chore(deps): bump the gh-actions-packages group across 5 directories with 2 updates

[dependabot]

Bumps the gh-actions-packages group with 2 updates in the / directory: github/codeql-action and actions/cache.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/install directory: actions/cache.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/node directory: actions/cache.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/install/branch-diff directory: actions/cache.
Bumps the gh-actions-packages group with 2 updates in the /.github/workflows directory: github/codeql-action and actions/cache.

Updates github/codeql-action from 4.35.1 to 4.35.2

Release notes

Sourced from github/codeql-action's releases.

v4.35.2

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
• Update default CodeQL bundle version to 2.25.2. #3823

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.35.2 - 15 Apr 2026

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
• Update default CodeQL bundle version to 2.25.2. #3823

4.35.1 - 27 Mar 2026

• Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

4.35.0 - 27 Mar 2026

• Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
• Update default CodeQL bundle version to 2.25.1. #3773

4.34.1 - 20 Mar 2026

• Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

4.34.0 - 20 Mar 2026

• Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
• We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
• Update default CodeQL bundle version to 2.25.0. #3585

4.33.0 - 16 Mar 2026

• Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

  To opt out of this change:

  • Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
  • User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
  • User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

• Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557

• The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559

• Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563

• Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564

• A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. #3570

4.32.6 - 05 Mar 2026

... (truncated)

Commits

• 95e58e9 Merge pull request #3824 from github/update-v4.35.2-d2e135a73
• 6f31bfe Update changelog for v4.35.2
• d2e135a Merge pull request #3823 from github/update-bundle/codeql-bundle-v2.25.2
• 60abb65 Add changelog note
• 5a0a562 Update default bundle to codeql-bundle-v2.25.2
• 6521697 Merge pull request #3820 from github/dependabot/github_actions/dot-github/wor...
• 3c45af2 Merge pull request #3821 from github/dependabot/npm_and_yarn/npm-minor-345b93...
• f1c3393 Rebuild
• 1024fc4 Rebuild
• 9dd4cfe Bump the npm-minor group across 1 directory with 6 updates
• Additional commits viewable in compare view

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
• f280785 licensed changes
• 619aeb1 npm run build generated dist files
• bcf16c2 Update ts-http-runtime to 0.3.5
• See full diff in compare view

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
• f280785 licensed changes
• 619aeb1 npm run build generated dist files
• bcf16c2 Update ts-http-runtime to 0.3.5
• See full diff in compare view

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
• f280785 licensed changes
• 619aeb1 npm run build generated dist files
• bcf16c2 Update ts-http-runtime to 0.3.5
• See full diff in compare view

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
• f280785 licensed changes
• 619aeb1 npm run build generated dist files
• bcf16c2 Update ts-http-runtime to 0.3.5
• See full diff in compare view

Updates github/codeql-action from 4.35.1 to 4.35.2

Release notes

Sourced from github/codeql-action's releases.

v4.35.2

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
• Update default CodeQL bundle version to 2.25.2. #3823

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.35.2 - 15 Apr 2026

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
• Update default CodeQL bundle version to 2.25.2. #3823

4.35.1 - 27 Mar 2026

• Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

4.35.0 - 27 Mar 2026

• Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
• Update default CodeQL bundle version to 2.25.1. #3773

4.34.1 - 20 Mar 2026

• Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

4.34.0 - 20 Mar 2026

• Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
• We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
• Update default CodeQL bundle version to 2.25.0. #3585

4.33.0 - 16 Mar 2026

• Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

  To opt out of this change:

  • Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
  • User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
  • User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

• Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557

• The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559

• Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563

• Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564

• A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. #3570

4.32.6 - 05 Mar 2026

... (truncated)

Commits

• 95e58e9 Merge pull request #3824 from github/update-v4.35.2-d2e135a73
• 6f31bfe Update changelog for v4.35.2
• d2e135a Merge pull request #3823 from github/update-bundle/codeql-bundle-v2.25.2
• 60abb65 Add changelog note
• 5a0a562 Update default bundle to codeql-bundle-v2.25.2
• 6521697 Merge pull request #3820 from github/dependabot/github_actions/dot-github/wor...
• 3c45af2 Merge pull request #3821 from github/dependabot/npm_and_yarn/npm-minor-345b93...
• f1c3393 Rebuild
• 1024fc4 Rebuild
• 9dd4cfe Bump the npm-minor group across 1 directory with 6 updates
• Additional commits viewable in compare view

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
• f280785 licensed changes
• 619aeb1 npm run build generated dist files
• bcf16c2 Update ts-http-runtime to 0.3.5
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Overall package size

Self size: 5.54 MB
Deduped: 6.39 MB
No deduping: 6.39 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.0.1 | 82.56 kB | 817.39 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.66%. Comparing base (aff047f) to head (62a14e7).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #8049   +/-   ##
=======================================
  Coverage   73.66%   73.66%           
=======================================
  Files         776      776           
  Lines       36242    36242           
=======================================
  Hits        26696    26696           
  Misses       9546     9546           

Flag	Coverage Δ
aiguard-macos	36.59% <ø> (-0.09%)	⬇️
aiguard-ubuntu	36.70% <ø> (-0.09%)	⬇️
aiguard-windows	36.50% <ø> (-0.09%)	⬇️
apm-capabilities-tracing-macos	48.35% <ø> (-0.03%)	⬇️
apm-capabilities-tracing-ubuntu	48.41% <ø> (ø)
apm-capabilities-tracing-windows	48.17% <ø> (+<0.01%)	⬆️
apm-integrations-child-process	36.18% <ø> (-0.10%)	⬇️
apm-integrations-couchbase-18	35.17% <ø> (-0.09%)	⬇️
apm-integrations-couchbase-eol	35.25% <ø> (-0.09%)	⬇️
apm-integrations-oracledb	35.22% <ø> (-0.09%)	⬇️
appsec-express	52.90% <ø> (-0.07%)	⬇️
appsec-fastify	49.38% <ø> (-0.07%)	⬇️
appsec-graphql	49.65% <ø> (-0.16%)	⬇️
appsec-kafka	42.18% <ø> (-0.07%)	⬇️
appsec-ldapjs	41.50% <ø> (-0.08%)	⬇️
appsec-lodash	41.52% <ø> (-0.08%)	⬇️
appsec-macos	56.82% <ø> (-0.07%)	⬇️
appsec-mongodb-core	45.83% <ø> (-0.07%)	⬇️
appsec-mongoose	46.72% <ø> (-0.07%)	⬇️
appsec-mysql	48.87% <ø> (-0.07%)	⬇️
appsec-node-serialize	40.70% <ø> (-0.08%)	⬇️
appsec-passport	44.69% <ø> (-0.08%)	⬇️
appsec-postgres	48.45% <ø> (-0.07%)	⬇️
appsec-sourcing	40.19% <ø> (-0.08%)	⬇️
appsec-stripe	42.53% <ø> (+0.03%)	⬆️
appsec-template	40.86% <ø> (-0.08%)	⬇️
appsec-ubuntu	56.90% <ø> (-0.07%)	⬇️
appsec-windows	56.72% <ø> (-0.05%)	⬇️
instrumentations-instrumentation-bluebird	29.87% <ø> (-0.10%)	⬇️
instrumentations-instrumentation-body-parser	37.77% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-child_process	35.56% <ø> (-0.10%)	⬇️
instrumentations-instrumentation-cookie-parser	31.80% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-express	32.01% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-express-mongo-sanitize	31.92% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-express-session	37.40% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-fs	29.54% <ø> (-0.10%)	⬇️
instrumentations-instrumentation-generic-pool	30.92% <ø> (ø)
instrumentations-instrumentation-http	37.01% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-knex	29.84% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-mongoose	30.95% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-multer	37.55% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-mysql2	35.53% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-passport	41.28% <ø> (-0.08%)	⬇️
instrumentations-instrumentation-passport-http	40.97% <ø> (-0.08%)	⬇️
instrumentations-instrumentation-passport-local	41.47% <ø> (-0.08%)	⬇️
instrumentations-instrumentation-pg	35.05% <ø> (-0.09%)	⬇️
instrumentations-instrumentation-promise	29.81% <ø> (-0.10%)	⬇️
instrumentations-instrumentation-promise-js	29.81% <ø> (-0.10%)	⬇️
instrumentations-instrumentation-q	29.84% <ø> (-0.10%)	⬇️
instrumentations-instrumentation-url	29.80% <ø> (-0.10%)	⬇️
instrumentations-instrumentation-when	29.83% <ø> (-0.10%)	⬇️
llmobs-ai	38.49% <ø> (-0.09%)	⬇️
llmobs-anthropic	37.94% <ø> (-0.09%)	⬇️
llmobs-bedrock	37.19% <ø> (-0.08%)	⬇️
llmobs-google-genai	37.62% <ø> (-0.08%)	⬇️
llmobs-langchain	37.17% <ø> (+0.03%)	⬆️
llmobs-openai	41.31% <ø> (-0.08%)	⬇️
llmobs-vertex-ai	37.73% <ø> (-0.15%)	⬇️
platform-core	30.01% <ø> (ø)
platform-esbuild	32.83% <ø> (ø)
platform-instrumentations-misc	40.09% <ø> (ø)
platform-shimmer	35.73% <ø> (ø)
platform-unit-guardrails	31.38% <ø> (ø)
platform-webpack	20.78% <ø> (ø)
plugins-azure-durable-functions	25.21% <ø> (ø)
plugins-azure-event-hubs	25.36% <ø> (ø)
plugins-azure-service-bus	24.78% <ø> (ø)
plugins-bullmq	40.82% <ø> (-0.09%)	⬇️
plugins-cassandra	35.36% <ø> (-0.09%)	⬇️
plugins-cookie	26.33% <ø> (ø)
plugins-cookie-parser	26.14% <ø> (ø)
plugins-crypto	25.66% <ø> (ø)
plugins-dd-trace-api	35.49% <ø> (-0.09%)	⬇️
plugins-express-mongo-sanitize	26.28% <ø> (ø)
plugins-express-session	26.10% <ø> (ø)
plugins-fastify	39.46% <ø> (-0.09%)	⬇️
plugins-fetch	35.87% <ø> (-0.09%)	⬇️
plugins-fs	35.78% <ø> (-0.10%)	⬇️
plugins-generic-pool	25.25% <ø> (ø)
plugins-google-cloud-pubsub	43.13% <ø> (-0.08%)	⬇️
plugins-grpc	38.14% <ø> (-0.09%)	⬇️
plugins-handlebars	26.32% <ø> (ø)
plugins-hapi	37.37% <ø> (-0.09%)	⬇️
plugins-hono	37.62% <ø> (-0.09%)	⬇️
plugins-ioredis	35.82% <ø> (-0.09%)	⬇️
plugins-knex	26.01% <ø> (ø)
plugins-langgraph	35.17% <ø> (-0.09%)	⬇️
plugins-ldapjs	23.88% <ø> (ø)
plugins-light-my-request	25.75% <ø> (ø)
plugins-limitd-client	30.09% <ø> (-0.10%)	⬇️
plugins-lodash	25.33% <ø> (ø)
plugins-mariadb	36.69% <ø> (-0.09%)	⬇️
plugins-memcached	35.46% <ø> (-0.09%)	⬇️
plugins-microgateway-core	36.46% <ø> (-0.09%)	⬇️
plugins-moleculer	38.16% <ø> (-0.09%)	⬇️
plugins-mongodb	36.66% <ø> (+0.02%)	⬆️
plugins-mongodb-core	36.28% <ø> (-0.12%)	⬇️
plugins-mongoose	36.14% <ø> (-0.17%)	⬇️
plugins-multer	26.10% <ø> (ø)
plugins-mysql	36.55% <ø> (-0.09%)	⬇️
plugins-mysql2	36.53% <ø> (-0.09%)	⬇️
plugins-node-serialize	26.37% <ø> (ø)
plugins-opensearch	35.12% <ø> (-0.09%)	⬇️
plugins-passport-http	26.16% <ø> (ø)
plugins-postgres	34.51% <ø> (-0.09%)	⬇️
plugins-process	25.66% <ø> (ø)
plugins-pug	26.33% <ø> (ø)
plugins-redis	36.02% <ø> (-0.09%)	⬇️
plugins-router	40.03% <ø> (-0.09%)	⬇️
plugins-sequelize	25.03% <ø> (ø)
plugins-test-and-upstream-amqp10	35.79% <ø> (-0.09%)	⬇️
plugins-test-and-upstream-amqplib	40.97% <ø> (-0.10%)	⬇️
plugins-test-and-upstream-apollo	36.64% <ø> (-0.08%)	⬇️
plugins-test-and-upstream-avsc	35.63% <ø> (-0.09%)	⬇️
plugins-test-and-upstream-bunyan	31.24% <ø> (-0.10%)	⬇️
plugins-test-and-upstream-connect	37.97% <ø> (-0.09%)	⬇️
plugins-test-and-upstream-graphql	37.32% <ø> (-0.09%)	⬇️
plugins-test-and-upstream-koa	37.57% <ø> (-0.09%)	⬇️
plugins-test-and-upstream-protobufjs	35.85% <ø> (-0.09%)	⬇️
plugins-test-and-upstream-rhea	41.06% <ø> (-0.09%)	⬇️
plugins-undici	36.64% <ø> (-0.09%)	⬇️
plugins-url	25.66% <ø> (ø)
plugins-valkey	35.37% <ø> (-0.09%)	⬇️
plugins-vm	25.66% <ø> (ø)
plugins-winston	31.67% <ø> (-0.09%)	⬇️
plugins-ws	39.09% <ø> (-0.09%)	⬇️
profiling-macos	38.05% <ø> (-0.09%)	⬇️
profiling-ubuntu	38.21% <ø> (-0.09%)	⬇️
profiling-windows	39.57% <ø> (+0.35%)	⬆️
serverless-azure-functions-client	25.10% <ø> (ø)
serverless-azure-functions-eventhubs	25.10% <ø> (ø)
serverless-azure-functions-servicebus	25.10% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[datadog-prod-us1-6]

🎉 All green!

❄️ No new flaky tests detected
🧪 All tests passed

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 68.03% (+0.00%)

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 62a14e7 | Docs | Datadog PR Page | Give us feedback!}

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-04-22 01:15:03

Comparing candidate commit 62a14e7 in PR branch dependabot/github_actions/gh-actions-packages-c6bbed6b51 with baseline commit aff047f in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 1348 metrics, 96 unstable metrics.