Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added .tool-versions file support #606

Merged

Conversation

mahabaleshwars
Copy link
Contributor

@mahabaleshwars mahabaleshwars commented Mar 4, 2024

Description:
Add support for getting version from tool-versions file

Related issue:
#579

Check list:

  • Mark if documentation changes are required.
  • Mark if tests were added or updated to cover the changes.

@mahabaleshwars mahabaleshwars requested a review from a team as a code owner March 4, 2024 08:46
@mahabaleshwars mahabaleshwars changed the title Added tool version file support Added .tool-versions file support Mar 4, 2024
@mahabaleshwars mahabaleshwars self-assigned this Mar 12, 2024
@HarithaVattikuti HarithaVattikuti merged commit 5896cec into actions:main Mar 12, 2024
301 checks passed
@mahabaleshwars mahabaleshwars mentioned this pull request Mar 14, 2024
2 tasks
github-merge-queue bot pushed a commit to AmadeusITGroup/otter that referenced this pull request Mar 14, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| [actions/setup-java](https://togithub.com/actions/setup-java) | action
| minor | `v4.1.0` -> `v4.2.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fsetup-java/v4.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/actions%2fsetup-java/v4.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/actions%2fsetup-java/v4.1.0/v4.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fsetup-java/v4.1.0/v4.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [sass](https://togithub.com/sass/dart-sass) | peerDependencies | minor
| [`~1.71.0` ->
`~1.72.0`](https://renovatebot.com/diffs/npm/sass/1.71.1/1.72.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/sass/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/sass/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/sass/1.71.1/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass/1.71.1/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [sass](https://togithub.com/sass/dart-sass) | devDependencies | minor
| [`~1.71.0` ->
`~1.72.0`](https://renovatebot.com/diffs/npm/sass/1.71.1/1.72.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/sass/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/sass/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/sass/1.71.1/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass/1.71.1/1.72.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/setup-java (actions/setup-java)</summary>

###
[`v4.2.0`](https://togithub.com/actions/setup-java/releases/tag/v4.2.0)

[Compare
Source](https://togithub.com/actions/setup-java/compare/v4.1.0...v4.2.0)

#### What's Changed

- Updated actions/httpclient version to 2.2.1 and other dependencies by
[@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) in
[actions/setup-java#607
- Added .tool-versions file support along with .java-version file by
[@&#8203;mahabaleshwars](https://togithub.com/mahabaleshwars) in
[actions/setup-java#606

#### New Contributors

- [@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) made
their first contribution in
[actions/setup-java#607
**Full Changelog**:
actions/setup-java@v4...v4.2.0

</details>

<details>
<summary>sass/dart-sass (sass)</summary>

###
[`v1.72.0`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1720)

[Compare
Source](https://togithub.com/sass/dart-sass/compare/1.71.1...1.72.0)

- Support adjacent `/`s without whitespace in between when parsing plain
CSS
    expressions.

- Allow the Node.js `pkg:` importer to load Sass stylesheets for
`package.json`
    `exports` field entries without extensions.

- When printing suggestions for variables, use underscores in variable
names
    when the original usage used underscores.

##### JavaScript API

- Properly resolve `pkg:` imports with the Node.js package importer when
    arguments are passed to the JavaScript process.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 10pm every weekday,before 5am
every weekday,every weekend" in timezone Europe/Paris, Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/AmadeusITGroup/otter).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMzguMSIsInVwZGF0ZWRJblZlciI6IjM3LjIzOC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
rtyley added a commit to guardian/etag-caching that referenced this pull request Mar 14, 2024
This is motivated by guardian/gha-scala-library-release-workflow#31 -
initially I was just thinking about updating to Java 21, but now I think
that making projects declare which Java version they use to build is
probably a good thing!

Note that we're using asdf's .tool-versions file here, which has recently gained
support in actions/setup-java#606 - this means that
we can also get _all_ our GitHub Actions files to respect the Java version
definied in that file - eg, we can reference it in ci.yml, and we don't need
to update Java version in there anymore.
let javaVersionRegExp;
if (versionFile == '.tool-versions') {
javaVersionRegExp =
/^(java\s+)(?:\S*-)?v?(?<version>(\d+)(\.\d+)?(\.\d+)?(\+\d+)?(-ea(\.\d+)?)?)$/m;
Copy link

@rtyley rtyley Mar 14, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note that this regex will not accept full java versions commonly generated in asdf using latest - eg:

asdf local java latest:corretto-21

...will generate a file with this line:

java corretto-21.0.2.13.1

The regex doesn't recognise this, so setup-java will fail with this message:

Error: No supported version was found in file .tool-versions

If we play around with the regex, we can see that we have to edit the string down to java corretto-21.0.2 in order to get it to work:

image

Shegox pushed a commit to Shegox/setup-java that referenced this pull request Mar 26, 2024
* added support for tool version file

* testing with one regex

* working regex

* Checked for the file extension

* added e2e checks for tool version

* removed error warning

* updated regex to support early version

* updated regex for early version support

* updated regex for early version

* updated regex to accept early versions

* added coreinfo to analyze

* updated the regex

* updated regex

* new regex for early version

* updated regex to match the new version file format

* new regex

* changed the regex

* redex updated

* used java version regex

* regex updated

* regex modified

* regex updated

* regex updated

* regex updated

* updated regex to support early versions

* Regex updated to support all java versions

* Documentation updated to add tool version description

* Documentation updated for the tool version file

* update the advanced doc and readme file to specify tool version changes
Valid entry options:
```
major versions: 8, 11, 16, 17, 21
more specific versions: 1.8.0.2, 17.0, 11.0, 11.0.4, 8.0.232, 8.0.282+8
early access (EA) versions: 15-ea, 15.0.0-ea, 15.0.0-ea.2, 15.0.0+2-ea

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

15.0.2-sa.2, 15.2.0+2-sa

rtyley added a commit to guardian/gha-scala-library-release-workflow that referenced this pull request Apr 30, 2024
This allows projects to specify, with an `asdf` (https://asdf-vm.com/)-formatted
`.tool-versions` file, the Java version to be used by the workflow for building
the project- `gha-scala-library-release-workflow` has always used a recent LTS
version Java for the build (eg Java 17), and this has sometimes been _too recent_
(guardian/atom-maker#94) for some projects at the Guardian.

We _want_ projects to update to Java 21 (see guardian/support-frontend#5792,
guardian/scala-steward-public-repos#67 etc), but tying
dozens of projects tightly to what `gha-scala-library-release-workflow` is using
will make updating that version pretty hard. If, at some later point, _some_ projects
want to experiment with Java 25, we shouldn't have to force all other projects to
be compatible with that first.

## How to express the version of Java required...

### Configuration proliferation is a problem...

One option would have been to simply add a new input parameter to the workflow,
specifying the required Java version, but that has a downside: it proliferates the
number of places in a project where the desired Java version is declared - and there
are many in use at the Guardian, with no well-agreed canonical source-of-truth:

* GHA `ci.yml`, in the [`java-version`](https://github.com/guardian/etag-caching/blob/7ecc04981f5a42a0f2ecb10631f28da571a49836/.github/workflows/ci.yml#L22) field of `actions/setup-java` - this has been my favourite in the past, as whatever CI runs with is usually pretty close to the truth
* In sbt, the `scalacOptions` of `-target`, `-release`, `-java-output-version` (currently `-release` preferred, tho' once [support](scala/scala#10654) is pervasive, `-java-output-version` is probably best) and the `javacOptions` of `-target` & `-source` - these all effectively set lower-bounds on the version of Java supported, rather than guaranteeing a minimum upper bound of Java version the way CI does.
* In apps running on Amigo AMI images; the Java version baked into the AMI, usually [referenced](https://github.com/guardian/mobile-apps-api/blob/3231e6bf064163c6d0e72c8dc862678c68eb0b62/mobile-fronts/conf/riff-raff.yaml#L10) by `riff-raff.yaml`
* In AWS Lambdas; the cloudformation [`Runtime`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-runtime) parameter, often set [by CDK](https://github.com/guardian/mobile-save-for-later/blob/1ac12e4c0100edb976ebae9e2a9975ad2321e26e/cdk/lib/mobile-save-for-later.ts#L44)

### ...`asdf`'s `.tool-versions` flle offers some consolidation

Benefits of using `.tool-versions`:

* Developers will automatically get the right Java version if they have `asdf` installed
* actions/setup-java#606 has added early support for reading the version of Java used in CI by `setup-java` from the `.tool-versions` flle - unfortunately, it's of limited use to us at the moment because of actions/setup-java#615, but it's a promising start _(`setup-java` also has support for `jEnv` files, but they are not commonly used at the Guardian)_
* Format of the file is simple enough that it can be easily understood and used, even if `asdf` is not in use - **including the file doesn't _force_ developers to use `asdf`** (I know some devs have been having some problems with it, and maybe there are/will be better alternatives out there), but it clearly documents the Java version to be used.

This does mean that **all library repos need to add a `.tool-versions` file** before this PR is merged. Helpful error messaging has been added with this PR to handle cases where the file is missing or invalid:

#### Only Java _major_ version is guaranteed

Note that although `asdf` requires a fully-specified Java version (eg `21.0.3.9.1`) in the `.tool-versions` file, currently the workflow will only match the *major* version of Java specified in the file (eg `21`), and will _always_ use the AWS Corretto distribution of Java. This is due to [limitations](actions/setup-java#615) in [`actions/setup-java`](https://github.com/actions/setup-java).
ianlewis pushed a commit to slsa-framework/slsa-github-generator that referenced this pull request May 16, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-java](https://togithub.com/actions/setup-java) | action
| major | `v3.13.0` -> `v4.2.1` |
| [actions/setup-node](https://togithub.com/actions/setup-node) | action
| major | `v3.8.1` -> `v4.0.2` |
| [actions/setup-node](https://togithub.com/actions/setup-node) | action
| major | `v3` -> `v4` |
|
[bazelbuild/setup-bazelisk](https://togithub.com/bazelbuild/setup-bazelisk)
| action | major | `v2.0.0` -> `v3.0.0` |
|
[geekyeggo/delete-artifact](https://togithub.com/geekyeggo/delete-artifact)
| action | major | `v2.0.0` -> `v5.0.0` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | major | `v2.22.4` -> `v3.25.5` |
|
[google-github-actions/auth](https://togithub.com/google-github-actions/auth)
| action | major | `v1.1.1` -> `v2.1.3` |
|
[gradle/gradle-build-action](https://togithub.com/gradle/gradle-build-action)
| action | major | `v2.9.0` -> `v3.3.2` |

---

### Release Notes

<details>
<summary>actions/setup-java (actions/setup-java)</summary>

###
[`v4.2.1`](https://togithub.com/actions/setup-java/releases/tag/v4.2.1)

[Compare
Source](https://togithub.com/actions/setup-java/compare/v4.2.0...v4.2.1)

##### What's Changed

- Patch for java version file to accept it from any path by
[@&#8203;mahabaleshwars](https://togithub.com/mahabaleshwars) in
[https://github.com/actions/setup-java/pull/610](https://togithub.com/actions/setup-java/pull/610)

**Full Changelog**:
https://github.com/actions/setup-java/compare/v4...v4.2.1

###
[`v4.2.0`](https://togithub.com/actions/setup-java/releases/tag/v4.2.0)

[Compare
Source](https://togithub.com/actions/setup-java/compare/v4.1.0...v4.2.0)

##### What's Changed

- Updated actions/httpclient version to 2.2.1 and other dependencies by
[@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) in
[https://github.com/actions/setup-java/pull/607](https://togithub.com/actions/setup-java/pull/607)
- Added .tool-versions file support along with .java-version file by
[@&#8203;mahabaleshwars](https://togithub.com/mahabaleshwars) in
[https://github.com/actions/setup-java/pull/606](https://togithub.com/actions/setup-java/pull/606)

##### New Contributors

- [@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) made
their first contribution in
[https://github.com/actions/setup-java/pull/607](https://togithub.com/actions/setup-java/pull/607)
**Full Changelog**:
https://github.com/actions/setup-java/compare/v4...v4.2.0

###
[`v4.1.0`](https://togithub.com/actions/setup-java/releases/tag/v4.1.0)

[Compare
Source](https://togithub.com/actions/setup-java/compare/v4.0.0...v4.1.0)

#### What's Changed

- Added Windows Arm64 Support for Windows Arm64 Runners by
[@&#8203;mahabaleshwars](https://togithub.com/mahabaleshwars) in
[https://github.com/actions/setup-java/pull/595](https://togithub.com/actions/setup-java/pull/595)
- feat: bump actions/checkout and actions/setup-java to v4 by
[@&#8203;kbdharun](https://togithub.com/kbdharun) in
[https://github.com/actions/setup-java/pull/533](https://togithub.com/actions/setup-java/pull/533)
- Handle authorization when the token is undefined by
[@&#8203;peter-murray](https://togithub.com/peter-murray) in
[https://github.com/actions/setup-java/pull/556](https://togithub.com/actions/setup-java/pull/556)
- Documentation update of Java 21 by
[@&#8203;Okeanos](https://togithub.com/Okeanos) in
[https://github.com/actions/setup-java/pull/566](https://togithub.com/actions/setup-java/pull/566)
- Documentation update about maven-gpg-plugin version note by
[@&#8203;IvanZosimov](https://togithub.com/IvanZosimov) in
[https://github.com/actions/setup-java/pull/570](https://togithub.com/actions/setup-java/pull/570)
- Oracle JDK 21 support by
[@&#8203;jdubois](https://togithub.com/jdubois) in
[https://github.com/actions/setup-java/pull/538](https://togithub.com/actions/setup-java/pull/538)
- Fix typo in configuration example by
[@&#8203;Bananeweizen](https://togithub.com/Bananeweizen) in
[https://github.com/actions/setup-java/pull/572](https://togithub.com/actions/setup-java/pull/572)

#### New Contributors

- [@&#8203;kbdharun](https://togithub.com/kbdharun) made their first
contribution in
[https://github.com/actions/setup-java/pull/533](https://togithub.com/actions/setup-java/pull/533)
- [@&#8203;peter-murray](https://togithub.com/peter-murray) made their
first contribution in
[https://github.com/actions/setup-java/pull/556](https://togithub.com/actions/setup-java/pull/556)
- [@&#8203;jdubois](https://togithub.com/jdubois) made their first
contribution in
[https://github.com/actions/setup-java/pull/538](https://togithub.com/actions/setup-java/pull/538)
- [@&#8203;Bananeweizen](https://togithub.com/Bananeweizen) made their
first contribution in
[https://github.com/actions/setup-java/pull/572](https://togithub.com/actions/setup-java/pull/572)
- [@&#8203;mahabaleshwars](https://togithub.com/mahabaleshwars) made
their first contribution in
[https://github.com/actions/setup-java/pull/595](https://togithub.com/actions/setup-java/pull/595)

**Full Changelog**:
https://github.com/actions/setup-java/compare/v4...v4.1.0

###
[`v4.0.0`](https://togithub.com/actions/setup-java/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/actions/setup-java/compare/v3.13.0...v4.0.0)

#### What's Changed

In the scope of this release, the version of the Node.js runtime was
updated to 20. The majority of dependencies were updated to the latest
versions. From now on, the code for the setup-java will run on Node.js
20 instead of Node.js 16.

#### Breaking changes

- Update Node.js runtime to version 20 by
[@&#8203;aparnajyothi-y](https://togithub.com/aparnajyothi-y) in
[https://github.com/actions/setup-java/pull/558](https://togithub.com/actions/setup-java/pull/558)

#### Non-breaking changes

- Adding support for microsoft openjdk 21.0.0 by
[@&#8203;ralfstuckert](https://togithub.com/ralfstuckert) in
[https://github.com/actions/setup-java/pull/546](https://togithub.com/actions/setup-java/pull/546)
- Update [@&#8203;actions/cache](https://togithub.com/actions/cache)
dependency and documentation by
[@&#8203;IvanZosimov](https://togithub.com/IvanZosimov) in
[https://github.com/actions/setup-java/pull/549](https://togithub.com/actions/setup-java/pull/549)
- Implementation of the cache-dependency-path option to control caching
dependency by [@&#8203;itchyny](https://togithub.com/itchyny) in
[https://github.com/actions/setup-java/pull/499](https://togithub.com/actions/setup-java/pull/499)

#### New Contributors

- [@&#8203;ralfstuckert](https://togithub.com/ralfstuckert) made their
first contribution in
[https://github.com/actions/setup-java/pull/546](https://togithub.com/actions/setup-java/pull/546)
- [@&#8203;itchyny](https://togithub.com/itchyny) made their first
contribution in
[https://github.com/actions/setup-java/pull/499](https://togithub.com/actions/setup-java/pull/499)

**Full Changelog**:
https://github.com/actions/setup-java/compare/v3...v4.0.0

</details>

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

###
[`v4.0.2`](https://togithub.com/actions/setup-node/releases/tag/v4.0.2)

[Compare
Source](https://togithub.com/actions/setup-node/compare/v4.0.1...v4.0.2)

##### What's Changed

- Add support for `volta.extends` by
[@&#8203;ThisIsManta](https://togithub.com/ThisIsManta) in
[https://github.com/actions/setup-node/pull/921](https://togithub.com/actions/setup-node/pull/921)
- Add support for arm64 Windows by
[@&#8203;dmitry-shibanov](https://togithub.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/927](https://togithub.com/actions/setup-node/pull/927)

##### New Contributors

- [@&#8203;ThisIsManta](https://togithub.com/ThisIsManta) made their
first contribution in
[https://github.com/actions/setup-node/pull/921](https://togithub.com/actions/setup-node/pull/921)

**Full Changelog**:
https://github.com/actions/setup-node/compare/v4.0.1...v4.0.2

###
[`v4.0.1`](https://togithub.com/actions/setup-node/releases/tag/v4.0.1)

[Compare
Source](https://togithub.com/actions/setup-node/compare/v4.0.0...v4.0.1)

##### What's Changed

- Ignore engines in Yarn 1 e2e-cache tests by
[@&#8203;trivikr](https://togithub.com/trivikr) in
[https://github.com/actions/setup-node/pull/882](https://togithub.com/actions/setup-node/pull/882)
- Update setup-node references in the README.md file to setup-node@v4 by
[@&#8203;jwetzell](https://togithub.com/jwetzell) in
[https://github.com/actions/setup-node/pull/884](https://togithub.com/actions/setup-node/pull/884)
- Update reusable workflows to use Node.js v20 by
[@&#8203;MaksimZhukov](https://togithub.com/MaksimZhukov) in
[https://github.com/actions/setup-node/pull/889](https://togithub.com/actions/setup-node/pull/889)
- Add fix for cache to resolve slow post action step by
[@&#8203;aparnajyothi-y](https://togithub.com/aparnajyothi-y) in
[https://github.com/actions/setup-node/pull/917](https://togithub.com/actions/setup-node/pull/917)
- Fix README.md by [@&#8203;takayamaki](https://togithub.com/takayamaki)
in
[https://github.com/actions/setup-node/pull/898](https://togithub.com/actions/setup-node/pull/898)
- Add `package.json` to `node-version-file` list of examples. by
[@&#8203;TWiStErRob](https://togithub.com/TWiStErRob) in
[https://github.com/actions/setup-node/pull/879](https://togithub.com/actions/setup-node/pull/879)
- Fix node-version-file interprets entire package.json as a version by
[@&#8203;NullVoxPopuli](https://togithub.com/NullVoxPopuli) in
[https://github.com/actions/setup-node/pull/865](https://togithub.com/actions/setup-node/pull/865)

##### New Contributors

- [@&#8203;trivikr](https://togithub.com/trivikr) made their first
contribution in
[https://github.com/actions/setup-node/pull/882](https://togithub.com/actions/setup-node/pull/882)
- [@&#8203;jwetzell](https://togithub.com/jwetzell) made their first
contribution in
[https://github.com/actions/setup-node/pull/884](https://togithub.com/actions/setup-node/pull/884)
- [@&#8203;aparnajyothi-y](https://togithub.com/aparnajyothi-y) made
their first contribution in
[https://github.com/actions/setup-node/pull/917](https://togithub.com/actions/setup-node/pull/917)
- [@&#8203;takayamaki](https://togithub.com/takayamaki) made their first
contribution in
[https://github.com/actions/setup-node/pull/898](https://togithub.com/actions/setup-node/pull/898)
- [@&#8203;TWiStErRob](https://togithub.com/TWiStErRob) made their first
contribution in
[https://github.com/actions/setup-node/pull/879](https://togithub.com/actions/setup-node/pull/879)
- [@&#8203;NullVoxPopuli](https://togithub.com/NullVoxPopuli) made their
first contribution in
[https://github.com/actions/setup-node/pull/865](https://togithub.com/actions/setup-node/pull/865)

**Full Changelog**:
https://github.com/actions/setup-node/compare/v4...v4.0.1

###
[`v4.0.0`](https://togithub.com/actions/setup-node/releases/tag/v4.0.0)

[Compare
Source](https://togithub.com/actions/setup-node/compare/v3.8.2...v4.0.0)

##### What's Changed

In scope of this release we changed version of node runtime for action
from node16 to node20 and updated dependencies in
[https://github.com/actions/setup-node/pull/866](https://togithub.com/actions/setup-node/pull/866)

Besides, release contains such changes as:

- Upgrade actions/checkout to v4 by
[@&#8203;gmembre-zenika](https://togithub.com/gmembre-zenika) in
[https://github.com/actions/setup-node/pull/868](https://togithub.com/actions/setup-node/pull/868)
- Update actions/checkout for documentation and yaml by
[@&#8203;dmitry-shibanov](https://togithub.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/876](https://togithub.com/actions/setup-node/pull/876)

##### New Contributors

- [@&#8203;gmembre-zenika](https://togithub.com/gmembre-zenika) made
their first contribution in
[https://github.com/actions/setup-node/pull/868](https://togithub.com/actions/setup-node/pull/868)

**Full Changelog**:
https://github.com/actions/setup-node/compare/v3...v4.0.0

###
[`v3.8.2`](https://togithub.com/actions/setup-node/releases/tag/v3.8.2)

[Compare
Source](https://togithub.com/actions/setup-node/compare/v3.8.1...v3.8.2)

##### What's Changed

- Update semver by
[@&#8203;dmitry-shibanov](https://togithub.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/861](https://togithub.com/actions/setup-node/pull/861)
- Update temp directory creation by
[@&#8203;nikolai-laevskii](https://togithub.com/nikolai-laevskii) in
[https://github.com/actions/setup-node/pull/859](https://togithub.com/actions/setup-node/pull/859)
- Bump [@&#8203;babel/traverse](https://togithub.com/babel/traverse)
from 7.15.4 to 7.23.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/actions/setup-node/pull/870](https://togithub.com/actions/setup-node/pull/870)
- Add notice about binaries not being updated yet by
[@&#8203;nikolai-laevskii](https://togithub.com/nikolai-laevskii) in
[https://github.com/actions/setup-node/pull/872](https://togithub.com/actions/setup-node/pull/872)
- Update toolkit cache and core by
[@&#8203;dmitry-shibanov](https://togithub.com/dmitry-shibanov) and
[@&#8203;seongwon-privatenote](https://togithub.com/seongwon-privatenote)
in
[https://github.com/actions/setup-node/pull/875](https://togithub.com/actions/setup-node/pull/875)

**Full Changelog**:
https://github.com/actions/setup-node/compare/v3...v3.8.2

</details>

<details>
<summary>bazelbuild/setup-bazelisk (bazelbuild/setup-bazelisk)</summary>

###
[`v3.0.0`](https://togithub.com/bazelbuild/setup-bazelisk/releases/tag/v3.0.0)

[Compare
Source](https://togithub.com/bazelbuild/setup-bazelisk/compare/v2.0.0...v3.0.0)

#### What's Changed

- Update README.md for v2 by
[@&#8203;mishas](https://togithub.com/mishas) in
[https://github.com/bazelbuild/setup-bazelisk/pull/20](https://togithub.com/bazelbuild/setup-bazelisk/pull/20)
- Bump prettier from 2.6.1 to 2.6.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/21](https://togithub.com/bazelbuild/setup-bazelisk/pull/21)
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.0.0 to 5.0.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/22](https://togithub.com/bazelbuild/setup-bazelisk/pull/22)
- Bump
[@&#8203;actions/tool-cache](https://togithub.com/actions/tool-cache)
from 1.6.1 to 1.7.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/23](https://togithub.com/bazelbuild/setup-bazelisk/pull/23)
- Bump semver from 7.3.5 to 7.3.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/25](https://togithub.com/bazelbuild/setup-bazelisk/pull/25)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
2.0.0 to 2.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/24](https://togithub.com/bazelbuild/setup-bazelisk/pull/24)
- Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.33.3
to 0.33.4 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/26](https://togithub.com/bazelbuild/setup-bazelisk/pull/26)
- Bump semver from 7.3.6 to 7.3.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/27](https://togithub.com/bazelbuild/setup-bazelisk/pull/27)
- Bump typescript from 4.6.3 to 4.6.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/30](https://togithub.com/bazelbuild/setup-bazelisk/pull/30)
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.6.0 to 1.7.0 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/29](https://togithub.com/bazelbuild/setup-bazelisk/pull/29)
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.7.0 to 1.8.0 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/31](https://togithub.com/bazelbuild/setup-bazelisk/pull/31)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
2.0.2 to 2.0.4 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/32](https://togithub.com/bazelbuild/setup-bazelisk/pull/32)
- Bump
[@&#8203;actions/tool-cache](https://togithub.com/actions/tool-cache)
from 1.7.2 to 2.0.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/34](https://togithub.com/bazelbuild/setup-bazelisk/pull/34)
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.8.0 to 1.8.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/33](https://togithub.com/bazelbuild/setup-bazelisk/pull/33)
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.0.1 to 5.0.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/35](https://togithub.com/bazelbuild/setup-bazelisk/pull/35)
- Bump
[@&#8203;actions/http-client](https://togithub.com/actions/http-client)
from 1.0.11 to 2.0.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/36](https://togithub.com/bazelbuild/setup-bazelisk/pull/36)
- Bump typescript from 4.6.4 to 4.7.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/37](https://togithub.com/bazelbuild/setup-bazelisk/pull/37)
- Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.33.4
to 0.34.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/38](https://togithub.com/bazelbuild/setup-bazelisk/pull/38)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
2.0.4 to 2.0.5 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/39](https://togithub.com/bazelbuild/setup-bazelisk/pull/39)
- Bump typescript from 4.7.2 to 4.7.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/40](https://togithub.com/bazelbuild/setup-bazelisk/pull/40)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
2.0.5 to 2.0.6 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/41](https://togithub.com/bazelbuild/setup-bazelisk/pull/41)
- Bump typescript from 4.7.3 to 4.7.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/42](https://togithub.com/bazelbuild/setup-bazelisk/pull/42)
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.8.2 to 1.9.0 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/43](https://togithub.com/bazelbuild/setup-bazelisk/pull/43)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.3.9 to 7.3.10 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/44](https://togithub.com/bazelbuild/setup-bazelisk/pull/44)
- Bump prettier from 2.6.2 to 2.7.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/45](https://togithub.com/bazelbuild/setup-bazelisk/pull/45)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
2.0.6 to 3.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/46](https://togithub.com/bazelbuild/setup-bazelisk/pull/46)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.0.0 to 3.0.1 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/47](https://togithub.com/bazelbuild/setup-bazelisk/pull/47)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.0.1 to 3.0.3 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/48](https://togithub.com/bazelbuild/setup-bazelisk/pull/48)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.3.10 to 7.3.12 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/50](https://togithub.com/bazelbuild/setup-bazelisk/pull/50)
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.9.0 to 1.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/49](https://togithub.com/bazelbuild/setup-bazelisk/pull/49)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.0.3 to 3.0.4 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/51](https://togithub.com/bazelbuild/setup-bazelisk/pull/51)
- Bump typescript from 4.7.4 to 4.8.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/52](https://togithub.com/bazelbuild/setup-bazelisk/pull/52)
- Bump typescript from 4.8.2 to 4.8.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/53](https://togithub.com/bazelbuild/setup-bazelisk/pull/53)
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.0.3 to 5.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/54](https://togithub.com/bazelbuild/setup-bazelisk/pull/54)
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.1.0 to 5.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/55](https://togithub.com/bazelbuild/setup-bazelisk/pull/55)
- Bump typescript from 4.8.3 to 4.8.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/56](https://togithub.com/bazelbuild/setup-bazelisk/pull/56)
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.9.1 to 1.10.0 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/57](https://togithub.com/bazelbuild/setup-bazelisk/pull/57)
- Bump semver from 7.3.7 to 7.3.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/58](https://togithub.com/bazelbuild/setup-bazelisk/pull/58)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.0.4 to 3.0.5 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/59](https://togithub.com/bazelbuild/setup-bazelisk/pull/59)
- Add support for ARM64. by
[@&#8203;junyer](https://togithub.com/junyer) in
[https://github.com/bazelbuild/setup-bazelisk/pull/61](https://togithub.com/bazelbuild/setup-bazelisk/pull/61)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.0.5 to 3.0.6 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/62](https://togithub.com/bazelbuild/setup-bazelisk/pull/62)
- Get `npm run build` working again. by
[@&#8203;junyer](https://togithub.com/junyer) in
[https://github.com/bazelbuild/setup-bazelisk/pull/63](https://togithub.com/bazelbuild/setup-bazelisk/pull/63)
- Bump typescript from 4.8.4 to 4.9.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/64](https://togithub.com/bazelbuild/setup-bazelisk/pull/64)
- Bump prettier from 2.7.1 to 2.8.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/65](https://togithub.com/bazelbuild/setup-bazelisk/pull/65)
- Bump prettier from 2.8.0 to 2.8.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/67](https://togithub.com/bazelbuild/setup-bazelisk/pull/67)
- Bump typescript from 4.9.3 to 4.9.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/69](https://togithub.com/bazelbuild/setup-bazelisk/pull/69)
- Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.34.0
to 0.36.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/68](https://togithub.com/bazelbuild/setup-bazelisk/pull/68)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.0.6 to 3.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/72](https://togithub.com/bazelbuild/setup-bazelisk/pull/72)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.1.0 to 3.1.1 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/73](https://togithub.com/bazelbuild/setup-bazelisk/pull/73)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.1.1 to 3.1.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/74](https://togithub.com/bazelbuild/setup-bazelisk/pull/74)
- Bump prettier from 2.8.1 to 2.8.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/75](https://togithub.com/bazelbuild/setup-bazelisk/pull/75)
- Bump prettier from 2.8.2 to 2.8.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/76](https://togithub.com/bazelbuild/setup-bazelisk/pull/76)
- Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.36.0
to 0.36.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/77](https://togithub.com/bazelbuild/setup-bazelisk/pull/77)
- Bump typescript from 4.9.4 to 4.9.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/78](https://togithub.com/bazelbuild/setup-bazelisk/pull/78)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.1.2 to 3.1.3 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/79](https://togithub.com/bazelbuild/setup-bazelisk/pull/79)
- Bump prettier from 2.8.3 to 2.8.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/80](https://togithub.com/bazelbuild/setup-bazelisk/pull/80)
- Bump
[@&#8203;actions/http-client](https://togithub.com/actions/http-client)
from 2.0.1 to 2.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/82](https://togithub.com/bazelbuild/setup-bazelisk/pull/82)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.1.3 to 3.2.1 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/83](https://togithub.com/bazelbuild/setup-bazelisk/pull/83)
- Bump typescript from 4.9.5 to 5.0.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/84](https://togithub.com/bazelbuild/setup-bazelisk/pull/84)
- Bump prettier from 2.8.4 to 2.8.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/85](https://togithub.com/bazelbuild/setup-bazelisk/pull/85)
- Bump typescript from 5.0.2 to 5.0.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/86](https://togithub.com/bazelbuild/setup-bazelisk/pull/86)
- Bump typescript from 5.0.3 to 5.0.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/87](https://togithub.com/bazelbuild/setup-bazelisk/pull/87)
- Bump semver from 7.3.8 to 7.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/88](https://togithub.com/bazelbuild/setup-bazelisk/pull/88)
- Bump prettier from 2.8.7 to 2.8.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/89](https://togithub.com/bazelbuild/setup-bazelisk/pull/89)
- Bump semver from 7.4.0 to 7.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/90](https://togithub.com/bazelbuild/setup-bazelisk/pull/90)
- Bump typescript from 5.0.4 to 5.1.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/93](https://togithub.com/bazelbuild/setup-bazelisk/pull/93)
- Bump semver and
[@&#8203;types/semver](https://togithub.com/types/semver) by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/92](https://togithub.com/bazelbuild/setup-bazelisk/pull/92)
- Bump semver from 7.5.1 to 7.5.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/94](https://togithub.com/bazelbuild/setup-bazelisk/pull/94)
- Bump semver from 7.5.2 to 7.5.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/95](https://togithub.com/bazelbuild/setup-bazelisk/pull/95)
- Bump typescript from 5.1.3 to 5.1.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/96](https://togithub.com/bazelbuild/setup-bazelisk/pull/96)
- Bump semver from 7.5.3 to 7.5.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/98](https://togithub.com/bazelbuild/setup-bazelisk/pull/98)
- Bump prettier from 2.8.8 to 3.0.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/97](https://togithub.com/bazelbuild/setup-bazelisk/pull/97)
- Bump cachedir from 2.3.0 to 2.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/99](https://togithub.com/bazelbuild/setup-bazelisk/pull/99)
- Bump
[@&#8203;actions/http-client](https://togithub.com/actions/http-client)
from 2.1.0 to 2.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/100](https://togithub.com/bazelbuild/setup-bazelisk/pull/100)
- Bump prettier from 3.0.0 to 3.0.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/101](https://togithub.com/bazelbuild/setup-bazelisk/pull/101)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.2.1 to 3.2.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/102](https://togithub.com/bazelbuild/setup-bazelisk/pull/102)
- Bump tough-cookie and
[@&#8203;azure/ms-rest-js](https://togithub.com/azure/ms-rest-js) by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/103](https://togithub.com/bazelbuild/setup-bazelisk/pull/103)
- Bump xml2js and
[@&#8203;azure/core-http](https://togithub.com/azure/core-http) by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/105](https://togithub.com/bazelbuild/setup-bazelisk/pull/105)
- Bump prettier from 3.0.1 to 3.0.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/106](https://togithub.com/bazelbuild/setup-bazelisk/pull/106)
- Bump typescript from 5.1.6 to 5.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/107](https://togithub.com/bazelbuild/setup-bazelisk/pull/107)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.5.0 to 7.5.1 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/108](https://togithub.com/bazelbuild/setup-bazelisk/pull/108)
- Bump prettier from 3.0.2 to 3.0.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/109](https://togithub.com/bazelbuild/setup-bazelisk/pull/109)
- Bump actions/checkout from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/110](https://togithub.com/bazelbuild/setup-bazelisk/pull/110)
- Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.36.1
to 0.38.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/111](https://togithub.com/bazelbuild/setup-bazelisk/pull/111)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.5.1 to 7.5.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/113](https://togithub.com/bazelbuild/setup-bazelisk/pull/113)
- Bump [@&#8203;actions/core](https://togithub.com/actions/core) from
1.10.0 to 1.10.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/112](https://togithub.com/bazelbuild/setup-bazelisk/pull/112)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.5.2 to 7.5.3 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/114](https://togithub.com/bazelbuild/setup-bazelisk/pull/114)
- Bump
[@&#8203;actions/http-client](https://togithub.com/actions/http-client)
from 2.1.1 to 2.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/115](https://togithub.com/bazelbuild/setup-bazelisk/pull/115)
- Bump [@&#8203;actions/github](https://togithub.com/actions/github)
from 5.1.1 to 6.0.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/116](https://togithub.com/bazelbuild/setup-bazelisk/pull/116)
- Bump undici from 5.25.4 to 5.26.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/117](https://togithub.com/bazelbuild/setup-bazelisk/pull/117)
- Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.38.0
to 0.38.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/118](https://togithub.com/bazelbuild/setup-bazelisk/pull/118)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.5.3 to 7.5.4 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/119](https://togithub.com/bazelbuild/setup-bazelisk/pull/119)
- Bump prettier from 3.0.3 to 3.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/123](https://togithub.com/bazelbuild/setup-bazelisk/pull/123)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.5.4 to 7.5.5 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/122](https://togithub.com/bazelbuild/setup-bazelisk/pull/122)
- Bump typescript from 5.2.2 to 5.3.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/124](https://togithub.com/bazelbuild/setup-bazelisk/pull/124)
- Bump [@&#8203;types/semver](https://togithub.com/types/semver) from
7.5.5 to 7.5.6 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/125](https://togithub.com/bazelbuild/setup-bazelisk/pull/125)
- Bump typescript from 5.3.2 to 5.3.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/126](https://togithub.com/bazelbuild/setup-bazelisk/pull/126)
- Bump prettier from 3.1.0 to 3.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/127](https://togithub.com/bazelbuild/setup-bazelisk/pull/127)
- Bump prettier from 3.1.1 to 3.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/128](https://togithub.com/bazelbuild/setup-bazelisk/pull/128)
- Bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from
3.2.2 to 3.2.3 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/bazelbuild/setup-bazelisk/pull/129](https://togithub.com/bazelbuild/setup-bazelisk/pull/129)
- Bump prettier from 3.2.2 to 3.2.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/bazelbuild/setup-bazelisk/pull/130](https://togithub.com/bazelbuild/setup-bazelisk/pull/130)
- Update from Node 16 to Node 20. by
[@&#8203;junyer](https://togithub.com/junyer) in
[https://github.com/bazelbuild/setup-bazelisk/pull/132](https://togithub.com/bazelbuild/setup-bazelisk/pull/132)

#### New Contributors

- [@&#8203;mishas](https://togithub.com/mishas) made their first
contribution in
[https://github.com/bazelbuild/setup-bazelisk/pull/20](https://togithub.com/bazelbuild/setup-bazelisk/pull/20)
- [@&#8203;junyer](https://togithub.com/junyer) made their first
contribution in
[https://github.com/bazelbuild/setup-bazelisk/pull/61](https://togithub.com/bazelbuild/setup-bazelisk/pull/61)

**Full Changelog**:
https://github.com/bazelbuild/setup-bazelisk/compare/v2...v3.0.0

</details>

<details>
<summary>geekyeggo/delete-artifact (geekyeggo/delete-artifact)</summary>

###
[`v5.0.0`](https://togithub.com/GeekyEggo/delete-artifact/releases/tag/v5.0.0)

[Compare
Source](https://togithub.com/geekyeggo/delete-artifact/compare/v4.1.0...v5.0.0)

- Switch to
[@&#8203;actions/artifact](https://www.npmjs.com/package/@&#8203;actions/artifact),
removing the need for a `token` parameter (Sebastian Weigand)
[#&#8203;24](https://togithub.com/GeekyEggo/delete-artifact/pull/24)

###
[`v4.1.0`](https://togithub.com/GeekyEggo/delete-artifact/releases/tag/v4.1.0)

[Compare
Source](https://togithub.com/geekyeggo/delete-artifact/compare/v4.0.0...v4.1.0)

-   Add default token.
- Fix over-arching `catch` output; errors now correctly result in a
failed run
([@&#8203;TheMrMilchmann](https://togithub.com/TheMrMilchmann)).

###
[`v4.0.0`](https://togithub.com/GeekyEggo/delete-artifact/releases/tag/v4.0.0):
Support for actions/upload-artifact@v4

[Compare
Source](https://togithub.com/geekyeggo/delete-artifact/compare/v2.0.0...v4.0.0)

- Add support for artifacts uploaded with `actions/upload-artifact@v4`.
-   Add requirement of `token` with read and write access to actions.
-   Update requests to use GitHub REST API.
- Deprecate support for `actions/upload-artifact@v1`,
`actions/upload-artifact@v2`, and `actions/upload-artifact@v3` (please
use `geekyeggo/delete-artifact@v2`).

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.5`](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

###
[`v3.25.4`](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

###
[`v3.25.3`](https://togithub.com/github/codeql-action/compare/v3.25.2...v3.25.3)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.2...v3.25.3)

###
[`v3.25.2`](https://togithub.com/github/codeql-action/compare/v3.25.1...v3.25.2)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.1...v3.25.2)

###
[`v3.25.1`](https://togithub.com/github/codeql-action/compare/v3.25.0...v3.25.1)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.0...v3.25.1)

###
[`v3.25.0`](https://togithub.com/github/codeql-action/compare/v3.24.10...v3.25.0)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.11...v3.25.0)

###
[`v3.24.11`](https://togithub.com/github/codeql-action/compare/v3.24.10...v3.24.11)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.10...v3.24.11)

###
[`v3.24.10`](https://togithub.com/github/codeql-action/compare/v3.24.9...v3.24.10)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.9...v3.24.10)

###
[`v3.24.9`](https://togithub.com/github/codeql-action/compare/v3.24.8...v3.24.9)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.8...v3.24.9)

###
[`v3.24.8`](https://togithub.com/github/codeql-action/compare/v3.24.7...v3.24.8)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.7...v3.24.8)

###
[`v3.24.7`](https://togithub.com/github/codeql-action/compare/v3.24.6...v3.24.7)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.6...v3.24.7)

###
[`v3.24.6`](https://togithub.com/github/codeql-action/compare/v3.24.5...v3.24.6)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.5...v3.24.6)

###
[`v3.24.5`](https://togithub.com/github/codeql-action/compare/v3.24.4...v3.24.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.4...v3.24.5)

###
[`v3.24.4`](https://togithub.com/github/codeql-action/compare/v3.24.3...v3.24.4)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.3...v3.24.4)

###
[`v3.24.3`](https://togithub.com/github/codeql-action/compare/v3.24.2...v3.24.3)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.2...v3.24.3)

###
[`v3.24.2`](https://togithub.com/github/codeql-action/compare/v3.24.1...v3.24.2)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.1...v3.24.2)

###
[`v3.24.1`](https://togithub.com/github/codeql-action/compare/v3.24.0...v3.24.1)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.0...v3.24.1)

###
[`v3.24.0`](https://togithub.com/github/codeql-action/compare/v3.23.2...v3.24.0)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.23.2...v3.24.0)

###
[`v3.23.2`](https://togithub.com/github/codeql-action/compare/v3.23.1...v3.23.2)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.23.1...v3.23.2)

###
[`v3.23.1`](https://togithub.com/github/codeql-action/compare/v3.23.0...v3.23.1)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.23.0...v3.23.1)

###
[`v3.23.0`](https://togithub.com/github/codeql-action/compare/v3.22.12...v3.23.0)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.22.12...v3.23.0)

###
[`v3.22.12`](https://togithub.com/github/codeql-action/compare/v3.22.11...v3.22.12)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.22.11...v3.22.12)

###
[`v3.22.11`](https://togithub.com/github/codeql-action/compare/v2.22.11...v3.22.11)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.25.5...v3.22.11)

###
[`v2.25.5`](https://togithub.com/github/codeql-action/compare/v2.25.4...v2.25.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.25.4...v2.25.5)

###
[`v2.25.4`](https://togithub.com/github/codeql-action/compare/v2.25.3...v2.25.4)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.25.3...v2.25.4)

###
[`v2.25.3`](https://togithub.com/github/codeql-action/compare/v2.25.2...v2.25.3)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.25.2...v2.25.3)

###
[`v2.25.2`](https://togithub.com/github/codeql-action/compare/v2.25.1...v2.25.2)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.25.1...v2.25.2)

###
[`v2.25.1`](https://togithub.com/github/codeql-action/compare/v2.25.0...v2.25.1)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.25.0...v2.25.1)

###
[`v2.25.0`](https://togithub.com/github/codeql-action/compare/v2.24.10...v2.25.0)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.11...v2.25.0)

###
[`v2.24.11`](https://togithub.com/github/codeql-action/compare/v2.24.10...v2.24.11)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.10...v2.24.11)

###
[`v2.24.10`](https://togithub.com/github/codeql-action/compare/v2.24.9...v2.24.10)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.9...v2.24.10)

###
[`v2.24.9`](https://togithub.com/github/codeql-action/compare/v2.24.8...v2.24.9)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.8...v2.24.9)

###
[`v2.24.8`](https://togithub.com/github/codeql-action/compare/v2.24.7...v2.24.8)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.7...v2.24.8)

###
[`v2.24.7`](https://togithub.com/github/codeql-action/compare/v2.24.6...v2.24.7)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.6...v2.24.7)

###
[`v2.24.6`](https://togithub.com/github/codeql-action/compare/v2.24.5...v2.24.6)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.5...v2.24.6)

###
[`v2.24.5`](https://togithub.com/github/codeql-action/compare/v2.24.4...v2.24.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.4...v2.24.5)

###
[`v2.24.4`](https://togithub.com/github/codeql-action/compare/v2.24.3...v2.24.4)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.3...v2.24.4)

###
[`v2.24.3`](https://togithub.com/github/codeql-action/compare/v2.24.2...v2.24.3)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.2...v2.24.3)

###
[`v2.24.2`](https://togithub.com/github/codeql-action/compare/v2.24.1...v2.24.2)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.1...v2.24.2)

###
[`v2.24.1`](https://togithub.com/github/codeql-action/compare/v2.24.0...v2.24.1)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.24.0...v2.24.1)

###
[`v2.24.0`](https://togithub.com/github/codeql-action/compare/v2.23.2...v2.24.0)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.23.2...v2.24.0)

###
[`v2.23.2`](https://togithub.com/github/codeql-action/compare/v2.23.1...v2.23.2)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.23.1...v2.23.2)

###
[`v2.23.1`](https://togithub.com/github/codeql-action/compare/v2.23.0...v2.23.1)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.23.0...v2.23.1)

###
[`v2.23.0`](https://togithub.com/github/codeql-action/compare/v2.22.12...v2.23.0)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.12...v2.23.0)

###
[`v2.22.12`](https://togithub.com/github/codeql-action/compare/v2.22.11...v2.22.12)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.11...v2.22.12)

###
[`v2.22.11`](https://togithub.com/github/codeql-action/compare/v2.22.10...v2.22.11)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.10...v2.22.11)

###
[`v2.22.10`](https://togithub.com/github/codeql-action/compare/v2.22.9...v2.22.10)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.9...v2.22.10)

###
[`v2.22.9`](https://togithub.com/github/codeql-action/compare/v2.22.8...v2.22.9)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.8...v2.22.9)

###
[`v2.22.8`](https://togithub.com/github/codeql-action/compare/v2.22.7...v2.22.8)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.7...v2.22.8)

###
[`v2.22.7`](https://togithub.com/github/codeql-action/compare/v2.22.6...v2.22.7)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.6...v2.22.7)

###
[`v2.22.6`](https://togithub.com/github/codeql-action/compare/v2.22.5...v2.22.6)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.5...v2.22.6)

###
[`v2.22.5`](https://togithub.com/github/codeql-action/compare/v2.22.4...v2.22.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.22.4...v2.22.5)

</details>

<details>
<summary>google-github-actions/auth
(google-github-actions/auth)</summary>

###
[`v2.1.3`](https://togithub.com/google-github-actions/auth/releases/tag/v2.1.3)

[Compare
Source](https://togithub.com/google-github-actions/auth/compare/v2.1.2...v2.1.3)

##### What's Changed

- Security considerations: ids are strings, not integers by
[@&#8203;ewjoachim](https://togithub.com/ewjoachim) in
[https://github.com/google-github-actions/auth/pull/400](https://togithub.com/google-github-actions/auth/pull/400)
- security: bump undici from 5.28.3 to 5.28.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/google-github-actions/auth/pull/405](https://togithub.com/google-github-actions/auth/pull/405)
- Fix typo by [@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/408](https://togithub.com/google-github-actions/auth/pull/408)
- Switch to using universe helpers by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/410](https://togithub.com/google-github-actions/auth/pull/410)
- Add request_reason for plumbing though user-supplied audit information
by [@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/413](https://togithub.com/google-github-actions/auth/pull/413)
- Release: v2.1.3 by
[@&#8203;google-github-actions-bot](https://togithub.com/google-github-actions-bot)
in
[https://github.com/google-github-actions/auth/pull/414](https://togithub.com/google-github-actions/auth/pull/414)

##### New Contributors

- [@&#8203;ewjoachim](https://togithub.com/ewjoachim) made their first
contribution in
[https://github.com/google-github-actions/auth/pull/400](https://togithub.com/google-github-actions/auth/pull/400)

**Full Changelog**:
https://github.com/google-github-actions/auth/compare/v2.1.2...v2.1.3

###
[`v2.1.2`](https://togithub.com/google-github-actions/auth/releases/tag/v2.1.2)

[Compare
Source](https://togithub.com/google-github-actions/auth/compare/v2.1.1...v2.1.2)

##### What's Changed

- Remove documentation on retries (deprecated) by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/392](https://togithub.com/google-github-actions/auth/pull/392)
- Add security considerations for Attribute Conditions by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/393](https://togithub.com/google-github-actions/auth/pull/393)
- security: bump undici from 5.28.2 to 5.28.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/google-github-actions/auth/pull/394](https://togithub.com/google-github-actions/auth/pull/394)
- Reduce warnings to info level with a warning icon by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/397](https://togithub.com/google-github-actions/auth/pull/397)
- Release: v2.1.2 by
[@&#8203;google-github-actions-bot](https://togithub.com/google-github-actions-bot)
in
[https://github.com/google-github-actions/auth/pull/399](https://togithub.com/google-github-actions/auth/pull/399)

##### New Contributors

- [@&#8203;dependabot](https://togithub.com/dependabot) made their first
contribution in
[https://github.com/google-github-actions/auth/pull/394](https://togithub.com/google-github-actions/auth/pull/394)

**Full Changelog**:
https://github.com/google-github-actions/auth/compare/v2...v2.1.2

###
[`v2.1.1`](https://togithub.com/google-github-actions/auth/releases/tag/v2.1.1)

[Compare
Source](https://togithub.com/google-github-actions/auth/compare/v2.1.0...v2.1.1)

##### What's Changed

- Remove retry logic by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/389](https://togithub.com/google-github-actions/auth/pull/389)
- Use an OAuth 2.0 access token for Domain-Wide Delegation by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/388](https://togithub.com/google-github-actions/auth/pull/388)
- Release: v2.1.1 by
[@&#8203;google-github-actions-bot](https://togithub.com/google-github-actions-bot)
in
[https://github.com/google-github-actions/auth/pull/390](https://togithub.com/google-github-actions/auth/pull/390)

**Full Changelog**:
https://github.com/google-github-actions/auth/compare/v2...v2.1.1

###
[`v2.1.0`](https://togithub.com/google-github-actions/auth/releases/tag/v2.1.0)

[Compare
Source](https://togithub.com/google-github-actions/auth/compare/v2.0.1...v2.1.0)

##### What's Changed

- Update deps by [@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/384](https://togithub.com/google-github-actions/auth/pull/384)
- Release: v2.1.0 by
[@&#8203;google-github-actions-bot](https://togithub.com/google-github-actions-bot)
in
[https://github.com/google-github-actions/auth/pull/385](https://togithub.com/google-github-actions/auth/pull/385)

**Full Changelog**:
https://github.com/google-github-actions/auth/compare/v2...v2.1.0

###
[`v2.0.1`](https://togithub.com/google-github-actions/auth/releases/tag/v2.0.1)

[Compare
Source](https://togithub.com/google-github-actions/auth/compare/v2.0.0...v2.0.1)

##### What's Changed

- Trigger release on pushes to release branches by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/358](https://togithub.com/google-github-actions/auth/pull/358)
- Fix a small docs issue by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/359](https://togithub.com/google-github-actions/auth/pull/359)
- Remove broken markdown links by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/362](https://togithub.com/google-github-actions/auth/pull/362)
- Document that project_id might be required by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/367](https://togithub.com/google-github-actions/auth/pull/367)
- Update README and CI to use latest version by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/365](https://togithub.com/google-github-actions/auth/pull/365)
- Add service_account to WIF through SA example by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/369](https://togithub.com/google-github-actions/auth/pull/369)
- Use new markdown syntax for alerts by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/371](https://togithub.com/google-github-actions/auth/pull/371)
- Note .dockerignore in the exclusion for credentials by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/376](https://togithub.com/google-github-actions/auth/pull/376)
- Support newline-separated inputs for delegates and access_token_scopes
by [@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/381](https://togithub.com/google-github-actions/auth/pull/381)
- Release: v2.0.1 by
[@&#8203;google-github-actions-bot](https://togithub.com/google-github-actions-bot)
in
[https://github.com/google-github-actions/auth/pull/382](https://togithub.com/google-github-actions/auth/pull/382)

**Full Changelog**:
https://github.com/google-github-actions/auth/compare/v2...v2.0.1

###
[`v2.0.0`](https://togithub.com/google-github-actions/auth/releases/tag/v2.0.0)

[Compare
Source](https://togithub.com/google-github-actions/auth/compare/v1.3.0...v2.0.0)

**⚠️ This version requires Node 20 or later on the runner!** If you are
using GitHub-managed runners, no action is needed. If you are using
self-hosted runners, make sure the system version of Node is version 20
or higher.

##### What's Changed

- Add support for Direct Workload Identity auth by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/348](https://togithub.com/google-github-actions/auth/pull/348)
- Add protection for release branches by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/351](https://togithub.com/google-github-actions/auth/pull/351)
- Make auth universe-aware by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/352](https://togithub.com/google-github-actions/auth/pull/352)
- Fix some examples to include project_id by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/353](https://togithub.com/google-github-actions/auth/pull/353)
- Release: v2.0.0 by
[@&#8203;google-github-actions-bot](https://togithub.com/google-github-actions-bot)
in
[https://github.com/google-github-actions/auth/pull/355](https://togithub.com/google-github-actions/auth/pull/355)

**Full Changelog**:
https://github.com/google-github-actions/auth/compare/v1...v2.0.0

###
[`v1.3.0`](https://togithub.com/google-github-actions/auth/releases/tag/v1.3.0)

[Compare
Source](https://togithub.com/google-github-actions/auth/compare/v1.2.0...v1.3.0)

#### What's Changed

- Revert back to Node 16 for v1 series by
[@&#8203;sethvargo](https://togithub.com/sethvargo) in
[https://github.com/google-github-actions/auth/pull/356](https://togithub.com/google-github-actions/auth/pull/356)
- Release: v1.3.0 by
[@&#8203;google-github-actions-bot](https://togithub.com/google-github-actions-bot)
in
[https://github.com/google-github-actions/auth/pull/357](https://togithub.com/google-github-actions/auth/pull/357)

**Full Changelog**:
https://github.com/google-github-actions/auth/compare/v1...v1.3.0

###

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjMuNSIsInVwZGF0ZWRJblZlciI6IjM3LjM2My41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
rtyley added a commit to guardian/anghammarad that referenced this pull request May 24, 2024
As suggested in #209 (comment),
we want the Lambda runtime to match the Java version used by developers.

I've also updated CI to use Java 21. Ideally, we wouldn't have to do this separately
anymore, as setup-java has added partial support for asdf's .tool-versions file with
actions/setup-java#606, but unfortunately
actions/setup-java#615 means that it won't work with
Corretto version numbers.
rtyley added a commit to guardian/anghammarad that referenced this pull request May 29, 2024
As suggested in #209 (comment),
we want the Lambda runtime to match the Java version used by developers.

I've also updated CI to use Java 21. Ideally, we wouldn't have to do this separately
anymore, as setup-java has added partial support for asdf's .tool-versions file with
actions/setup-java#606, but unfortunately
actions/setup-java#615 means that it won't work with
Corretto version numbers.
rtyley added a commit to guardian/anghammarad that referenced this pull request Jun 4, 2024
As suggested in #209 (comment),
we want the Lambda runtime to match the Java version used by developers.

I've also updated CI to use Java 21. Ideally, we wouldn't have to do this separately
anymore, as setup-java has added partial support for asdf's .tool-versions file with
actions/setup-java#606, but unfortunately
actions/setup-java#615 means that it won't work with
Corretto version numbers.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants