[agntcy-automation]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	minor	v4 → v4.4.0
actions/configure-pages	action	pinDigest	→ 983d773
actions/create-github-app-token	action	minor	v3.2.0 → v3.3.0
actions/deploy-pages	action	patch	v4 → v4.0.5
actions/setup-go	action	minor	v5 → v5.6.0
actions/setup-python	action	minor	v5 → v5.6.0
actions/upload-artifact	action	minor	v4 → v4.6.2
actions/upload-pages-artifact	action	pinDigest	→ 7b1f4a7
go	uses-with	minor	1.23.1 → 1.27.2	1.27.3
go-task/setup-task	action	minor	v2 → v2.2.0
lycheeverse/lychee-action	action	pinDigest	→ e747777
python	uses-with	minor	3.11 → 3.15	3.15.2 (+1)
renovatebot/github-action	action	patch	v46.3.1 → v46.3.9	v46.3.10

---

Release Notes

actions/checkout

v4.4.0

Compare Source

What's Changed

• [BREAKING] backport allow-unsafe-pr-checkout to v4 by @​aiqiaoy in #​2502
• backport fixes to releases-v4 by @​aiqiaoy in #​2524

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v4.3.1...v4.4.0

v4.3.1

Compare Source

• Port v6 cleanup to v4 by @​ericsciple in #​2305

v4.3.0

Compare Source

• docs: update README.md by @​motss in #​1971
• Add internal repos for checking out multiple repositories by @​mouismail in #​1977
• Documentation update - add recommended permissions to Readme by @​benwells in #​2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in #​2044
• Update README.md by @​nebuk89 in #​2194
• Update CODEOWNERS for actions by @​TingluoHuang in #​2224
• Update package dependencies by @​salmanmkc in #​2236

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in #​1739
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1697
• Check out other refs/* by commit by @​orhantoy in #​1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in #​1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in #​1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in #​1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in #​1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in #​1695
• README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @​cory-miller in #​1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in #​1692
• Add dependabot config by @​cory-miller in #​1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in #​1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in #​1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in #​1656
• Add SSH user parameter by @​cory-miller in #​1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in #​1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

• Correct link to GitHub Docs by @​peterbe in #​1511
• Link to release page from what's new section by @​cory-miller in #​1514

v4.1.0

Compare Source

• Add support for partial checkout filters

actions/create-github-app-token

v3.3.0

Compare Source

Features

• update permission inputs (#​399) (a47236f)

Bug Fixes

• deps: bump nested undici from 6.24.0 to 6.29.0 (#​403) (12461a3)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#​395) (a69c19d)

actions/deploy-pages

v4.0.5

Compare Source

Changelog

• On API error, the error message will surface the API request ID @​TooManyBees (#​324)
• Bump the non-breaking-changes group with 2 updates @​dependabot (#​318)
• Bump the non-breaking-changes group with 1 update @​dependabot (#​316)
• Bump the non-breaking-changes group with 3 updates @​dependabot (#​314)
• Bump release-drafter/release-drafter from 5.25.0 to 6.0.0 @​dependabot (#​311)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.4

Compare Source

Changelog

• Update api-client.js @​lmammino (#​295)
• fix typo: compatibilty -> compatibility @​SimonSiefke (#​298)
• Bump @​actions/artifact from 2.0.1 to 2.1.1 @​dependabot (#​310)
• Update Dependabot config to group non-breaking changes @​JamesMGreene (#​307)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.3

Compare Source

Changelog

• Bump actions/artifact to 2.0.1 @​TooManyBees (#​297)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.2

Compare Source

Changelog

• Bump undici from 6.0.1 to 6.2.1 @​dependabot (#​290)
• Bump github/codeql-action from 2 to 3 @​dependabot (#​282)
• Bump actions/upload-artifact from 3 to 4 @​dependabot (#​281)
• Bump eslint from 8.55.0 to 8.56.0 @​dependabot (#​280)
• Bump actions/publish-action from 0.2.2 to 0.3.0 @​dependabot (#​277)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.1

Compare Source

Changelog

• Use the Actions artifacts client to avoid needing the actions: read permission @​JamesMGreene @​TooManyBees (#​288)
• Update README to reflect v4 @​TooManyBees (#​283)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

actions/setup-go

v5.6.0

Compare Source

What's Changed

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​aparnajyothi-y in #​689

Full Changelog: actions/setup-go@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in #​556
• Add manifest validation and improve error handling by @​priyagupta108 in #​586
• Update template link by @​jsoref in #​527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in #​574
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​573
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in #​582
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in #​537

New Contributors

• @​jsoref made their first contribution in #​527

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Dependency updates :

• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in #​535
• Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @​dependabot in #​536
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in #​568
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in #​541

New Contributors

• @​aparnajyothi-y made their first contribution in #​568

Full Changelog: actions/setup-go@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

• Use the new cache service: upgrade @actions/cache to ^4.0.0 by @​Link- in #​531
• Configure Dependabot settings by @​HarithaVattikuti in #​530
• Document update - permission section by @​HarithaVattikuti in #​533
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​534

New Contributors

• @​Link- made their first contribution in #​531

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in #​496

New Contributors

• @​Shegox made their first contribution in #​496

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​500
• Upgrade IA Publish by @​Jcambass in #​502
• Add architecture to cache key by @​Zxilly in #​493
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in #​510

Bug Fixes

• Revise isGhes logic by @​jww3 in #​511

New Contributors

• @​Zxilly made their first contribution in #​493
• @​Jcambass made their first contribution in #​500
• @​jww3 made their first contribution in #​511
• @​priyagupta108 made their first contribution in #​510

Full Changelog: actions/setup-go@v5...v5.1.0

v5.0.2

Compare Source

What's Changed

Bug fixes:

• Fix versions check failure by @​HarithaVattikuti in #​479

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in #​487

New Contributors

• @​HarithaVattikuti made their first contribution in #​479

Full Changelog: actions/setup-go@v5...v5.0.2

v5.0.1

Compare Source

What's Changed

• Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @​dependabot , @​HarithaVattikuti in #​465
• Update documentation with latest V5 release notes by @​ab in #​459
• Update version documentation by @​178inaba in #​458
• Documentation update of actions/setup-go to v5 by @​chenrui333 in #​449

New Contributors

• @​ab made their first contribution in #​459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

actions/setup-python

v5.6.0

Compare Source

What's Changed

• Workflow updates related to Ubuntu 20.04 by @​aparnajyothi-y in #​1065
• Fix for Candidate Not Iterable Error by @​aparnajyothi-y in #​1082
• Upgrade semver and @​types/semver by @​dependabot in #​1091
• Upgrade prettier from 2.8.8 to 3.5.3 by @​dependabot in #​1046
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in #​1081

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Enhancements:

• Support free threaded Python versions like '3.13t' by @​colesbury in #​973
• Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @​action/cache from 4.0.0 to 4.0.3 by @​priya-kinthali in #​1056
• Add support for .tool-versions file in setup-python by @​mahabaleshwars in #​1043

Bug fixes:

• Fix architecture for pypy on Linux ARM64 by @​mayeut in #​1011
  This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in #​1016
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​1015

New Contributors

• @​colesbury made their first contribution in #​973
• @​mahabaleshwars made their first contribution in #​1043

Full Changelog: actions/setup-python@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Enhancements:

• Update cache error message by @​aparnajyothi-y in #​968
• Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @​priya-kinthali in #​985
• Configure Dependabot settings by @​HarithaVattikuti in #​1008

Documentation changes:

• Readme update - recommended permissions by @​benwells in #​1009
• Improve Advanced Usage examples by @​lrq3000 in #​645

Dependency updates:

• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in #​1012
• Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @​dependabot in #​895
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​1014
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in #​1020
• Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @​dependabot in #​1019
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in #​1007

New Contributors

• @​benwells made their first contribution in #​1009
• @​HarithaVattikuti made their first contribution in #​1008
• @​lrq3000 made their first contribution in #​645

Full Changelog: actions/setup-python@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​941
• Upgrade IA publish by @​Jcambass in #​943

Bug Fixes:

• Normalise Line Endings to Ensure Cross-Platform Consistency by @​priya-kinthali in #​938
• Revise isGhes logic by @​jww3 in #​963
• Bump pillow from 7.2 to 10.2.0 by @​aparnajyothi-y in #​956

Enhancements:

• Enhance workflows and documentation updates by @​priya-kinthali in #​965
• Bump default versions to latest by @​jeffwidman in #​905

New Contributors

• @​Jcambass made their first contribution in #​941
• @​jww3 made their first contribution in #​963

Full Changelog: actions/setup-python@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

Bug fixes:

• Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @​priyagupta108 in #​916
  This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
• Add arch to cache key by @​Zxilly in #​896
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.

Documentation changes:

• Fix display of emojis in contributors doc by @​sciencewhiz in #​899
• Documentation update for caching poetry dependencies by @​gowridurgad in #​908

Dependency updates:

• Bump @​iarna/toml version from 2.2.5 to 3.0.0 by @​priya-kinthali in #​912
• Bump pyinstaller from 3.6 to 5.13.1 by @​aparnajyothi-y in #​923

New Contributors

• @​sciencewhiz made their first contribution in #​899
• @​priyagupta108 made their first contribution in #​916
• @​Zxilly made their first contribution in #​896
• @​aparnajyothi-y made their first contribution in #​923

Full Changelog: actions/setup-python@v5...v5.2.0

v5.1.1

Compare Source

What's Changed

Bug fixes:

• fix(ci): update all failing workflows by @​mayeut in #​863
  This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

• Documentation update for cache by @​gowridurgad in #​873

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in #​893

New Contributors

• @​gowridurgad made their first contribution in #​873

Full Changelog: actions/setup-python@v5...v5.1.1

v5.1.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in #​766.
• Dependency updates by @​dependabot and @​HarithaVattikuti in #​817
• Documentation changes for version in README by @​basnijholt in #​776
• Documentation changes for link in README by @​ukd1 in #​793
• Documentation changes for link in Advanced Usage by @​Jamim in #​782
• Documentation changes for avoiding rate limit issues on GHES by @​priya-kinthali in #​835

New Contributors

• @​basnijholt made their first contribution in #​776
• @​ukd1 made their first contribution in #​793
• @​Jamim made their first contribution in #​782
• @​Shegox made their first contribution in #​766
• @​priya-kinthali made their first contribution in #​835

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

actions/upload-artifact

v4.6.2

Compare Source

What's Changed

• Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

• @​salmanmkc made their first contribution in #​685

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

• Update to use artifact 2.2.2 package by @​yacaovsnc in #​673

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

• Expose env vars to control concurrency and timeout by @​yacaovsnc in #​662

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

• fix: deprecated Node.js version in action by @​hamirmahal in #​578
• Add new artifact-digest output by @​bdehamer in #​656

New Contributors

• @​hamirmahal made their first contribution in #​578
• @​bdehamer made their first contribution in #​656

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

v4.4.3

Compare Source

What's Changed

• Undo indirect dependency updates from #​627 by @​joshmgross in #​632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

• Bump @actions/artifact to 2.1.11 by @​robherley in #​627
  • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in #​607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in #​625

New Contributors

• @​Jcambass made their first contribution in #​621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

• Exclude hidden files by default by @​joshmgross in #​598

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

v4.3.6

Compare Source

What's Changed

• Revert to @​actions/artifact 2.1.8 by @​robherley in #​594

Full Changelog: actions/upload-artifact@v4...v4.3.6

v4.3.5

Compare Source

What's Changed

• Bump @​actions/artifact to v2.1.9 by @​robherley in #​588
  • Fixed artifact upload chunk timeout logic #​1774
  • Use lazy stream to prevent issues with open file limits #​1771

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

v4.3.4

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in #​584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

v4.3.3

Compare Source

What's Changed

• updating @actions/artifact dependency to v2.1.6 by @​eggyhead in #​565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

• Update release-new-action-version.yml by @​konradpabjan in #​516
• Minor fix to the migration readme by @​andrewakim in #​523
• Update readme with v3/v2/v1 deprecation notice by @​robherley in #​561
• updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @​eggyhead in #​562

New Contributors

• @​andrewakim made their first contribution in #​523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

v4.3.1

Compare Source

• Bump @​actions/artifacts to latest version to include updated GHES host check

v4.3.0

Compare Source

What's Changed

• Reorganize upload code in prep for merge logic & add more tests by @​robherley in #​504
• Add sub-action to merge artifacts by @​robherley in #​505

Full Changelog: actions/upload-artifact@v4...v4.3.0

v4.2.0

Compare Source

What's Changed

• Ability to overwrite an Artifact by @​robherley in #​501

Full Changelog: actions/upload-artifact@v4...v4.2.0

v4.1.0

Compare Source

What's Changed

• Add migrations docs by @​robherley in #​482
• Update README.md by @​samuelwine in #​492
• Support artifact-url output by @​konradpabjan in #​496
• Update readme to reflect new 500 artifact per job limit by @​robherley in #​497

New Contributors

• @​samuelwine made their first contribution in #​492

Full Changelog: actions/upload-artifact@v4...v4.1.0

actions/go-versions (go)

v1.27.2: 1.27.2

Compare Source

Go 1.27.2

v1.27.1: 1.27.1

Compare Source

Go 1.27.1

v1.27.0: 1.27.0

Compare Source

Go 1.27.0

v1.26.10: 1.26.10

Compare Source

Go 1.26.10

v1.26.9: 1.26.9

Compare Source

Go 1.26.9

v1.26.8: 1.26.8

Compare Source

Go 1.26.8

v1.26.7: 1.26.7

Compare Source

Go 1.26.7

v1.26.6: 1.26.6

Compare Source

Go 1.26.6

v1.26.5: 1.26.5

Compare Source

Go 1.26.5

v1.26.4: 1.26.4

Compare Source

Go 1.26.4

v1.26.3: 1.26.

[!IMPORTANT]
✂ PR body was truncated to here.