Skip to content

chore(github-actions): update ppat/github-workflows (v4.4.0 -> v5.0.0) - #780

Closed
ppat-self-hosted-renovate-bot[bot] wants to merge 1 commit into
mainfrom
renovate/ppat-github-workflows-5.x
Closed

chore(github-actions): update ppat/github-workflows (v4.4.0 -> v5.0.0)#780
ppat-self-hosted-renovate-bot[bot] wants to merge 1 commit into
mainfrom
renovate/ppat-github-workflows-5.x

Conversation

@ppat-self-hosted-renovate-bot

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
ppat/github-workflows action major v4.4.0v5.0.0

Release Notes

ppat/github-workflows (ppat/github-workflows)

v5.0.0

Compare Source

🧹 Miscellaneous
  • dev-tools: update alessandrojcm/commitlint-pre-commit-hook (non-major) (#​530) (b0ec9b0)
  • dev-tools: update aquaproj/aqua (v2.59.0 -> v2.59.1) (#​483) (c6ebcbf)
  • dev-tools: update aquaproj/aqua (v2.59.1 -> v2.60.0) (#​501) (df84b91)
  • dev-tools: update aquaproj/aqua (v2.60.0 -> v2.60.1) (#​502) (748c60b)
  • dev-tools: update astral-sh/uv (0.11.16 -> 0.11.17) (#​489) (db1f79a)
  • dev-tools: update astral-sh/uv (0.11.17 -> 0.11.18) (#​490) (7c8f07e)
  • dev-tools: update astral-sh/uv (0.11.18 -> 0.11.19) (#​493) (e468140)
  • dev-tools: update astral-sh/uv (0.11.19 -> 0.11.21) (#​498) (6a66cc8)
  • dev-tools: update astral-sh/uv (0.11.21 -> 0.11.22) (#​503) (91cf84e)
  • dev-tools: update astral-sh/uv (github-actions dependency) (0.11.22 -> 0.11.23) (#​504) (957090e)
  • dev-tools: update kindest/node (v1.35.1 -> v1.35.5) (#​492) (56675fb)
  • dev-tools: update kubernetes (v1.35.6 -> v1.36.0) (#​506) (6605eee)
  • dev-tools: update kubernetes-sigs/kind (v0.31.0 -> v0.32.0) (#​495) (506c2bf)
  • dev-tools: update kubernetes/kubernetes (v1.35.1 -> v1.35.5) (#​484) (75915c5)
  • dev-tools: update kubernetes/kubernetes (v1.35.5 -> v1.35.6) (#​499) (d78fe6f)
  • dev-tools: update lockfile bun (#​488) (292c6cd)
  • dev-tools: update lockfile bun (#​500) (bed5d4a)
  • dev-tools: update lockfile bun (#​533) (89a1813)
  • dev-tools: update renovatebot/renovate (43.195.0 -> 43.227.1) (#​486) (196a343)
  • dev-tools: update renovatebot/renovate (github-actions dependency) (43.227.1 -> 43.233.3) (#​507) (57a73d2)
  • dev-tools: update terraform-linters/tflint (v0.62.1 -> v0.63.1) (#​496) (cf96372)
  • github-actions: update actions/checkout (v4 -> v7.0.0) and actions/create-github-app-token (v2 -> v3.2.0) (#​514) (08975ad)
  • github-actions: update renovatebot/github-action (v44.2.6 -> v46.1.17) (#​515) (9e6b7e6)
  • release: set next release version (5bb10c9)
✨ Features
  • dev-tools: update kindest/node (v1.35.5 -> v1.36.1) (#​531) (e1784d7)
  • github-actions: add zizmor static analysis security gate (#​535) (7926396)
  • github-actions: update docker/build-push-action (v6.18.0 -> v7.2.0) (#​521) (8a94a05)
  • github-actions: update docker/login-action (v3.6.0 -> v4.2.0) (#​522) (47c1dd4)
  • github-actions: update docker/metadata-action (v5.10.0 -> v6.1.0) (#​523) (3286626)
  • github-actions: update docker/setup-buildx-action (v3.11.1 -> v4.1.0) (#​524) (fea51eb)
  • github-actions: update docker/setup-qemu-action (v3.7.0 -> v4.1.0) (#​525) (dc53535)
  • github-actions: update googleapis/release-please-action (v4.4.0 -> v5.0.0) (#​526) (0f16be6)
  • github-actions: update peter-evans/dockerhub-description (v4.0.2 -> v5.0.0) (#​527) (bc815ad)
  • github-actions: update ppat/homelab-ops-actions (v1.0.4 -> v2.0.0) (#​511) (1a578a6)
  • github-actions: update tailscale/github-action (v3.3.0 -> v4.1.2) (#​528) (495b096)
  • github-actions: update tj-actions/changed-files (v46.0.5 -> v47.0.6) (#​529) (fd206fe)
  • github-actions: update trusted github-actions (#​516) (d5cd138)
  • update commitlint packages (#​494) (82fa85b)
  • update commitlint packages (21.0.2 -> 21.1.0) (#​520) (f74959b)
  • update commitlint packages (21.1.0 -> 21.2.0) (#​536) (d2e6b84)
  • update conventional-changelog-conventionalcommits (9.3.1 -> 10.2.0) (#​532) (e4c8986)
🚀 Enhancements + Bug Fixes

Configuration

📅 Schedule: (in timezone US/Eastern)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

ppat added a commit that referenced this pull request Aug 20, 2026
#781)

Bump every ppat/github-workflows ref used by this repo (detect-changed-files,
lint-github-actions, lint-markdown, lint-pre-commit, lint-renovate-config-check,
lint-shellcheck, lint-yaml, lint-zizmor, renovate) to v5.0.1, preserving the
repo-specific mise_ignore_cfg input on every call site.

v5's lint-github-actions.yaml bumps actionlint v1.7.4 -> v1.7.12, which turns
on its `-shellcheck` integration (previously inert against this repo: v1.7.4
found nothing even with the same flags). That integration appends `--norc`,
so this repo's `.shellcheckrc` disable list does not filter it. Reproducing
it locally surfaced two SC2046 findings, both `chezmoi execute-template
--source=$(pwd)` in the local `chezmoi` job's run: blocks (lint.yaml:95,117).
Quoting `$(pwd)` there is a pure hardening fix, not a suppression: argv is
byte-identical to the unquoted form for any cwd without whitespace/glob
characters (which `working-directory: ./current` always is in CI), and only
diverges in the pathological case quoting exists to guard against.

Supersedes #780.
@ppat

ppat commented Aug 20, 2026

Copy link
Copy Markdown
Owner

Superseded by #781 (v5.0.1).

@ppat ppat closed this Aug 20, 2026
@ppat-self-hosted-renovate-bot
ppat-self-hosted-renovate-bot Bot deleted the renovate/ppat-github-workflows-5.x branch August 21, 2026 04:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant