chore(deps): update github actions by renovate-bot · Pull Request #4186 · GoogleCloudPlatform/nodejs-docs-samples

renovate-bot · 2025-09-29T12:01:23Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	major	`v4` → `v5`
actions/checkout	action	major	`v5.0.0` → `v6.0.2`	`v6.0.3`
actions/checkout	action	major	`v5` → `v6`	`v6.0.3`
actions/github-script	action	major	`v7` → `v9`
actions/setup-go	action	major	`v5` → `v6`
actions/setup-node	action	major	`v4.0.0` → `v6.4.0`
actions/setup-node	action	major	`v4` → `v6`
google-github-actions/get-secretmanager-secrets	action	major	`v2` → `v3`

Release Notes

actions/cache (actions/cache)

`v5.0.5`

Compare Source

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in #1747

Full Changelog: actions/cache@v5...v5.0.5

`v5.0.4`

Compare Source

`v5.0.3`

Compare Source

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

`v6.0.0`

Compare Source

`v6`

Compare Source

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

actions/github-script (actions/github-script)

`v9.0.0`

Compare Source

New features:

getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in #695
ci: use deployment: false for integration test environments by @salmanmkc in #712
feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in #700

New Contributors

@Copilot made their first contribution in #695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

`v9`

Compare Source

`v8.0.0`

Compare Source

`v8`: .0.0

Compare Source

What's Changed

Update Node.js version support to 24.x by @salmanmkc in #637
README for updating actions/github-script from v7 to v8 by @sneha-krip in #653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

@salmanmkc made their first contribution in #637
@sneha-krip made their first contribution in #653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

actions/setup-go (actions/setup-go)

`v6.4.0`

Compare Source

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in #721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in #724
Fix Microsoft build of Go link by @gdams in #734

New Contributors

@gdams made their first contribution in #721

Full Changelog: actions/setup-go@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in #705
Fix golang download url to go.dev by @178inaba in #469

Full Changelog: actions/setup-go@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Enhancements

Example for restore-only cache in documentation by @aparnajyothi-y in #696
Update Node.js version in action.yml by @ccoVeille in #691
Documentation update of actions/checkout by @deining in #683

Dependency updates

Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot in #682
Upgrade @actions/cache to v5 by @salmanmkc in #695
Upgrade actions/checkout from 5 to 6 by @dependabot in #686
Upgrade qs from 6.14.0 to 6.14.1 by @dependabot in #703

New Contributors

@ccoVeille made their first contribution in #691
@deining made their first contribution in #683

Full Changelog: actions/setup-go@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in #665
Add support for .tool-versions file and update workflow by @priya-kinthali in #673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in #674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in #617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #641
Upgrade semver and @types/semver by @dependabot in #652

New Contributors

@nicholasngai made their first contribution in #665
@priya-kinthali made their first contribution in #673
@mahabaleshwars made their first contribution in #674

Full Changelog: actions/setup-go@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in #460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in #624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #589
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #591
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in #590
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #594
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in #538
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in #603
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in #618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #631

New Contributors

@matthewhughes934 made their first contribution in #618
@salmanmkc made their first contribution in #624

Full Changelog: actions/setup-go@v5...v6.0.0

`v6`

Compare Source

actions/setup-node (actions/setup-node)

`v6.4.0`

Compare Source

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

`v5`

Compare Source

`v4.4.0`

Compare Source

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in #98
Add support for indented eslint output by @fregante in #1245

Enhancement:

Support private mirrors by @marco-ippolito in #1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #1262

New Contributors

@FloEdelmann made their first contribution in #98
@fregante made their first contribution in #1245
@marco-ippolito made their first contribution in #1240

Full Changelog: actions/setup-node@v4...v4.4.0

`v4.3.0`

Compare Source

What's Changed

Dependency updates

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #1200
Upgrade @action/cache from 4.0.0 to 4.0.2 by @gowridurgad in #1251
Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #1203
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot in #1220

New Contributors

@gowridurgad made their first contribution in #1251

Full Changelog: actions/setup-node@v4...v4.3.0

`v4.2.0`

Compare Source

What's Changed

Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by @aparnajyothi-y in #1174
Add recommended permissions section to readme by @benwells in #1193
Configure Dependabot settings by @HarithaVattikuti in #1192
Upgrade @actions/cache to ^4.0.0 by @priyagupta108 in #1191
Upgrade pnpm/action-setup from 2 to 4 by @dependabot in #1194
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #1195
Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in #1196
Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot in #1201
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #1205

New Contributors

@benwells made their first contribution in #1193

Full Changelog: actions/setup-node@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Resolve High Security Alerts by upgrading Dependencies by @aparnajyothi-y in #1132
Upgrade IA Publish by @Jcambass in #1134
Revise isGhes logic by @jww3 in #1148
Add architecture to cache key by @pengx17 in #843
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.

New Contributors

@jww3 made their first contribution in #1148
@pengx17 made their first contribution in #843

Full Changelog: actions/setup-node@v4...v4.1.0

`v4.0.4`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in #1125
Enhance Windows ARM64 Setup and Update micromatch Dependency by @priyagupta108 in #1126

Documentation changes:

Documentation update in the README file by @suyashgaonkar in #1106
Correct invalid 'lts' version string reference by @fulldecent in #1124

New Contributors

@suyashgaonkar made their first contribution in #1106
@priyagupta108 made their first contribution in #1126
@Jcambass made their first contribution in #1125
@fulldecent made their first contribution in #1124

Full Changelog: actions/setup-node@v4...v4.0.4

`v4.0.3`

Compare Source

What's Changed

Bug fixes:

Fix macos latest check failures by @HarithaVattikuti in #1041

Documentation changes:

Documentation update to update default Node version to 20 by @bengreeley in #949

Dependency updates:

Bump undici from 5.26.5 to 5.28.3 by @dependabot in #965
Bump braces from 3.0.2 to 3.0.3 and other dependency updates by @dependabot in #1087

New Contributors

@bengreeley made their first contribution in #949
@HarithaVattikuti made their first contribution in #1041

Full Changelog: actions/setup-node@v4...v4.0.3

`v4.0.2`

Compare Source

What's Changed

Add support for volta.extends by @ThisIsManta in #921
Add support for arm64 Windows by @dmitry-shibanov in #927

New Contributors

@ThisIsManta made their first contribution in #921

Full Changelog: actions/setup-node@v4.0.1...v4.0.2

`v4.0.1`

Compare Source

What's Changed

Ignore engines in Yarn 1 e2e-cache tests by @trivikr in #882
Update setup-node references in the README.md file to setup-node@v4 by @jwetzell in #884
Update reusable workflows to use Node.js v20 by @MaksimZhukov in #889
Add fix for cache to resolve slow post action step by @aparnajyothi-y in #917
Fix README.md by @takayamaki in #898
Add package.json to node-version-file list of examples. by @TWiStErRob in #879
Fix node-version-file interprets entire package.json as a version by @NullVoxPopuli in #865

New Contributors

@trivikr made their first contribution in #882
@jwetzell made their first contribution in #884
@aparnajyothi-y made their first contribution in #917
@takayamaki made their first contribution in #898
@TWiStErRob made their first contribution in #879
@NullVoxPopuli made their first contribution in #865

Full Changelog: actions/setup-node@v4...v4.0.1

google-github-actions/get-secretmanager-secrets (google-github-actions/get-secretmanager-secrets)

`v3.0.0`

Compare Source

What's Changed

Bump to Node 24 by @sethvargo in #324
Release: v3.0.0 by @google-github-actions-bot in #325

Full Changelog: google-github-actions/get-secretmanager-secrets@v2...v3.0.0

`v3`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 11am every 3 weeks on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

gemini-code-assist · 2025-09-29T12:01:29Z

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

dpebot · 2025-09-29T12:01:36Z

/gcbrun

dpebot · 2025-09-30T20:11:19Z

/gcbrun

dpebot · 2025-10-03T12:05:10Z

/gcbrun

dpebot · 2025-10-22T21:06:33Z

/gcbrun

dpebot · 2025-10-22T21:21:14Z

/gcbrun

dpebot · 2025-10-27T15:28:06Z

/gcbrun

dpebot · 2025-10-28T11:41:20Z

/gcbrun

dpebot · 2025-10-29T04:43:22Z

/gcbrun

dpebot · 2025-11-03T15:17:21Z

/gcbrun

dpebot · 2025-11-04T06:09:50Z

/gcbrun

dpebot · 2025-11-11T01:00:14Z

/gcbrun

dpebot · 2026-01-15T07:47:26Z

/gcbrun

dpebot · 2026-01-16T20:06:08Z

/gcbrun

dpebot · 2026-01-24T20:41:05Z

/gcbrun

dpebot · 2026-01-28T03:50:54Z

/gcbrun

dpebot · 2026-01-30T06:48:04Z

/gcbrun

dpebot · 2026-02-03T19:30:38Z

/gcbrun

dpebot · 2026-02-13T11:13:24Z

/gcbrun

dpebot · 2026-02-14T01:30:08Z

/gcbrun

dpebot · 2026-02-14T01:32:57Z

/gcbrun

dpebot · 2026-02-14T03:04:22Z

/gcbrun

dpebot · 2026-02-17T23:53:48Z

/gcbrun

dpebot · 2026-02-21T03:02:21Z

/gcbrun

dpebot · 2026-06-04T18:30:19Z

/gcbrun

dpebot · 2026-06-04T18:37:33Z

/gcbrun

dpebot · 2026-06-04T18:48:56Z

/gcbrun

dpebot · 2026-06-04T20:00:40Z

/gcbrun

forking-renovate Bot added the major label Sep 29, 2025

renovate-bot requested review from a team as code owners September 29, 2025 12:01

renovate-bot added the major label Sep 29, 2025

product-auto-label Bot added the samples Issues that are directly related to samples. label Sep 29, 2025

product-auto-label Bot added the api: workflows Issues related to the Workflows API. label Sep 29, 2025

trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. actions:force-run labels Sep 29, 2025

renovate-bot force-pushed the renovate/github-actions branch from de018be to 2794c4c Compare September 30, 2025 20:11

renovate-bot force-pushed the renovate/github-actions branch from 2794c4c to 9eacfa1 Compare October 3, 2025 12:05

renovate-bot force-pushed the renovate/github-actions branch from 9eacfa1 to cf94bca Compare October 22, 2025 21:06

renovate-bot force-pushed the renovate/github-actions branch from cf94bca to 17a78ad Compare October 22, 2025 21:21

renovate-bot force-pushed the renovate/github-actions branch from 17a78ad to 0513f23 Compare October 27, 2025 15:27

renovate-bot force-pushed the renovate/github-actions branch from 0513f23 to 310e30e Compare October 28, 2025 11:41

renovate-bot force-pushed the renovate/github-actions branch from 310e30e to fefa455 Compare October 29, 2025 04:43

renovate-bot force-pushed the renovate/github-actions branch from fefa455 to 8d40d29 Compare November 3, 2025 15:17

renovate-bot force-pushed the renovate/github-actions branch from 8d40d29 to fed78ab Compare November 4, 2025 06:09

renovate-bot force-pushed the renovate/github-actions branch from fed78ab to 59da5a1 Compare November 11, 2025 01:00

renovate-bot force-pushed the renovate/github-actions branch from a205a63 to 8327c82 Compare January 16, 2026 20:05

renovate-bot force-pushed the renovate/github-actions branch from 8327c82 to a2d80ea Compare January 24, 2026 20:40

renovate-bot force-pushed the renovate/github-actions branch from a2d80ea to 72cd7bb Compare January 28, 2026 03:50

renovate-bot force-pushed the renovate/github-actions branch from 72cd7bb to d30ab65 Compare January 30, 2026 06:47

renovate-bot force-pushed the renovate/github-actions branch from d30ab65 to a55a783 Compare February 3, 2026 19:30

renovate-bot force-pushed the renovate/github-actions branch from a55a783 to e03dffb Compare February 13, 2026 11:13

renovate-bot force-pushed the renovate/github-actions branch from e03dffb to 3c3fda5 Compare February 14, 2026 01:29

renovate-bot force-pushed the renovate/github-actions branch from 3c3fda5 to 314ac5e Compare February 14, 2026 01:32

renovate-bot force-pushed the renovate/github-actions branch from 314ac5e to 0624e59 Compare February 14, 2026 03:04

renovate-bot force-pushed the renovate/github-actions branch from 0624e59 to 9dec09e Compare February 17, 2026 23:53

renovate-bot force-pushed the renovate/github-actions branch from 28e0f05 to 2fb4de8 Compare June 4, 2026 18:37

renovate-bot force-pushed the renovate/github-actions branch from 2fb4de8 to 79cfef0 Compare June 4, 2026 18:48

chore(deps): update github actions

a13140a

renovate-bot force-pushed the renovate/github-actions branch from 79cfef0 to a13140a Compare June 4, 2026 20:00

Conversation

renovate-bot commented Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

v8: .0.0

What's Changed

⚠️ Minimum Compatible Runner Version

New Contributors

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

What's Changed

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

What's Changed

Dependency updates

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Documentation changes:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

gemini-code-assist Bot commented Sep 29, 2025

Uh oh!

dpebot commented Sep 29, 2025

Uh oh!

dpebot commented Sep 30, 2025

Uh oh!

dpebot commented Oct 3, 2025

Uh oh!

renovate-bot commented Sep 29, 2025 •

edited

Loading

`v8`: .0.0