Update github-actions by renovate[bot] · Pull Request #14794 · phpstan/phpstan

renovate · 2026-06-08T01:42:45Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v6.0.2` → `v6.0.3`
astral-sh/setup-uv	action	minor	`v8.1.0` → `v8.2.0`
aws-actions/configure-aws-credentials	action	minor	`v6.1.1` → `v6.2.0`
cbrgm/mastodon-github-action	action	patch	`v2.2.0` → `v2.2.1`
crate-ci/typos	action	minor	`v1.46.3` → `v1.47.2`
docker/setup-qemu-action	action	minor	`v4.0.0` → `v4.1.0`
getsentry/action-release	action	minor	`v3.6.0` → `v3.7.0`
github/codeql-action	action	patch	`v4.36.0` → `v4.36.2`
rtCamp/action-slack-notify	action	minor	`v2.3.3` → `v2.4.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

astral-sh/setup-uv (astral-sh/setup-uv)

`v8.2.0`

Compare Source

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

`v6.2.0`

Compare Source

`v6.1.3`

Compare Source

Bug Fixes

fix: allow kubelet token symlink in #1805

`v6.1.2`

Compare Source

Bug Fixes

additional filesystem checks (#1799) (c39f282)

cbrgm/mastodon-github-action (cbrgm/mastodon-github-action)

`v2.2.1`

Compare Source

What's Changed

ci(tools): update build tools by @renovate[bot] in #219
patch(deps): update dependency golang to v1.26.3 by @renovate[bot] in #220
ci(tools): update giantswarm/install-binary-action action to v4.1.0 by @renovate[bot] in #221
ci(tools): update actions/stale action to v10.3.0 by @renovate[bot] in #222
ci(tools): update docker/build-push-action action to v7.2.0 by @renovate[bot] in #223
ci(tools): update docker/login-action action to v4.2.0 by @renovate[bot] in #224
ci(tools): update build tools by @renovate[bot] in #225
ci(tools): update docker/setup-qemu-action action to v4.1.0 by @renovate[bot] in #226
chore: remove linux/mips, linux/mips64, linux/mipsle, and linux/mips64le from release build targets by @cbrgm in #227

Full Changelog: cbrgm/mastodon-github-action@v2...v2.2.1

crate-ci/typos (crate-ci/typos)

`v1.47.2`

Compare Source

[1.47.2] - 2026-06-04

Fixes

Don't correct inferrable
Correct unused inferible variant

`v1.47.1`

Compare Source

[1.47.1] - 2026-06-03

Fixes

Don't correct requestors

`v1.47.0`

Compare Source

[1.47.0] - 2026-05-29

Features

Updated the dictionary with the May 2026 changes

docker/setup-qemu-action (docker/setup-qemu-action)

`v4.1.0`

Compare Source

Add reset input to uninstall current emulators by @crazy-max in #21
Bump @docker/actions-toolkit from 0.77.0 to 0.91.0 in #250 #247
Bump brace-expansion from 1.1.12 to 1.1.15 in #265
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #286
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #255
Bump flatted from 3.3.3 to 3.4.2 in #257
Bump glob from 10.3.15 to 10.5.0 in #254
Bump handlebars from 4.7.8 to 4.7.9 in #262
Bump lodash from 4.17.23 to 4.18.1 in #273
Bump postcss from 8.5.6 to 8.5.10 in #285
Bump tar from 6.2.1 to 7.5.15 in #287
Bump tmp from 0.2.5 to 0.2.6 in #291
Bump undici from 6.23.0 to 6.26.0 in #251
Bump vite from 7.3.1 to 7.3.2 in #271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

getsentry/action-release (getsentry/action-release)

`v3.7.0`: 3.7.0

Compare Source

New Features ✨

(sentry-cli) Upgrade to 2.58.6 by @szokeasaurusrex in #323

`v3.7`

Compare Source

`v3.6.1`: 3.6.1

Compare Source

Bug Fixes 🐛

Prevent shell injection in build workflow by @fix-it-felix-sentry in #319

Documentation 📚

Update SENTRY_AUTH_TOKEN reference in README by @angryfoxx in #320

Internal Changes 🔧

(agents) Add dotagents by @andreiborza in #314
(sentry-cli) Upgrade to 2.58.6 by @szokeasaurusrex in #322
Remove changelog preview by @andreiborza in #316

github/codeql-action (github/codeql-action)

`v4.36.2`

Compare Source

`v4.36.1`

Compare Source

rtCamp/action-slack-notify (rtCamp/action-slack-notify)

`v2.4.0`

Compare Source

What's Changed

Changelog:

What's Changed

Pin slackify-markdown-action to specific commit for improved security by @adanalvarez in #219
Bump alpine from beefdbd to 56fa17d by @dependabot[bot] in #213
Bump golang from f6392ff to 36cc309 by @dependabot[bot] in #208
Bump golang from 36cc309 to 5f33368 by @dependabot[bot] in #223
Update action.yml by @julien-carsique-sonarsource in #237
Clarify ENABLE_ESCAPES behaviour in readme by @luke-hill in #215
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #239
Bump alpine from 56fa17d to 51183f2 by @dependabot[bot] in #242
Bump alpine from 51183f2 to 865b95f by @dependabot[bot] in #243
Remove message title when MSG_MINIMAL is true Done by @nktanwar in #244
Bump alpine from 865b95f to 5b10f43 by @dependabot[bot] in #249
Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #246
Bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #248

New Contributors

@adanalvarez made their first contribution in #219
@julien-carsique-sonarsource made their first contribution in #237
@luke-hill made their first contribution in #215
@nktanwar made their first contribution in #244

Full Changelog: rtCamp/action-slack-notify@v2.3.0...v2.4.0

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


      - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0


          egress-policy: audit

-      - uses: cbrgm/mastodon-github-action@776364a15dd1171530479600c75363f7cbc89ef5 # v2.2.0
+      - uses: cbrgm/mastodon-github-action@244bbe72e61b4490e2dc1c34f9537ae9299ae601 # v2.2.1



      - name: "Check for typos"
-        uses: "crate-ci/typos@7b04f660f4ee4f048d18fd341887cf28dfbedfe2" # v1.46.3
+        uses: "crate-ci/typos@37bb98842b0d8c4ffebdb75301a13db0267cef89" # v1.47.2


      - name: "Slack Notification"
        if: steps.commit.outputs.changes_detected == 'true'
-        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
+        uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58 # v2.4.0


          egress-policy: audit

-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3


          egress-policy: audit

-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3


Update github-actions

044c65e

github-advanced-security AI found potential problems Jun 8, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update github-actions#14794

Update github-actions#14794
renovate[bot] wants to merge 1 commit into
2.2.xfrom
renovate/github-actions

renovate Bot commented Jun 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Jun 8, 2026

Release Notes

Bug Fixes

Bug Fixes

What's Changed

[1.47.2] - 2026-06-04

Fixes

[1.47.1] - 2026-06-03

Fixes

[1.47.0] - 2026-05-29

Features

v3.7.0: 3.7.0

New Features ✨

v3.6.1: 3.6.1

Bug Fixes 🐛

Documentation 📚

Internal Changes 🔧

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v3.7.0`: 3.7.0

`v3.6.1`: 3.6.1