chore(deps): update github actions

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v4.1.1 → v4.3.1
actions/setup-go	action	minor	v5.0.0 → v5.6.0
actions/setup-java	action	minor	v4.2.1 → v4.8.0
actions/upload-artifact	action	minor	v4.3.1 → v4.6.2
docker/build-push-action	action	minor	v5.3.0 → v5.4.0
docker/login-action	action	minor	v3.1.0 → v3.7.0
docker/metadata-action	action	minor	v5.5.1 → v5.10.0
docker/setup-buildx-action	action	minor	v3.2.0 → v3.12.0
docker/setup-qemu-action	action	minor	v3.0.0 → v3.7.0
go	uses-with	minor	1.21.3 → 1.26.5
gradle/gradle-build-action	action	minor	v3.1.0 → v3.5.0
gradle/wrapper-validation-action	action	patch	v2.1.1 → v2.1.3
sigstore/cosign-installer	action	minor	v3.4.0 → v3.10.1
softprops/action-gh-release	action	minor	v2.0.4 → v2.6.2

---

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

• Port v6 cleanup to v4 by @​ericsciple in #​2305

v4.3.0

Compare Source

• docs: update README.md by @​motss in #​1971
• Add internal repos for checking out multiple repositories by @​mouismail in #​1977
• Documentation update - add recommended permissions to Readme by @​benwells in #​2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in #​2044
• Update README.md by @​nebuk89 in #​2194
• Update CODEOWNERS for actions by @​TingluoHuang in #​2224
• Update package dependencies by @​salmanmkc in #​2236

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in #​1739
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1697
• Check out other refs/* by commit by @​orhantoy in #​1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in #​1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in #​1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in #​1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in #​1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in #​1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in #​1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in #​1692
• Add dependabot config by @​cory-miller in #​1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in #​1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in #​1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in #​1656
• Add SSH user parameter by @​cory-miller in #​1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in #​1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

actions/setup-go (actions/setup-go)

v5.6.0

Compare Source

What's Changed

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​aparnajyothi-y in #​689

Full Changelog: actions/setup-go@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in #​556
• Add manifest validation and improve error handling by @​priyagupta108 in #​586
• Update template link by @​jsoref in #​527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in #​574
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​573
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in #​582
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in #​537

New Contributors

• @​jsoref made their first contribution in #​527

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Dependency updates :

• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in #​535
• Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @​dependabot in #​536
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in #​568
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in #​541

New Contributors

• @​aparnajyothi-y made their first contribution in #​568

Full Changelog: actions/setup-go@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

• Use the new cache service: upgrade @actions/cache to ^4.0.0 by @​Link- in #​531
• Configure Dependabot settings by @​HarithaVattikuti in #​530
• Document update - permission section by @​HarithaVattikuti in #​533
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​534

New Contributors

• @​Link- made their first contribution in #​531

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in #​496

New Contributors

• @​Shegox made their first contribution in #​496

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​500
• Upgrade IA Publish by @​Jcambass in #​502
• Add architecture to cache key by @​Zxilly in #​493
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in #​510

Bug Fixes

• Revise isGhes logic by @​jww3 in #​511

New Contributors

• @​Zxilly made their first contribution in #​493
• @​Jcambass made their first contribution in #​500
• @​jww3 made their first contribution in #​511
• @​priyagupta108 made their first contribution in #​510

Full Changelog: actions/setup-go@v5...v5.1.0

v5.0.2

Compare Source

What's Changed

Bug fixes:

• Fix versions check failure by @​HarithaVattikuti in #​479

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in #​487

New Contributors

• @​HarithaVattikuti made their first contribution in #​479

Full Changelog: actions/setup-go@v5...v5.0.2

v5.0.1

Compare Source

What's Changed

• Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @​dependabot , @​HarithaVattikuti in #​465
• Update documentation with latest V5 release notes by @​ab in #​459
• Update version documentation by @​178inaba in #​458
• Documentation update of actions/setup-go to v5 by @​chenrui333 in #​449

New Contributors

• @​ab made their first contribution in #​459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

actions/setup-java (actions/setup-java)

v4.8.0

Compare Source

What's Changed

• License and Audit Fixes by @​HarithaVattikuti in #​960
• Update SapMachine URLs by @​RealCLanger in #​965

Full Changelog: actions/setup-java@v4...v4.8.0

v4.7.1

Compare Source

What's Changed

Documentation changes

• Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @​aparnajyothi-y in #​704
• Remove duplicated GraalVM section in documentation by @​Marcono1234 in #​716

Dependency updates:

• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in #​766
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​744
• Upgrade ts-jest from 29.1.2 to 29.2.5 by @​dependabot in #​743
• Upgrade @​action/cache to 4.0.3 by @​aparnajyothi-y in #​773

Full Changelog: actions/setup-java@v4...v4.7.1

v4.7.0

Compare Source

What's Changed

• Configure Dependabot settings by @​HarithaVattikuti in #​722
• README Update: Added a permissions section by @​benwells in #​723
• Upgrade cache from version 3.2.4 to 4.0.0 by @​aparnajyothi-y in #​724
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in #​728
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​727
• Upgrade @types/jest from 29.5.12 to 29.5.14 by @​dependabot in #​729

New Contributors

• @​benwells made their first contribution in #​723

Full Changelog: actions/setup-java@v4...v4.7.0

v4.6.0

Compare Source

What's Changed

Add-ons:

• Add Support for JetBrains Runtime by @​gmitch215 in #​637

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

• Fix Ubuntu-latest CI failures by @​mahabaleshwars in #​693

New Contributors

• @​gmitch215 made their first contribution in #​637

Full Changelog: actions/setup-java@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

• Upgrade IA Publish by @​Jcambass in #​686

Bug fixes:

• Improve archive extraction on windows runners without powershell core and Update micromatch dependency by @​priyagupta108 in #​689
• Update workflows for GraalVM and Version Enhancements by @​mahabaleshwars in #​699
• Refine isGhes logic by @​jww3 in #​697

New Contributors:

• @​priyagupta108 made their first contribution in #​689
• @​jww3 made their first contribution in #​697

Full Changelog: actions/setup-java@v4...v4.5.0

v4.4.0

Compare Source

What's Changed

Add-ons :

• Add support for Oracle GraalVM by @​fniephaus in #​501

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'graalvm'
     java-version: '21'

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​684

Bug fixes :

• Add architecture to cache key by @​Zxilly in #​664
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Resolve check failures by @​aparnajyothi-y in #​687

New Contributors

• @​Jcambass made their first contribution in #​684
• @​Zxilly made their first contribution in #​664

Full Changelog: actions/setup-java@v4...v4.4.0

v4.3.0

Compare Source

What's Changed

• Add support for SapMachine JDK/JRE by @​Shegox in #​614

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'sapmachine'
     java-version: '21'

Bug fixes :

• Fix typos on Corretto by @​johnshajiang in #​666
• IBM Semeru Enhancement on arm64 by @​mahabaleshwars in #​677
• Resolve Basic Validation Check Failures by @​aparnajyothi-y
 in #​682

New Contributors :

• @​johnshajiang made their first contribution in #​666
• @​Shegox made their first contribution in #​614

Full Changelog: actions/setup-java@v4...v4.3.0

v4.2.2

Compare Source

What's Changed



Bug fixes:

• Fix macos latest check failures by @​HarithaVattikuti in #​634
• Fix dragonwell distribution parsing issues by @​Accelerator1996 in #​643

Documentation changes

• Update advanced documentation for java-version-file by @​mahabaleshwars in #​622

Dependency updates:

• Bump undici from 5.28.3 to 5.28.4 and other dependency updates by @​dependabot in #​616

Full Changelog: actions/setup-java@v4...v4.2.2

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

• Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

• @​salmanmkc made their first contribution in #​685

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

• Update to use artifact 2.2.2 package by @​yacaovsnc in #​673

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

• Expose env vars to control concurrency and timeout by @​yacaovsnc in #​662

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

• fix: deprecated Node.js version in action by @​hamirmahal in #​578
• Add new artifact-digest output by @​bdehamer in #​656

New Contributors

• @​hamirmahal made their first contribution in #​578
• @​bdehamer made their first contribution in #​656

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

v4.4.3

Compare Source

What's Changed

• Undo indirect dependency updates from #​627 by @​joshmgross in #​632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

• Bump @actions/artifact to 2.1.11 by @​robherley in #​627
  • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in #​607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in #​625

New Contributors

• @​Jcambass made their first contribution in #​621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

• Exclude hidden files by default by @​joshmgross in #​598

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

v4.3.6

Compare Source

What's Changed

• Revert to @​actions/artifact 2.1.8 by @​robherley in #​594

Full Changelog: actions/upload-artifact@v4...v4.3.6

v4.3.5

Compare Source

What's Changed

• Bump @​actions/artifact to v2.1.9 by @​robherley in #​588
  • Fixed artifact upload chunk timeout logic #​1774
  • Use lazy stream to prevent issues with open file limits #​1771

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

v4.3.4

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in #​584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

v4.3.3

Compare Source

What's Changed

• updating @actions/artifact dependency to v2.1.6 by @​eggyhead in #​565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

• Update release-new-action-version.yml by @​konradpabjan in #​516
• Minor fix to the migration readme by @​andrewakim in #​523
• Update readme with v3/v2/v1 deprecation notice by @​robherley in #​561
• updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @​eggyhead in #​562

New Contributors

• @​andrewakim made their first contribution in #​523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

docker/build-push-action (docker/build-push-action)

v5.4.0

Compare Source

• Show builder information before building by @​crazy-max in #​1128
• Handle attestations correctly with provenance and sbom inputs by @​crazy-max in #​1086
• Bump @​docker/actions-toolkit from 0.19.0 to 0.24.0 in #​1088 #​1105 #​1121 #​1127
• Bump undici from 5.28.3 to 5.28.4 in #​1090

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

docker/login-action (docker/login-action)

v3.7.0

Compare Source

• Add scope input to set scopes for the authentication token by @​crazy-max in #​912
• Add support for AWS European Sovereign Cloud ECR by @​dphi in #​914
• Ensure passwords are redacted with registry-auth input by @​crazy-max in #​911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in #​915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Compare Source

• Add registry-auth input for raw authentication to registries by @​crazy-max in #​887
• Bump @​aws-sdk/client-ecr to 3.890.0 in #​882 #​890
• Bump @​aws-sdk/client-ecr-public to 3.890.0 in #​882 #​890
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in #​883
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​880
• Bump undici from 5.28.4 to 5.29.0 in #​879
• Bump tmp from 0.2.3 to 0.2.4 in #​881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

• Support dual-stack endpoints for AWS ECR by @​Spacefish @​crazy-max in #​874 #​876
• Bump @​aws-sdk/client-ecr to 3.859.0 in #​860 #​878
• Bump @​aws-sdk/client-ecr-public to 3.859.0 in #​860 #​878
• Bump @​docker/actions-toolkit from 0.57.0 to 0.62.1 in #​870
• Bump form-data from 2.5.1 to 2.5.5 in #​875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Compare Source

• Bump @​actions/core from 1.10.1 to 1.11.1 in #​791
• Bump @​aws-sdk/client-ecr to 3.766.0 in #​789 #​856
• Bump @​aws-sdk/client-ecr-public to 3.758.0 in #​789 #​856
• Bump @​docker/actions-toolkit from 0.35.0 to 0.57.0 in #​801 #​806 #​858
• Bump cross-spawn from 7.0.3 to 7.0.6 in #​814
• Bump https-proxy-agent from 7.0.5 to 7.0.6 in #​823
• Bump path-to-regexp from 6.2.2 to 6.3.0 in #​777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

v3.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.24.0 to 0.35.0 in #​754
• Bump https-proxy-agent from 7.0.4 to 7.0.5 in #​741
• Bump braces from 3.0.2 to 3.0.3 in #​730

Full Changelog: docker/login-action@v3.2.0...v3.3.0

v3.2.0

Compare Source

• Improve missing username/password by @​Frankkkkk in #​706
• Bump @​docker/actions-toolkit from 0.18.0 to 0.24.0 in #​715 #​721
• Bump aws-sdk-dependencies to 3.583.0 in #​720
• Bump undici from 5.28.3 to 5.28.4 in #​694

Full Changelog: docker/login-action@v3.1.0...v3.2.0

docker/metadata-action (docker/metadata-action)

v5.10.0

Compare Source

• Bump @​docker/actions-toolkit from 0.66.0 to 0.68.0 in #​559 #​569
• Bump js-yaml from 3.14.1 to 3.14.2 in #​564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

• Add tag-names output to return tag names without image base name by @​crazy-max in #​553
• Bump @​babel/runtime-corejs3 from 7.14.7 to 7.28.2 in #​539
• Bump @​docker/actions-toolkit from 0.62.1 to 0.66.0 in #​555
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​540
• Bump csv-parse from 5.6.0 to 6.1.0 in #​532
• Bump semver from 7.7.2 to 7.7.3 in in #​554
• Bump tmp from 0.2.3 to 0.2.5 in #​541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

v5.8.0

Compare Source

• New is_not_default_branch global expression by @​crazy-max in #​535
• Allow to match part of the git tag or value for semver/pep440 types by @​crazy-max in #​536 #​537
• Bump @​actions/github from 6.0.0 to 6.0.1 in #​523
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in #​526
• Bump form-data from 2.5.1 to 2.5.5 in #​533
• Bump moment-timezone from 0.5.47 to 0.6.0 in #​525
• Bump semver from 7.7.1 to 7.7.2 in #​524

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

v5.7.0

Compare Source

• Global expressions support for labels and annotations by @​crazy-max in #​489
• Support disabling outputs as environment variables by @​omus in #​497
• Bump @​docker/actions-toolkit from 0.44.0 to 0.56.0 in #​507 #​509
• Bump csv-parse from 5.5.6 to 5.6.0 in #​482
• Bump moment-timezone from 0.5.46 to 0.5.47 in #​501
• Bump semver from 7.6.3 to 7.7.1 in #​504

Full Changelog: docker/metadata-action@v5.6.1...v5.7.0

v5.6.1

Compare Source

• Fix GitHub API request fallback for commit date by @​crazy-max in #​478
• Revert to default commit SHA length of 7 by @​crazy-max in #​480

Full Changelog: docker/metadata-action@v5.6.0...v5.6.1

v5.6.0

Compare Source

• Add commit_date global expression by @​trim21 in #​471 #​475
• Increase short commit sha length to 12 for uniqueness by @​crazy-max in #​467
• Bump @​actions/core from 1.10.1 to 1.11.1 #​460
• Bump @​docker/actions-toolkit from 0.16.1 to 0.44.0 #​391 #​399 #​413 #​441
• Bump braces from 3.0.2 to 3.0.3 #​424
• Bump cross-spawn from 7.0.3 to 7.0.5 #​474
• Bump csv-parse from 5.5.5 to 5.5.6 #​412
• Bump moment-timezone from 0.5.44 to 0.5.46 #​383 #​470 #​459
• Bump path-to-regexp from 6.2.2 to 6.3.0 #​454
• Bump semver from 7.6.0 to 7.6.3 #​400 #​411 #​440
• Bump undici from 5.26.3 to 5.28.4 #​386 #​402

Full Changelog: docker/metadata-action@v5.5.1...v5.6.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.12.0

Compare Source

• Deprecate install input by @​crazy-max in [#​455](https://re

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.