Update github-actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v3.6.0 -> v4.2.2
actions/setup-python	action	major	v4.8.0 -> v5.4.0
pnpm/action-setup	action	major	v3 -> v4.1.0
stefanzweifel/git-auto-commit-action	action	major	v4.16.0 -> v5.1.0

---

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in https://github.com/actions/checkout/pull/1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1692
• Add dependabot config by @​cory-miller in https://github.com/actions/checkout/pull/1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in https://github.com/actions/checkout/pull/1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in https://github.com/actions/checkout/pull/1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1656
• Add SSH user parameter by @​cory-miller in https://github.com/actions/checkout/pull/1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in https://github.com/actions/checkout/pull/1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in https://github.com/actions/checkout/pull/1598

v4.1.1

Compare Source

• Correct link to GitHub Docs by @​peterbe in https://github.com/actions/checkout/pull/1511
• Link to release page from what's new section by @​cory-miller in https://github.com/actions/checkout/pull/1514

v4.1.0

Compare Source

• Add support for partial checkout filters

v4.0.0

Compare Source

• Support fetching without the --progress option
• Update to node20

actions/setup-python (actions/setup-python)

v5.4.0

Compare Source

What's Changed

Enhancements:

• Update cache error message by @​aparnajyothi-y in https://github.com/actions/setup-python/pull/968
• Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @​priya-kinthali in https://github.com/actions/setup-python/pull/985
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-python/pull/1008

Documentation changes:

• Readme update - recommended permissions by @​benwells in https://github.com/actions/setup-python/pull/1009
• Improve Advanced Usage examples by @​lrq3000 in https://github.com/actions/setup-python/pull/645

Dependency updates:

• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/actions/setup-python/pull/1012
• Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @​dependabot in https://github.com/actions/setup-python/pull/895
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-python/pull/1014
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in https://github.com/actions/setup-python/pull/1020
• Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @​dependabot in https://github.com/actions/setup-python/pull/1019
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in https://github.com/actions/setup-python/pull/1007

New Contributors

• @​benwells made their first contribution in https://github.com/actions/setup-python/pull/1009
• @​HarithaVattikuti made their first contribution in https://github.com/actions/setup-python/pull/1008
• @​lrq3000 made their first contribution in https://github.com/actions/setup-python/pull/645

Full Changelog: actions/setup-python@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-python/pull/941
• Upgrade IA publish by @​Jcambass in https://github.com/actions/setup-python/pull/943

Bug Fixes:

• Normalise Line Endings to Ensure Cross-Platform Consistency by @​priya-kinthali in https://github.com/actions/setup-python/pull/938
• Revise isGhes logic by @​jww3 in https://github.com/actions/setup-python/pull/963
• Bump pillow from 7.2 to 10.2.0 by @​aparnajyothi-y in https://github.com/actions/setup-python/pull/956

Enhancements:

• Enhance workflows and documentation updates by @​priya-kinthali in https://github.com/actions/setup-python/pull/965
• Bump default versions to latest by @​jeffwidman in https://github.com/actions/setup-python/pull/905

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/setup-python/pull/941
• @​jww3 made their first contribution in https://github.com/actions/setup-python/pull/963

Full Changelog: actions/setup-python@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

Bug fixes:

• Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @​priyagupta108 in https://github.com/actions/setup-python/pull/916
  This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
• Add arch to cache key by @​Zxilly in https://github.com/actions/setup-python/pull/896
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.

Documentation changes:

• Fix display of emojis in contributors doc by @​sciencewhiz in https://github.com/actions/setup-python/pull/899
• Documentation update for caching poetry dependencies by @​gowridurgad in https://github.com/actions/setup-python/pull/908

Dependency updates:

• Bump @​iarna/toml version from 2.2.5 to 3.0.0 by @​priya-kinthali in https://github.com/actions/setup-python/pull/912
• Bump pyinstaller from 3.6 to 5.13.1 by @​aparnajyothi-y in https://github.com/actions/setup-python/pull/923

New Contributors

• @​sciencewhiz made their first contribution in https://github.com/actions/setup-python/pull/899
• @​priyagupta108 made their first contribution in https://github.com/actions/setup-python/pull/916
• @​Zxilly made their first contribution in https://github.com/actions/setup-python/pull/896
• @​aparnajyothi-y made their first contribution in https://github.com/actions/setup-python/pull/923

Full Changelog: actions/setup-python@v5...v5.2.0

v5.1.1

Compare Source

What's Changed

Bug fixes:

• fix(ci): update all failing workflows by @​mayeut in https://github.com/actions/setup-python/pull/863
  This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

• Documentation update for cache by @​gowridurgad in https://github.com/actions/setup-python/pull/873

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/actions/setup-python/pull/893

New Contributors

• @​gowridurgad made their first contribution in https://github.com/actions/setup-python/pull/873

Full Changelog: actions/setup-python@v5...v5.1.1

v5.1.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in https://github.com/actions/setup-python/pull/766.
• Dependency updates by @​dependabot and @​HarithaVattikuti in https://github.com/actions/setup-python/pull/817
• Documentation changes for version in README by @​basnijholt in https://github.com/actions/setup-python/pull/776
• Documentation changes for link in README by @​ukd1 in https://github.com/actions/setup-python/pull/793
• Documentation changes for link in Advanced Usage by @​Jamim in https://github.com/actions/setup-python/pull/782
• Documentation changes for avoiding rate limit issues on GHES by @​priya-kinthali in https://github.com/actions/setup-python/pull/835

New Contributors

• @​basnijholt made their first contribution in https://github.com/actions/setup-python/pull/776
• @​ukd1 made their first contribution in https://github.com/actions/setup-python/pull/793
• @​Jamim made their first contribution in https://github.com/actions/setup-python/pull/782
• @​Shegox made their first contribution in https://github.com/actions/setup-python/pull/766
• @​priya-kinthali made their first contribution in https://github.com/actions/setup-python/pull/835

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

v5.0.0

Compare Source

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (https://github.com/actions/setup-python/pull/772). Besides, we update dependencies to the latest versions.

Full Changelog: actions/setup-python@v4.8.0...v5.0.0

pnpm/action-setup (pnpm/action-setup)

v4.1.0

Compare Source

Add support for package.yaml #​156.

v4.0.0

Compare Source

An error is thrown if one version of pnpm is specified in the packageManager field of package.json and a different version is specified in the action's settings #​122

stefanzweifel/git-auto-commit-action (stefanzweifel/git-auto-commit-action)

v5.1.0

Compare Source

Changed

• Include github.actor_id in default commit_author (#​354) @​parkerbxyz

Fixed

• docs(README): fix broken protected branch docs link (#​346) @​scarf005
• Update README.md (#​343) @​Kludex

Dependency Updates

• Bump bats from 1.11.0 to 1.11.1 (#​353) @​dependabot
• Bump github/super-linter from 6 to 7 (#​342) @​dependabot
• Bump github/super-linter from 5 to 6 (#​335) @​dependabot

v5.0.1

Compare Source

Fixed

• Fail if attempting to execute git commands in a directory that is not a git-repo. (#​326) @​ccomendant

Dependency Updates

• Bump bats from 1.10.0 to 1.11.0 (#​325) @​dependabot
• Bump release-drafter/release-drafter from 5 to 6 (#​319) @​dependabot

Misc

• Clarify commit_author input option (#​315) @​npanuhin
• Add step id explanation for output in README.md (#​324) @​ChristianVermeulen
• Linux is not UNIX (#​321) @​couling

v5.0.0

Compare Source

New major release that bumps the default runtime to Node 20. There are no other breaking changes.

Changed

• Update node version to node20 (#​300) @​ryudaitakai
• Add _log and _set_github_output functions (#​273) @​stefanzweifel

Fixed

• Seems like there is an extra space (#​288) @​pedroamador
• Fix git-auto-commit.yml (#​277) @​zcong1993

Dependency Updates

• Bump actions/checkout from 3 to 4 (#​302) @​dependabot
• Bump bats from 1.9.0 to 1.10.0 (#​293) @​dependabot
• Bump github/super-linter from 4 to 5 (#​289) @​dependabot
• Bump bats from 1.8.2 to 1.9.0 (#​282) @​dependabot

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

🦋 Changeset detected

Latest commit: b0cefd0

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
template-files	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[trueberryless]

LGTM 🎉