<feed xmlns='http://www.w3.org/2005/Atom'>
<title>llvm-project.git/.github/workflows/docs.yml, branch main</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/'/>
<entry>
<title>[Github] Update GHA Dependencies (major) (#161108)</title>
<updated>2025-11-06T23:39:56+00:00</updated>
<author>
<name>Mend Renovate</name>
<email>bot@renovateapp.com</email>
</author>
<published>2025-11-06T23:39:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=2fd3bf36806b4cca0bc80f8ceb5978aa9535af02'/>
<id>2fd3bf36806b4cca0bc80f8ceb5978aa9535af02</id>
<content type='text'>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance)
| action | major | `v1.4.4` -&gt; `v3.0.0` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | major | `v4.3.0` -&gt; `v5.0.0` |
|
[actions/github-script](https://redirect.github.com/actions/github-script)
| action | major | `v7.1.0` -&gt; `v8.0.0` |
|
[actions/github-script](https://redirect.github.com/actions/github-script)
| action | major | `v6.4.1` -&gt; `v8.0.0` |
| [actions/labeler](https://redirect.github.com/actions/labeler) |
action | major | `v4.3.0` -&gt; `v6.0.1` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | major | `v4.4.0` -&gt; `v6.0.0` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | major | `v5.6.0` -&gt; `v6.0.0` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | major | `v2.28.1` -&gt; `v4.31.2` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | major | `v3.31.2` -&gt; `v4.31.2` |
| [node](https://redirect.github.com/actions/node-versions) | uses-with
| major | `18` -&gt; `24` |
|
[tj-actions/changed-files](https://redirect.github.com/tj-actions/changed-files)
| action | major | `v46.0.5` -&gt; `v47.0.0` |</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance)
| action | major | `v1.4.4` -&gt; `v3.0.0` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | major | `v4.3.0` -&gt; `v5.0.0` |
|
[actions/github-script](https://redirect.github.com/actions/github-script)
| action | major | `v7.1.0` -&gt; `v8.0.0` |
|
[actions/github-script](https://redirect.github.com/actions/github-script)
| action | major | `v6.4.1` -&gt; `v8.0.0` |
| [actions/labeler](https://redirect.github.com/actions/labeler) |
action | major | `v4.3.0` -&gt; `v6.0.1` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | major | `v4.4.0` -&gt; `v6.0.0` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | major | `v5.6.0` -&gt; `v6.0.0` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | major | `v2.28.1` -&gt; `v4.31.2` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | major | `v3.31.2` -&gt; `v4.31.2` |
| [node](https://redirect.github.com/actions/node-versions) | uses-with
| major | `18` -&gt; `24` |
|
[tj-actions/changed-files](https://redirect.github.com/tj-actions/changed-files)
| action | major | `v46.0.5` -&gt; `v47.0.0` |</pre>
</div>
</content>
</entry>
<entry>
<title>[Github] Update GitHub Artifact Actions (major) (#166112)</title>
<updated>2025-11-06T17:17:50+00:00</updated>
<author>
<name>Mend Renovate</name>
<email>bot@renovateapp.com</email>
</author>
<published>2025-11-06T17:17:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=210b9a58f68baad990a4d0b3b1a0874c700bdbc7'/>
<id>210b9a58f68baad990a4d0b3b1a0874c700bdbc7</id>
<content type='text'>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact)
| action | major | `v5.0.0` -&gt; `v6.0.0` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | major | `v4.6.2` -&gt; `v5.0.0` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | major | `4.6.2` -&gt; `5.0.0` |</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact)
| action | major | `v5.0.0` -&gt; `v6.0.0` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | major | `v4.6.2` -&gt; `v5.0.0` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | major | `4.6.2` -&gt; `5.0.0` |</pre>
</div>
</content>
</entry>
<entry>
<title>Update [Github] Update GHA Dependencies (#166111)</title>
<updated>2025-11-03T17:05:45+00:00</updated>
<author>
<name>Mend Renovate</name>
<email>bot@renovateapp.com</email>
</author>
<published>2025-11-03T17:05:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=5f0169939165c308f26585211860153aa8f0cef3'/>
<id>5f0169939165c308f26585211860153aa8f0cef3</id>
<content type='text'>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action)
| action | minor | `v2.20.0` -&gt; `v2.21.0` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `v4.6.0` -&gt; `v4.6.2` |
| [docker/login-action](https://redirect.github.com/docker/login-action)
| action | minor | `v3.5.0` -&gt; `v3.6.0` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v3.30.4` -&gt; `v3.31.2` |
| llvm/actions | action | digest | `a1ea791` -&gt; `42d8057` |
|
[ossf/scorecard-action](https://redirect.github.com/ossf/scorecard-action)
| action | patch | `v2.4.2` -&gt; `v2.4.3` |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.13` -&gt; `3.14` |</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action)
| action | minor | `v2.20.0` -&gt; `v2.21.0` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `v4.6.0` -&gt; `v4.6.2` |
| [docker/login-action](https://redirect.github.com/docker/login-action)
| action | minor | `v3.5.0` -&gt; `v3.6.0` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v3.30.4` -&gt; `v3.31.2` |
| llvm/actions | action | digest | `a1ea791` -&gt; `42d8057` |
|
[ossf/scorecard-action](https://redirect.github.com/ossf/scorecard-action)
| action | patch | `v2.4.2` -&gt; `v2.4.3` |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.13` -&gt; `3.14` |</pre>
</div>
</content>
</entry>
<entry>
<title>[Github] Update GHA Dependencies (#161107)</title>
<updated>2025-09-29T05:26:48+00:00</updated>
<author>
<name>Mend Renovate</name>
<email>bot@renovateapp.com</email>
</author>
<published>2025-09-29T05:26:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=250854d3762deecdee9e0eae0330b124c6f6a3fa'/>
<id>250854d3762deecdee9e0eae0330b124c6f6a3fa</id>
<content type='text'>
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action)
| action | digest | `170bf24` -&gt; `3a74b29` | |
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance)
| action | minor | `v1.0.0` -&gt; `v1.4.4` | |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | minor | `v4.1.1` -&gt; `v4.3.0` | |
|
[actions/github-script](https://redirect.github.com/actions/github-script)
| action | minor | `v7.0.1` -&gt; `v7.1.0` | |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | minor | `v4.2.0` -&gt; `v4.4.0` | |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | minor | `v5.4.0` -&gt; `v5.6.0` | |
| actions/setup-python | action | digest | `39cd149` -&gt; `2e3e4b1` |  |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `v4.6.0` -&gt; `v4.6.2` | |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | minor | `v4.3.3` -&gt; `v4.6.2` | |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `4.6.0` -&gt; `4.6.2` | |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | minor | `v4.3.0` -&gt; `v4.6.2` | |
| [aminya/setup-cpp](https://redirect.github.com/aminya/setup-cpp) |
action | minor | `v1.1.1` -&gt; `v1.7.1` | |
| [docker/login-action](https://redirect.github.com/docker/login-action)
| action | minor | `v3.3.0` -&gt; `v3.5.0` | |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v2.20.6` -&gt; `v2.28.1` | |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v3.30.3` -&gt; `v3.30.4` | `v3.30.5` |
|
[hendrikmuhs/ccache-action](https://redirect.github.com/hendrikmuhs/ccache-action)
| action | patch | `v1.2.17` -&gt; `v1.2.19` | |
| llvm/actions | action | digest | `22e9f90` -&gt; `a1ea791` |  |
|
[ossf/scorecard-action](https://redirect.github.com/ossf/scorecard-action)
| action | patch | `v2.4.1` -&gt; `v2.4.2` | |
|
[pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish)
| action | minor | `v1.12.4` -&gt; `v1.13.0` | |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.12` -&gt; `3.13` | |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.11` -&gt; `3.13` | |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.10` -&gt; `3.13` | |

---

&gt; [!WARNING]
&gt; Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

&lt;details&gt;
&lt;summary&gt;actions/attest-build-provenance
(actions/attest-build-provenance)&lt;/summary&gt;

###
[`v1.4.4`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.4)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.3...v1.4.4)

##### What's Changed

- Bump predicate action from 1.1.3 to 1.1.4 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;310](https://redirect.github.com/actions/attest-build-provenance/pull/310)
- Bump [@&amp;#8203;actions/core](https://redirect.github.com/actions/core)
from 1.10.1 to 1.11.1 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;275](https://redirect.github.com/actions/attest-build-provenance/pull/275)
- Bump
[@&amp;#8203;actions/attest](https://redirect.github.com/actions/attest)
from 1.4.2 to 1.5.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;309](https://redirect.github.com/actions/attest-build-provenance/pull/309)
- Fix SLSA provenance bug related to `workflow_ref` OIDC token claims
containing the "@&amp;#8203;" symbol in the tag name
([actions/toolkit#1863](https://redirect.github.com/actions/toolkit/pull/1863))

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.3...v1.4.4&gt;

###
[`v1.4.3`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.3)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.2...v1.4.3)

##### What's Changed

- Bump predicate from 1.1.2 to 1.1.3 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;226](https://redirect.github.com/actions/attest-build-provenance/pull/226)
- Bump
[@&amp;#8203;actions/attest](https://redirect.github.com/actions/attest)
from 1.3.1 to 1.4.1 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;212](https://redirect.github.com/actions/attest-build-provenance/pull/212)
- Bump
[@&amp;#8203;actions/attest](https://redirect.github.com/actions/attest)
from 1.4.1 to 1.4.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;225](https://redirect.github.com/actions/attest-build-provenance/pull/225)
- Fix bug w/ customized OIDC issuer URL for enterprise accounts
([#&amp;#8203;222](https://redirect.github.com/actions/attest-build-provenance/issues/222))

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.2...v1.4.3&gt;

###
[`v1.4.2`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.2)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.1...v1.4.2)

##### What's Changed

- Bump actions/attest from 1.4.0 to 1.4.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;209](https://redirect.github.com/actions/attest-build-provenance/pull/209)
- Includes bug fix for issue with authenticated proxies
([actions/toolkit#1798](https://redirect.github.com/actions/toolkit/issues/1798))

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.1...v1.4.2&gt;

###
[`v1.4.1`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.1)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.0...v1.4.1)

##### What's Changed

- Update predicate action to 1.1.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;197](https://redirect.github.com/actions/attest-build-provenance/pull/197)
- Dynamic construction of oidc issuer by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;195](https://redirect.github.com/actions/attest-build-provenance/pull/195)

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.0...v1.4.1&gt;

###
[`v1.4.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.3...v1.4.0)

##### What's Changed

- Bump predicate action from 1.1.0 to 1.1.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;182](https://redirect.github.com/actions/attest-build-provenance/pull/182)
  - Fix for JWKS proxy bug
- Bump actions/attest from 1.3.3 to 1.4.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;183](https://redirect.github.com/actions/attest-build-provenance/pull/183)
  - Add `show-summary` input
  - Format summary output as list

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.3...v1.4.0&gt;

###
[`v1.3.3`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.3)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.2...v1.3.3)

##### What's Changed

- Bump actions/attest from 1.3.2 to 1.3.3 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;152](https://redirect.github.com/actions/attest-build-provenance/pull/152)
- Bugfix for properly handling glob exclusion patterns in `subject-path`
input

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.2...v1.3.3&gt;

###
[`v1.3.2`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.2)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.1...v1.3.2)

##### What's Changed

- Bump actions/attest from 1.3.1 to 1.3.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;123](https://redirect.github.com/actions/attest-build-provenance/pull/123)
  - Increase timeout for OCI operations

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.1...v1.3.2&gt;

###
[`v1.3.1`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.1)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.0...v1.3.1)

##### What's Changed

- Bump actions/attest from 1.3.0 to 1.3.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;117](https://redirect.github.com/actions/attest-build-provenance/pull/117)
- Bugfix when detecting support for the referrers API with OCI
registries

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.0...v1.3.1&gt;

###
[`v1.3.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.2.0...v1.3.0)

##### What's Changed

- Bump actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;116](https://redirect.github.com/actions/attest-build-provenance/pull/116)
- Switch to new GH provenance [build
type](https://actions.github.io/buildtypes/workflow/v1)
- Bump actions/attest from 1.2.0 to 1.3.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;116](https://redirect.github.com/actions/attest-build-provenance/pull/116)
  - Dynamic construction of GitHub API URLs based on GITHUB\_SERVER\_URL
  - Improved handling of Rekor 409 responses
- Bugfix - detection of registries with support for the OCI referrers
API

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.2.0...v1.3.0&gt;

###
[`v1.2.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.2.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.1.2...v1.2.0)

##### What's Changed

- Bump actions/attest from 1.1.2 to 1.2.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;101](https://redirect.github.com/actions/attest-build-provenance/pull/101)
  - Batch processing w/ exponential backoff
  - Bugfix when pushing attestation to OCI registry

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.1.2...v1.2.0&gt;

###
[`v1.1.2`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.1.2)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.1.1...v1.1.2)

##### What's Changed

- Bump actions/attest from 1.1.1 to 1.1.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;79](https://redirect.github.com/actions/attest-build-provenance/pull/79)
  - Downcase subject name for OCI images
  - Fix accept header when retrieving image manifest
  - Support variants of the Docker Hub registry name

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.1.1...v1.1.2&gt;

###
[`v1.1.1`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.1.1)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.1.0...v1.1.1)

##### What's Changed

- Bump actions/attest from v1.1.0 to v1.1.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;67](https://redirect.github.com/actions/attest-build-provenance/pull/67)
- Bump
[@&amp;#8203;sigstore/sign](https://redirect.github.com/sigstore/sign) from
2.3.0 to 2.3.1
- Bump [@&amp;#8203;sigstore/oci](https://redirect.github.com/sigstore/oci)
from 0.3.0 to 0.3.2
  - Include more detail in error logging
  - Send API errors to GHA debug log
  - Fix bug preventing failed API requests from being retried

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.1.0...v1.1.1&gt;

###
[`v1.1.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.1.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.0.0...v1.1.0)

##### What's Changed

- Bump actions/attest to v1.1.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;65](https://redirect.github.com/actions/attest-build-provenance/pull/65)
  - adds list support for `subjectPath` input
  - limit attestation subject count
  - ensure subject globs match only files

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.0.0...v1.1.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/checkout (actions/checkout)&lt;/summary&gt;

###
[`v4.3.0`](https://redirect.github.com/actions/checkout/releases/tag/v4.3.0)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.2.2...v4.3.0)

##### What's Changed

- docs: update README.md by
[@&amp;#8203;motss](https://redirect.github.com/motss) in
[https://github.com/actions/checkout/pull/1971](https://redirect.github.com/actions/checkout/pull/1971)
- Add internal repos for checking out multiple repositories by
[@&amp;#8203;mouismail](https://redirect.github.com/mouismail) in
[https://github.com/actions/checkout/pull/1977](https://redirect.github.com/actions/checkout/pull/1977)
- Documentation update - add recommended permissions to Readme by
[@&amp;#8203;benwells](https://redirect.github.com/benwells) in
[https://github.com/actions/checkout/pull/2043](https://redirect.github.com/actions/checkout/pull/2043)
- Adjust positioning of user email note and permissions heading by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[https://github.com/actions/checkout/pull/2044](https://redirect.github.com/actions/checkout/pull/2044)
- Update README.md by
[@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) in
[https://github.com/actions/checkout/pull/2194](https://redirect.github.com/actions/checkout/pull/2194)
- Update CODEOWNERS for actions by
[@&amp;#8203;TingluoHuang](https://redirect.github.com/TingluoHuang) in
[https://github.com/actions/checkout/pull/2224](https://redirect.github.com/actions/checkout/pull/2224)
- Update package dependencies by
[@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[https://github.com/actions/checkout/pull/2236](https://redirect.github.com/actions/checkout/pull/2236)
- Prepare release v4.3.0 by
[@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[https://github.com/actions/checkout/pull/2237](https://redirect.github.com/actions/checkout/pull/2237)

##### New Contributors

- [@&amp;#8203;motss](https://redirect.github.com/motss) made their first
contribution in
[https://github.com/actions/checkout/pull/1971](https://redirect.github.com/actions/checkout/pull/1971)
- [@&amp;#8203;mouismail](https://redirect.github.com/mouismail) made their
first contribution in
[https://github.com/actions/checkout/pull/1977](https://redirect.github.com/actions/checkout/pull/1977)
- [@&amp;#8203;benwells](https://redirect.github.com/benwells) made their
first contribution in
[https://github.com/actions/checkout/pull/2043](https://redirect.github.com/actions/checkout/pull/2043)
- [@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) made their
first contribution in
[https://github.com/actions/checkout/pull/2194](https://redirect.github.com/actions/checkout/pull/2194)
- [@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their
first contribution in
[https://github.com/actions/checkout/pull/2236](https://redirect.github.com/actions/checkout/pull/2236)

**Full Changelog**:
https://github.com/actions/checkout/compare/v4...v4.3.0

###
[`v4.2.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.2.1...v4.2.2)

- `url-helper.ts` now leverages well-known environment variables by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1941](https://redirect.github.com/actions/checkout/pull/1941)
- Expand unit test coverage for `isGhes` by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1946](https://redirect.github.com/actions/checkout/pull/1946)

###
[`v4.2.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.2.0...v4.2.1)

- Check out other refs/\* by commit if provided, fall back to ref by
[@&amp;#8203;orhantoy](https://redirect.github.com/orhantoy) in
[#&amp;#8203;1924](https://redirect.github.com/actions/checkout/pull/1924)

###
[`v4.2.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.7...v4.2.0)

- Add Ref and Commit outputs by
[@&amp;#8203;lucacome](https://redirect.github.com/lucacome) in
[#&amp;#8203;1180](https://redirect.github.com/actions/checkout/pull/1180)
- Dependency updates by
[@&amp;#8203;dependabot-](https://redirect.github.com/dependabot-)
[#&amp;#8203;1777](https://redirect.github.com/actions/checkout/pull/1777),
[#&amp;#8203;1872](https://redirect.github.com/actions/checkout/pull/1872)

###
[`v4.1.7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.6...v4.1.7)

- Bump the minor-npm-dependencies group across 1 directory with 4
updates by [@&amp;#8203;dependabot](https://redirect.github.com/dependabot)
in
[#&amp;#8203;1739](https://redirect.github.com/actions/checkout/pull/1739)
- Bump actions/checkout from 3 to 4 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1697](https://redirect.github.com/actions/checkout/pull/1697)
- Check out other refs/\* by commit by
[@&amp;#8203;orhantoy](https://redirect.github.com/orhantoy) in
[#&amp;#8203;1774](https://redirect.github.com/actions/checkout/pull/1774)
- Pin actions/checkout's own workflows to a known, good, stable version.
by [@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1776](https://redirect.github.com/actions/checkout/pull/1776)

###
[`v4.1.6`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.5...v4.1.6)

- Check platform to set archive extension appropriately by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1732](https://redirect.github.com/actions/checkout/pull/1732)

###
[`v4.1.5`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.4...v4.1.5)

- Update NPM dependencies by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1703](https://redirect.github.com/actions/checkout/pull/1703)
- Bump github/codeql-action from 2 to 3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1694](https://redirect.github.com/actions/checkout/pull/1694)
- Bump actions/setup-node from 1 to 4 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1696](https://redirect.github.com/actions/checkout/pull/1696)
- Bump actions/upload-artifact from 2 to 4 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1695](https://redirect.github.com/actions/checkout/pull/1695)
- README: Suggest `user.email` to be
`41898282+github-actions[bot]@&amp;#8203;users.noreply.github.com` by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1707](https://redirect.github.com/actions/checkout/pull/1707)

###
[`v4.1.4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.3...v4.1.4)

- Disable `extensions.worktreeConfig` when disabling `sparse-checkout`
by [@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1692](https://redirect.github.com/actions/checkout/pull/1692)
- Add dependabot config by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1688](https://redirect.github.com/actions/checkout/pull/1688)
- Bump the minor-actions-dependencies group with 2 updates by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1693](https://redirect.github.com/actions/checkout/pull/1693)
- Bump word-wrap from 1.2.3 to 1.2.5 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1643](https://redirect.github.com/actions/checkout/pull/1643)

###
[`v4.1.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.2...v4.1.3)

- Check git version before attempting to disable `sparse-checkout` by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1656](https://redirect.github.com/actions/checkout/pull/1656)
- Add SSH user parameter by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1685](https://redirect.github.com/actions/checkout/pull/1685)
- Update `actions/checkout` version in `update-main-version.yml` by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1650](https://redirect.github.com/actions/checkout/pull/1650)

###
[`v4.1.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.1...v4.1.2)

- Fix: Disable sparse checkout whenever `sparse-checkout` option is not
present [@&amp;#8203;dscho](https://redirect.github.com/dscho) in
[#&amp;#8203;1598](https://redirect.github.com/actions/checkout/pull/1598)

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/github-script (actions/github-script)&lt;/summary&gt;

###
[`v7.1.0`](https://redirect.github.com/actions/github-script/releases/tag/v7.1.0)

[Compare
Source](https://redirect.github.com/actions/github-script/compare/v7.0.1...v7.1.0)

#### What's Changed

- Upgrade husky to v9 by
[@&amp;#8203;benelan](https://redirect.github.com/benelan) in
[#&amp;#8203;482](https://redirect.github.com/actions/github-script/pull/482)
- Add workflow file for publishing releases to immutable action package
by [@&amp;#8203;Jcambass](https://redirect.github.com/Jcambass) in
[#&amp;#8203;485](https://redirect.github.com/actions/github-script/pull/485)
- Upgrade IA Publish by
[@&amp;#8203;Jcambass](https://redirect.github.com/Jcambass) in
[#&amp;#8203;486](https://redirect.github.com/actions/github-script/pull/486)
- Fix workflow status badges by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;497](https://redirect.github.com/actions/github-script/pull/497)
- Update usage of `actions/upload-artifact` by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;512](https://redirect.github.com/actions/github-script/pull/512)
- Clear up package name confusion by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;514](https://redirect.github.com/actions/github-script/pull/514)
- Update dependencies with `npm audit fix` by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;515](https://redirect.github.com/actions/github-script/pull/515)
- Specify that the used script is JavaScript by
[@&amp;#8203;timotk](https://redirect.github.com/timotk) in
[#&amp;#8203;478](https://redirect.github.com/actions/github-script/pull/478)
- chore: Add Dependabot for NPM and Actions by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;472](https://redirect.github.com/actions/github-script/pull/472)
- Define `permissions` in workflows and update actions by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;531](https://redirect.github.com/actions/github-script/pull/531)
- chore: Add Dependabot for .github/actions/install-dependencies by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;532](https://redirect.github.com/actions/github-script/pull/532)
- chore: Remove .vscode settings by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;533](https://redirect.github.com/actions/github-script/pull/533)
- ci: Use github/setup-licensed by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;473](https://redirect.github.com/actions/github-script/pull/473)
- make octokit instance available as octokit on top of github, to make
it easier to seamlessly copy examples from GitHub rest api or octokit
documentations by
[@&amp;#8203;iamstarkov](https://redirect.github.com/iamstarkov) in
[#&amp;#8203;508](https://redirect.github.com/actions/github-script/pull/508)
- Remove `octokit` README updates for v7 by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;557](https://redirect.github.com/actions/github-script/pull/557)
- docs: add "exec" usage examples by
[@&amp;#8203;neilime](https://redirect.github.com/neilime) in
[#&amp;#8203;546](https://redirect.github.com/actions/github-script/pull/546)
- Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&amp;#8203;563](https://redirect.github.com/actions/github-script/pull/563)
- Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&amp;#8203;575](https://redirect.github.com/actions/github-script/pull/575)
- Clearly document passing inputs to the `script` by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;603](https://redirect.github.com/actions/github-script/pull/603)
- Update README.md by
[@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) in
[#&amp;#8203;610](https://redirect.github.com/actions/github-script/pull/610)

#### New Contributors

- [@&amp;#8203;benelan](https://redirect.github.com/benelan) made their
first contribution in
[#&amp;#8203;482](https://redirect.github.com/actions/github-script/pull/482)
- [@&amp;#8203;Jcambass](https://redirect.github.com/Jcambass) made their
first contribution in
[#&amp;#8203;485](https://redirect.github.com/actions/github-script/pull/485)
- [@&amp;#8203;timotk](https://redirect.github.com/timotk) made their first
contribution in
[#&amp;#8203;478](https://redirect.github.com/actions/github-script/pull/478)
- [@&amp;#8203;iamstarkov](https://redirect.github.com/iamstarkov) made
their first contribution in
[#&amp;#8203;508](https://redirect.github.com/actions/github-script/pull/508)
- [@&amp;#8203;neilime](https://redirect.github.com/neilime) made their
first contribution in
[#&amp;#8203;546](https://redirect.github.com/actions/github-script/pull/546)
- [@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) made their
first contribution in
[#&amp;#8203;610](https://redirect.github.com/actions/github-script/pull/610)

**Full Changelog**:
&lt;https://github.com/actions/github-script/compare/v7...v7.1.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/setup-node (actions/setup-node)&lt;/summary&gt;

###
[`v4.4.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.4.0)

[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v4.3.0...v4.4.0)

##### What's Changed

##### Bug fixes:

- Make eslint-compact matcher compatible with Stylelint by
[@&amp;#8203;FloEdelmann](https://redirect.github.com/FloEdelmann)
in [#&amp;#8203;98](https://redirect.github.com/actions/setup-node/pull/98)
- Add support for indented eslint output by
[@&amp;#8203;fregante](https://redirect.github.com/fregante)
in [#&amp;#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245)

##### Enhancement:

- Support private mirrors by
[@&amp;#8203;marco-ippolito](https://redirect.github.com/marco-ippolito)
in [#&amp;#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240)

##### Dependency update:

- Upgrade
[@&amp;#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.2 to 4.0.3
by [@&amp;#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y)
in [#&amp;#8203;1262](https://redirect.github.com/actions/setup-node/pull/1262)

##### New Contributors

- [@&amp;#8203;FloEdelmann](https://redirect.github.com/FloEdelmann) made
their first contribution
in [#&amp;#8203;98](https://redirect.github.com/actions/setup-node/pull/98)
- [@&amp;#8203;fregante](https://redirect.github.com/fregante) made their
first contribution
in [#&amp;#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245)
- [@&amp;#8203;marco-ippolito](https://redirect.github.com/marco-ippolito)
made their first contribution
in [#&amp;#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240)

**Full
Changelog**: &lt;https://github.com/actions/setup-node/compare/v4...v4.4.0&gt;

###
[`v4.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.3.0)

[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v4.2.0...v4.3.0)

#### What's Changed

##### Dependency updates

- Upgrade
[@&amp;#8203;actions/glob](https://redirect.github.com/actions/glob) from
0.4.0 to 0.5.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1200](https://redirect.github.com/actions/setup-node/pull/1200)
- Upgrade
[@&amp;#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.0 to 4.0.2 by
[@&amp;#8203;gowridurgad](https://redirect.github.com/gowridurgad) in
[#&amp;#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251)
- Upgrade [@&amp;#8203;vercel/ncc](https://redirect.github.com/vercel/ncc)
from 0.38.1 to 0.38.3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1203](https://redirect.github.com/actions/setup-node/pull/1203)
- Upgrade
[@&amp;#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache)
from 2.0.1 to 2.0.2 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1220](https://redirect.github.com/actions/setup-node/pull/1220)

#### New Contributors

- [@&amp;#8203;gowridurgad](https://redirect.github.com/gowridurgad) made
their first contribution in
[#&amp;#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251)

**Full Changelog**:
&lt;https://github.com/actions/setup-node/compare/v4...v4.3.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/setup-python (actions/setup-python)&lt;/summary&gt;

###
[`v5.6.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.6.0)

[Compare
Source](https://redirect.github.com/actions/setup-python/compare/v5.5.0...v5.6.0)

##### What's Changed

- Workflow updates related to Ubuntu 20.04 by
[@&amp;#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&amp;#8203;1065](https://redirect.github.com/actions/setup-python/pull/1065)
- Fix for Candidate Not Iterable Error by
[@&amp;#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&amp;#8203;1082](https://redirect.github.com/actions/setup-python/pull/1082)
- Upgrade semver and
[@&amp;#8203;types/semver](https://redirect.github.com/types/semver) by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1091](https://redirect.github.com/actions/setup-python/pull/1091)
- Upgrade prettier from 2.8.8 to 3.5.3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1046](https://redirect.github.com/actions/setup-python/pull/1046)
- Upgrade ts-jest from 29.1.2 to 29.3.2 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1081](https://redirect.github.com/actions/setup-python/pull/1081)

**Full Changelog**:
&lt;https://github.com/actions/setup-python/compare/v5...v5.6.0&gt;

###
[`v5.5.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.5.0)

[Compare
Source](https://redirect.github.com/actions/setup-python/compare/v5.4.0...v5.5.0)

#### What's Changed

##### Enhancements:

- Support free threaded Python versions like '3.13t' by
[@&amp;#8203;colesbury](https://redirect.github.com/colesbury) in
[#&amp;#8203;973](https://redirect.github.com/actions/setup-python/pull/973)
- Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for
free threaded and Upgrade
[@&amp;#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.0 to 4.0.3 by
[@&amp;#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in
[#&amp;#8203;1056](https://redirect.github.com/actions/setup-python/pull/1056)
- Add support for .tool-versions file in setup-python by
[@&amp;#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars) in
[#&amp;#8203;1043](https://redirect.github.com/actions/setup-python/pull/1043)

##### Bug fixes:

- Fix architecture for pypy on Linux ARM64 by
[@&amp;#8203;mayeut](https://redirect.github.com/mayeut) in
[#&amp;#8203;1011](https://redirect.github.com/actions/setup-python/pull/1011)
  This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

##### Dependency updates:

- Upgrade [@&amp;#8203;vercel/ncc](https://redirect.github.com/vercel/ncc)
from 0.38.1 to 0.38.3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1016](https://redirect.github.com/actions/setup-python/pull/1016)
- Upgrade
[@&amp;#8203;actions/glob](https://redirect.github.com/actions/glob) from
0.4.0 to 0.5.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1015](https://redirect.github.com/actions/setup-python/pull/1015)

#### New Contributors

- [@&amp;#8203;colesbury](https://redirect.github.com/colesbury) made their
first contribution in
[#&amp;#8203;973](https://redirect.github.com/actions/setup-python/pull/973)
- [@&amp;#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars)
made their first contribution in
[#&amp;#8203;1043](https://redirect.github.com/actions/setup-python/pull/1043)

**Full Changelog**:
&lt;https://github.com/actions/setup-python/compare/v5...v5.5.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/upload-artifact (actions/upload-artifact)&lt;/summary&gt;

###
[`v4.6.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.2)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.1...v4.6.2)

#### What's Changed

- Update to use artifact 2.3.2 package &amp; prepare for new upload-artifact
release by [@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[#&amp;#8203;685](https://redirect.github.com/actions/upload-artifact/pull/685)

#### New Contributors

- [@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their
first contribution in
[#&amp;#8203;685](https://redirect.github.com/actions/upload-artifact/pull/685)

**Full Changelog**:
&lt;https://github.com/actions/upload-artifact/compare/v4...v4.6.2&gt;

###
[`v4.6.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.1)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.0...v4.6.1)

#### What's Changed

- Update to use artifact 2.2.2 package by
[@&amp;#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in
[#&amp;#8203;673](https://redirect.github.com/actions/upload-artifact/pull/673)

**Full Changelog**:
&lt;https://github.com/actions/upload-artifact/compare/v4...v4.6.1&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;aminya/setup-cpp (aminya/setup-cpp)&lt;/summary&gt;

###
[`v1.7.1`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.7.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.7.0...v1.7.1)

##### What's Changed

- fix: prefer complete Window LLVM package
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;425](https://redirect.github.com/aminya/setup-cpp/pull/425)
- fix: add LLVM 20.1.7 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;424](https://redirect.github.com/aminya/setup-cpp/pull/424)
- fix: add mingw 15.1-r2 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;424](https://redirect.github.com/aminya/setup-cpp/pull/424)
- fix: install gcovr via apt on Ubuntu by default by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;424](https://redirect.github.com/aminya/setup-cpp/pull/424)
- feat: add tar tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;425](https://redirect.github.com/aminya/setup-cpp/pull/425)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.7.0...v1.7.1&gt;

###
[`v1.7.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.7.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.2...v1.7.0)

##### What's Changed

- feat: update default LLVM to v20 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;387](https://redirect.github.com/aminya/setup-cpp/pull/387)
- feat: default to GCC 15 on Windows and MacOS by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;387](https://redirect.github.com/aminya/setup-cpp/pull/387)
- fix: update cmake, task, powershell, meson, doxygen by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;414](https://redirect.github.com/aminya/setup-cpp/pull/414)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.6.2...v1.7.0&gt;

###
[`v1.6.2`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.6.2)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.1...v1.6.2)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.6.1...v1.6.2&gt;

###
[`v1.6.1`](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.0...v1.6.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.0...v1.6.1)

###
[`v1.6.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.6.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.4...v1.6.0)

##### What's Changed

- feat: add apt-fast as an installable tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;401](https://redirect.github.com/aminya/setup-cpp/pull/401)
- fix: add apt-fast optimizations by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;402](https://redirect.github.com/aminya/setup-cpp/pull/402)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.4...v1.6.0&gt;

###
[`v1.5.4`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.4)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.3...v1.5.4)

##### What's Changed

- fix: avoid rc sourcing loops + fix: always add guards for sourcing rc
files by [@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;397](https://redirect.github.com/aminya/setup-cpp/pull/397)
- [fix: add missing git option for
actions](https://redirect.github.com/aminya/setup-cpp/commit/d0235b0adb97722c83c6f48ccfad4c98c083c0e4)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: ignore setup-cpp cli installation
errors](https://redirect.github.com/aminya/setup-cpp/commit/d10f4b6db061e4bd794e409852bc38e33cc5e4a6)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: fix addition of git to PATH on
Windows](https://redirect.github.com/aminya/setup-cpp/commit/75890615f7a4d1f3833f0f9008be852b0a1b256a)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: fix add-apt-repository in
Debian](https://redirect.github.com/aminya/setup-cpp/commit/55f022dea4b4667ba75821264c21fc8121bd3f06)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: fix llvm add-apt-repository for
debian](https://redirect.github.com/aminya/setup-cpp/commit/05bd2b5297d0c94ccbd895c9e7f35a5b88dbdee8)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.3...v1.5.4&gt;

###
[`v1.5.3`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.3)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.2...v1.5.3)

- fix: remove exports map from package by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[7f46810eeda56](https://redirect.github.com/aminya/setup-cpp/commit/6370aaa0252a93c71dcc4cf49397f46810eeda56)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.2...v1.5.3&gt;

###
[`v1.5.2`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.2)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.1...v1.5.2)

- fix: fix CLI shabang not working - independent lib by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[c88b4364ef50](https://redirect.github.com/aminya/setup-cpp/commit/95a7de4f2eceb0baf03a70a1edb7c88b4364ef50)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.1...v1.5.2&gt;

###
[`v1.5.1`](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.0...v1.5.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.0...v1.5.1)

###
[`v1.5.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.4.0...v1.5.0)

##### What's Changed

- feat: allow using setup-cpp as a library by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;386](https://redirect.github.com/aminya/setup-cpp/pull/386)
- fix: pin vcpkg on Alpine Arm64 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;389](https://redirect.github.com/aminya/setup-cpp/pull/389)
- fix: do not add LLVM libraries to dyld by default by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;388](https://redirect.github.com/aminya/setup-cpp/pull/388)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.4.0...v1.5.0&gt;

###
[`v1.4.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.4.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.3.0...v1.4.0)

##### What's Changed

- 🎉 feat: support Alpine + add setup-alpine package by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;379](https://redirect.github.com/aminya/setup-cpp/pull/379)
- ci: add docker tags with the base platform versions by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;381](https://redirect.github.com/aminya/setup-cpp/pull/381)
(e.g. `setup-cpp-ubuntu:20.04`)
- fix: detect externally managed Python to avoid warnings by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;379](https://redirect.github.com/aminya/setup-cpp/pull/379)

##### Alpine Images (amd64 and arm64)

Setup-cpp now provides prebuilt images for Alpine with support for base
tools, and compilers `llvm`, `gcc`, and `mingw` available for `amd64`
and `arm64` architectures.

Base image with `cmake, ninja, task, vcpkg, python, make, cppcheck,
gcovr, doxygen, ccache, conan, meson, cmakelang` for Alpine:

```dockerfile
FROM aminya/setup-cpp-alpine:3.21 AS builder
```

Image with `llvm` and the base tools:

```dockerfile
FROM aminya/setup-cpp-alpine-llvm:3.21 AS builder
```

Image with `gcc` and the base tools:

```dockerfile
FROM aminya/setup-cpp-alpine-gcc:3.21 AS builder
```

Image with `mingw` and the base tools:

```dockerfile
FROM aminya/setup-cpp-alpine-mingw:3.21 AS builder
```

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.3.0...v1.4.0&gt;

###
[`v1.3.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.3.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.2.2...v1.3.0)

##### What's Changed

- feat: add Ubuntu 20 and 24 docker builds by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;375](https://redirect.github.com/aminya/setup-cpp/pull/375)
- fix: fix python installation on Ubuntu 20 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;375](https://redirect.github.com/aminya/setup-cpp/pull/375)
- chore(deps): update devdependencies by
[@&amp;#8203;renovate](https://redirect.github.com/renovate) in
[#&amp;#8203;376](https://redirect.github.com/aminya/setup-cpp/pull/376)

##### Breaking changes for Ubuntu Docker images

The `latest` tag for `setup-cpp` on Docker now points to Ubuntu `24.04`.
Please pin the specific version if needed:

Base image with `cmake, ninja, task, vcpkg, python, make, cppcheck,
gcovr, doxygen, ccache, conan, meson, cmakelang` for Ubuntu 24.04:

```dockerfile
FROM aminya/setup-cpp-ubuntu:24.04-1.3.0 AS builder
```

Image with `llvm` and the base tools:

```dockerfile
FROM aminya/setup-cpp-ubuntu-llvm:24.04-1.3.0 AS builder
```

Image with `gcc` and the base tools:

```dockerfile
FROM aminya/setup-cpp-ubuntu-gcc:24.04-1.3.0 AS builder
```

Image with `mingw` and the base tools:

```dockerfile
FROM aminya/setup-cpp-ubuntu-mingw:24.04-1.3.0 AS builder
```

There are also the variants for Ubuntu `22.04`

```dockerfile
FROM aminya/setup-cpp-ubuntu:22.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-llvm:22.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-gcc:22.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-mingw:22.04-1.3.0 AS builder
```

And for Ubuntu `20.04`:

```dockerfile
FROM aminya/setup-cpp-ubuntu:20.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-llvm:20.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-gcc:20.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-mingw:20.04-1.3.0 AS builder
```

Note that `nala` is no longer included in the setup-cpp images by
default. You can install it manually via `setup-cpp --nala true` in your
Docker image if you rely on it.

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.2.2...v1.3.0&gt;

###
[`v1.2.2`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.2.2)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.2.1...v1.2.2)

##### What's Changed

- 🎉 ci: tests and executables for Linux arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)
- fix apt installation fallbacks to latest by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)
- fix old LLVM on latest Ubuntu arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)
- feat: install sccache on latest ubuntu arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;373](https://redirect.github.com/aminya/setup-cpp/pull/373)
- fix Doxygen on Linux Arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.2.1...v1.2.2&gt;

###
[`v1.2.1`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.2.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.2.0...v1.2.1)

##### What's Changed

- 🎉 feat: add multi-architecture Docker images for setup-cpp by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;361](https://redirect.github.com/aminya/setup-cpp/pull/361)
- 🎉 feat: install LLVM via brew on Mac if possible by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;367](https://redirect.github.com/aminya/setup-cpp/pull/367) and
[#&amp;#8203;364](https://redirect.github.com/aminya/setup-cpp/pull/364)
- 🎉 fix: avoid already installed warnings for brew by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;369](https://redirect.github.com/aminya/setup-cpp/pull/369)
- feat: add git as an installable tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;362](https://redirect.github.com/aminya/setup-cpp/pull/362)
- fix: add polyfill for crypto.randomuuid for Node 12 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;368](https://redirect.github.com/aminya/setup-cpp/pull/368) and
[#&amp;#8203;370](https://redirect.github.com/aminya/setup-cpp/pull/370)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.1.1...v1.2.0&gt;

###
[`v1.2.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.2.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.1.1...v1.2.0)

##### What's Changed

Note: superseded by v1.2.1

- feat: add multi-architecture Docker images for setup-cpp by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;361](https://redirect.github.com/aminya/setup-cpp/pull/361)
- feat: install LLVM via brew on Mac if possible by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;367](https://redirect.github.com/aminya/setup-cpp/pull/367) and
[#&amp;#8203;364](https://redirect.github.com/aminya/setup-cpp/pull/364)
- feat: add git as an installable tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;362](https://redirect.github.com/aminya/setup-cpp/pull/362)
- fix: avoid already installed warnings for brew by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;369](https://redirect.github.com/aminya/setup-cpp/pull/369)
- fix: add polyfill for crypto.randomuuid for Node 12 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;368](https://redirect.github.com/aminya/setup-cpp/pull/368) and
[#&amp;#8203;370](https://redirect.github.com/aminya/setup-cpp/pull/370)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.1.1...v1.2.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;docker/login-action (docker/login-action)&lt;/summary&gt;

###
[`v3.5.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.5.0)

[Compare
Source](https://redirect.github.com/docker/login-action/compare/v3.4.0...v3.5.0)

- Support dual-stack endpoints for AWS ECR by
[@&amp;#8203;Spacefish](https://redirect.github.com/Spacefish)
[@&amp;#8203;crazy-max](https://redirect.github.com/crazy-max) in
[#&amp;#8203;874](https://redirect.github.com/docker/login-action/pull/874)
[#&amp;#8203;876](https://redirect.github.com/docker/login-action/pull/876)
- Bump
[@&amp;#8203;aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr)
to 3.859.0 in
[#&amp;#8203;860](https://redirect.github.com/docker/login-action/pull/860)
[#&amp;#8203;878](https://redirect.github.com/docker/login-action/pull/878)
- Bump
[@&amp;#8203;aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public)
to 3.859.0 in
[#&amp;#8203;860](https://redirect.github.com/docker/login-action/pull/860)
[#&amp;#8203;878](https://redirect.github.com/docker/login-action/pull/878)
- Bump
[@&amp;#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
from 0.57.0 to 0.62.1 in
[#&amp;#8203;870](https://redirect.github.com/docker/login-action/pull/870)
- Bump form-data from 2.5.1 to 2.5.5 in
[#&amp;#8203;875](https://redirect.github.com/docker/login-action/pull/875)

**Full Changelog**:
&lt;https://github.com/docker/login-action/compare/v3.4.0...v3.5.0&gt;

###
[`v3.4.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.4.0)

[Compare
Source](https://redirect.github.com/docker/login-action/compare/v3.3.0...v3.4.0)

- Bump [@&amp;#8203;actions/core](https://redirect.github.com/actions/core)
from 1.10.1 to 1.11.1 in
[#&amp;#8203;791](https://redirect.github.com/docker/login-action/pull/791)
- Bump
[@&amp;#8203;aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr)
to 3.766.0 in
[#&amp;#8203;789](https://redirect.github.com/docker/login-action/pull/789)
[#&amp;#8203;856](https://redirect.github.com/docker/login-action/pull/856)
- Bump
[@&amp;#8203;aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public)
to 3.758.0 in
[#&amp;#8203;789](https://redirect.github.com/docker/login-action/pull/789)
[#&amp;#8203;856](https://redirect.github.com/docker/login-action/pull/856)
- Bump
[@&amp;#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
from 0.35.0 to 0.57.0 in
[#&amp;#8203;801](https://redirect.github.com/docker/login-action/pull/801)
[#&amp;#8203;806](https://redirect.github.com/docker/login-action/pull/806)
[#&amp;#8203;858](https://redirect.github.com/docker/login-action/pull/858)
- Bump cross-spawn from 7.0.3 to 7.0.6 in
[#&amp;#8203;814](https://redirect.github.com/docker/login-action/pull/814)
- Bump https-proxy-agent from 7.0.5 to 7.0.6 in
[#&amp;#8203;823](https://redirect.github.com/docker/login-action/pull/823)
- Bump path-to-regexp from 6.2.2 to 6.3.0 in
[#&amp;#8203;777](https://redirect.github.com/docker/login-action/pull/777)

**Full Changelog**:
&lt;https://github.com/docker/login-action/compare/v3.3.0...v3.4.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;github/codeql-action (github/codeql-action)&lt;/summary&gt;

###
[`v2.28.1`](https://redirect.github.com/github/codeql-action/releases/tag/v2.28.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.28.0...v2.28.1)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

**This is the last planned release of the `v2`. To continue getting
updates for the CodeQL Action, please switch to `v3`.**

#### 2.28.1 - 10 Jan 2025

- CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see [this changelog
post](https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/).
[#&amp;#8203;2677](https://redirect.github.com/github/codeql-action/pull/2677)
- Update default CodeQL bundle version to 2.20.1.
[#&amp;#8203;2678](https://redirect.github.com/github/codeql-action/pull/2678)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.28.1/CHANGELOG.md)
for more information.

###
[`v2.28.0`](https://redirect.github.com/github/codeql-action/releases/tag/v2.28.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.9...v2.28.0)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

**This is the last planned release of the `v2`. To continue getting
updates for the CodeQL Action, please switch to `v3`.**

#### 2.28.0 - 20 Dec 2024

- Bump the minimum CodeQL bundle version to 2.15.5.
[#&amp;#8203;2655](https://redirect.github.com/github/codeql-action/pull/2655)
- Don't fail in the unusual case that a file is on the search path.
[#&amp;#8203;2660](https://redirect.github.com/github/codeql-action/pull/2660).

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.28.0/CHANGELOG.md)
for more information.

###
[`v2.27.9`](https://redirect.github.com/github/codeql-action/releases/tag/v2.27.9)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.8...v2.27.9)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

#### 2.27.9 - 12 Dec 2024

No user facing changes.

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.27.9/CHANGELOG.md)
for more information.

###
[`v2.27.8`](https://redirect.github.com/github/codeql-action/compare/v2.27.7...v2.27.8)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.7...v2.27.8)

###
[`v2.27.7`](https://redirect.github.com/github/codeql-action/releases/tag/v2.27.7)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.6...v2.27.7)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

#### 2.27.7 - 10 Dec 2024

- We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance.
[#&amp;#8203;2631](https://redirect.github.com/github/codeql-action/pull/2631)
- Update default CodeQL bundle version to 2.20.0.
[#&amp;#8203;2636](https://redirect.github.com/github/codeql-action/pull/2636)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.27.7/CHANGELOG.md)
for more information.

###
[`v2.27.6`](https://redirect.github.com/github/codeql-action/releases/tag/v2

&lt;/details&gt;

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 12:59 AM, only on
Monday ( * 0 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] &lt;!-- rebase-check --&gt;If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/llvm/llvm-project).

&lt;!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzEuOSIsInVwZGF0ZWRJblZlciI6IjQxLjEzMS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action)
| action | digest | `170bf24` -&gt; `3a74b29` | |
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance)
| action | minor | `v1.0.0` -&gt; `v1.4.4` | |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | minor | `v4.1.1` -&gt; `v4.3.0` | |
|
[actions/github-script](https://redirect.github.com/actions/github-script)
| action | minor | `v7.0.1` -&gt; `v7.1.0` | |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | minor | `v4.2.0` -&gt; `v4.4.0` | |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | minor | `v5.4.0` -&gt; `v5.6.0` | |
| actions/setup-python | action | digest | `39cd149` -&gt; `2e3e4b1` |  |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `v4.6.0` -&gt; `v4.6.2` | |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | minor | `v4.3.3` -&gt; `v4.6.2` | |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `4.6.0` -&gt; `4.6.2` | |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | minor | `v4.3.0` -&gt; `v4.6.2` | |
| [aminya/setup-cpp](https://redirect.github.com/aminya/setup-cpp) |
action | minor | `v1.1.1` -&gt; `v1.7.1` | |
| [docker/login-action](https://redirect.github.com/docker/login-action)
| action | minor | `v3.3.0` -&gt; `v3.5.0` | |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v2.20.6` -&gt; `v2.28.1` | |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v3.30.3` -&gt; `v3.30.4` | `v3.30.5` |
|
[hendrikmuhs/ccache-action](https://redirect.github.com/hendrikmuhs/ccache-action)
| action | patch | `v1.2.17` -&gt; `v1.2.19` | |
| llvm/actions | action | digest | `22e9f90` -&gt; `a1ea791` |  |
|
[ossf/scorecard-action](https://redirect.github.com/ossf/scorecard-action)
| action | patch | `v2.4.1` -&gt; `v2.4.2` | |
|
[pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish)
| action | minor | `v1.12.4` -&gt; `v1.13.0` | |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.12` -&gt; `3.13` | |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.11` -&gt; `3.13` | |
| [python](https://redirect.github.com/actions/python-versions) |
uses-with | minor | `3.10` -&gt; `3.13` | |

---

&gt; [!WARNING]
&gt; Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

&lt;details&gt;
&lt;summary&gt;actions/attest-build-provenance
(actions/attest-build-provenance)&lt;/summary&gt;

###
[`v1.4.4`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.4)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.3...v1.4.4)

##### What's Changed

- Bump predicate action from 1.1.3 to 1.1.4 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;310](https://redirect.github.com/actions/attest-build-provenance/pull/310)
- Bump [@&amp;#8203;actions/core](https://redirect.github.com/actions/core)
from 1.10.1 to 1.11.1 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;275](https://redirect.github.com/actions/attest-build-provenance/pull/275)
- Bump
[@&amp;#8203;actions/attest](https://redirect.github.com/actions/attest)
from 1.4.2 to 1.5.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;309](https://redirect.github.com/actions/attest-build-provenance/pull/309)
- Fix SLSA provenance bug related to `workflow_ref` OIDC token claims
containing the "@&amp;#8203;" symbol in the tag name
([actions/toolkit#1863](https://redirect.github.com/actions/toolkit/pull/1863))

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.3...v1.4.4&gt;

###
[`v1.4.3`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.3)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.2...v1.4.3)

##### What's Changed

- Bump predicate from 1.1.2 to 1.1.3 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;226](https://redirect.github.com/actions/attest-build-provenance/pull/226)
- Bump
[@&amp;#8203;actions/attest](https://redirect.github.com/actions/attest)
from 1.3.1 to 1.4.1 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;212](https://redirect.github.com/actions/attest-build-provenance/pull/212)
- Bump
[@&amp;#8203;actions/attest](https://redirect.github.com/actions/attest)
from 1.4.1 to 1.4.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;225](https://redirect.github.com/actions/attest-build-provenance/pull/225)
- Fix bug w/ customized OIDC issuer URL for enterprise accounts
([#&amp;#8203;222](https://redirect.github.com/actions/attest-build-provenance/issues/222))

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.2...v1.4.3&gt;

###
[`v1.4.2`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.2)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.1...v1.4.2)

##### What's Changed

- Bump actions/attest from 1.4.0 to 1.4.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;209](https://redirect.github.com/actions/attest-build-provenance/pull/209)
- Includes bug fix for issue with authenticated proxies
([actions/toolkit#1798](https://redirect.github.com/actions/toolkit/issues/1798))

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.1...v1.4.2&gt;

###
[`v1.4.1`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.1)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.0...v1.4.1)

##### What's Changed

- Update predicate action to 1.1.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;197](https://redirect.github.com/actions/attest-build-provenance/pull/197)
- Dynamic construction of oidc issuer by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;195](https://redirect.github.com/actions/attest-build-provenance/pull/195)

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.4.0...v1.4.1&gt;

###
[`v1.4.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.3...v1.4.0)

##### What's Changed

- Bump predicate action from 1.1.0 to 1.1.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;182](https://redirect.github.com/actions/attest-build-provenance/pull/182)
  - Fix for JWKS proxy bug
- Bump actions/attest from 1.3.3 to 1.4.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;183](https://redirect.github.com/actions/attest-build-provenance/pull/183)
  - Add `show-summary` input
  - Format summary output as list

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.3...v1.4.0&gt;

###
[`v1.3.3`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.3)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.2...v1.3.3)

##### What's Changed

- Bump actions/attest from 1.3.2 to 1.3.3 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;152](https://redirect.github.com/actions/attest-build-provenance/pull/152)
- Bugfix for properly handling glob exclusion patterns in `subject-path`
input

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.2...v1.3.3&gt;

###
[`v1.3.2`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.2)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.1...v1.3.2)

##### What's Changed

- Bump actions/attest from 1.3.1 to 1.3.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;123](https://redirect.github.com/actions/attest-build-provenance/pull/123)
  - Increase timeout for OCI operations

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.1...v1.3.2&gt;

###
[`v1.3.1`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.1)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.3.0...v1.3.1)

##### What's Changed

- Bump actions/attest from 1.3.0 to 1.3.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;117](https://redirect.github.com/actions/attest-build-provenance/pull/117)
- Bugfix when detecting support for the referrers API with OCI
registries

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.3.0...v1.3.1&gt;

###
[`v1.3.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.3.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.2.0...v1.3.0)

##### What's Changed

- Bump actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;116](https://redirect.github.com/actions/attest-build-provenance/pull/116)
- Switch to new GH provenance [build
type](https://actions.github.io/buildtypes/workflow/v1)
- Bump actions/attest from 1.2.0 to 1.3.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;116](https://redirect.github.com/actions/attest-build-provenance/pull/116)
  - Dynamic construction of GitHub API URLs based on GITHUB\_SERVER\_URL
  - Improved handling of Rekor 409 responses
- Bugfix - detection of registries with support for the OCI referrers
API

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.2.0...v1.3.0&gt;

###
[`v1.2.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.2.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.1.2...v1.2.0)

##### What's Changed

- Bump actions/attest from 1.1.2 to 1.2.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;101](https://redirect.github.com/actions/attest-build-provenance/pull/101)
  - Batch processing w/ exponential backoff
  - Bugfix when pushing attestation to OCI registry

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.1.2...v1.2.0&gt;

###
[`v1.1.2`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.1.2)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.1.1...v1.1.2)

##### What's Changed

- Bump actions/attest from 1.1.1 to 1.1.2 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;79](https://redirect.github.com/actions/attest-build-provenance/pull/79)
  - Downcase subject name for OCI images
  - Fix accept header when retrieving image manifest
  - Support variants of the Docker Hub registry name

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.1.1...v1.1.2&gt;

###
[`v1.1.1`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.1.1)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.1.0...v1.1.1)

##### What's Changed

- Bump actions/attest from v1.1.0 to v1.1.1 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;67](https://redirect.github.com/actions/attest-build-provenance/pull/67)
- Bump
[@&amp;#8203;sigstore/sign](https://redirect.github.com/sigstore/sign) from
2.3.0 to 2.3.1
- Bump [@&amp;#8203;sigstore/oci](https://redirect.github.com/sigstore/oci)
from 0.3.0 to 0.3.2
  - Include more detail in error logging
  - Send API errors to GHA debug log
  - Fix bug preventing failed API requests from being retried

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.1.0...v1.1.1&gt;

###
[`v1.1.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.1.0)

[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.0.0...v1.1.0)

##### What's Changed

- Bump actions/attest to v1.1.0 by
[@&amp;#8203;bdehamer](https://redirect.github.com/bdehamer) in
[#&amp;#8203;65](https://redirect.github.com/actions/attest-build-provenance/pull/65)
  - adds list support for `subjectPath` input
  - limit attestation subject count
  - ensure subject globs match only files

**Full Changelog**:
&lt;https://github.com/actions/attest-build-provenance/compare/v1.0.0...v1.1.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/checkout (actions/checkout)&lt;/summary&gt;

###
[`v4.3.0`](https://redirect.github.com/actions/checkout/releases/tag/v4.3.0)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.2.2...v4.3.0)

##### What's Changed

- docs: update README.md by
[@&amp;#8203;motss](https://redirect.github.com/motss) in
[https://github.com/actions/checkout/pull/1971](https://redirect.github.com/actions/checkout/pull/1971)
- Add internal repos for checking out multiple repositories by
[@&amp;#8203;mouismail](https://redirect.github.com/mouismail) in
[https://github.com/actions/checkout/pull/1977](https://redirect.github.com/actions/checkout/pull/1977)
- Documentation update - add recommended permissions to Readme by
[@&amp;#8203;benwells](https://redirect.github.com/benwells) in
[https://github.com/actions/checkout/pull/2043](https://redirect.github.com/actions/checkout/pull/2043)
- Adjust positioning of user email note and permissions heading by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[https://github.com/actions/checkout/pull/2044](https://redirect.github.com/actions/checkout/pull/2044)
- Update README.md by
[@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) in
[https://github.com/actions/checkout/pull/2194](https://redirect.github.com/actions/checkout/pull/2194)
- Update CODEOWNERS for actions by
[@&amp;#8203;TingluoHuang](https://redirect.github.com/TingluoHuang) in
[https://github.com/actions/checkout/pull/2224](https://redirect.github.com/actions/checkout/pull/2224)
- Update package dependencies by
[@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[https://github.com/actions/checkout/pull/2236](https://redirect.github.com/actions/checkout/pull/2236)
- Prepare release v4.3.0 by
[@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[https://github.com/actions/checkout/pull/2237](https://redirect.github.com/actions/checkout/pull/2237)

##### New Contributors

- [@&amp;#8203;motss](https://redirect.github.com/motss) made their first
contribution in
[https://github.com/actions/checkout/pull/1971](https://redirect.github.com/actions/checkout/pull/1971)
- [@&amp;#8203;mouismail](https://redirect.github.com/mouismail) made their
first contribution in
[https://github.com/actions/checkout/pull/1977](https://redirect.github.com/actions/checkout/pull/1977)
- [@&amp;#8203;benwells](https://redirect.github.com/benwells) made their
first contribution in
[https://github.com/actions/checkout/pull/2043](https://redirect.github.com/actions/checkout/pull/2043)
- [@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) made their
first contribution in
[https://github.com/actions/checkout/pull/2194](https://redirect.github.com/actions/checkout/pull/2194)
- [@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their
first contribution in
[https://github.com/actions/checkout/pull/2236](https://redirect.github.com/actions/checkout/pull/2236)

**Full Changelog**:
https://github.com/actions/checkout/compare/v4...v4.3.0

###
[`v4.2.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.2.1...v4.2.2)

- `url-helper.ts` now leverages well-known environment variables by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1941](https://redirect.github.com/actions/checkout/pull/1941)
- Expand unit test coverage for `isGhes` by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1946](https://redirect.github.com/actions/checkout/pull/1946)

###
[`v4.2.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.2.0...v4.2.1)

- Check out other refs/\* by commit if provided, fall back to ref by
[@&amp;#8203;orhantoy](https://redirect.github.com/orhantoy) in
[#&amp;#8203;1924](https://redirect.github.com/actions/checkout/pull/1924)

###
[`v4.2.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.7...v4.2.0)

- Add Ref and Commit outputs by
[@&amp;#8203;lucacome](https://redirect.github.com/lucacome) in
[#&amp;#8203;1180](https://redirect.github.com/actions/checkout/pull/1180)
- Dependency updates by
[@&amp;#8203;dependabot-](https://redirect.github.com/dependabot-)
[#&amp;#8203;1777](https://redirect.github.com/actions/checkout/pull/1777),
[#&amp;#8203;1872](https://redirect.github.com/actions/checkout/pull/1872)

###
[`v4.1.7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.6...v4.1.7)

- Bump the minor-npm-dependencies group across 1 directory with 4
updates by [@&amp;#8203;dependabot](https://redirect.github.com/dependabot)
in
[#&amp;#8203;1739](https://redirect.github.com/actions/checkout/pull/1739)
- Bump actions/checkout from 3 to 4 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1697](https://redirect.github.com/actions/checkout/pull/1697)
- Check out other refs/\* by commit by
[@&amp;#8203;orhantoy](https://redirect.github.com/orhantoy) in
[#&amp;#8203;1774](https://redirect.github.com/actions/checkout/pull/1774)
- Pin actions/checkout's own workflows to a known, good, stable version.
by [@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1776](https://redirect.github.com/actions/checkout/pull/1776)

###
[`v4.1.6`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.5...v4.1.6)

- Check platform to set archive extension appropriately by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1732](https://redirect.github.com/actions/checkout/pull/1732)

###
[`v4.1.5`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.4...v4.1.5)

- Update NPM dependencies by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1703](https://redirect.github.com/actions/checkout/pull/1703)
- Bump github/codeql-action from 2 to 3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1694](https://redirect.github.com/actions/checkout/pull/1694)
- Bump actions/setup-node from 1 to 4 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1696](https://redirect.github.com/actions/checkout/pull/1696)
- Bump actions/upload-artifact from 2 to 4 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1695](https://redirect.github.com/actions/checkout/pull/1695)
- README: Suggest `user.email` to be
`41898282+github-actions[bot]@&amp;#8203;users.noreply.github.com` by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1707](https://redirect.github.com/actions/checkout/pull/1707)

###
[`v4.1.4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.3...v4.1.4)

- Disable `extensions.worktreeConfig` when disabling `sparse-checkout`
by [@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1692](https://redirect.github.com/actions/checkout/pull/1692)
- Add dependabot config by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1688](https://redirect.github.com/actions/checkout/pull/1688)
- Bump the minor-actions-dependencies group with 2 updates by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1693](https://redirect.github.com/actions/checkout/pull/1693)
- Bump word-wrap from 1.2.3 to 1.2.5 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1643](https://redirect.github.com/actions/checkout/pull/1643)

###
[`v4.1.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v413)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.2...v4.1.3)

- Check git version before attempting to disable `sparse-checkout` by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1656](https://redirect.github.com/actions/checkout/pull/1656)
- Add SSH user parameter by
[@&amp;#8203;cory-miller](https://redirect.github.com/cory-miller) in
[#&amp;#8203;1685](https://redirect.github.com/actions/checkout/pull/1685)
- Update `actions/checkout` version in `update-main-version.yml` by
[@&amp;#8203;jww3](https://redirect.github.com/jww3) in
[#&amp;#8203;1650](https://redirect.github.com/actions/checkout/pull/1650)

###
[`v4.1.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.1.1...v4.1.2)

- Fix: Disable sparse checkout whenever `sparse-checkout` option is not
present [@&amp;#8203;dscho](https://redirect.github.com/dscho) in
[#&amp;#8203;1598](https://redirect.github.com/actions/checkout/pull/1598)

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/github-script (actions/github-script)&lt;/summary&gt;

###
[`v7.1.0`](https://redirect.github.com/actions/github-script/releases/tag/v7.1.0)

[Compare
Source](https://redirect.github.com/actions/github-script/compare/v7.0.1...v7.1.0)

#### What's Changed

- Upgrade husky to v9 by
[@&amp;#8203;benelan](https://redirect.github.com/benelan) in
[#&amp;#8203;482](https://redirect.github.com/actions/github-script/pull/482)
- Add workflow file for publishing releases to immutable action package
by [@&amp;#8203;Jcambass](https://redirect.github.com/Jcambass) in
[#&amp;#8203;485](https://redirect.github.com/actions/github-script/pull/485)
- Upgrade IA Publish by
[@&amp;#8203;Jcambass](https://redirect.github.com/Jcambass) in
[#&amp;#8203;486](https://redirect.github.com/actions/github-script/pull/486)
- Fix workflow status badges by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;497](https://redirect.github.com/actions/github-script/pull/497)
- Update usage of `actions/upload-artifact` by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;512](https://redirect.github.com/actions/github-script/pull/512)
- Clear up package name confusion by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;514](https://redirect.github.com/actions/github-script/pull/514)
- Update dependencies with `npm audit fix` by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;515](https://redirect.github.com/actions/github-script/pull/515)
- Specify that the used script is JavaScript by
[@&amp;#8203;timotk](https://redirect.github.com/timotk) in
[#&amp;#8203;478](https://redirect.github.com/actions/github-script/pull/478)
- chore: Add Dependabot for NPM and Actions by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;472](https://redirect.github.com/actions/github-script/pull/472)
- Define `permissions` in workflows and update actions by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;531](https://redirect.github.com/actions/github-script/pull/531)
- chore: Add Dependabot for .github/actions/install-dependencies by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;532](https://redirect.github.com/actions/github-script/pull/532)
- chore: Remove .vscode settings by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;533](https://redirect.github.com/actions/github-script/pull/533)
- ci: Use github/setup-licensed by
[@&amp;#8203;nschonni](https://redirect.github.com/nschonni) in
[#&amp;#8203;473](https://redirect.github.com/actions/github-script/pull/473)
- make octokit instance available as octokit on top of github, to make
it easier to seamlessly copy examples from GitHub rest api or octokit
documentations by
[@&amp;#8203;iamstarkov](https://redirect.github.com/iamstarkov) in
[#&amp;#8203;508](https://redirect.github.com/actions/github-script/pull/508)
- Remove `octokit` README updates for v7 by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;557](https://redirect.github.com/actions/github-script/pull/557)
- docs: add "exec" usage examples by
[@&amp;#8203;neilime](https://redirect.github.com/neilime) in
[#&amp;#8203;546](https://redirect.github.com/actions/github-script/pull/546)
- Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&amp;#8203;563](https://redirect.github.com/actions/github-script/pull/563)
- Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&amp;#8203;575](https://redirect.github.com/actions/github-script/pull/575)
- Clearly document passing inputs to the `script` by
[@&amp;#8203;joshmgross](https://redirect.github.com/joshmgross) in
[#&amp;#8203;603](https://redirect.github.com/actions/github-script/pull/603)
- Update README.md by
[@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) in
[#&amp;#8203;610](https://redirect.github.com/actions/github-script/pull/610)

#### New Contributors

- [@&amp;#8203;benelan](https://redirect.github.com/benelan) made their
first contribution in
[#&amp;#8203;482](https://redirect.github.com/actions/github-script/pull/482)
- [@&amp;#8203;Jcambass](https://redirect.github.com/Jcambass) made their
first contribution in
[#&amp;#8203;485](https://redirect.github.com/actions/github-script/pull/485)
- [@&amp;#8203;timotk](https://redirect.github.com/timotk) made their first
contribution in
[#&amp;#8203;478](https://redirect.github.com/actions/github-script/pull/478)
- [@&amp;#8203;iamstarkov](https://redirect.github.com/iamstarkov) made
their first contribution in
[#&amp;#8203;508](https://redirect.github.com/actions/github-script/pull/508)
- [@&amp;#8203;neilime](https://redirect.github.com/neilime) made their
first contribution in
[#&amp;#8203;546](https://redirect.github.com/actions/github-script/pull/546)
- [@&amp;#8203;nebuk89](https://redirect.github.com/nebuk89) made their
first contribution in
[#&amp;#8203;610](https://redirect.github.com/actions/github-script/pull/610)

**Full Changelog**:
&lt;https://github.com/actions/github-script/compare/v7...v7.1.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/setup-node (actions/setup-node)&lt;/summary&gt;

###
[`v4.4.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.4.0)

[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v4.3.0...v4.4.0)

##### What's Changed

##### Bug fixes:

- Make eslint-compact matcher compatible with Stylelint by
[@&amp;#8203;FloEdelmann](https://redirect.github.com/FloEdelmann)
in [#&amp;#8203;98](https://redirect.github.com/actions/setup-node/pull/98)
- Add support for indented eslint output by
[@&amp;#8203;fregante](https://redirect.github.com/fregante)
in [#&amp;#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245)

##### Enhancement:

- Support private mirrors by
[@&amp;#8203;marco-ippolito](https://redirect.github.com/marco-ippolito)
in [#&amp;#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240)

##### Dependency update:

- Upgrade
[@&amp;#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.2 to 4.0.3
by [@&amp;#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y)
in [#&amp;#8203;1262](https://redirect.github.com/actions/setup-node/pull/1262)

##### New Contributors

- [@&amp;#8203;FloEdelmann](https://redirect.github.com/FloEdelmann) made
their first contribution
in [#&amp;#8203;98](https://redirect.github.com/actions/setup-node/pull/98)
- [@&amp;#8203;fregante](https://redirect.github.com/fregante) made their
first contribution
in [#&amp;#8203;1245](https://redirect.github.com/actions/setup-node/pull/1245)
- [@&amp;#8203;marco-ippolito](https://redirect.github.com/marco-ippolito)
made their first contribution
in [#&amp;#8203;1240](https://redirect.github.com/actions/setup-node/pull/1240)

**Full
Changelog**: &lt;https://github.com/actions/setup-node/compare/v4...v4.4.0&gt;

###
[`v4.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v4.3.0)

[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v4.2.0...v4.3.0)

#### What's Changed

##### Dependency updates

- Upgrade
[@&amp;#8203;actions/glob](https://redirect.github.com/actions/glob) from
0.4.0 to 0.5.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1200](https://redirect.github.com/actions/setup-node/pull/1200)
- Upgrade
[@&amp;#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.0 to 4.0.2 by
[@&amp;#8203;gowridurgad](https://redirect.github.com/gowridurgad) in
[#&amp;#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251)
- Upgrade [@&amp;#8203;vercel/ncc](https://redirect.github.com/vercel/ncc)
from 0.38.1 to 0.38.3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1203](https://redirect.github.com/actions/setup-node/pull/1203)
- Upgrade
[@&amp;#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache)
from 2.0.1 to 2.0.2 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1220](https://redirect.github.com/actions/setup-node/pull/1220)

#### New Contributors

- [@&amp;#8203;gowridurgad](https://redirect.github.com/gowridurgad) made
their first contribution in
[#&amp;#8203;1251](https://redirect.github.com/actions/setup-node/pull/1251)

**Full Changelog**:
&lt;https://github.com/actions/setup-node/compare/v4...v4.3.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/setup-python (actions/setup-python)&lt;/summary&gt;

###
[`v5.6.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.6.0)

[Compare
Source](https://redirect.github.com/actions/setup-python/compare/v5.5.0...v5.6.0)

##### What's Changed

- Workflow updates related to Ubuntu 20.04 by
[@&amp;#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&amp;#8203;1065](https://redirect.github.com/actions/setup-python/pull/1065)
- Fix for Candidate Not Iterable Error by
[@&amp;#8203;aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#&amp;#8203;1082](https://redirect.github.com/actions/setup-python/pull/1082)
- Upgrade semver and
[@&amp;#8203;types/semver](https://redirect.github.com/types/semver) by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1091](https://redirect.github.com/actions/setup-python/pull/1091)
- Upgrade prettier from 2.8.8 to 3.5.3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1046](https://redirect.github.com/actions/setup-python/pull/1046)
- Upgrade ts-jest from 29.1.2 to 29.3.2 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1081](https://redirect.github.com/actions/setup-python/pull/1081)

**Full Changelog**:
&lt;https://github.com/actions/setup-python/compare/v5...v5.6.0&gt;

###
[`v5.5.0`](https://redirect.github.com/actions/setup-python/releases/tag/v5.5.0)

[Compare
Source](https://redirect.github.com/actions/setup-python/compare/v5.4.0...v5.5.0)

#### What's Changed

##### Enhancements:

- Support free threaded Python versions like '3.13t' by
[@&amp;#8203;colesbury](https://redirect.github.com/colesbury) in
[#&amp;#8203;973](https://redirect.github.com/actions/setup-python/pull/973)
- Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for
free threaded and Upgrade
[@&amp;#8203;action/cache](https://redirect.github.com/action/cache) from
4.0.0 to 4.0.3 by
[@&amp;#8203;priya-kinthali](https://redirect.github.com/priya-kinthali) in
[#&amp;#8203;1056](https://redirect.github.com/actions/setup-python/pull/1056)
- Add support for .tool-versions file in setup-python by
[@&amp;#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars) in
[#&amp;#8203;1043](https://redirect.github.com/actions/setup-python/pull/1043)

##### Bug fixes:

- Fix architecture for pypy on Linux ARM64 by
[@&amp;#8203;mayeut](https://redirect.github.com/mayeut) in
[#&amp;#8203;1011](https://redirect.github.com/actions/setup-python/pull/1011)
  This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

##### Dependency updates:

- Upgrade [@&amp;#8203;vercel/ncc](https://redirect.github.com/vercel/ncc)
from 0.38.1 to 0.38.3 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1016](https://redirect.github.com/actions/setup-python/pull/1016)
- Upgrade
[@&amp;#8203;actions/glob](https://redirect.github.com/actions/glob) from
0.4.0 to 0.5.0 by
[@&amp;#8203;dependabot](https://redirect.github.com/dependabot) in
[#&amp;#8203;1015](https://redirect.github.com/actions/setup-python/pull/1015)

#### New Contributors

- [@&amp;#8203;colesbury](https://redirect.github.com/colesbury) made their
first contribution in
[#&amp;#8203;973](https://redirect.github.com/actions/setup-python/pull/973)
- [@&amp;#8203;mahabaleshwars](https://redirect.github.com/mahabaleshwars)
made their first contribution in
[#&amp;#8203;1043](https://redirect.github.com/actions/setup-python/pull/1043)

**Full Changelog**:
&lt;https://github.com/actions/setup-python/compare/v5...v5.5.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;actions/upload-artifact (actions/upload-artifact)&lt;/summary&gt;

###
[`v4.6.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.2)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.1...v4.6.2)

#### What's Changed

- Update to use artifact 2.3.2 package &amp; prepare for new upload-artifact
release by [@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) in
[#&amp;#8203;685](https://redirect.github.com/actions/upload-artifact/pull/685)

#### New Contributors

- [@&amp;#8203;salmanmkc](https://redirect.github.com/salmanmkc) made their
first contribution in
[#&amp;#8203;685](https://redirect.github.com/actions/upload-artifact/pull/685)

**Full Changelog**:
&lt;https://github.com/actions/upload-artifact/compare/v4...v4.6.2&gt;

###
[`v4.6.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.1)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.0...v4.6.1)

#### What's Changed

- Update to use artifact 2.2.2 package by
[@&amp;#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in
[#&amp;#8203;673](https://redirect.github.com/actions/upload-artifact/pull/673)

**Full Changelog**:
&lt;https://github.com/actions/upload-artifact/compare/v4...v4.6.1&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;aminya/setup-cpp (aminya/setup-cpp)&lt;/summary&gt;

###
[`v1.7.1`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.7.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.7.0...v1.7.1)

##### What's Changed

- fix: prefer complete Window LLVM package
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;425](https://redirect.github.com/aminya/setup-cpp/pull/425)
- fix: add LLVM 20.1.7 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;424](https://redirect.github.com/aminya/setup-cpp/pull/424)
- fix: add mingw 15.1-r2 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;424](https://redirect.github.com/aminya/setup-cpp/pull/424)
- fix: install gcovr via apt on Ubuntu by default by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;424](https://redirect.github.com/aminya/setup-cpp/pull/424)
- feat: add tar tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;425](https://redirect.github.com/aminya/setup-cpp/pull/425)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.7.0...v1.7.1&gt;

###
[`v1.7.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.7.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.2...v1.7.0)

##### What's Changed

- feat: update default LLVM to v20 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;387](https://redirect.github.com/aminya/setup-cpp/pull/387)
- feat: default to GCC 15 on Windows and MacOS by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;387](https://redirect.github.com/aminya/setup-cpp/pull/387)
- fix: update cmake, task, powershell, meson, doxygen by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;414](https://redirect.github.com/aminya/setup-cpp/pull/414)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.6.2...v1.7.0&gt;

###
[`v1.6.2`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.6.2)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.1...v1.6.2)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.6.1...v1.6.2&gt;

###
[`v1.6.1`](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.0...v1.6.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.6.0...v1.6.1)

###
[`v1.6.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.6.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.4...v1.6.0)

##### What's Changed

- feat: add apt-fast as an installable tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;401](https://redirect.github.com/aminya/setup-cpp/pull/401)
- fix: add apt-fast optimizations by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;402](https://redirect.github.com/aminya/setup-cpp/pull/402)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.4...v1.6.0&gt;

###
[`v1.5.4`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.4)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.3...v1.5.4)

##### What's Changed

- fix: avoid rc sourcing loops + fix: always add guards for sourcing rc
files by [@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;397](https://redirect.github.com/aminya/setup-cpp/pull/397)
- [fix: add missing git option for
actions](https://redirect.github.com/aminya/setup-cpp/commit/d0235b0adb97722c83c6f48ccfad4c98c083c0e4)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: ignore setup-cpp cli installation
errors](https://redirect.github.com/aminya/setup-cpp/commit/d10f4b6db061e4bd794e409852bc38e33cc5e4a6)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: fix addition of git to PATH on
Windows](https://redirect.github.com/aminya/setup-cpp/commit/75890615f7a4d1f3833f0f9008be852b0a1b256a)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: fix add-apt-repository in
Debian](https://redirect.github.com/aminya/setup-cpp/commit/55f022dea4b4667ba75821264c21fc8121bd3f06)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)
- [fix: fix llvm add-apt-repository for
debian](https://redirect.github.com/aminya/setup-cpp/commit/05bd2b5297d0c94ccbd895c9e7f35a5b88dbdee8)
by [@&amp;#8203;aminya](https://redirect.github.com/aminya)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.3...v1.5.4&gt;

###
[`v1.5.3`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.3)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.2...v1.5.3)

- fix: remove exports map from package by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[7f46810eeda56](https://redirect.github.com/aminya/setup-cpp/commit/6370aaa0252a93c71dcc4cf49397f46810eeda56)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.2...v1.5.3&gt;

###
[`v1.5.2`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.2)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.1...v1.5.2)

- fix: fix CLI shabang not working - independent lib by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[c88b4364ef50](https://redirect.github.com/aminya/setup-cpp/commit/95a7de4f2eceb0baf03a70a1edb7c88b4364ef50)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.5.1...v1.5.2&gt;

###
[`v1.5.1`](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.0...v1.5.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.5.0...v1.5.1)

###
[`v1.5.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.5.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.4.0...v1.5.0)

##### What's Changed

- feat: allow using setup-cpp as a library by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;386](https://redirect.github.com/aminya/setup-cpp/pull/386)
- fix: pin vcpkg on Alpine Arm64 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;389](https://redirect.github.com/aminya/setup-cpp/pull/389)
- fix: do not add LLVM libraries to dyld by default by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;388](https://redirect.github.com/aminya/setup-cpp/pull/388)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.4.0...v1.5.0&gt;

###
[`v1.4.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.4.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.3.0...v1.4.0)

##### What's Changed

- 🎉 feat: support Alpine + add setup-alpine package by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;379](https://redirect.github.com/aminya/setup-cpp/pull/379)
- ci: add docker tags with the base platform versions by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;381](https://redirect.github.com/aminya/setup-cpp/pull/381)
(e.g. `setup-cpp-ubuntu:20.04`)
- fix: detect externally managed Python to avoid warnings by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;379](https://redirect.github.com/aminya/setup-cpp/pull/379)

##### Alpine Images (amd64 and arm64)

Setup-cpp now provides prebuilt images for Alpine with support for base
tools, and compilers `llvm`, `gcc`, and `mingw` available for `amd64`
and `arm64` architectures.

Base image with `cmake, ninja, task, vcpkg, python, make, cppcheck,
gcovr, doxygen, ccache, conan, meson, cmakelang` for Alpine:

```dockerfile
FROM aminya/setup-cpp-alpine:3.21 AS builder
```

Image with `llvm` and the base tools:

```dockerfile
FROM aminya/setup-cpp-alpine-llvm:3.21 AS builder
```

Image with `gcc` and the base tools:

```dockerfile
FROM aminya/setup-cpp-alpine-gcc:3.21 AS builder
```

Image with `mingw` and the base tools:

```dockerfile
FROM aminya/setup-cpp-alpine-mingw:3.21 AS builder
```

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.3.0...v1.4.0&gt;

###
[`v1.3.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.3.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.2.2...v1.3.0)

##### What's Changed

- feat: add Ubuntu 20 and 24 docker builds by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;375](https://redirect.github.com/aminya/setup-cpp/pull/375)
- fix: fix python installation on Ubuntu 20 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;375](https://redirect.github.com/aminya/setup-cpp/pull/375)
- chore(deps): update devdependencies by
[@&amp;#8203;renovate](https://redirect.github.com/renovate) in
[#&amp;#8203;376](https://redirect.github.com/aminya/setup-cpp/pull/376)

##### Breaking changes for Ubuntu Docker images

The `latest` tag for `setup-cpp` on Docker now points to Ubuntu `24.04`.
Please pin the specific version if needed:

Base image with `cmake, ninja, task, vcpkg, python, make, cppcheck,
gcovr, doxygen, ccache, conan, meson, cmakelang` for Ubuntu 24.04:

```dockerfile
FROM aminya/setup-cpp-ubuntu:24.04-1.3.0 AS builder
```

Image with `llvm` and the base tools:

```dockerfile
FROM aminya/setup-cpp-ubuntu-llvm:24.04-1.3.0 AS builder
```

Image with `gcc` and the base tools:

```dockerfile
FROM aminya/setup-cpp-ubuntu-gcc:24.04-1.3.0 AS builder
```

Image with `mingw` and the base tools:

```dockerfile
FROM aminya/setup-cpp-ubuntu-mingw:24.04-1.3.0 AS builder
```

There are also the variants for Ubuntu `22.04`

```dockerfile
FROM aminya/setup-cpp-ubuntu:22.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-llvm:22.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-gcc:22.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-mingw:22.04-1.3.0 AS builder
```

And for Ubuntu `20.04`:

```dockerfile
FROM aminya/setup-cpp-ubuntu:20.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-llvm:20.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-gcc:20.04-1.3.0 AS builder
FROM aminya/setup-cpp-ubuntu-mingw:20.04-1.3.0 AS builder
```

Note that `nala` is no longer included in the setup-cpp images by
default. You can install it manually via `setup-cpp --nala true` in your
Docker image if you rely on it.

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.2.2...v1.3.0&gt;

###
[`v1.2.2`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.2.2)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.2.1...v1.2.2)

##### What's Changed

- 🎉 ci: tests and executables for Linux arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)
- fix apt installation fallbacks to latest by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)
- fix old LLVM on latest Ubuntu arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)
- feat: install sccache on latest ubuntu arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;373](https://redirect.github.com/aminya/setup-cpp/pull/373)
- fix Doxygen on Linux Arm by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;363](https://redirect.github.com/aminya/setup-cpp/pull/363)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.2.1...v1.2.2&gt;

###
[`v1.2.1`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.2.1)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.2.0...v1.2.1)

##### What's Changed

- 🎉 feat: add multi-architecture Docker images for setup-cpp by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;361](https://redirect.github.com/aminya/setup-cpp/pull/361)
- 🎉 feat: install LLVM via brew on Mac if possible by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;367](https://redirect.github.com/aminya/setup-cpp/pull/367) and
[#&amp;#8203;364](https://redirect.github.com/aminya/setup-cpp/pull/364)
- 🎉 fix: avoid already installed warnings for brew by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;369](https://redirect.github.com/aminya/setup-cpp/pull/369)
- feat: add git as an installable tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;362](https://redirect.github.com/aminya/setup-cpp/pull/362)
- fix: add polyfill for crypto.randomuuid for Node 12 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;368](https://redirect.github.com/aminya/setup-cpp/pull/368) and
[#&amp;#8203;370](https://redirect.github.com/aminya/setup-cpp/pull/370)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.1.1...v1.2.0&gt;

###
[`v1.2.0`](https://redirect.github.com/aminya/setup-cpp/releases/tag/v1.2.0)

[Compare
Source](https://redirect.github.com/aminya/setup-cpp/compare/v1.1.1...v1.2.0)

##### What's Changed

Note: superseded by v1.2.1

- feat: add multi-architecture Docker images for setup-cpp by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;361](https://redirect.github.com/aminya/setup-cpp/pull/361)
- feat: install LLVM via brew on Mac if possible by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;367](https://redirect.github.com/aminya/setup-cpp/pull/367) and
[#&amp;#8203;364](https://redirect.github.com/aminya/setup-cpp/pull/364)
- feat: add git as an installable tool by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;362](https://redirect.github.com/aminya/setup-cpp/pull/362)
- fix: avoid already installed warnings for brew by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;369](https://redirect.github.com/aminya/setup-cpp/pull/369)
- fix: add polyfill for crypto.randomuuid for Node 12 by
[@&amp;#8203;aminya](https://redirect.github.com/aminya) in
[#&amp;#8203;368](https://redirect.github.com/aminya/setup-cpp/pull/368) and
[#&amp;#8203;370](https://redirect.github.com/aminya/setup-cpp/pull/370)

**Full Changelog**:
&lt;https://github.com/aminya/setup-cpp/compare/v1.1.1...v1.2.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;docker/login-action (docker/login-action)&lt;/summary&gt;

###
[`v3.5.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.5.0)

[Compare
Source](https://redirect.github.com/docker/login-action/compare/v3.4.0...v3.5.0)

- Support dual-stack endpoints for AWS ECR by
[@&amp;#8203;Spacefish](https://redirect.github.com/Spacefish)
[@&amp;#8203;crazy-max](https://redirect.github.com/crazy-max) in
[#&amp;#8203;874](https://redirect.github.com/docker/login-action/pull/874)
[#&amp;#8203;876](https://redirect.github.com/docker/login-action/pull/876)
- Bump
[@&amp;#8203;aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr)
to 3.859.0 in
[#&amp;#8203;860](https://redirect.github.com/docker/login-action/pull/860)
[#&amp;#8203;878](https://redirect.github.com/docker/login-action/pull/878)
- Bump
[@&amp;#8203;aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public)
to 3.859.0 in
[#&amp;#8203;860](https://redirect.github.com/docker/login-action/pull/860)
[#&amp;#8203;878](https://redirect.github.com/docker/login-action/pull/878)
- Bump
[@&amp;#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
from 0.57.0 to 0.62.1 in
[#&amp;#8203;870](https://redirect.github.com/docker/login-action/pull/870)
- Bump form-data from 2.5.1 to 2.5.5 in
[#&amp;#8203;875](https://redirect.github.com/docker/login-action/pull/875)

**Full Changelog**:
&lt;https://github.com/docker/login-action/compare/v3.4.0...v3.5.0&gt;

###
[`v3.4.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.4.0)

[Compare
Source](https://redirect.github.com/docker/login-action/compare/v3.3.0...v3.4.0)

- Bump [@&amp;#8203;actions/core](https://redirect.github.com/actions/core)
from 1.10.1 to 1.11.1 in
[#&amp;#8203;791](https://redirect.github.com/docker/login-action/pull/791)
- Bump
[@&amp;#8203;aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr)
to 3.766.0 in
[#&amp;#8203;789](https://redirect.github.com/docker/login-action/pull/789)
[#&amp;#8203;856](https://redirect.github.com/docker/login-action/pull/856)
- Bump
[@&amp;#8203;aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public)
to 3.758.0 in
[#&amp;#8203;789](https://redirect.github.com/docker/login-action/pull/789)
[#&amp;#8203;856](https://redirect.github.com/docker/login-action/pull/856)
- Bump
[@&amp;#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
from 0.35.0 to 0.57.0 in
[#&amp;#8203;801](https://redirect.github.com/docker/login-action/pull/801)
[#&amp;#8203;806](https://redirect.github.com/docker/login-action/pull/806)
[#&amp;#8203;858](https://redirect.github.com/docker/login-action/pull/858)
- Bump cross-spawn from 7.0.3 to 7.0.6 in
[#&amp;#8203;814](https://redirect.github.com/docker/login-action/pull/814)
- Bump https-proxy-agent from 7.0.5 to 7.0.6 in
[#&amp;#8203;823](https://redirect.github.com/docker/login-action/pull/823)
- Bump path-to-regexp from 6.2.2 to 6.3.0 in
[#&amp;#8203;777](https://redirect.github.com/docker/login-action/pull/777)

**Full Changelog**:
&lt;https://github.com/docker/login-action/compare/v3.3.0...v3.4.0&gt;

&lt;/details&gt;

&lt;details&gt;
&lt;summary&gt;github/codeql-action (github/codeql-action)&lt;/summary&gt;

###
[`v2.28.1`](https://redirect.github.com/github/codeql-action/releases/tag/v2.28.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.28.0...v2.28.1)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

**This is the last planned release of the `v2`. To continue getting
updates for the CodeQL Action, please switch to `v3`.**

#### 2.28.1 - 10 Jan 2025

- CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see [this changelog
post](https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/).
[#&amp;#8203;2677](https://redirect.github.com/github/codeql-action/pull/2677)
- Update default CodeQL bundle version to 2.20.1.
[#&amp;#8203;2678](https://redirect.github.com/github/codeql-action/pull/2678)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.28.1/CHANGELOG.md)
for more information.

###
[`v2.28.0`](https://redirect.github.com/github/codeql-action/releases/tag/v2.28.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.9...v2.28.0)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

**This is the last planned release of the `v2`. To continue getting
updates for the CodeQL Action, please switch to `v3`.**

#### 2.28.0 - 20 Dec 2024

- Bump the minimum CodeQL bundle version to 2.15.5.
[#&amp;#8203;2655](https://redirect.github.com/github/codeql-action/pull/2655)
- Don't fail in the unusual case that a file is on the search path.
[#&amp;#8203;2660](https://redirect.github.com/github/codeql-action/pull/2660).

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.28.0/CHANGELOG.md)
for more information.

###
[`v2.27.9`](https://redirect.github.com/github/codeql-action/releases/tag/v2.27.9)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.8...v2.27.9)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

#### 2.27.9 - 12 Dec 2024

No user facing changes.

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.27.9/CHANGELOG.md)
for more information.

###
[`v2.27.8`](https://redirect.github.com/github/codeql-action/compare/v2.27.7...v2.27.8)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.7...v2.27.8)

###
[`v2.27.7`](https://redirect.github.com/github/codeql-action/releases/tag/v2.27.7)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v2.27.6...v2.27.7)

### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

#### 2.27.7 - 10 Dec 2024

- We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance.
[#&amp;#8203;2631](https://redirect.github.com/github/codeql-action/pull/2631)
- Update default CodeQL bundle version to 2.20.0.
[#&amp;#8203;2636](https://redirect.github.com/github/codeql-action/pull/2636)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v2.27.7/CHANGELOG.md)
for more information.

###
[`v2.27.6`](https://redirect.github.com/github/codeql-action/releases/tag/v2

&lt;/details&gt;

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 12:59 AM, only on
Monday ( * 0 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] &lt;!-- rebase-check --&gt;If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/llvm/llvm-project).

&lt;!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzEuOSIsInVwZGF0ZWRJblZlciI6IjQxLjEzMS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--&gt;</pre>
</div>
</content>
</entry>
<entry>
<title>[Github] Switch back to tj-actions/changed-files (#158335)</title>
<updated>2025-09-12T22:25:28+00:00</updated>
<author>
<name>Aiden Grossman</name>
<email>aidengrossman@google.com</email>
</author>
<published>2025-09-12T22:25:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=ba3bce0779fa195867aa804146c2ec24cfaf9976'/>
<id>ba3bce0779fa195867aa804146c2ec24cfaf9976</id>
<content type='text'>
We were using the step security fork after the tj-actions/changed-files
supply chain attack given Github disabled the repo and all our actions
were failing during that time. Switch away from the fork back to the
main repository to avoid an extra level of indirection until we can
probably just stop using this action/roll our own.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We were using the step security fork after the tj-actions/changed-files
supply chain attack given Github disabled the repo and all our actions
were failing during that time. Switch away from the fork back to the
main repository to avoid an extra level of indirection until we can
probably just stop using this action/roll our own.</pre>
</div>
</content>
</entry>
<entry>
<title>[CI][Github] Bump actions/checkout to v5.0.0 (#153340)</title>
<updated>2025-08-14T04:17:53+00:00</updated>
<author>
<name>Aiden Grossman</name>
<email>aidengrossman@google.com</email>
</author>
<published>2025-08-14T04:17:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=ca44e11e0087965bcab58bcf5d90c54de4501731'/>
<id>ca44e11e0087965bcab58bcf5d90c54de4501731</id>
<content type='text'>
https://github.com/actions/checkout/releases/tag/v5.0.0 was released a
couple of days ago (still new, sufficient bake time that there probably
is not a significant security issue). There are few changes, with the
most notable ones being dependency bumps, specifically the node version
bump to v24. This requires actions runner v2.327.1. I will land this
after all of the infrastructure has been moved over to the new runner
version.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://github.com/actions/checkout/releases/tag/v5.0.0 was released a
couple of days ago (still new, sufficient bake time that there probably
is not a significant security issue). There are few changes, with the
most notable ones being dependency bumps, specifically the node version
bump to v24. This requires actions runner v2.327.1. I will land this
after all of the infrastructure has been moved over to the new runner
version.</pre>
</div>
</content>
</entry>
<entry>
<title>[Github] Test docs-flang-man target in documentation job (#142860)</title>
<updated>2025-06-05T00:39:58+00:00</updated>
<author>
<name>Aiden Grossman</name>
<email>aidengrossman@google.com</email>
</author>
<published>2025-06-05T00:39:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=9cd53787df54d45f29d66fd8eff75a052456ac04'/>
<id>9cd53787df54d45f29d66fd8eff75a052456ac04</id>
<content type='text'>
This was recently added in 47171ac3f911541453a69f3d9c6b4c1777409b95. We
should be supporting testing this inside the docs job.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This was recently added in 47171ac3f911541453a69f3d9c6b4c1777409b95. We
should be supporting testing this inside the docs job.</pre>
</div>
</content>
</entry>
<entry>
<title>[Github] Simplify checkout in docs test workflow (#132975)</title>
<updated>2025-03-26T19:23:17+00:00</updated>
<author>
<name>Aiden Grossman</name>
<email>aidengrossman@google.com</email>
</author>
<published>2025-03-26T19:23:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=2d14797f407fbe69eb969806c0c9cfe1f63ccda4'/>
<id>2d14797f407fbe69eb969806c0c9cfe1f63ccda4</id>
<content type='text'>
This makes things quite a bit simpler and also gets rid of some API
calls. We weren't hitting any API limits, but getting rid of them leaves
more quota for other things should we ever need it. This just diffs the
merge commit in the pull request workflows, which gives the diff for the
PR.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This makes things quite a bit simpler and also gets rid of some API
calls. We weren't hitting any API limits, but getting rid of them leaves
more quota for other things should we ever need it. This just diffs the
merge commit in the pull request workflows, which gives the diff for the
PR.</pre>
</div>
</content>
</entry>
<entry>
<title>[Github] Change to step-security fork of changed actions</title>
<updated>2025-03-15T20:56:29+00:00</updated>
<author>
<name>Aiden Grossman</name>
<email>aidengrossman@google.com</email>
</author>
<published>2025-03-15T20:56:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=6616acd80cd91a0075e3cd481bb9a6d82fd4ea9e'/>
<id>6616acd80cd91a0075e3cd481bb9a6d82fd4ea9e</id>
<content type='text'>
The tj-actions/changed-files repo has been taken down to the security
incident
(https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised).

This patch moves these jobs over step-security's fork, which has been
loosely audited and has had the malicious commits removed. This is
mainly intended as a stop-gap to get these actions running again while
we figure out the best path forward.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The tj-actions/changed-files repo has been taken down to the security
incident
(https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised).

This patch moves these jobs over step-security's fork, which has been
loosely audited and has had the malicious commits removed. This is
mainly intended as a stop-gap to get these actions running again while
we figure out the best path forward.
</pre>
</div>
</content>
</entry>
<entry>
<title>[Github] Prefer ubuntu-24.04 over ubuntu-latest (#129936)</title>
<updated>2025-03-06T18:32:02+00:00</updated>
<author>
<name>Aiden Grossman</name>
<email>aidengrossman@google.com</email>
</author>
<published>2025-03-06T18:32:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=0ce4b685d2f46b389887aeb8d1d16d5d15f7ecce'/>
<id>0ce4b685d2f46b389887aeb8d1d16d5d15f7ecce</id>
<content type='text'>
This patch replaces all instances of ubuntu-latest with ubuntu-24.04
(outside of the entries in libc++) based on the guidelines in the LLVM
CI best practices doc (https://llvm.org/docs/CIBestPractices.html).</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This patch replaces all instances of ubuntu-latest with ubuntu-24.04
(outside of the entries in libc++) based on the guidelines in the LLVM
CI best practices doc (https://llvm.org/docs/CIBestPractices.html).</pre>
</div>
</content>
</entry>
</feed>
