Update GitHub Actions by renovate[bot] · Pull Request #204 · vortex-data/vortex.dev

renovate · 2026-11-07T08:23:42Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	`v1.0.249` → `v1.0.266`	`v1.0.269` (+2)
astral-sh/setup-uv	action	patch	`v10.3.0` → `v10.3.3`
github/codeql-action	action	minor	`v4.38.3` → `v4.39.1`	`v4.39.3` (+1)
trufflesecurity/trufflehog	action	patch	`v3.99.2` → `v3.99.7`	`v3.99.8`

Release Notes

anthropics/claude-code-action

What's Changed

docs: use claude-plugins-official in plugin examples by @mhegazy in #1932

Full Changelog: anthropics/claude-code-action@v1.0.263...v1.0.264

`v1.0.263`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.262...v1.0.263

`v1.0.262`

Compare Source

What's Changed

chore: bump Bun to 1.4.4 by @dylan-conway in #1916

New Contributors

@dylan-conway made their first contribution in #1916

Full Changelog: anthropics/claude-code-action@v1.0.261...v1.0.262

`v1.0.261`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.260...v1.0.261

`v1.0.260`

Compare Source

What's Changed

Pin the PR version a run checks out by @OctavianGuzu in #1915

Full Changelog: anthropics/claude-code-action@v1.0.259...v1.0.260

`v1.0.259`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.258...v1.0.259

`v1.0.258`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.257...v1.0.258

`v1.0.257`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.256...v1.0.257

`v1.0.256`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.255...v1.0.256

`v1.0.255`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.254...v1.0.255

`v1.0.254`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.253...v1.0.254

`v1.0.253`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.252...v1.0.253

`v1.0.252`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.251...v1.0.252

`v1.0.251`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.250...v1.0.251

`v1.0.250`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.249...v1.0.250

astral-sh/setup-uv

`v10.3.3`: 🌈 Use Astral mirror for version manifests with GitHub fallback

Compare Source

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)

Also a big thank you to @soujasK for a set of bugfixes 👏

🐛 Bug fixes

Use Astral mirror for version manifests with GitHub fallback @eifinger (#1119)
fix: allow whitespace in uv requirement specifiers @soujasK (#1112)
fix: resolve ~= specifiers with PEP 440 semantics @soujasK (#1111)
fix: only report a saved cache when saving succeeded @soujasK (#1110)

🧰 Maintenance

chore: update known checksums for 0.13.6 @github-actions[bot] (#1117)

📚 Documentation

docs: use JSDoc for compatible release specifier comment @eifinger (#1113)
docs: update version references to v10.3.2 @github-actions[bot] (#1104)

`v10.3.2`: 🌈 update known checksums for 0.13.5

Compare Source

Changes

🧰 Maintenance

chore: update known checksums for 0.13.5 @github-actions[bot] (#1103)

📚 Documentation

docs: update version references to v10.3.1 @github-actions[bot] (#1102)

`v10.3.1`: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

fix: preserve cache error class names in save-cache bundle @dannyward630 (#1093)

🧰 Maintenance

chore: update known checksums for 0.13.4 @github-actions[bot] (#1099)
chore: update known checksums for 0.13.2/0.13.3 @github-actions[bot] (#1098)
chore: update known checksums for 0.13.1 @github-actions[bot] (#1094)
Verify npm dependency signatures before builds @zaniebot (#1027)

📚 Documentation

docs: cache-dependency-glob matches relative to the working directory @flange-ipb (#1092)
docs: update version references to v10.3.0 @github-actions[bot] (#1090)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1101)

github/codeql-action

`v4.39.1`

Compare Source

Update default CodeQL bundle version to 2.27.3. #4256

`v4.39.0`

Compare Source

Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198

trufflesecurity/trufflehog

`v3.99.7`

Compare Source

What's Changed

Fix --include-wikis help typo and huggingface README description by @protonnegativo in #5471
fix(detectors/anypointoauth2): stop treating HTTP 422 as verified by @jamesgol in #5386
Add xAI analyzer by @serval-frenchie in #5456
ci(lint): pin the semgrep container image by digest by @Portll in #5245
feat(detectors): add Fireworks AI API key detector by @sudo-a-man in #5447
feat(detectors): add Infisical service token detector by @Varshith-Kali in #5445
Fix 7z and rar panics in the archive handler and log recovered panic stacks by @dustin-decker in #5474

New Contributors

@protonnegativo made their first contribution in #5471
@serval-frenchie made their first contribution in #5456
@Portll made their first contribution in #5245
@sudo-a-man made their first contribution in #5447
@Varshith-Kali made their first contribution in #5445

Full Changelog: trufflesecurity/trufflehog@v3.99.6...v3.99.7

`v3.99.6`

Compare Source

v3.99.5 was tagged but never published because its release build failed. v3.99.6 supersedes it and includes all of the changes below.

What's Changed

Update github-actions by @renovate[bot] in #5414
Prefer nearest client/tenant IDs for Azure SP secrets by @kashifkhan0771 in #5449
Clean up Filesystem source logging for per-source debug by @kashifkhan0771 in #5465
security: bump andybalholm/brotli to v1.2.7 (CVE-2026-111497) by @dustin-decker in #5472
Keep GoReleaser temp files off the tmpfs /tmp in releases by @dustin-decker in #5473

Full Changelog: trufflesecurity/trufflehog@v3.99.4...v3.99.6

`v3.99.5`

Compare Source

`v3.99.4`

Compare Source

What's Changed

Add per-source debug option and hide sensitive data in debug logs by @kashifkhan0771 in #5446
Mark results whose verification was skipped by @unsmith in #5448
Clean up Git source logging for per-source debug by @kashifkhan0771 in #5451
Add Lambda Cloud API key detector by @lukem-ts in #5435
Update github.com/trufflesecurity/ldap-verify digest to 4a15faf by @renovate[bot] in #5441
Update dependency trufflesecurity/.github to v1.0.5 by @renovate[bot] in #5442
Update module golang.org/x/crypto to v0.56.0 [SECURITY] by @renovate[bot] in #5462
Update module golang.org/x/net to v0.60.0 [SECURITY] by @renovate[bot] in #5464
Update module github.com/yuin/goldmark to v1.7.17 [SECURITY] by @renovate[bot] in #5460
github: check App installation grants before listing comments by @unsmith in #5454

Full Changelog: trufflesecurity/trufflehog@v3.99.3...v3.99.4

`v3.99.3`

Compare Source

What's Changed

Add stdin source documentation by @kashifkhan0771 in #5397
Add syslog source documentation by @kashifkhan0771 in #5398
Add travisci source documentation by @kashifkhan0771 in #5401
Changed GithubOauth2 detector to only rotate on particular error message by @jordanTunstill in #5396
Update dependency golangci/golangci-lint to v2.14.0 by @renovate[bot] in #5408
Update alpine Docker tag to v3.24 by @renovate[bot] in #5407
Update github.com/trufflesecurity/ldap-verify digest to 4964a20 by @renovate[bot] in #5406
Update module github.com/rabbitmq/amqp091-go to v1.14.0 [SECURITY] by @renovate[bot] in #5410
Update github-actions (major) by @renovate[bot] in #5409
Update module github.com/moby/go-archive to v0.3.0 [SECURITY] by @renovate[bot] in #5423
Update module go.opentelemetry.io/otel/sdk to v1.45.0 [SECURITY] by @renovate[bot] in #5425
Update module filippo.io/edwards25519 to v1.1.1 [SECURITY] by @renovate[bot] in #5421
Replace deprecated google.CredentialsFromJSON with CredentialsFromJSONWithType by @bryanbeverly in #5428
Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 [SECURITY] by @renovate[bot] in #5424
Update module google.golang.org/grpc to v1.83.1 [SECURITY] by @renovate[bot] in #5426
Fix GitHub comment scans stopping early on large repositories by @unsmith in #5405
fix(github): use a single "app client registry" by @mariduv in #5427
Add SonarQube Server token detector by @kashifkhan0771 in #5419
Add per-logger debug level override for source logging by @kashifkhan0771 in #5432
Update module google.golang.org/grpc to v1.83.2 [SECURITY] by @renovate[bot] in #5431
github: name the missing permission when a comment listing is refused by @unsmith in #5438

Full Changelog: trufflesecurity/trufflehog@v3.99.2...v3.99.3

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-11-07T08:23:47Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
vortex.dev	Ready	Preview	Nov 7, 2026 8:24am UTC

github-actions · 2026-11-07T08:26:03Z

🔦 Lighthouse audit

URL	Perf	A11y	Best practices	SEO
`/`	🟢 100	🟢 100	🟢 100	🟢 100
`/bench`	🟢 100	🟢 100	🟢 100	🟢 100
`/bench/chart/ct.eyJrIjoiQ29tcHJlc3Npb25UaW1lIiwiZGF0YXNldCI6ImFyYWRlIiwiZGF0YXNldF92YXJpYW50IjpudWxsfQ`	🟢 100	🟢 100	🟢 100	🟢 100
`/blog`	🟢 100	🟢 100	🟢 100	🟢 100
`/blog/btrblocks-compressor`	🟢 100	🟢 100	🟢 100	🟢 100

Run 42355303210 · 2026-11-07 08:26 UTC

Update GitHub Actions

191e7dc

renovate Bot added dependencies Pull requests that update a dependency file github-actions labels Nov 7, 2026

renovate Bot enabled auto-merge (squash) November 7, 2026 08:23

renovate-approve Bot approved these changes Nov 7, 2026

View reviewed changes

vercel Bot deployed to Preview November 7, 2026 08:24

View deployment

renovate Bot merged commit 30c368c into main Nov 7, 2026
22 checks passed

renovate Bot deleted the renovate/github-actions branch November 7, 2026 08:29

Navigation Menu

Repository navigation

Update GitHub Actions - #204

Update GitHub Actions#204
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions

renovate Bot commented Nov 7, 2026

Uh oh!

vercel Bot commented Nov 7, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 7, 2026

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Nov 7, 2026

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

v10.3.3: 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.3.2: 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

vercel Bot commented Nov 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Nov 7, 2026

🔦 Lighthouse audit

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v10.3.3`: 🌈 Use Astral mirror for version manifests with GitHub fallback

`v10.3.2`: 🌈 update known checksums for 0.13.5

`v10.3.1`: 🌈 preserve cache error class names in save-cache bundle

vercel Bot commented Nov 7, 2026 •

edited

Loading