chore(deps): update ci references (master) (major) by red-hat-konflux[bot] · Pull Request #2324 · RedHatInsights/vulnerability-engine

red-hat-konflux · 2026-05-08T09:41:52Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v2` → `v6`
actions/checkout	action	major	`v4` → `v6`
actions/create-github-app-token	action	major	`v1` → `v3`
actions/setup-python	action	major	`v2` → `v6`
actions/setup-python	action	major	`v3` → `v6`
codecov/codecov-action	action	major	`v3.1.6` → `v6.0.1`
docker/build-push-action	action	major	`v5.4.0` → `v7.1.0`
docker/login-action	action	major	`v3.7.0` → `v4.1.0`
docker/metadata-action	action	major	`v5.10.0` → `v6.0.0`
docker/setup-buildx-action	action	major	`v3.12.0` → `v4.0.0`
sigstore/cosign-installer	action	major	`v3.10.1` → `v4.1.2`

Release Notes

actions/checkout (actions/checkout)

`v6`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v4`

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

`v3`

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

`v3`

Compare Source

`v2`

Compare Source

actions/setup-python (actions/setup-python)

codecov/codecov-action (codecov/codecov-action)

`v6.0.1`

Compare Source

What's Changed

fix: prevent template injection in run: steps (VULN-1652) by @thomasrockhu-codecov in #1947
chore(release): 6.0.1 by @thomasrockhu-codecov in #1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in #1929
Th/6.0.0 by @thomasrockhu-codecov in #1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

`v5.5.4`

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in #1926
chore(release): 5.5.4 by @thomasrockhu-codecov in #1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

`v5.5.3`

Compare Source

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #1874
chore(release): bump to 5.5.3 by @thomasrockhu-codecov in #1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

`v5.5.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

`v5.5.1`

Compare Source

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

`v5.4.3`

Compare Source

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in #1822
fix: OIDC on forks by @joseph-sentry in #1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

`v5.4.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

`v5.4.1`

Compare Source

What's Changed

fix: use the github core methods by @thomasrockhu-codecov in #1807
build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @app/dependabot in #1803
build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @app/dependabot in #1797
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @app/dependabot in #1798
chore(release): wrapper -0.2.1 by @app/codecov-releaser-app in #1788
build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @app/dependabot in #1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

`v5.4.0`

Compare Source

What's Changed

update wrapper submodule to 0.2.0, add recurse_submodules arg by @matt-codecov in #1780
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @app/dependabot in #1775
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @app/dependabot in #1776
build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @app/dependabot in #1777
Clarify in README that use_pypi bypasses integrity checks too by @webknjaz in #1773
Fix use of safe.directory inside containers by @Flamefire in #1768
Fix description for report_type input by @craigscott-crascit in #1770
build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @app/dependabot in #1765
Fix a typo in the example by @miranska in #1758
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @app/dependabot in #1757
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @app/dependabot in #1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

`v5.3.1`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

`v5.3.0`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

`v5.2.0`

Compare Source

What's Changed

Fix typo in README by @tserg in #1747
Th/add commands by @thomasrockhu-codecov in #1745
use correct audience when requesting oidc token by @juho9000 in #1744
build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by @app/dependabot in #1742
build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @app/dependabot in #1743
chore(deps): bump wrapper to 0.0.32 by @thomasrockhu-codecov in #1740
feat: add disable-telem feature by @thomasrockhu-codecov in #1739
fix: remove erroneous linebreak in readme by @Vampire in #1734

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

`v5.1.2`

Compare Source

What's Changed

fix: update statment by @thomasrockhu-codecov in #1726
fix: update action script by @thomasrockhu-codecov in #1725
fix: prevent oidc on tokenless due to permissioning by @thomasrockhu-codecov in #1724
chore(release): wrapper-0.0.31 by @app/codecov-releaser-app in #1723
Put quotes around ${{ inputs.token }} in action.yml by @jwodder in #1721
build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @app/dependabot in #1722
Remove mistake from options table by @Acconut in #1718
build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @app/dependabot in #1717

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2

`v5.1.1`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1

`v5.1.0`

Compare Source

What's Changed

fix: hide unnecessary error on shasum by @thomasrockhu-codecov in #1692
build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @app/dependabot in #1701
chore(release): wrapper-0.0.29 by @app/codecov-releaser-app in #1713

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0

`v5.0.7`

Compare Source

What's Changed

fix: use HEAD_REPO by @thomasrockhu-codecov in #1690

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.6..v5.0.7

`v5.0.6`

Compare Source

What's Changed

fix: update CODECOV_TOKEN and fix tokenless by @thomasrockhu-codecov in #1688

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.5..v5.0.6

`v5.0.5`

Compare Source

What's Changed

chore(release): wrapper-0.0.27 by @app/codecov-releaser-app in #1685

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.4..v5.0.5

`v5.0.4`

Compare Source

What's Changed

chore(deps): bump wrapper to 0.0.26 by @thomasrockhu-codecov in #1681
fix: strip out a trailing /n from input tokens by @thomasrockhu-codecov in #1679
fix: add action version by @thomasrockhu-codecov in #1678

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.3..v5.0.4

`v5.0.3`

Compare Source

What's Changed

fix: update OIDC audience by @thomasrockhu-codecov in #1675
fix: use double-quotes for OIDC by @thomasrockhu-codecov in #1669
fix: prevent always setting tokenless to be true by @thomasrockhu-codecov in #1673
fix: update CHANGELOG and automate by @thomasrockhu-codecov in #1674
fix: bump to v5 and update README by @thomasrockhu-codecov in #1655
build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @app/dependabot in #1665
fix: typo in inputs.disable_safe_directory by @mkroening in #1666

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.0.2..v5.0.3

`v5.0.2`

Compare Source

What's Changed

fix: override commit and pr values for PR cases by @thomasrockhu-codecov in #1657

Full Changelog: codecov/codecov-action@v5.0.1...v5.0.2

`v5.0.1`

Compare Source

What's Changed

fix: use marketplace v5 badge by @thomasrockhu-codecov in #1646
fix: update tokenless branch logic by @thomasrockhu-codecov in #1650
chore(release): 5.0.1 by @thomasrockhu-codecov in #1656

Full Changelog: codecov/codecov-action@v5.0.0...v5.0.1

`v5.0.0`

Compare Source

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

file (this has been deprecated in favor of files)

plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

binary
gcov_args
gcov_executable
gcov_ignore
gcov_include
report_type
skip_validation
swift_project

You can see their usage in the action.yml file.

`v4.6.0`

Compare Source

What's Changed

build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #1481
build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #1480
build(deps-dev): bump ts-jest from 29.1.4 to 29.1.5 by @dependabot in #1479
build(deps-dev): bump @typescript-eslint/parser from 7.13.0 to 7.13.1 by @dependabot in #1485
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.13.0 to 7.13.1 by @dependabot in #1484
build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by @dependabot in #1490
build(deps-dev): bump @typescript-eslint/parser from 7.13.1 to 7.14.1 by @dependabot in #1493
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.13.1 to 7.14.1 by @dependabot in #1492
build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #1496
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.14.1 to 7.15.0 by @dependabot in #1501
build(deps-dev): bump typescript from 5.5.2 to 5.5.3 by @dependabot in #1500
build(deps-dev): bump @typescript-eslint/parser from 7.14.1 to 7.15.0 by @dependabot in #1499
build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #1502
build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in #1504
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.15.0 to 7.16.0 by @dependabot in #1503
build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in #1507
build(deps-dev): bump @typescript-eslint/parser from 7.15.0 to 7.16.0 by @dependabot in #1505
build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #1509
chore(ci): restrict scorecards to codecov/codecov-action by @thomasrockhu-codecov in #1512
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.16.0 to 7.16.1 by @dependabot in #1514
build(deps-dev): bump @typescript-eslint/parser from 7.16.0 to 7.16.1 by @dependabot in #1513
test: versionInfo by @marcobiedermann in #1407
build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in #1515
build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #1516
build(deps-dev): bump typescript from 5.5.3 to 5.5.4 by @dependabot in #1521
build(deps-dev): bump @typescript-eslint/parser from 7.16.1 to 7.17.0 by @dependabot in #1520
build(deps-dev): bump @typescript-eslint/parser from 7.17.0 to 7.18.0 by @dependabot in #1528
build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by @dependabot in #1526
build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #1525
build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in #1532
build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #1534
build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #1542
build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #1541
ref: Tidy up types and remove string coercion by @nicholas-codecov in #1536
build(deps-dev): bump @octokit/webhooks-types from 3.77.1 to 7.5.1 by @dependabot in #1545
build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by @dependabot in #1551
feat: pass tokenless value as branch override by @joseph-sentry in #1511
build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #1563
Create makefile.yml by @Hawthorne001 in #1555
build(deps): bump github/codeql-action from 3.26.2 to 3.26.6 by @dependabot in #1562
build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in #1557
Spell evenName in the logs correctly by @webknjaz in #1560
build(deps-dev): bump typescript from 5.5.4 to 5.6.2 by @dependabot in #1566
build(deps-dev): bump @types/jest from 29.5.12 to 29.5.13 by @dependabot in #1567
build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by @dependabot in #1569
build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by @dependabot in #1571
build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 by @dependabot in #1575
build(deps-dev): bump @vercel/ncc from 0.38.1 to 0.38.2 by @dependabot in #1577
chore: fix typo of OSS by @shoothzj in #1578
build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 by @dependabot in #1584
build(deps): bump actions/checkout from 4.1.7 to 4.2.0 by @dependabot in #1583
fix: bump eslint parser deps by @thomasrockhu-codecov in #1586
chore(release):4.6.0 by @thomasrockhu-codecov in #1587

`v4.5.0`

Compare Source

What's Changed

build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.9.0 to 7.10.0 by @dependabot in #1446
build(deps-dev): bump ts-jest from 29.1.2 to 29.1.3 by @dependabot in #1443
build(deps-dev): bump @typescript-eslint/parser from 7.9.0 to 7.10.0 by @dependabot in #1445
build(deps-dev): bump @typescript-eslint/parser from 7.10.0 to 7.11.0 by @dependabot in #1459
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.10.0 to 7.11.0 by @dependabot in #1458
build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #1456
build(deps-dev): bump ts-jest from 29.1.3 to 29.1.4 by @dependabot in #1460
build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #1466
build(deps-dev): bump @typescript-eslint/parser from 7.11.0 to 7.12.0 by @dependabot in #1467
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.11.0 to 7.12.0 by @dependabot in #1468
build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #1472
fix: handle trailing commas by @joseph-sentry in #1470
build(deps-dev): bump @typescript-eslint/parser from 7.12.0 to 7.13.0 by @dependabot in #1474
build(deps-dev): bump braces from 3.0.2 to 3.0.3 by @dependabot in #1475
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 by @dependabot in #1473
feat: add support for tokenless v3 by @joseph-sentry in #1410
Use an existing token even if the PR is from a fork by @leofeyer in #1471
chore(release): bump to 4.5.0 by @thomasrockhu-codecov in #1477

`v4.4.1`

Compare Source

What's Changed

build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @dependabot in #1427
fix: prevent xlarge from running on forks by @thomasrockhu-codecov in #1432
build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in #1439
build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #1438
fix: isPullRequestFromFork returns false for any PR by @shahar-h in #1437
chore(release): 4.4.1 by @thomasrockhu-codecov in #1441

`v4.4.0`

Compare Source

What's Changed

chore: Clarify isPullRequestFromFork by @jsoref in #1411
build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #1423
build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @dependabot in #1421
build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #1420
feat: remove GPG and run on spawn by @thomasrockhu-codecov in #1426
build(deps-dev): bump @typescript-eslint/parser from 7.8.0 to 7.9.0 by @dependabot in #1428
chore(release): 4.4.0 by @thomasrockhu-codecov in #1430

Full Changelog: codecov/codecov-action@v4.3.1...v4.4.0

`v4.3.1`

Compare Source

What's Changed

build(deps-dev): bump typescript from 5.4.4 to 5.4.5 by @dependabot in #1370
fix: more verbose log message when failing to import pgp key by @ReenigneArcher in #1371
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.6.0 to 7.7.0 by @dependabot in #1374
build(deps-dev): bump @typescript-eslint/parser from 7.6.0 to 7.7.0 by @dependabot in #1375
build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #1382
build(deps): bump github/codeql-action from 3.24.10 to 3.25.1 by @dependabot in #1381
build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #1380
build(deps-dev): bump @typescript-eslint/parser from 7.7.0 to 7.7.1 by @dependabot in #1384
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 by @dependabot in #1383
Update README.md to point to docs about tokenless by @rohan-at-sentry in #1395
build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #1393
build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #1392
build(deps): bump github/codeql-action from 3.25.1 to 3.25.3 by @dependabot in #1391
style: Node Packages by @marcobiedermann in #1394
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.1 to 7.8.0 by @dependabot in #1402
build(deps-dev): bump @typescript-eslint/parser from 7.7.1 to 7.8.0 by @dependabot in #1401
docs: Type Annotations by @marcobiedermann in #1397
docs: main branch by @marcobiedermann in #1396
fix: bypass token checks for forks and OIDC by @thomasrockhu-codecov in #1404
chore(release): 4.3.1. by @thomasrockhu-codecov in #1405

`v4.3.0`

Compare Source

What's Changed

fix: automatically detect if using GitHub enterprise by @thomasrockhu-codecov in #1356
build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by @dependabot in #1355
build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in #1360
build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.5.0 to 7.6.0 by @dependabot in #1364
build(deps-dev): bump @typescript-eslint/parser from 7.5.0 to 7.6.0 by @dependabot in #1363
feat: add network params by @thomasrockhu-codecov in #1365
build(deps): bump undici from 5.28.3 to 5.28.4 by @dependabot in #1361
chore(release): v4.3.0 by @thomasrockhu-codecov in #1366

Full Changelog: codecov/codecov-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

What's Changed

chore(deps): update deps by @thomasrockhu-codecov in #1351
feat: allow for authentication via OIDC token by @thomasrockhu-codecov in #1330
fix: use_oidc shoudl be required false by @thomasrockhu-codecov in #1353

Full Changelog: codecov/codecov-action@v4.1.1...v4.2.0

`v4.1.1`

Compare Source

What's Changed

build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @dependabot in #1315
build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by @dependabot in #1319
Removed mention of Mercurial by @drazisil-codecov in #1325
build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by [@dependabot](htt

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

sourcery-ai · 2026-05-08T09:41:58Z

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR refreshes GitHub Actions used in the CI workflows to the latest major versions by pinning them to specific commit SHAs, primarily updating checkout, setup-python, Codecov, Docker-related actions, and cosign-installer across all workflows.

File-Level Changes

Change	Details	Files
Update core GitHub Actions and third-party CI actions to newer major versions and pin them by commit SHA across workflows.	Bump actions/checkout to v6 and update all workflow references to use a pinned commit SHA. Upgrade actions/create-github-app-token to v3 and pin it by commit SHA in the semantic-release workflow. Upgrade actions/setup-python to v6 and pin it by commit SHA in semantic-release, tests, pre-commit, and requirements generation workflows. Update codecov/codecov-action to v6.0.0 and pin it by commit SHA in the tests workflow, implying Node 24 support requirements. Upgrade Docker-related actions (setup-buildx-action, login-action, metadata-action, build-push-action) and sigstore/cosign-installer to their latest major versions with pinned SHAs in the container-publish workflow.	`.github/workflows/container-publish.yaml` `.github/workflows/semantic-release.yml` `.github/workflows/tests.yml` `.github/workflows/pre-commit.yml` `.github/workflows/db-docs.yml` `.github/workflows/generate-requirements-txt.yaml`

Tips and commands

Interacting with Sourcery

Trigger a new review: Comment @sourcery-ai review on the pull request.
Continue discussions: Reply directly to Sourcery's review comments.
Generate a GitHub issue from a review comment: Ask Sourcery to create an
issue from a review comment by replying to it. You can also reply to a
review comment with @sourcery-ai issue to create an issue from it.
Generate a pull request title: Write @sourcery-ai anywhere in the pull
request title to generate a title at any time. You can also comment
@sourcery-ai title on the pull request to (re-)generate the title at any time.
Generate a pull request summary: Write @sourcery-ai summary anywhere in
the pull request body to generate a PR summary at any time exactly where you
want it. You can also comment @sourcery-ai summary on the pull request to
(re-)generate the summary at any time.
Generate reviewer's guide: Comment @sourcery-ai guide on the pull
request to (re-)generate the reviewer's guide at any time.
Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
pull request to resolve all Sourcery comments. Useful if you've already
addressed all the comments and don't want to see them anymore.
Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
request to dismiss all existing Sourcery reviews. Especially useful if you
want to start fresh with a new review - don't forget to comment
@sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

Enable or disable review features such as the Sourcery-generated pull request
summary, the reviewer's guide, and others.
Change the review language.
Add, remove or edit custom review instructions.
Adjust other review settings.

Getting Help

Contact our support team for questions or feedback.
Visit our documentation for detailed guides and information.
Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

github-actions · 2026-05-08T09:42:14Z

SC Environment Impact Assessment

Overall Impact: ⚪ NONE

No SC Environment-specific impacts detected in this PR.

What was checked

This PR was automatically scanned for:

Database migrations
ClowdApp configuration changes
Kessel integration changes
AWS service integrations (S3, RDS, ElastiCache)
Kafka topic changes
Secrets management changes
External dependencies

sourcery-ai

Hey - I've reviewed your changes and they look great!

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

sourcery-ai Bot reviewed May 8, 2026

View reviewed changes

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/major-ci-refs branch 4 times, most recently from 6dd2d16 to 1b24d36 Compare May 13, 2026 05:43

chore(deps): update ci references

35bfce0

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/master-master/major-ci-refs branch from 1b24d36 to 35bfce0 Compare May 18, 2026 21:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update ci references (master) (major)#2324

chore(deps): update ci references (master) (major)#2324
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master-master/major-ci-refs

red-hat-konflux Bot commented May 8, 2026 •

edited

Loading

Uh oh!

sourcery-ai Bot commented May 8, 2026 •

edited

Loading

Reviewer's Guide

File-Level Changes

Interacting with Sourcery

Customizing Your Experience

Getting Help

Uh oh!

github-actions Bot commented May 8, 2026

Uh oh!

sourcery-ai Bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

v5 Release

Migration Guide

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Configuration

Documentation

Uh oh!

sourcery-ai Bot commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviewer's Guide

File-Level Changes

Interacting with Sourcery

Customizing Your Experience

Getting Help

Uh oh!

github-actions Bot commented May 8, 2026

SC Environment Impact Assessment

Uh oh!

sourcery-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented May 8, 2026 •

edited

Loading

sourcery-ai Bot commented May 8, 2026 •

edited

Loading