Skip to content

chore(deps): update github-actions (major)#229

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-actions
Open

chore(deps): update github-actions (major)#229
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-actions

Conversation

@renovate

@renovate renovate Bot commented Mar 4, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
azure/setup-helm action major v4v5
azure/setup-kubectl action major v4v5
docker/build-push-action action major v6v7
docker/login-action action major v3v4
docker/setup-buildx-action action major v3v4
docker/setup-qemu-action action major v3v4
helm uses-with major v3.6.2v4.2.1
helm uses-with major v3.4.0v4.2.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

azure/setup-helm (azure/setup-helm)

v5.0.0

Compare Source

Changed

v5

Compare Source

azure/setup-kubectl (azure/setup-kubectl)

v5.1.0

Compare Source

Changed
  • #​243 Migrate to ESM with esbuild and vitest
    • Replaced @vercel/ncc with esbuild for ESM bundling
    • Replaced jest/ts-jest with vitest for testing
    • Upgraded @actions/core to ^3.0.0, @actions/exec to ^3.0.0, @actions/tool-cache to ^4.0.0
    • Updated tsconfig.json to NodeNext module resolution
  • Add npm run build step to CI unit-tests workflow
Security

v5.0.0

Compare Source

Changed
Added

v5

Compare Source

docker/build-push-action (docker/build-push-action)

v7.2.0

Compare Source

v7.1.0

Compare Source

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

v7.0.0

Compare Source

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v7

Compare Source

docker/login-action (docker/login-action)

v4.2.0

Compare Source

Full Changelog: docker/login-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

Full Changelog: docker/login-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Full Changelog: docker/login-action@v3.7.0...v4.0.0

v4

Compare Source

docker/setup-buildx-action (docker/setup-buildx-action)

v4.1.0

Compare Source

  • Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
  • Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
  • Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
  • Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
  • Bump flatted from 3.3.3 to 3.4.2 in #​499
  • Bump glob from 10.3.12 to 13.0.6 in #​495
  • Bump handlebars from 4.7.8 to 4.7.9 in #​504
  • Bump lodash from 4.17.23 to 4.18.1 in #​523
  • Bump picomatch from 4.0.3 to 4.0.4 in #​503
  • Bump postcss from 8.5.6 to 8.5.10 in #​537
  • Bump tar from 6.2.1 to 7.5.15 in #​545
  • Bump undici from 6.23.0 to 6.25.0 in #​492
  • Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v4

Compare Source

docker/setup-qemu-action (docker/setup-qemu-action)

v4.1.0

Compare Source

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

v4

Compare Source

helm/helm (helm)

v4.2.1

Compare Source

v4.2.0: Helm v4.2.0

Compare Source

Helm v4.2.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Switch to goreleaser for release builds
  • Kubernetes client libraries to v1.36
  • Add mustToToml template function
  • deprecate unused --hide-notes and --render-subchart-notes flags
  • --dry-run=server now respects generateName:

Installation and Upgrading

Download Helm v4.2.0. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.1 will contain only bug fixes
  • 4.3.0 is the next feature release

Changelog

  • Bump to version v4.2 0646808 (George Jenkins)
  • build: Clean up Goreleaser change (#​32098) e23bf3a (Scott Rigby)
  • fix: add -extldflags -static to dist target to match build-cross f60ab7c (Terry Howe)
  • build: use goreleaser build with manual archive creation 64aa46f (Terry Howe)
  • chore: remove build-cross dependency from test-acceptance d199a1a (Terry Howe)
  • ci: add fetch-depth 0 to canary checkout for goreleaser 8289940 (Terry Howe)
  • fix: address goreleaser build issues flagged in review c075022 (Terry Howe)
  • fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive names 04885dd (Terry Howe)
  • fix: disable goreleaser checksums.txt and restrict zip to windows only 93103ce (Terry Howe)
  • fix: use index for optional env var in version_template e49a1dc (Terry Howe)
  • fix: canary build file names eaa0910 (Terry Howe)
  • Fix archive name 5a75279 (Terry Howe)
  • fix goreleaser archive 37284a9 (Terry Howe)
  • add support for loong64 45336cc (Terry Howe)
  • fix artifact directory a9659b0 (Terry Howe)
  • update configuration to v2 e368f17 (Terry Howe)
  • remove GOTOOLCHAIN e7bea85 (Terry Howe)
  • chore: replace mitchellh/gox with goreleaser 075c096 (Terry Howe)
  • chore(deps): bump github.com/distribution/distribution/v3 12f2c41 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 58e8ffd (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 e61bbfb (dependabot[bot])
  • Upgrade kstatus to 1.2 and controller-runtime to 0.24 081c6df (Matheus Pimenta)
  • fix: adds topLevel permissions to improve openSSF scores 277d970 (Gagan H R)
  • Upgrade Go to 1.26, Kubernetes to 1.36, kstatus to 1.1 a4a9cc7 (Matheus Pimenta)
  • fix(templating): hooks conflicting with templates in post-renderers (#​32049) 8f56f24 (Matheus Pimenta)
  • docs: fix grammar and spacing in CONTRIBUTING.md db40adb (Mohit)
  • chore(deps): bump the k8s-io group with 7 updates 775e794 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 934ace3 (dependabot[bot])
  • fix(templating): SplitManifests must preserve line endings for downstream YAML parsers (#​31952) 265c5eb (Matheus Pimenta)
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 48e2b7d (dependabot[bot])
  • Update pkg/chart/common/util/coalesce.go a8e2497 (Evans Mungai)
  • test(values): Add test for nil cleanup in partially overridden subchart maps 52fc971 (Johannes Lohmer)
  • fix(values): do not copy chart-default nils into coalesced values 0063877 (Johannes Lohmer)
  • test(values): add test for subchart nil producing %!s() 6eb4ebf (Johannes Lohmer)
  • test(values): add tests for subchart nil value regressions 5cb4e7d (Johannes Lohmer)
  • chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 b5c7c80 (dependabot[bot])
  • fix(templating): fix wrong YAML separator parsing for post-renderers (#​31941) a27f1ad (Matheus Pimenta)
  • fix: add debug logging to HTTP getter for helm pull c26be60 (Cairon)
  • chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 953f5f0 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 10fc5f3 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 d89e7c6 (dependabot[bot])
  • chore: Update release notes script for Helm v4 8a95461 (George Jenkins)
  • refactor(cli): share RetryingRoundTripper via pkg/kubeenv 213c869 (Sumit Solanki)
  • chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 bd5027a (dependabot[bot])
  • fix: unnecessary-format lint issues from merge 087736b (George Jenkins)
  • fix: Plugin missing provenance bypass 586eb57 (George Jenkins)
  • chore(deps): bump github.com/fluxcd/cli-utils c8c5dfa (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 998466c (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp b0cec58 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp 6ebfb29 (dependabot[bot])
  • test(kube): fix flaky WaitForDelete test by avoiding informer sync race a7f8443 (Terry Howe)
  • test(kube): fix flaky WaitForDelete timing in status wait tests 4c0d21f (Terry Howe)
  • chore(deps): bump github.com/distribution/distribution/v3 08dea9c (dependabot[bot])
  • Minor nit: fix import instructions to comply with canonical import paths de58531 (Anmol Virdi)
  • chore(deps): bump github.com/distribution/distribution/v3 9b1ad4c (dependabot[bot])
  • fix(action): return correct error variable in prepareUpgrade 8ef2d45 (Rhys McNeill)
  • chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2 cd7cf76 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1 45ee55b (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 9a06741 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0 d1e31ca (dependabot[bot])
  • fix(kube): clarify server-side apply patch errors f257c95 (abhay1999)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 7025480 (Terry Howe)
  • refactor(cli): decouple EnvSettings from pkg/kube 64f1d0a (Sumit Solanki)
  • docs(registry): fix incorrect and improve clarity of comments in client.go 85bf56e (Debasish Mohanty)
  • refactor(cli): decouple EnvSettings from pkg/kube to avoid import cycles 1549937 (Sumit Solanki)
  • chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 c7a75b1 (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 3a7573a (dependabot[bot])
  • chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0 0229da1 (dependabot[bot])
  • docs(engine): fix misleading toTOML doc comment c1a5a6e (Ilya Kiselev)
  • feat(engine): add mustToToml template function b075f7a (Ilya Kiselev)
  • chore: fix unnecessary-format issues from revive 7edfff3 (Matthieu MOREL)
  • chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 37185d2 (dependabot[bot])
  • chore: fix bool-compare issues from testifylint 071558d (Matthieu MOREL)
  • chore: enable perfsprint linter 6249489 (Matthieu MOREL)
  • ignore error plugin loads (cli, getter) 47a0840 (George Jenkins)
  • chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 3d06fd1 (dependabot[bot])
  • fix(kube): remove legacy import comments from test files e64d628 (Terry Howe)
  • pkg/kube: remove legacy import comments d7cdc9e (abhay1999)
  • fix: Plugin version path traversal 36dcc27 (George Jenkins)
  • chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0 c4be7af (dependabot[bot])
  • chore: fix some minor issues in the comments 259f181 (tsinglua)
  • fix: Chart dot-name path bug 6018499 (George Jenkins)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 74e7cf8 (dependabot[bot])
  • fix: insert newline after doc separators glued to content by template trimming af94abf (Matheus Pimenta)
  • chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 16073b1 (dependabot[bot])
  • chore: enable modernize linter (#​31860) e31a078 (Matthieu MOREL)
  • Restored --atomic flag on install command 16573f8 (Travis Leeden)
  • fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 b550ce9 (Terry Howe)
  • fix: bump fluxcd/cli-utils to v0.37.2-flux.1 1dfa77e (Terry Howe)
  • Update pkg/cmd/status.go 5d40f17 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter (#​31871) d4f6193 (Matthieu MOREL)
  • chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 82d9bed (dependabot[bot])
  • chore(pkg): fix perfsprint linter issues part 6 dc0e3f1 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter e3c74fd (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 1d2d63c (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 63f03c0 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter c25c988 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 0fecfd0 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter 6524162 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 6c2cb2f (Matthieu MOREL)
  • chore(internal): enable perfsprint linter 9409226 (Matthieu MOREL)
  • Replace unneeded use of t.Fatalf with t.Fatal 36cb3a2 (Mads Jensen)
  • fix: enable nolinlint linter 5b6c6bb (Matthieu MOREL)
  • fixup strings.Cut variables b667317 (George Jenkins)
  • chore: Improve AGENTS.md 956c724 (George Jenkins)
  • chore: fixes 92b64e8 (George Jenkins)
  • fix: correct import comment in statuswait.go from v3 to v4 c59c140 (rohansood10)
  • fix: handle OCI digest algorithm prefix in chart downloader (#​31601) ee01860 (Evans Mungai)
  • chore(deps): bump actions/stale from 10.1.1 to 10.2.0 304d25f (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 0b13436 (dependabot[bot])
  • feat(release): add internal/release/v2 package for chart v3 support (#​31709) 4a91f3a (Evans Mungai)
  • chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 7823853 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 aec7ace (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 a23b638 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 5cddc95 (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 2e266c3 (dependabot[bot])
  • fix(pkg): errorlint linter 259f76a (Matthieu MOREL)
  • fix(internal): errorlint linter 0254182 (Matthieu MOREL)
  • fix(pkg): errorlint linter 6d1490e (Matthieu MOREL)
  • fix(pkg): errorlint linter 4d0ae7f (Matthieu MOREL)
  • fix(internal): errorlint linter abecafa (Matthieu MOREL)
  • fix(pkg): errorlint linter 4330bde (Matthieu MOREL)
  • fix(pkg): errorlint linter c8989d9 (Matthieu MOREL)
  • fix(cmd): errorlint linter edbd705 (Matthieu MOREL)
  • chore: new KEYS entry for George Jenkins 5638c35 (George Jenkins)
  • fix(downloader): safely handle concurrent file writes on Windows 76eb37c (Orgad Shaneh)
  • fix(install): check nil for restClientGetter and fix tests 9817a68 (Manuel Alonso)
  • feat(create): add --chart-api-version flag (when HELM_EXPERIMENTAL_CHART_V3 env var is set) (#​31592) 5aac320 (Evans Mungai)
  • chore(pkg): fix modernize linter 0d75d86 (Matthieu MOREL)
  • chore(internal): fix modernize linter 859292e (Matthieu MOREL)
  • chore(pkg): fix modernize linter 5cc2e55 (Matthieu MOREL)
  • chore(pkg): fix modernize linter ba38159 (Matthieu MOREL)
  • chore(internal): fix modernize linter e2d184c (Matthieu MOREL)
  • chore(pkg): fix modernize linter 111d4e6 (Matthieu MOREL)
  • add image index test e8f386b (Pedro Tôrres)
  • fix pulling charts from OCI indices d983696 (Pedro Tôrres)
  • chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 9c9c3a6 (dependabot[bot])
  • Revert "Consider GroupVersionKind when matching resources" 787b61c (Matheus Pimenta)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 becf9bf (dependabot[bot])
  • fix(template): deprecate unused --hide-notes and --render-subchart-notes flags 6d5f56f (Scott Rigby)
  • chore(deps): bump github.com/fluxcd/cli-utils b53198e (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 b59e533 (dependabot[bot])
  • whitespace ec07265 (Austin Abro)
  • fix(copystructure): handle nil elements in slice copying e3829eb (Philipp Born)
  • use logger with waiter 63b40a7 (Austin Abro)
  • feat(kstatus): fine-grained context options for waiting b0b35f1 (Matheus Pimenta)
  • Apply suggestions from code review 26e28e8 (George Jenkins)
  • Remove legacy sync-repo.sh script 97fd007 (Jeevan Yewale)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 5262007 (dependabot[bot])
  • docs: document

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from a7801e0 to 27f58f4 Compare March 5, 2026 23:37
@renovate renovate Bot changed the title chore(deps): update github-actions to v4 (major) chore(deps): update github-actions (major) Mar 5, 2026
@renovate renovate Bot force-pushed the renovate/major-github-actions branch 2 times, most recently from 1539838 to 54a54af Compare March 25, 2026 18:02
@renovate renovate Bot force-pushed the renovate/major-github-actions branch from 54a54af to e782ad9 Compare June 2, 2026 17:12
@renovate renovate Bot force-pushed the renovate/major-github-actions branch from e782ad9 to 71fb61f Compare June 12, 2026 08:58
@renovate renovate Bot force-pushed the renovate/major-github-actions branch from 71fb61f to 0d36d54 Compare June 12, 2026 19:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants