chore(deps): update github actions (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache	action	major	v3 → v6
actions/checkout	action	major	v3 → v7
crazy-max/ghaction-github-labeler	action	major	v4 → v6
deno (source)	uses-with	major	v1.x → 2.x
denoland/setup-deno	action	major	v1 → v2.0.4
github/codeql-action	action	major	v2 → v4

---

Release Notes

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in #​1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

v5.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v5.1.0 - handle read-only cache access by @​jasongin in #​1775

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

Compare Source

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in #​1747

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

What's Changed

• Add release instructions and update maintainer docs by @​Link- in #​1696
• Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @​Link- in #​1697
• Fix workflow permissions and cleanup workflow names / formatting by @​Link- in #​1699
• docs: Update examples to use the latest version by @​XZTDean in #​1690
• Fix proxy integration tests by @​Link- in #​1701
• Fix cache key in examples.md for bun.lock by @​RyPeck in #​1722
• Update dependencies & patch security vulnerabilities by @​Link- in #​1738

New Contributors

• @​XZTDean made their first contribution in #​1690
• @​RyPeck made their first contribution in #​1722

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

v5.0.2: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

v5.0.1

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

---

v5.0.1

What's Changed

• fix: update @​actions/cache for Node.js 24 punycode deprecation by @​salmanmkc in #​1685
• prepare release v5.0.1 by @​salmanmkc in #​1686

v5.0.0

What's Changed

• Upgrade to use node24 by @​salmanmkc in #​1630
• Prepare v5.0.0 release by @​salmanmkc in #​1684

Full Changelog: actions/cache@v5...v5.0.1

v5.0.0

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

---

What's Changed

• Upgrade to use node24 by @​salmanmkc in #​1630
• Prepare v5.0.0 release by @​salmanmkc in #​1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

v5

Compare Source

v4.3.0

Compare Source

What's Changed

• Add note on runner versions by @​GhadimiR in #​1642
• Prepare v4.3.0 release by @​Link- in #​1655

New Contributors

• @​GhadimiR made their first contribution in #​1642

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed

• Update README.md by @​nebuk89 in #​1620
• Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @​Link- in #​1634
• Prepare release 4.2.4 by @​Link- in #​1636

New Contributors

• @​nebuk89 made their first contribution in #​1620

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

Compare Source

What's Changed

• Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in #​1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

• @​salmanmkc made their first contribution in #​1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

• Bump @​actions/cache to v4.0.2 by @​robherley in #​1560

Full Changelog: actions/cache@v4.2.1...v4.2.2

v4.2.1

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

• docs: GitHub is spelled incorrectly in caching-strategies.md by @​janco-absa in #​1526
• docs: Make the "always save prime numbers" example more clear by @​Tobbe in #​1525
• Update force deletion docs due a recent deprecation by @​sebbalex in #​1500
• Bump @​actions/cache to v4.0.1 by @​robherley in #​1554

New Contributors

• @​janco-absa made their first contribution in #​1526
• @​Tobbe made their first contribution in #​1525
• @​sebbalex made their first contribution in #​1500

Full Changelog: actions/cache@v4.2.0...v4.2.1

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

• @​actions/core: 1.11.1
• @​actions/io: 1.1.3
• @​vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4.1.2...v4.2.0

v4.1.2

Compare Source

What's Changed

• Add Bun example by @​idleberg in #​1456
• Revise isGhes logic by @​jww3 in #​1474
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in #​1475
• Add dependabot.yml to enable automatic dependency upgrades by @​Link- in #​1476
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1478
• Bump actions/stale from 3 to 9 by @​dependabot in #​1479
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1483
• Bump actions/setup-node from 3 to 4 by @​dependabot in #​1481
• Prepare 4.1.2 release by @​Link- in #​1477

New Contributors

• @​idleberg made their first contribution in #​1456
• @​jww3 made their first contribution in #​1474
• @​Link- made their first contribution in #​1476

Full Changelog: actions/cache@v4.1.1...v4.1.2

v4.1.1

Compare Source

What's Changed

• Restore original behavior of cache-hit output by @​joshmgross in #​1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed

• Fix cache-hit output when cache missed by @​fchimpan in #​1404
• Deprecate save-always input by @​joshmgross in #​1452

New Contributors

• @​ottlinger made their first contribution in #​1437
• @​Olegt0rr made their first contribution in #​1377
• @​fchimpan made their first contribution in #​1404
• @​x612skm made their first contribution in #​1434
• @​todgru made their first contribution in #​1311
• @​Jcambass made their first contribution in #​1463
• @​mackey0225 made their first contribution in #​1462
• @​quatquatt made their first contribution in #​1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

v4.0.2

Compare Source

What's Changed

• Fix fail-on-cache-miss not working by @​cdce8p in #​1327

Full Changelog: actions/cache@v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed

• Update README.md by @​yacaovsnc in #​1304
• Update examples by @​yacaovsnc in #​1305
• Update actions/cache publish flow by @​bethanyj28 in #​1340
• Update @​actions/cache by @​bethanyj28 in #​1341

New Contributors

• @​yacaovsnc made their first contribution in #​1304

Full Changelog: actions/cache@v4...v4.0.1

v4.0.0

Compare Source

What's Changed

• Update action to node20 by @​takost in #​1284
• feat: save-always flag by @​to-s in #​1242

New Contributors

• @​takost made their first contribution in #​1284
• @​to-s made their first contribution in #​1242

Full Changelog: actions/cache@v3...v4.0.0

v4

Compare Source

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327

v6.0.0

Compare Source

• Persist creds to a separate file by @​ericsciple in #​2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in #​2248

v6

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v5.0.1

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

v5.0.0

Compare Source

• Update actions checkout to use node 24 by @​salmanmkc in #​2226

v5

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

v4.3.1

Compare Source

• Port v6 cleanup to v4 by @​ericsciple in #​2305

v4.3.0

Compare Source

• docs: update README.md by @​motss in #​1971
• Add internal repos for checking out multiple repositories by @​mouismail in #​1977
• Documentation update - add recommended permissions to Readme by @​benwells in #​2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in #​2044
• Update README.md by @​nebuk89 in #​2194
• Update CODEOWNERS for actions by @​TingluoHuang in #​2224
• Update package dependencies by @​salmanmkc in #​2236

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in #​1739
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1697
• Check out other refs/* by commit by @​orhantoy in #​1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in #​1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in #​1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in #​1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in #​1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in #​1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in #​1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in #​1692
• Add dependabot config by @​cory-miller in #​1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in #​1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in #​1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in #​1656
• Add SSH user parameter by @​cory-miller in #​1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in #​1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

• Correct link to GitHub Docs by @​peterbe in #​1511
• Link to release page from what's new section by @​cory-miller in #​1514

v4.1.0

Compare Source

• Add support for partial checkout filters

v4.0.0

Compare Source

• Support fetching without the --progress option
• Update to node20

v4

Compare Source

• Port v6 cleanup to v4 by @​ericsciple in #​2305

crazy-max/ghaction-github-labeler (crazy-max/ghaction-github-labeler)

v6.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​249
• Switch to ESM and update config/test wiring by @​crazy-max in #​246
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​247
• Bump @​actions/github from 6.0.0 to 9.0.0 in #​248
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​236
• Bump js-yaml from 4.1.0 to 4.1.1 in #​240
• Bump lodash from 4.17.21 to 4.17.23 in #​242
• Bump matcher from 3.0.0 to 6.0.0 in #​239
• Bump minimatch from 3.1.2 to 3.1.5 in #​245

Full Changelog: crazy-max/ghaction-github-labeler@v5.3.0...v6.0.0

v6

Compare Source

v5.3.0

Compare Source

• Bump @​octokit/plugin-paginate-rest from 9.2.1 to 9.2.2 in #​229
• Bump @​octokit/request from 8.4.0 to 8.4.1 in #​232
• Bump @​octokit/request-error from 5.1.0 to 5.1.1 in #​228

Full Changelog: crazy-max/ghaction-github-labeler@v5.2.0...v5.3.0

v5.2.0

Compare Source

• Load yaml files using the failsafe schema option by @​pjpires in #​226
• Bump cross-spawn from 7.0.3 to 7.0.6 in #​223
• Bump undici from 5.28.4 to 5.28.5 in #​225

Full Changelog: crazy-max/ghaction-github-labeler@v5.1.0...v5.2.0

v5.1.0

Compare Source

• Sanitize the color field to allow using hex codes by @​pjpires in #​207
• Fix intermediate values by @​crazy-max in #​218
• Bump micromatch from 4.0.5 to 4.0.8 in #​215
• Bump @​actions/core from 1.10.0 to 1.11.1 in #​217
• Bump @​actions/github from 5.1.1 to 6.0.0 in #​205
• Bump @​babel/traverse from 7.17.9 to 7.23.2 in #​206
• Bump braces from 3.0.2 to 3.0.3 in #​212
• Bump ip from 2.0.0 to 2.0.1 in #​208
• Bump debug from 4.1.1 to 4.3.4 in #​204
• Bump tar from 6.1.11 to 6.2.1 in #​210

Full Changelog: crazy-max/ghaction-github-labeler@v5.0.0...v5.1.0

v5.0.0

Compare Source

• Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in #​199

Full Changelog: crazy-max/ghaction-github-labeler@v4.2.0...v5.0.0

v5

Compare Source

denoland/deno (deno)

v2.9.1

Compare Source

• feat(check): add --desktop flag to type-check for deno desktop (#​35644)
• feat(desktop): register deep-link URL schemes at bundle time (#​35466)
• feat: update laufey to 0.5.0 (#​35663)
• fix(bundle): emit CSSStyleSheet for CSS raw imports (#​35598)
• fix(cache): skip checksums for cached 404 entries (#​35526)
• fix(config): don't strip workspace-member includes from deploy config (#​34788)
• fix(core): apply deferred fast-call op upgrade to the captured bootstrap clone
  (#​35630)
• fix(core): prevent shared-buffer timer expiry race from losing timers (#​35312)
• fix(desktop): default window title to app name instead of laufey_webview
  (#​35541)
• fix(desktop): detect SvelteKit adapter-node and error on unsupported adapters
  (#​35533)
• fix(desktop): discover deno.json in the project dir for deno desktop .
  (#​35660)
• fix(desktop): don't delete user directories that collide with app name
  (#​35513)
• fix(desktop): repair webview and raw backends on Windows (laufey v0.4.1)
  (#​35566)
• fix(desktop): resolve launcher symlink so .deb/.rpm apps find the backend
  (#​35632)
• fix(desktop): set LAUFEY_RUNTIME_PATH in Linux app launcher (#​35580)
• fix(desktop): show macOS tray icon in bundled .app launched via Finder
  (#​35626)
• fix(desktop): use zstd for appimage squashfs (#​35506)
• fix(doc): strip blockquote > prefixes from JSDoc code blocks (#​34866)
• fix(ext/fetch): include path and reason when fetching a file:// URL fails
  (#​35606)
• fix(ext/node): check permissions when binding node:net unix sockets (#​35564)
• fix(ext/node): export report as named export from node:process (#​35400)
• fix(ext/node): mock.reset() should also reset MockTimers (#​35588)
• fix(ext/node): pass Deno subcommands through child_process spawn (#​35599)
• fix(ext/node): send TLS close_notify on JS stream-backed socket shutdown
  (#​35582)
• fix(ext/node_sqlite): keep attach limit capped under scoped permissions
  (#​35232)
• fix(ext/web): make URL and URLSearchParams non-serializable (#​35423)
• fix(fmt): stable formatting of multi-line html/svg tagged templates (#​35540)
• fix(inspector): support Chrome worker debugging (#​35629)
• fix(install): pin pre-release npm versions added via dist-tag (#​35586)
• fix(jupyter): register stdin peer only after ZMTP handshake completes (#​35585)
• fix(lib): add PerformanceObserver and PerformanceObserverEntryList types
  (#​35640)
• fix(libs/http): add missing write_flushed in
  poll_start_fixed_response_with (#​35649)
• fix(lsp): watch .wasm files for changes (#​35560)
• fix(node): load graph-backed TypeScript modules synchronously (#​35527)
• fix(npm): decode percent-encoded subpath of npm specifiers (#​35505)
• fix(npm): fall back for age-filtered npm dist-tags (#​35561)
• fix(npm): normalize bin names with path separators (#​35555)
• fix(npm): realpath npm bin main module (#​35554)
• fix(npm): show scoped-registry auth hint on tarball 404 (#​35514)
• fix(npm): use case-insensitive match for trust-policy-exclude (#​35520)
• fix(rt_desktop): reveal initial window on first paint (startup black flash)
  (#​35620)
• fix: correct property name for JSX new line configuration in schema file
  (#​35565)
• fix: resolve LAUFEY_VERSION from crate-local Cargo.lock during publish
  (#​35507)
• fix: show clear error when V8 fails to create worker threads (#​32856)
• perf(core/webidl): check next method outside of iterator loop (#​35480)
• perf(ext/fetch): fast-path Response reconstruction (#​35495)
• perf(ext/http): coalesce chunked response writes into a single write (#​35523)

v2.9.0

Compare Source

Read more: http://deno.com/blog/v2.9

• feat(bundle): add --declaration flag to generate rolled-up .d.ts files
  (#​33838)
• feat(cli): add deno link and deno unlink subcommands (#​34359)
• feat(cli): add deno watch subcommand (#​35301)
• feat(cli): add deno list subcommand to list declared dependencies (#​34972)
• feat(cli): auto-migrate pnpm-workspace.yaml on resolution failure (#​34993)
• feat(cli): provide a node on PATH when Node.js is not installed (#​34969)
• feat(compile): persist Web Storage/KV in a per-app data directory (#​34618)
• feat(coverage): add configurable coverage thresholds (#​35056)
• feat(desktop): --compress for self-extracting app bundles (#​35420)
• feat(desktop): add Linux .deb and .rpm installer output formats (#​35296)
• feat(desktop): add Windows .msi installer output format (#​35378)
• feat(desktop): autodetect Vite framework (#​35470)
• feat(desktop): default UI backend to webview (#​35442)
• feat(ext/crypto): support remaining modern WebCrypto algorithms (#​35223)
• feat(ext/http): deprecation warning for legacy request abort (#​34397)
• feat(ext/net): implement Happy Eyeballs for Deno.connect and
  Deno.connectTls (#​31726)
• feat(ext/node): implement node:test mock.module (#​35329)
• feat(ext/node): implement node:test mock.timers (#​33946)
• feat(ext/web): web locks api (#​31166)
• feat(fmt): add sortNamedImports and sortNamedExports options (#​33313)
• feat(fmt): infer config from .editorconfig (#​34071)
• feat(fmt): use lax-css for CSS, SCSS, and Less (#​35160)
• feat(fmt): use lax-markup for HTML, XML, SVG, and components (#​35174)
• feat(fmt): use lax-sql for SQL formatting (#​35161)
• feat(http): allow disabling serve compression (#​35253)
• feat(http): disable Deno.serve automatic compression by default (#​35486)
• feat(install): create node_modules for workspace members (#​34970)
• feat(install): seed deno.lock from bun.lock (#​35394)
• feat(install): seed deno.lock from package-lock.json (#​35330)
• feat(install): seed deno.lock from pnpm-lock.yaml (#​35346)
• feat(install): seed deno.lock from yarn.lock (#​35350)
• feat(install): warn on package.json engines mismatch (#​34225)
• feat(lockfile): auto-resolve git merge conflicts in deno.lock (#​34726)
• feat(lsp): add inferred type request (#​35099)
• feat(na

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 12pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.