contribution in #1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

`v4.2.2`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Bump @actions/cache to v4.0.2 by @robherley in #1560

Full Changelog: actions/cache@v4.2.1...v4.2.2

`v4.2.1`

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

docs: GitHub is spelled incorrectly in caching-strategies.md by @janco-absa in #1526
docs: Make the "always save prime numbers" example more clear by @Tobbe in #1525
Update force deletion docs due a recent deprecation by @sebbalex in #1500
Bump @actions/cache to v4.0.1 by @robherley in #1554

New Contributors

@janco-absa made their first contribution in #1526
@Tobbe made their first contribution in #1525
@sebbalex made their first contribution in #1500

Full Changelog: actions/cache@v4.2.0...v4.2.1

`v4.2.0`

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

@actions/core: 1.11.1
@actions/io: 1.1.3
@vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4.1.2...v4.2.0

`v4.1.2`

Compare Source

What's Changed

Add Bun example by @idleberg in #1456
Revise isGhes logic by @jww3 in #1474
Bump braces from 3.0.2 to 3.0.3 by @dependabot in #1475
Add dependabot.yml to enable automatic dependency upgrades by @Link- in #1476
Bump actions/checkout from 3 to 4 by @dependabot in #1478
Bump actions/stale from 3 to 9 by @dependabot in #1479
Bump github/codeql-action from 2 to 3 by @dependabot in #1483
Bump actions/setup-node from 3 to 4 by @dependabot in #1481
Prepare 4.1.2 release by @Link- in #1477

New Contributors

@idleberg made their first contribution in #1456
@jww3 made their first contribution in #1474
@Link- made their first contribution in #1476

Full Changelog: actions/cache@v4.1.1...v4.1.2

`v4.1.1`

Compare Source

What's Changed

Restore original behavior of cache-hit output by @joshmgross in #1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

`v4.1.0`

Compare Source

What's Changed

Fix cache-hit output when cache missed by @fchimpan in #1404
Deprecate save-always input by @joshmgross in #1452

New Contributors

@ottlinger made their first contribution in #1437
@Olegt0rr made their first contribution in #1377
@fchimpan made their first contribution in #1404
@x612skm made their first contribution in #1434
@todgru made their first contribution in #1311
@Jcambass made their first contribution in #1463
@mackey0225 made their first contribution in #1462
@quatquatt made their first contribution in #1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

`v4.0.2`

Compare Source

What's Changed

Fix fail-on-cache-miss not working by @cdce8p in #1327

Full Changelog: actions/cache@v4.0.1...v4.0.2

`v4.0.1`

Compare Source

What's Changed

Update README.md by @yacaovsnc in #1304
Update examples by @yacaovsnc in #1305
Update actions/cache publish flow by @bethanyj28 in #1340
Update @actions/cache by @bethanyj28 in #1341

New Contributors

@yacaovsnc made their first contribution in #1304

Full Changelog: actions/cache@v4...v4.0.1

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

`v6.0.0`

Compare Source

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Update actions checkout to use node 24 by @salmanmkc in #2226
Prepare v5.0.0 release by @salmanmkc in #2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

`v4.1.0`

Compare Source

Add support for partial checkout filters

actions/create-github-app-token (actions/create-github-app-token)

`v3.1.1`

Compare Source

Bug Fixes

improve error message when app identifier is empty (#362) (07e2b76), closes #249

`v3.1.0`

Compare Source

Bug Fixes

deps: bump p-retry from 7.1.1 to 8.0.0 (#357) (3bbe07d)

Features

add client-id input and deprecate app-id (#353) (e6bd4e6)
update permission inputs (#358) (076e948)

`v3.0.0`

Compare Source

feat!: node 24 support (#275) (2e564a0)
fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (4451bcb)

Bug Fixes

remove custom proxy handling (#143) (dce0ab0)

BREAKING CHANGES

Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

`v2.2.2`

Compare Source

Bug Fixes

deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

`v2.1.1`

Compare Source

Bug Fixes

revert "use node24 as runner" (#278) (5204204), closes actions/create-github-app-token#267

`v2.1.0`

Compare Source

Features

use node24 as runner (#267) (a1cbe0f)

`v2.0.6`

Compare Source

Bug Fixes

replace - with _ (#246) (3336784)

`v2.0.5`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#240) (d64d7d7)

`v2.0.4`

Compare Source

Bug Fixes

permission input handling (#243) (2950cbc)

`v2.0.3`

Compare Source

Bug Fixes

README: use v2 in examples (#234) (9ba274d), closes #232
use core.getBooleanInput() to retrieve boolean input values (#223) (c3c17c7)

`v2.0.2`

Compare Source

Bug Fixes

improve log messages for token creation (#226) (eaef294)

`v2.0.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group across 1 directory with 2 updates (#228) (2411bfc)

`v2.0.0`

Compare Source

feat!: remove deprecated inputs (#213) (5cc811b)

BREAKING CHANGES

Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

`v1.12.0`

Compare Source

Features

permissions (#168) (0e0aa99)

`v1.11.7`

Compare Source

Bug Fixes

deps: bump undici from 5.28.4 to 7.5.0 (#214) (a24b46a)

`v1.11.6`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#210) (1ff1dea)

`v1.11.5`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.0 to 9.2.2 (#209) (8cedd97), closes #740 #738 #740 #737 #738 #736 #735 #734 #733 #732
deps: bump @octokit/request-error from 6.1.6 to 6.1.7 (#208) (415f6a5), closes #494 #491 #490 #488 #486 #487 #485 #484

`v1.11.4`

Compare Source

Bug Fixes

deps: bump @octokit/endpoint from 10.1.1 to 10.1.3 (#207) (d30def8), closes #507 #514 #512 #511 #509 #508 #507 #506 #505 #504

`v1.11.3`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#203) (8e85a3c), closes #665 #665 #663 #662 #661 #659 #660 #658 #656 #657 #655 #731 nodejs/undici#4016 nodejs/undici#4017 nodejs/undici#4018 nodejs/undici#4008 nodejs/undici#3991 nodejs/undici#4001 nodejs/undici#3980 nodejs/undici#4003 nodejs/undici#3965 nodejs/undici#4002 nodejs/undici#4006 nodejs/undici#3956 nodejs/undici#3964 nodejs/undici#3447 #3966 nodejs/undici#3967 nodejs/undici#3971 nodejs/undici#3954 nodejs/undici#3972 nodejs/undici#3974 nodejs/undici#3976 #3975 nodejs/undici#3977 nodejs/undici#3978 nodejs/undici#3981 nodejs/undici#3983 nodejs/undici#3986 #4021 #4018 #4017 #4016 #4008 #4007 #4006 #3965

`v1.11.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.1.3 to 9.1.4 in the production-dependencies group (#196) (b4192a5), closes #730 #730 #729 #727 #726 #723 #724 #722 #721 #720 #719
deps: bump undici from 6.19.8 to 7.2.0 (#198) (29aa051), closes nodejs/undici#3958 nodejs/undici#3955 nodejs/undici#3962 nodejs/undici#3921 nodejs/undici#3923 nodejs/undici#3925 nodejs/undici#3926 nodejs/undici#3924 nodejs/undici#3933 nodejs/undici#3916 nodejs/undici#3930 nodejs/undici#3938 #3937 nodejs/undici#3940 nodejs/undici#3931 nodejs/undici#3941 nodejs/undici#3911 nodejs/undici#3888 nodejs/undici#3939 nodejs/undici#3947 nodejs/undici#3945 nodejs/undici#3916 nodejs/undici#3893 nodejs/undici#3902 #3901 nodejs/undici#3903 nodejs/undici#3905 nodejs/undici#3900 nodejs/undici#3913 nodejs/undici#3910 nodejs/undici#3909 nodejs/undici#3906 nodejs/undici#3922 #3962 #3955 #3958 #3945 #3947 #3939 #3888 #3911 #3941

`v1.11.1`

Compare Source

What's Changed

Bug Fixes

deps: bump the production-dependencies group across 1 directory with 3 updates by @dependabot in #193

Full Changelog: actions/create-github-app-token@v1.11.0...v1.11.1

`v1.11.0`

Compare Source

What's Changed

Features

Allow repositories input to be comma or newline-separated by @peter-evans in #169

New Contributors

@peter-evans made their first contribution in #169

Full Changelog: actions/create-github-app-token@v1.10.4...v1.11.0

`v1.10.4`

Compare Source

What's Changed

build(deps-dev): bump the development-dependencies group with 4 updates by @dependabot in #150
docs(README): fix the git committer string and Configure git CLI examples by @maboloshi in #151
docs(readme): document how a Base64 private key could be decoded by @vleon1a in #155
test: fix test file extensions and inputs for repositories by @parkerbxyz in #161
build(deps-dev): bump the development-dependencies group across 1 directory with 4 updates by @dependabot in #167

Bug Fixes

bump the production-dependencies group across 1 directory with 3 updates by @dependabot in #166

New Contributors

@vleon1a made their first contribution in #155

Full Changelog: actions/create-github-app-token@v1.10.3...v1.10.4

`v1.10.3`

Compare Source

What's Changed

docs(README): fix committer string example and add git config example by [@anuraaga](https://redirect

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the renovate label Oct 5, 2025

renovate bot enabled auto-merge October 5, 2025 11:16

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 8bf0422 to c77f38c Compare November 20, 2025 11:34

renovate bot changed the title ~~chore(deps): update github actions dependencies (major)~~ chore(deps): update actions/create-github-app-token action to v2 Nov 20, 2025

renovate bot force-pushed the renovate/major-github-actions branch from c77f38c to 91aed7a Compare November 20, 2025 23:28

renovate bot changed the title ~~chore(deps): update actions/create-github-app-token action to v2~~ chore(deps): update github actions dependencies (major) Nov 20, 2025

renovate bot force-pushed the renovate/major-github-actions branch from 91aed7a to 60cc542 Compare November 22, 2025 03:02

renovate bot changed the title ~~chore(deps): update github actions dependencies (major)~~ chore(deps): update actions/checkout action to v5 Nov 22, 2025

renovate bot force-pushed the renovate/major-github-actions branch from 60cc542 to 433cd41 Compare November 27, 2025 19:28

renovate bot changed the title ~~chore(deps): update actions/checkout action to v5~~ chore(deps): update actions/checkout action to v6 Nov 27, 2025

renovate bot force-pushed the renovate/major-github-actions branch from 433cd41 to 169bc47 Compare November 29, 2025 03:09

renovate bot changed the title ~~chore(deps): update actions/checkout action to v6~~ chore(deps): update github actions dependencies (major) Nov 29, 2025

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 28fa5e7 to 1da1cda Compare December 6, 2025 04:12

renovate bot changed the title ~~chore(deps): update github actions dependencies (major)~~ chore(deps): update actions/checkout action to v5 Dec 6, 2025

renovate bot force-pushed the renovate/major-github-actions branch from 1da1cda to f22971c Compare December 9, 2025 05:06

renovate bot changed the title ~~chore(deps): update actions/checkout action to v5~~ chore(deps): update actions/checkout action to v6 Dec 9, 2025

renovate bot force-pushed the renovate/major-github-actions branch from f22971c to fc4bab5 Compare December 12, 2025 23:15

renovate bot changed the title ~~chore(deps): update actions/checkout action to v6~~ chore(deps): update github actions dependencies (major) Dec 12, 2025

renovate bot force-pushed the renovate/major-github-actions branch from fc4bab5 to ea8ad00 Compare December 19, 2025 18:52

renovate bot force-pushed the renovate/major-github-actions branch from ea8ad00 to 3d8ced0 Compare January 16, 2026 20:42

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from db4d162 to 6a96839 Compare January 29, 2026 14:53

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 81f7d1e to a9f5bbf Compare February 5, 2026 17:46

renovate bot force-pushed the renovate/major-github-actions branch from a9f5bbf to 6f4f8f2 Compare March 5, 2026 12:09

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from cdf30d7 to 08138b3 Compare March 18, 2026 19:09

renovate bot changed the title ~~chore(deps): update github actions dependencies (major)~~ chore(deps): update actions/checkout action to v6 Mar 18, 2026

renovate bot force-pushed the renovate/major-github-actions branch from 08138b3 to 7a7a0e2 Compare March 20, 2026 23:44

renovate bot changed the title ~~chore(deps): update actions/checkout action to v6~~ chore(deps): update github actions dependencies (major) Mar 20, 2026

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 6dfe0fc to 6c6cc37 Compare March 25, 2026 15:42

renovate bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 8291c4c to 2664150 Compare April 13, 2026 17:38

renovate bot force-pushed the renovate/major-github-actions branch from 2664150 to 052f79c Compare April 18, 2026 07:41

chore(deps): update github actions dependencies

7c7c5fe

renovate bot force-pushed the renovate/major-github-actions branch from 052f79c to 7c7c5fe Compare April 19, 2026 12:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github actions dependencies (major)#143

chore(deps): update github actions dependencies (major)#143
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-github-actions

renovate bot commented Oct 5, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Oct 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

⚠️ Important Changes

Minor changes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

What's Changed

New Contributors

Bug Fixes

Bug Fixes

Features

Bug Fixes

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

BREAKING CHANGES

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

Bug Fixes

What's Changed

Features

New Contributors

What's Changed

Bug Fixes

New Contributors

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Oct 5, 2025 •

edited

Loading