Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

• Disable automatic cache saves for merge queues @​eifinger (#1056)

🧰 Maintenance

• chore: update known checksums for 0.12.17 @github-actions[bot] (#1058)
• chore: update known checksums for 0.12.16 @github-actions[bot] (#1057)
• chore: update known checksums for 0.12.15 @github-actions[bot] (#1054)
• chore: update known checksums for 0.12.14 @github-actions[bot] (#1053)
• chore: update known checksums for 0.12.13 @github-actions[bot] (#1045)

📚 Documentation

• docs: update version references to v10.1.0 @github-actions[bot] (#1044)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @​eifinger (#1059)

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

• fix: respect no proxy directive @​mj0nez (#1037)
• Use JSON + a typed wrapper instead of TS codegen @​woodruffw (#1025)

🚀 Enhancements

• Expose a Python "identity" output @​woodruffw (#1036)
• Verify downloads with astral-sh/versions checksums @​zaniebot (#1033)

🧰 Maintenance

... (truncated)

• c18668a chore(deps): roll up Dependabot updates (#1059)
• ffe1476 chore: update known checksums for 0.12.17 (#1058)
• f5548c5 chore: update known checksums for 0.12.16 (#1057)
• a761a4e Disable automatic cache saves for merge queues (#1056)
• 3377a30 chore: update known checksums for 0.12.15 (#1054)
• dfb5f38 chore: update known checksums for 0.12.14 (#1053)
• 45c121f chore: update known checksums for 0.12.13 (#1045)
• 8073452 docs: update version references to v10.1.0 (#1044)
• bec219d chore(deps-dev): roll up Dependabot updates (#1043)
• b90ec40 fix: respect no proxy directive (#1037)
• Additional commits viewable in compare view

Sourced from codecov/codecov-action's releases.

v7.1.1

What's Changed

• chore(release): 7.1.1 by @​thomasrockhu-codecov in codecov/codecov-action#1973

Full Changelog: https://github.com/codecov/codecov-action/compare/v7.1.0...v7.1.1

v7.1.0

What's Changed

• chore(release): 7.1.0 by @​thomasrockhu-codecov in codecov/codecov-action#1971

Full Changelog: https://github.com/codecov/codecov-action/compare/v7.0.0...v7.1.0

• 303a32d chore(release): 7.1.1 (#1973)
• 0b35c9e chore(release): 7.1.0 (#1971)
• See full diff in compare view

Sourced from docker/setup-buildx-action's releases.

v4.4.1

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in docker/setup-buildx-action#624

Full Changelog: https://github.com/docker/setup-buildx-action/compare/v4.4.0...v4.4.1

v4.4.0

• Use official Buildx releases for cloud driver by @​crazy-max in docker/setup-buildx-action#606
• Pull BuildKit image before builder creation by @​crazy-max in docker/setup-buildx-action#609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in docker/setup-buildx-action#620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614
• Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: https://github.com/docker/setup-buildx-action/compare/v4.3.0...v4.4.0

• f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
• e700274 chore: update generated content
• 3061c91 skip BuildKit image pre-pulls for explicit endpoints
• 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
• bd6e702 chore: update generated content
• 6268c9d pull BuildKit image before builder creation
• e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
• 533ed8e build(deps): bump the codeql-actions group with 2 updates
• bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
• d5079fb chore: update generated content
• Additional commits viewable in compare view

Sourced from docker/build-push-action's releases.

v7.4.0

• Use the shared error helper for Buildx commands by @​crazy-max in docker/build-push-action#1620
• Prevent workflow command injection in metadata logs by @​crazy-max in docker/build-push-action#1617
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609
• Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592
• Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613
• Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615
• Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611
• Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606
• Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577
• Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0

• c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 459b674 [dependabot skip] chore: update generated content
• 4dedcb2 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
• 379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
• 9877975 chore: update generated content
• 7ed0556 use the shared Buildx error summary helper
• 91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 80dbc86 [dependabot skip] chore: update generated content
• 50cac3a chore(deps): Bump @​docker/actions-toolkit from 0.98.0 to 0.99.0
• 03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
• Additional commits viewable in compare view

Sourced from pnpm/action-setup's releases.

v6.1.0

What's Changed

• feat: support pnpm v12 by @​zkochan in pnpm/action-setup#288

Full Changelog: https://github.com/pnpm/action-setup/compare/v6.0.10...v6.1.0

• ea17c68 feat: support pnpm v12 (#288)
• See full diff in compare view

Sourced from hoverkraft-tech/compose-action's releases.

v3.2.0

Release Summary

Compose logs are now streamed during post-job cleanup, improving visibility into service shutdown and troubleshooting.

Internal updates include refreshed documentation, developer-experience improvements, and dependency/tooling upgrades across GitHub Actions, devcontainers, and npm development dependencies.

Breaking changes

There are no breaking changes.

What's Changed

• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/compose-action#294
• chore: misc DevX improvments by @​neilime in hoverkraft-tech/compose-action#295
• chore(deps): bump ghcr.io/devcontainers/features/github-cli from 1.1.0 to 1.1.1 by @​dependabot[bot] in hoverkraft-tech/compose-action#302
• chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 in the npm-development-dependencies group by @​dependabot[bot] in hoverkraft-tech/compose-action#300
• chore(deps): bump the github-actions-dependencies group with 6 updates by @​dependabot[bot] in hoverkraft-tech/compose-action#301
• chore(deps): bump ghcr.io/devcontainers/features/docker-in-docker from 4.0.0 to 4.1.0 by @​dependabot[bot] in hoverkraft-tech/compose-action#303
• chore(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 by @​dependabot[bot] in hoverkraft-tech/compose-action#304
• chore(deps): bump ghcr.io/devcontainers/features/github-cli from 1.1.1 to 1.1.2 by @​dependabot[bot] in hoverkraft-tech/compose-action#305
• chore(deps-dev): bump @​ts-dev-tools/core from 1.13.1 to 1.13.2 in the npm-development-dependencies group by @​dependabot[bot] in hoverkraft-tech/compose-action#306
• chore(deps): bump hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml from 0.27.1 to 0.28.0 in the github-actions-dependencies group by @​dependabot[bot] in hoverkraft-tech/compose-action#307
• chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 by @​dependabot[bot] in hoverkraft-tech/compose-action#308
• fix: stream compose logs in post-job cleanup by @​neilime with @​Copilot in hoverkraft-tech/compose-action#298

Full Changelog: https://github.com/hoverkraft-tech/compose-action/compare/v3.1.0...v3.2.0

• b659c74 test: cover post-runner log warning fallback
• c3f4fd4 refactor: drop unused compose logs output
• d8bdb08 fix: use upstream compose log buffering
• 4868c43 fix: restore post-job compose logs header
• 7d4722d fix: avoid buffering compose logs during cleanup
• 889e6f4 fix: stream compose logs during post cleanup
• 84f5fe9 chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2
• 3591920 chore(deps): bump hoverkraft-tech/ci-github-publish/.github/workflows/prepare...
• d43e4f8 chore(deps-dev): bump @​ts-dev-tools/core
• c922b01 chore(deps): bump ghcr.io/devcontainers/features/github-cli
• Additional commits viewable in compare view

Sourced from super-linter/super-linter/slim's releases.

v9.0.0

9.0.0 (2026-10-01)

⚠ BREAKING CHANGES

• update stylelint config file (super-linter/super-linter#7957), closes #7644
• rely on jscpd config file for gitignore (#7958)
• remove nbqa (#7697)

🚀 Features

• editorconfig-checker fix mode (#8129) (d23a77f)
• print version and revision on summary footer (#8131) (108536f), closes #7635
• publish linter versions file (#8136) (29e44ea), closes #7919
• tag slim images as version-slim (#8154) (958b6c0), closes #7598
• update stylelint config file (super-linter/super-linter#7957), closes #7644 (c358755)

🐛 Bugfixes

• codespell: skip root package lockfiles (#8094) (d3bc059)
• go_modules: scan module sub-packages with golangci-lint (#7884) (262ba6b)
• jscpd gitgnore option (#7951) (70dc6a6), closes #7949
• rely on jscpd config file for gitignore (#7958) (9fa9f40)
• tag local image instead of editing action.yml (#8166) (8802b51)

⬆️ Dependency updates

• all: add dependency cooldowns (#7990) (123c30b)
• bundler: bump rubocop (#8051) (8439a0b)
• bundler: bump rubocop (#8124) (c55d5ad)
• bundler: bump rubocop-minitest (#8005) (29e2320)
• bundler: bump the rubocop group across 1 directory with 3 updates (#7977) (fe04526)
• bundler: bump the rubocop group across 1 directory with 3 updates (#8085) (5d61d4a)
• docker: bump python (#8048) (6c757dc)
• docker: bump scalameta/scalafmt in the docker group (#8001) (07267f1)
• docker: bump terraform-linters/tflint in the docker group (#8006) (260eccc)
• docker: bump the docker group across 1 directory with 10 updates (#7997) (f89bfb7)
• docker: bump the docker group across 1 directory with 13 updates (#8091) (2066911)
• docker: bump the docker group across 1 directory with 5 updates (#8141) (0c4e34c)
• docker: bump the docker group across 1 directory with 6 updates (#8050) (7d5c0e4)
• docker: bump the docker group across 1 directory with 9 updates (#8118) (8a24b4b)
• java: bump com.puppycrawl.tools:checkstyle (#7969) (a363fc9)
• java: bump com.puppycrawl.tools:checkstyle (#7996) (b27705a)
• java: bump com.puppycrawl.tools:checkstyle (#8026) (541db66)
• java: bump com.puppycrawl.tools:checkstyle (#8075) (921de44)
• java: bump the java-gradle group across 2 directories with 2 updates (#8060) (7ff6f35)
• npm: bump @​stoplight/spectral-cli in /dependencies (#7973) (1779ac9)

... (truncated)

Sourced from super-linter/super-linter/slim's changelog.

Changelog

9.0.0 (2026-10-01)

⚠ BREAKING CHANGES

• update stylelint config file (super-linter/super-linter#7957), closes #7644
• rely on jscpd config file for gitignore (#7958)
• remove nbqa (#7697)

🚀 Features

• editorconfig-checker fix mode (#8129) (d23a77f)
• print version and revision on summary footer (#8131) (108536f), closes #7635
• publish linter versions file (#8136) (29e44ea), closes #7919
• tag slim images as version-slim (#8154) (958b6c0), closes #7598
• update stylelint config file (super-linter/super-linter#7957), closes #7644 (c358755)

🐛 Bugfixes

• codespell: skip root package lockfiles (#8094) (d3bc059)
• go_modules: scan module sub-packages with golangci-lint (#7884) (262ba6b)
• jscpd gitgnore option (#7951) (70dc6a6), closes #7949
• rely on jscpd config file for gitignore (#7958) (9fa9f40)
• tag local image instead of editing action.yml (#8166) (8802b51)

⬆️ Dependency updates

• all: add dependency cooldowns (#7990) (123c30b)
• bundler: bump rubocop (#8051) (8439a0b)
• bundler: bump rubocop (#8124) (c55d5ad)
• bundler: bump rubocop-minitest (#8005) (29e2320)
• bundler: bump the rubocop group across 1 directory with 3 updates (#7977) (fe04526)
• bundler: bump the rubocop group across 1 directory with 3 updates (#8085) (5d61d4a)
• docker: bump python (#8048) (6c757dc)
• docker: bump scalameta/scalafmt in the docker group (#8001) (07267f1)
• docker: bump terraform-linters/tflint in the docker group (#8006) (260eccc)
• docker: bump the docker group across 1 directory with 10 updates (#7997) (f89bfb7)
• docker: bump the docker group across 1 directory with 13 updates (#8091) (2066911)
• docker: bump the docker group across 1 directory with 5 updates (#8141) (0c4e34c)
• docker: bump the docker group across 1 directory with 6 updates (#8050) (7d5c0e4)
• docker: bump the docker group across 1 directory with 9 updates (#8118) (8a24b4b)
• java: bump com.puppycrawl.tools:checkstyle (#7969) (a363fc9)
• java: bump com.puppycrawl.tools:checkstyle (#7996) (b27705a)
• java: bump com.puppycrawl.tools:checkstyle (#8026) (541db66)
• java: bump com.puppycrawl.tools:checkstyle (#8075) (921de44)
• java: bump the java-gradle group across 2 directories with 2 updates (#8060) (7ff6f35)

... (truncated)

• 2da1369 chore(main): release 9.0.0 (#7950)
• 8802b51 fix: tag local image instead of editing action.yml (#8166)
• cd17c95 chore: scan pip requirements files with trivy (#8153)
• 958b6c0 feat: tag slim images as version-slim (#8154)
• 8afae23 build: upgrade to Alpine 3.24, PHP 8.5, Clang 22 (#8151)
• c648681 ci: publish release after uploading assets (#8150)
• 1167157 deps(npm): bump qs (#8149)
• 568db29 deps(python): bump the pip group across 1 directory with 6 updates (#8127)
• 05bfa30 deps(npm): bump js-yaml (#8147)
• f8ac9fb chore: group yq updates (#8148)
• Additional commits viewable in compare view

Sourced from anthropics/claude-code-action's releases.

v1.0.241

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.240...v1.0.241

v1.0.240

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.239...v1.0.240

v1.0.239

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.238...v1.0.239

v1.0.238

What's Changed

• ci: security hardening for GitHub Actions workflows that call Claude by @​qing-ant in anthropics/claude-code-action#1867

New Contributors

• @​qing-ant made their first contribution in anthropics/claude-code-action#1867

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.237...v1.0.238

v1.0.237

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.236...v1.0.237

v1.0.236

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.235...v1.0.236

v1.0.235

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.234...v1.0.235

v1.0.234

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.233...v1.0.234

v1.0.233

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.232...v1.0.233

v1.0.232

What's Changed

• ci: pin the integration tests to claude-opus-5 by @​mhegazy in anthropics/claude-code-action#1853

New Contributors

• @​mhegazy made their first contribution in anthropics/claude-code-action#1853

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.231...v1.0.232

v1.0.231

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.230...v1.0.231

v1.0.230

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.229...v1.0.230

v1.0.229

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.228...v1.0.229

... (truncated)

• cab360f chore: bump Claude Code to 2.1.289 and Agent SDK to 0.3.289
• ed670b4 chore: bump Claude Code to 2.1.288 and Agent SDK to 0.3.288
• 97c5347 chore: bump Claude Code to 2.1.287 and Agent SDK to 0.3.287
• 12dd8d7 chore: bump Claude Code to 2.1.286 and Agent SDK to 0.3.286
• a8cb0db ci: security hardening for GitHub Actions workflows that call Claude (#1867)
• fd1c128 chore: bump Claude Code to 2.1.285 and Agent SDK to 0.3.285
• 8ce9314 chore: bump Claude Code to 2.1.284 and Agent SDK to 0.3.284
• 756cc22 chore: bump Claude Code to 2.1.283 and Agent SDK to 0.3.283
• 9171db3 chore: bump Claude Code to 2.1.282 and Agent SDK to 0.3.282
• 8cf3482 chore: bump Claude Code to 2.1.281 and Agent SDK to 0.3.281
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions