chore(deps): update github pipeline dependencies (major) by Infra-Workleap · Pull Request #141 · workleap/wl-reusable-workflows

Workleap IT (Infra-Workleap) · 2025-09-06T03:00:49Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v5` → `v7`
actions/checkout	action	major	`v4` → `v7`
actions/create-github-app-token	action	major	`v2` → `v3`
actions/setup-dotnet	action	major	`v4` → `v6`
actions/setup-node	action	major	`v4` → `v7`
actions/upload-artifact	action	major	`v4` → `v7`
github/codeql-action	action	major	`v3` → `v4`
node	uses-with	major	`22.x` → `24.x`
pnpm (source)	uses-with	major	`10` → `11`

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Skip running unsafe pr check if input is default by @aiqiaoy in #2518
Trim only ascii whitespace for branch by @aiqiaoy in #2521
Escape values passed to --unset by @aiqiaoy in #2530
Various dependency updates

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Various dependency updates

`v6.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

actions/create-github-app-token (actions/create-github-app-token)

`v3.2.0`

Compare Source

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)
support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
validate private-key input (#376) (f24bbd8)

`v3.1.1`

Compare Source

Bug Fixes

improve error message when app identifier is empty (#362) (07e2b76), closes #249

`v3.1.0`

Compare Source

Bug Fixes

deps: bump p-retry from 7.1.1 to 8.0.0 (#357) (3bbe07d)

Features

add client-id input and deprecate app-id (#353) (e6bd4e6)
update permission inputs (#358) (076e948)

`v3.0.0`

Compare Source

feat!: node 24 support (#275) (2e564a0)
fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (4451bcb)

Bug Fixes

remove custom proxy handling (#143) (dce0ab0)

BREAKING CHANGES

Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

actions/setup-dotnet (actions/setup-dotnet)

`v6.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #752
Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #751
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #756

New Contributors

@philip-gai made their first contribution in #756

Full Changelog: actions/setup-dotnet@v5...v6.0.0

`v5.4.0`

Compare Source

What's Changed

Enhancements

Pin actions to commit SHAs in workflows by @priya-kinthali in #744
Expand the CSC problem matcher to light up more errors on GitHub. by @StephenCleary in #717
Improve global.json SDK version validation for rollForward by @priyagupta108 in #742

The action now validates the sdk.version field in global.json when rollForward is specified. The version must be a fully-qualified SDK version (e.g., 8.0.100, 10.0.100). Wildcard versions (e.g., 10.0.*) and runtime-style versions (e.g., 8.0.0) will now fail. See the .NET SDK version specification for details.

Documentation

Docs(action): Explicitly mark all optional inputs with required: false by @kranthipoturaju in #737

Bug Fixes

Fix global.json creation command by @michal2612 in #694

Dependency Updates

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #746

New Contributors

@jasongin made their first contribution in #746
@michal2612 made their first contribution in #694
@kranthipoturaju made their first contribution in #737
@StephenCleary made their first contribution in #717

Full Changelog: actions/setup-dotnet@v5.3.0...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Enhancements

Add dotnet-version: latest support with dotnet-channel input by @mahabaleshwars in #730
Support global.json's rollForward latest* variants by @js6pak in #538
Improve version resolution by @akoeplinger in #560

Dependency Updates

Upgrade @actions/* and fast-xml-parser dependencies by @Copilot in #728
Update install scripts to v2026.05.19 (preserve archive links) by @MichaelSimons in #736
Add rollForward note in README, improve proxy health check in e2e tests and bump version to v5.3.0 by @priyagupta108 in #738

Bug Fixes

Update Test Proxy job by @priya-kinthali in #703

New Contributors

@Copilot made their first contribution in #728
@akoeplinger made their first contribution in #560
@MichaelSimons made their first contribution in #736
@js6pak made their first contribution in #538

Full Changelog: actions/setup-dotnet@v5...v5.3.0

`v5.2.0`

Compare Source

What's changed

Enhancements

Add support for workloads input by @gowridurgad in #693
Add support for optional architecture input for cross-architecture .NET installs by @priya-kinthali in #700

Dependency Updates

Upgrade fast-xml-parser from 4.4.1 to 5.3.6 by @dependabot in #671
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #705

Full Changelog: actions/setup-dotnet@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Documentation

Readme update for environment variable on self hosted linux runners by @priya-kinthali in #689
Contributor icon updates by @Falco20019 in #604

Dependency updates

Upgrade actions/checkout from 5 to 6 by @dependabot in #684
Upgrade to latest actions packages by @salmanmkc in #687
Upgrade dependencies in testproject and checkout in Readme by @priya-kinthali in #692

New Contributors

@priya-kinthali made their first contribution in #689
@Falco20019 made their first contribution in #604

Full Changelog: actions/setup-dotnet@v5...v5.1.0

`v5.0.1`

Compare Source

What's Changed

Upgrade typescript from 5.4.2 to 5.9.2 and document breaking changes in v5 by @dependabot in #624
Upgrade eslint-plugin-jest from 27.9.0 to 29.0.1 by @dependabot in #648
Upgrade actions/publish-action from 0.3.0 to 0.4.0 and update macos-13 to macos-15-intel by @dependabot in #665

Full Changelog: actions/setup-dotnet@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to Node.js 24 and modernize async usage by @salmanmkc in #654

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Updates

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #622
Upgrade husky from 8.0.3 to 9.1.7 by @dependabot[bot] in #591
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot[bot] in #594
Upgrade eslint-config-prettier from 9.1.0 to 10.1.5 by @dependabot[bot] in #639
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #641
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #652
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #662

Bug Fixes

Remove Support for older .NET Versions and Update installers scripts by @gowridurgad in #647

New Contributors

@gowridurgad made their first contribution in #647
@salmanmkc made their first contribution in #654

Full Changelog: actions/setup-dotnet@v4...v5.0.0

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v6.0.0`

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in #719
fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in #744
prepare release v6.0.0 for Node.js 24 support by @salmanmkc in #745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

`v5.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README.md by @GhadimiR in #681
Update README.md by @nebuk89 in #712
Readme: spell out the first use of GHES by @danwkennedy in #727
Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #725
Bump @actions/artifact to v4.0.0
Prepare v5.0.0 by @danwkennedy in #734

New Contributors

@GhadimiR made their first contribution in #681
@nebuk89 made their first contribution in #712
@danwkennedy made their first contribution in #727
@patrikpolyak made their first contribution in #725

Full Changelog: actions/upload-artifact@v4...v5.0.0

github/codeql-action (github/codeql-action)

`v4.37.8`

Compare Source

No user facing changes.

`v4.37.7`

Compare Source

Update default CodeQL bundle version to 2.26.3. #4085

`v4.37.6`

Compare Source

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

`v4.37.5`

Compare Source

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

`v4.37.4`

Compare Source

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
Update default CodeQL bundle version to 2.26.2. #4051

`v4.37.3`

Compare Source

No user facing changes.

`v4.37.2`

Compare Source

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

`v4.37.1`

Compare Source

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956
Update default CodeQL bundle version to 2.26.1. #4019

`v4.37.0`

Compare Source

Update default CodeQL bundle version to 2.26.0. #3995
In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

`v4.36.3`

Compare Source

No user facing changes.

`v4.36.2`

Compare Source

Cache CodeQL CLI version information across Actions steps. #3943
Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937
Update default CodeQL bundle version to 2.25.6. #3948

`v4.36.1`

Compare Source

No user facing changes.

`v4.36.0`

Compare Source

Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894
Add support for SHA-256 Git object IDs. #3893
Update default CodeQL bundle version to 2.25.5. #3926

`v4.35.5`

Compare Source

We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #3899
For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #3791
If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #3892
Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #3880

`v4.35.4`

Compare Source

Update default CodeQL bundle version to 2.25.4. #3881

`v4.35.3`

Compare Source

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837
Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850
Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853
Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852
Update default CodeQL bundle version to 2.25.3. #3865

`v4.35.2`

Compare Source

The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
Update default CodeQL bundle version to 2.25.2. #3823

`v4.35.1`

Compare Source

Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

`v4.35.0`

[Compare Source

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

Workleap IT (Infra-Workleap) · 2025-09-06T03:00:51Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: .github/workflows/reusable-jira-workflow-tests.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/workflows' has not been added to the allowed list in allowedCommands

File name: az-artifact-authenticate/action.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./az-artifact-authenticate' has not been added to the allowed list in allowedCommands

File name: .github/workflows/renovate.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/workflows' has not been added to the allowed list in allowedCommands

File name: .github/workflows/deploy-checkly.yml

Post-upgrade command 'terraform-docs markdown table --output-file README.md --hide resources,data-sources ./.github/workflows' has not been added to the allowed list in allowedCommands

Copilot

Pull request overview

This PR updates the repository’s GitHub Actions workflows and composite actions to newer major versions of commonly used actions (checkout, setup-node, azure/login, etc.), aligning the CI/CD pipelines with newer runtimes and action releases.

Changes:

Bump azure/login to v3 across composite actions that authenticate to Azure.
Update workflow dependencies such as actions/checkout to v6, actions/setup-node to v6 (and Node 24), and actions/upload-artifact to v7.
Update Renovate workflow tooling (pnpm + Node versions).

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
`retrieve-managed-secret/action.yml`	Updates Azure login action to `azure/login@v3` for managed secret retrieval.
`az-npm-registry-authenticate/action.yml`	Updates Azure login action to `azure/login@v3` for ADO npm feed auth.
`az-artifact-authenticate/action.yml`	Updates Azure login to `v3` and .NET setup to `actions/setup-dotnet@v5`.
`.github/workflows/reusable-semgrep-workflow.yml`	Updates checkout to `v6` and artifact upload to `v7` for Semgrep reporting.
`.github/workflows/reusable-renovate-workflow.yml`	Updates checkout/setup-node and bumps Node to 24 plus pnpm setup adjustments.
`.github/workflows/reusable-jira-workflow-tests.yml`	Updates checkout to `v6` for Jira workflow tests.
`.github/workflows/required_checks_policy.yml`	Updates checkout to `v6` for required checks evaluation workflow.
`.github/workflows/github-template-update-downstream.yml`	Updates GitHub App token action to `v3` and checkout to `v6` for syncing downstream repos.
`.github/workflows/deploy-checkly.yml`	Updates setup-node to `v6`, Node to 24.x, and checkout to `v6`.
`.github/workflows/create-stable-release.yml`	Updates checkout to `v6` for stable release creation workflow.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

+      - uses: pnpm/action-setup@v6
        with:
-          version: 10
+          version: 11


-          version: 10
+          version: 11

      - name: Use Node.js 22


      - name: Save report as pipeline artifact
        if: ${{ github.event_name  != 'pull_request' }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
        with:


Workleap IT (Infra-Workleap) added the renovate label Sep 6, 2025

Workleap IT (Infra-Workleap) requested a review from a team as a code owner September 6, 2025 03:00

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from af8bb26 to 4daa989 Compare September 7, 2025 03:02

Workleap IT (Infra-Workleap) changed the title ~~chore(deps): update actions/setup-dotnet action to v5~~ chore(deps): update github pipeline dependencies to v5 (major) Sep 7, 2025

Workleap IT (Infra-Workleap) temporarily deployed to ci September 7, 2025 03:03 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 4daa989 to e510756 Compare September 11, 2025 03:05

Workleap IT (Infra-Workleap) temporarily deployed to ci September 11, 2025 03:05 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from e510756 to 9e2dfad Compare September 12, 2025 03:05

Workleap IT (Infra-Workleap) temporarily deployed to ci September 12, 2025 03:05 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 9e2dfad to 873c08e Compare September 13, 2025 02:59

Workleap IT (Infra-Workleap) temporarily deployed to ci September 13, 2025 02:59 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 873c08e to 8959743 Compare September 17, 2025 03:02

Workleap IT (Infra-Workleap) changed the title ~~chore(deps): update github pipeline dependencies to v5 (major)~~ chore(deps): update github pipeline dependencies (major) Sep 17, 2025

Workleap IT (Infra-Workleap) had a problem deploying to ci September 17, 2025 03:02 — with GitHub Actions Failure

Workleap IT (Infra-Workleap) temporarily deployed to ci September 17, 2025 03:02 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 8959743 to 7b0955d Compare September 18, 2025 03:03

Workleap IT (Infra-Workleap) temporarily deployed to ci September 18, 2025 03:04 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 7b0955d to 1c030c2 Compare September 19, 2025 03:02

Workleap IT (Infra-Workleap) temporarily deployed to ci September 19, 2025 03:02 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) temporarily deployed to ci October 18, 2025 03:23 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 41e43f9 to 860f005 Compare October 21, 2025 04:37

Workleap IT (Infra-Workleap) temporarily deployed to ci October 21, 2025 04:37 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) had a problem deploying to ci October 21, 2025 04:37 — with GitHub Actions Failure

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from 860f005 to ef379a1 Compare October 22, 2025 03:52

Workleap IT (Infra-Workleap) temporarily deployed to ci October 22, 2025 03:52 — with GitHub Actions Inactive

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from ef379a1 to ffa3f8c Compare October 28, 2025 04:39

Workleap IT (Infra-Workleap) had a problem deploying to ci October 28, 2025 04:39 — with GitHub Actions Failure

Workleap IT (Infra-Workleap) force-pushed the renovate/major-github-pipeline-dependencies branch from ffa3f8c to 0d435e8 Compare October 30, 2025 03:46

Workleap IT (Infra-Workleap) temporarily deployed to ci October 30, 2025 03:46 — with GitHub Actions Inactive

github-advanced-security AI found potential problems Nov 19, 2025

View reviewed changes

Comment thread .github/workflows/terraform-linter-check.yaml Fixed

github-advanced-security AI found potential problems Feb 27, 2026

View reviewed changes

Comment thread .github/workflows/terraform-standard-checks.yaml Fixed

Gérald Barré (geraldbarre-workleap) previously approved these changes Mar 13, 2026

View reviewed changes

github-advanced-security AI found potential problems Mar 20, 2026

View reviewed changes