Skip to content

chore(deps): pin dependencies - #92

Merged
stxkxs merged 3 commits into
mainfrom
renovate/github-actions
Oct 13, 2026
Merged

chore(deps): pin dependencies#92
stxkxs merged 3 commits into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action pinDigest → 11d5960
actions/setup-node action pinDigest → 49933ea
actions/upload-artifact action pinDigest → ea165f8
anchore/sbom-action action pinDigest → e22c389
aws-actions/configure-aws-credentials action pinDigest → 7474bc4
azure/setup-helm action pinDigest → 1a275c3
docker/build-push-action action pinDigest → 10e90e3
docker/setup-buildx-action action pinDigest → 8d2750c
docker/setup-qemu-action action pinDigest → c7c5346
github/codeql-action action pinDigest → 9f759ee
helm uses-with minor v3.16.0 → v3.22.0
sigstore/cosign-installer action pinDigest → 398d4b0

Release Notes

helm/helm (helm)

v3.22.0: Helm v3.22.0

Compare Source

Helm v3.22.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • primarily dependency updates and k8s-io group to 0.37.0

Installation and Upgrading

Download Helm v3.22.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)

Changelog

  • chore(deps): bump the k8s-io group across 1 directory with 6 updates 144ca65 (dependabot[bot])
  • bump version to 3.22 (#​32606) b5de8bb (Scott Rigby)
  • fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#​32362) 9dbcb9f (kimsungmin1)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32575) 665ab55 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#​32573) 0841093 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#​32563) d0569c7 (dependabot[bot])
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32557) bcbdb1e (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#​32554) 6cdcc8f (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#​32542) 158719f (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@​v1.82.1 for GO-2026-6061 (#​32536) a442b8c (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@​v1.44.0 for GO-2026-5158 (#​32535) adab0ef (Scott Rigby)
  • chore(deps): bump the github-actions group with 4 updates (#​32524) c068b54 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 74271c4 (dependabot[bot])
  • chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 1c50d2f (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates (#​32509) 8821540 (dependabot[bot])
  • chore(deps): bump actions/stale in the github-actions group (#​32488) 05a2798 (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action in the github-actions group (#​32461) c27e757 (dependabot[bot])
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 bd392c6 (Karan V)
  • chore(deps): bump the k8s-io group with 7 updates 66a6f56 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 7cd0125 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#​32449) 79330fc (dependabot[bot])
  • chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#​32446) b29c730 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 973bb34 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 e25efcf (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 98e547f (dependabot[bot])
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#​32412) 7f4b72a (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#​32381) 2cf1437 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#​32383) 270f73b (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#​32382) 9e3a010 (dependabot[bot])
  • ci: auto-label PRs targeting dev-v3 (#​32340) c9ed0ca (Benoit Tigeot)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#​32331) b842ddf (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#​32332) f6047c9 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#​32357) f2f6bf6 (dependabot[bot])
  • chore(deps): bump actions/checkout from 4.2.2 to 7.0.0 (#​32368) 69f70a8 (dependabot[bot])
  • chore(deps): bump actions/stale from 9.0.0 to 10.4.0 (#​32369) c95222a (dependabot[bot])
  • chore(deps): bump actions/setup-go from 5.1.0 to 6.5.0 (#​32358) fc71f51 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#​32360) 6596318 (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#​32359) 5d9943c (dependabot[bot])
  • chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#​32356) a3d7a6c (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#​32354) 8e19970 (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#​32353) 24ef09a (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#​32310) 8082dd4 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#​32308) 2c24490 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#​32306) 953d280 (dependabot[bot])
  • fix(engine): prevent Files.Lines panic on empty file c02a9ae (Mahesh Sadupalli)
  • Apply suggestions from code review 093015b (Benoit Tigeot)
  • fix: drop containerd v1 dep to resolve govulncheck CVEs a061886 (Benoit Tigeot)
  • chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 f979836 (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin c444665 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 2 updates 1bf9b5f (dependabot[bot])
  • fixes b7a0fd0 (Matheus Pimenta)
  • chore(deps): bump the k8s-io group across 1 directory with 2 updates 119a7d9 (dependabot[bot])
  • fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 2fb05f8 (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 acc867b (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 b920935 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 5b5ef19 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 af67af8 (dependabot[bot])
  • Update .github/env ceb9a62 (Terry Howe)
  • ci: bump golangci-lint to v2.11.3 for go 1.26 0ed92f0 (Terry Howe)
  • chore: bump go to 1.26 c678c0c (Terry Howe)
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 12c4d45 (dependabot[bot])
  • chore(deps): bump github.com/distribution/distribution/v3 a0f9711 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 995c31e (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 8c17168 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 fe141bd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 980836f (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 1dde6c7 (Terry Howe)
  • chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 0162fed (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 a664a58 (dependabot[bot])
  • [v3] Bump to version v3.21 (#​32103) 3033a77 (George Jenkins)
  • [v3 backport] Fix rollback for missing resources 0a47573 (Feruzjon Muyassarov)
  • fix(action): avoid nil REST client getter panic when installing CRDs 711a4ea (sergiochan)

v3.21.4: Helm v3.21.4

Compare Source

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #​32303 by @​mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #​32463 by @​karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@​v1.44.0 for GO-2026-5158- #​32535 by @​scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@​v1.82.1 for GO-2026-6061- #​32536 by @​scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #​32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#​32308) 813176c (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@​v1.82.1 for GO-2026-6061 b6aa8b1 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@​v1.44.0 for GO-2026-5158 57ce7ae (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab (Mahesh Sadupalli)

Full Changelog: helm/helm@v3.21.3...v3.21.4

v3.21.3: Helm v3.21.3

Compare Source

Helm v3.21.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.21.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • Apply suggestions from code review 1ad6e68 (Benoit Tigeot)
  • fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e (Benoit Tigeot)
  • chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178b (dependabot[bot])

v3.21.2: Helm v3.21.2

Compare Source

Helm v3.21.2 is a patch release to correct bump the Kubernetes client libraries (client-go, etc) to match the expected Kubernetes v1.36 release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Update Kubernetes client libraries to v1.36

Installation and Upgrading

Download Helm v3.21.2. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.21.3 will contain only bug fixes.
  • 3.22.0 is the next (and final) Helm 3 feature release

Changelog

  • chore(deps): bump the k8s-io group with 2 updates 1259634 (dependabot[bot])
  • fixes b52e276 (Matheus Pimenta)
  • chore(deps): bump the k8s-io group across 1 directory with 2 updates 3342dbf (dependabot[bot])

Full Changelog: helm/helm@v3.21.1...v3.21.2

v3.21.1: Helm v3.21.1

Compare Source

Helm v3.21.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed nil pointer panic that could happen with helm template in ClientOnly flows. Now correctly returns a template error #​31920
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #​32152
  • Bumped Go from 1.25 to 1.26 #​32168
  • Dependency version updates

Installation and Upgrading

Download Helm v3.21.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • fix(action): avoid nil REST client getter panic when installing CRDs c56dd00 (sergiochan)
  • fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 702529f (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 178e120 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dcf35f8 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 44aff8b (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 ae2f31f (dependabot[bot])
  • Update .github/env 402225f (Terry Howe)
  • ci: bump golangci-lint to v2.11.3 for go 1.26 00eac21 (Terry Howe)
  • chore: bump go to 1.26 bec346a (Terry Howe)
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 58b6ccf (dependabot[bot])
  • chore(deps): bump github.com/distribution/distribution/v3 30b9f51 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 858aa47 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 1af25d4 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 97e4bc3 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 29bdd1b (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 bad6cd4 (Terry Howe)
  • chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 75c2e9b (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 cd4dac3 (dependabot[bot])

Full Changelog: helm/helm@v3.21.0...v3.21.1

v3.21.0: Helm v3.21.0

Compare Source

Helm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.

[!WARNING]
Helm v3 is approaching end-of-life. Please update to Helm v4.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Kubernetes client libraries to v1.36
  • notable changes here
Installation and Upgrading

Download Helm v3.21.0. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.21.1 will contain only bug fixes.
  • 3.22.0 is the next feature release for Kubernetes v1.37
Changelog
  • [v3] Bump to version v3.21 e0878d4 (George Jenkins)
  • fix: upgrade opentelemetry packages to patch CVEs 13d5fc4 (Terry Howe)
  • fix: Chart dot-name path bug 2552884 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5 (Terry Howe)
  • add image index test b0dfec5 (Pedro Tôrres)
  • fix pulling charts from OCI indices e629995 (Pedro Tôrres)
  • chore(deps): bump the k8s-io group with 7 updates 9c854fb (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 a692247 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 9f2a7f6 (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 79f039b (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 45210d5 (dependabot[bot])
  • Remove refactorring changes from coalesce_test.go e2df39f (Evans Mungai)
  • Fix import 97affe0 (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go c264166 (Evans Mungai)
  • Fix lint warning d409df8 (Evans Mungai)
  • Preserve nil values in chart already 6fdd101 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map b13743c (Evans Mungai)
  • chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 703999d (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 a04be96 (dependabot[bot])
New Contributors

Full Changelog: helm/helm@v3.20.0...v3.21.0

v3.20.2: Helm v3.20.2

Compare Source

v3.20.2

Helm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Security fixes
  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
Installation and Upgrading

Download Helm v3.20.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026
Changelog
  • fix: Chart dot-name path bug 8fb76d6 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e (Terry Howe)

v3.20.1: Helm v3.20.1

Compare Source

Helm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Backport of #​31644: Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key
  • Backport of #​31601: Fixed a bug where OCI references with tag+digest failed with "invalid

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the deps label Oct 12, 2026
@renovate
renovate Bot force-pushed the renovate/github-actions branch from eee5c4f to d719b0e Compare October 12, 2026 15:48
@renovate
renovate Bot force-pushed the renovate/github-actions branch from d719b0e to 2589fe1 Compare October 12, 2026 16:35
@claude
Check only the issue body for commit ids
7ed2874 
The self-test scanned the whole freshness workflow for hex runs, so pinning its actions to commit digests failed the check that the issue body names no commit. It now extracts the body heredoc, as slack-knowledge-bot's freshness test does, fails if the heredoc is missing, and checks only that.
@renovate

renovate Bot commented Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@stxkxs
stxkxs merged commit 57d2b58 into main Oct 13, 2026
16 checks passed
@stxkxs
stxkxs deleted the renovate/github-actions branch October 13, 2026 18:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

deps

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@stxkxs @claude