chore(deps): update github-actions [skip ci] (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v6.0.1 → v7.0.0
actions/checkout	action	major	v6.0.2 → v7.0.0
actions/upload-artifact	action	major	v5.0.0 → v7.0.1
dorny/test-reporter	action	major	v2.3.0 → v3.0.0
pnpm/action-setup	action	major	v4.2.0 → v6.0.9

---

Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

• Update the readme with direct upload details by @​danwkennedy in #​795
• Readme: bump all the example versions to v7 by @​danwkennedy in #​796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in #​797

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in #​754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in #​762
• Support direct file uploads by @​danwkennedy in #​764

New Contributors

• @​Link- made their first contribution in #​754

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@​v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

• Upload Artifact Node 24 support by @​salmanmkc in #​719
• fix: update @​actions/artifact for Node.js 24 punycode deprecation by @​salmanmkc in #​744
• prepare release v6.0.0 for Node.js 24 support by @​salmanmkc in #​745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

dorny/test-reporter (dorny/test-reporter)

v3.0.0

Compare Source

Note: The v3 release requires NodeJS 24 runtime on GitHub Actions runners.

What's Changed

• Upgrade action runtime to Node.js 24 by @​dav-tb in #​738
• Explicitly use lowest permissions required to run workflow by @​jozefizso in #​745

Other Changes

• Bump @​typescript-eslint/parser from 8.57.0 to 8.57.1 by @​dependabot[bot] in #​742
• Bump @​types/adm-zip from 0.5.7 to 0.5.8 by @​dependabot[bot] in #​743
• Bump flatted from 3.4.1 to 3.4.2 by @​dependabot[bot] in #​744

New Contributors

• @​dav-tb made their first contribution in #​738

Full Changelog: dorny/test-reporter@v2.7.0...v3.0.0

v2.7.0

Compare Source

What's Changed

• Feature: Add slug-prefix output for link anchors #​731
• Feature: Report jest-junit testsuite errors as failures #​155
• Security: Update dependencies to fix reported security vulnerabilities

Other Changes

• Bump eslint from 9.39.3 to 9.39.4 by @​dependabot[bot] in #​732
• Bump @​typescript-eslint/parser from 8.56.1 to 8.57.0 by @​dependabot[bot] in #​733
• Bump jest from 30.2.0 to 30.3.0 by @​dependabot[bot] in #​734
• Bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​736
• Update flatted package to v3.4.1 to fix a vulnerability by @​jozefizso in #​739

New Contributors

• @​dt-thomas-durand made their first contribution in #​731
• @​johnbartholomew made their first contribution in #​155

Full Changelog: dorny/test-reporter@v2.6.0...v2.7.0

v2.6.0

Compare Source

We updated all dependency packages to latest versions to fix reported security vulnerabilities.

What's Changed

• Fix: For workflow_run events, resolve the commit of the check run from related pull request head commits first (matching workflow_run.head_branch, then first PR), and fall back to workflow_run.head_sha for non-PR runs #​673
• Change: The test-reporter action will listed all artifacts associated with the build run #​693
• Maintenance: Upgrade to ESLint v9 #​629

New Contributors

• @​azchohfi made their first contribution in #​673

Full Changelog: dorny/test-reporter@v2.5.0...v2.6.0

v2.5.0

Compare Source

What's Changed

Features

• Add Nette Tester JUnit Reporter by @​jozefizso in #​707

Project maintanance

• Bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in #​695

Full Changelog: dorny/test-reporter@v2.4.0...v2.5.0

v2.4.0

Compare Source

What's Changed

• Create tests for sample JUnit files by @​jozefizso in #​701
• Support for the PHPUnit dialect of JUnit by @​mbeccati in #​422
• Use String.substring() function by @​jozefizso in #​704

New Contributors

• @​mbeccati made their first contribution in #​422

Full Changelog: dorny/test-reporter@v2.3.0...v2.4.0

pnpm/action-setup (pnpm/action-setup)

v6.0.9

Compare Source

What's Changed

• fix: update pnpm to v11.7.0 by @​zkochan in #​267

Full Changelog: pnpm/action-setup@v6...v6.0.9

v6.0.8

Compare Source

What's Changed

• docs(README): fix cache_dependency_path type by @​haines in #​257
• fix: drop patchPnpmEnv so standalone+self-update works on Windows by @​zkochan in #​258
• fix: update pnpm to 11.1.1 by @​mungodewar in #​248

New Contributors

• @​mungodewar made their first contribution in #​248

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

v6.0.7

Compare Source

What's Changed

• fix: honor devEngines.packageManager.onFail=error (#​252) by @​zkochan in #​254
• fix: restore inputs from state in post by @​haines in #​255
• fix: self-update bootstrap to packageManager-pinned version (#​233) by @​zkochan in #​256

New Contributors

• @​haines made their first contribution in #​255

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

v6.0.6

Compare Source

What's Changed

• fix: bin_dest output points to self-updated pnpm, not bootstrap by @​zkochan in #​249

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

v6.0.5

Compare Source

What's Changed

• fix: append (not prepend) action node dir to PATH for npm bootstrap by @​zkochan in #​241

Full Changelog: pnpm/action-setup@v6.0.4...v6.0.5

v6.0.4

Compare Source

What's Changed

• fix: use npm co-located with the action node binary by @​benquarmby in #​239

New Contributors

• @​benquarmby made their first contribution in #​239

Full Changelog: pnpm/action-setup@v6.0.3...v6.0.4

v6.0.3

Compare Source

Updated pnpm to v11.0.0-rc.5

Full Changelog: pnpm/action-setup@v6.0.2...v6.0.3

v6.0.2

Compare Source

What's Changed

• fix: pnpm self-update binary shadowed by bootstrap on PATH by @​oniani1 in #​230

New Contributors

• @​oniani1 made their first contribution in #​230

Full Changelog: pnpm/action-setup@v6.0.1...v6.0.2

v6.0.1

Compare Source

Update pnpm to v11.0.0-rc.2. pnpm-lock.yaml will not be saved with two documents unless the packageManager is set via devEngines.packageManager. Related issue: #​228

v6.0.0

Compare Source

Added support for pnpm v11.

v5.0.0

Compare Source

Updated the action to use Node.js 24.

v4.4.0

Compare Source

Updated the action to use Node.js 24.

v4.3.0

Compare Source

What's Changed

• docs: fix the run_install example in the Readme by @​dreyks in #​175
• chore: remove unused @types/node-fetch dependency by @​silverwind in #​186
• Clarify that package_json_file is relative to GITHUB_WORKSPACE by @​chris-martin in #​184
• feat: store caching by @​jrmajor in #​188
• refactor: remove star imports by @​KSXGitHub in #​196
• fix(ci): exclude macos by @​KSXGitHub in #​197

New Contributors

• @​dreyks made their first contribution in #​175
• @​silverwind made their first contribution in #​186
• @​chris-martin made their first contribution in #​184
• @​jrmajor made their first contribution in #​188
• @​Boosted-Bonobo made their first contribution in #​199

Full Changelog: pnpm/action-setup@v4.2.0...v4.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 108fa8a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)

• [skip ci]

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}