[deps]: Update gh minor by renovate[bot] · Pull Request #845 · bitwarden/passwordless-server

renovate · 2026-03-02T02:52:17Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v6.0.2` → `v6.0.3`
actions/create-github-app-token	action	minor	`v2.1.1` → `v2.2.2`
actions/setup-dotnet	action	minor	`v5.0.0` → `v5.4.0`
actions/setup-node	action	minor	`v6.2.0` → `v6.4.0`
codecov/codecov-action	action	minor	`v5.3.1` → `v5.5.5`
docker/setup-buildx-action	action	minor	`v3.8.0` → `v3.12.0`
dorny/test-reporter	action	minor	`v2.1.1` → `v2.7.0`

Release Notes

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.2`

Compare Source

Bug Fixes

deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

actions/setup-dotnet (actions/setup-dotnet)

`v5.4.0`

Compare Source

What's Changed

Enhancements

Improve global.json SDK version validation for rollForward by @priyagupta108 in #742
Pin actions to commit SHAs in workflows by @priya-kinthali in #744
Expand the CSC problem matcher to light up more errors on GitHub. by @StephenCleary in #717

Documentation

Docs(action): Explicitly mark all optional inputs with required: false by @kranthipoturaju in #737

Bug Fixes

Fix global.json creation command by @michal2612 in #694

Dependency Updates

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #746

New Contributors

@jasongin made their first contribution in #746
@michal2612 made their first contribution in #694
@kranthipoturaju made their first contribution in #737
@StephenCleary made their first contribution in #717

Full Changelog: actions/setup-dotnet@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Enhancements

Add dotnet-version: latest support with dotnet-channel input by @mahabaleshwars in #730
Support global.json's rollForward latest* variants by @js6pak in #538
Improve version resolution by @akoeplinger in #560

Dependency Updates

Upgrade @actions/* and fast-xml-parser dependencies by @Copilot in #728
Update install scripts to v2026.05.19 (preserve archive links) by @MichaelSimons in #736
Add rollForward note in README, improve proxy health check in e2e tests and bump version to v5.3.0 by @priyagupta108 in #738

Bug Fixes

Update Test Proxy job by @priya-kinthali in #703

New Contributors

@Copilot made their first contribution in #728
@akoeplinger made their first contribution in #560
@MichaelSimons made their first contribution in #736
@js6pak made their first contribution in #538

Full Changelog: actions/setup-dotnet@v5...v5.3.0

`v5.2.0`

Compare Source

What's changed

Enhancements

Add support for workloads input by @gowridurgad in #693
Add support for optional architecture input for cross-architecture .NET installs by @priya-kinthali in #700

Dependency Updates

Upgrade fast-xml-parser from 4.4.1 to 5.3.6 by @dependabot in #671
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #705

Full Changelog: actions/setup-dotnet@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Documentation

Readme update for environment variable on self hosted linux runners by @priya-kinthali in #689
Contributor icon updates by @Falco20019 in #604

Dependency updates

Upgrade actions/checkout from 5 to 6 by @dependabot in #684
Upgrade to latest actions packages by @salmanmkc in #687
Upgrade dependencies in testproject and checkout in Readme by @priya-kinthali in #692

New Contributors

@priya-kinthali made their first contribution in #689
@Falco20019 made their first contribution in #604

Full Changelog: actions/setup-dotnet@v5...v5.1.0

`v5.0.1`

Compare Source

What's Changed

Upgrade typescript from 5.4.2 to 5.9.2 and document breaking changes in v5 by @dependabot in #624
Upgrade eslint-plugin-jest from 27.9.0 to 29.0.1 by @dependabot in #648
Upgrade actions/publish-action from 0.3.0 to 0.4.0 and update macos-13 to macos-15-intel by @dependabot in #665

Full Changelog: actions/setup-dotnet@v5...v5.0.1

actions/setup-node (actions/setup-node)

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

codecov/codecov-action (codecov/codecov-action)

`v5.5.5`

Compare Source

This release only contains the keybase.io change as described here.

Full Changelog: codecov/codecov-action@v5.5.4...v5.5.5

`v5.5.4`

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in #1926
chore(release): 5.5.4 by @thomasrockhu-codecov in #1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

`v5.5.3`

Compare Source

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #1874
chore(release): bump to 5.5.3 by @thomasrockhu-codecov in #1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

`v5.4.3`

Compare Source

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in #1822
fix: OIDC on forks by @joseph-sentry in #1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

`v5.4.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

`v5.4.1`

Compare Source

What's Changed

fix: use the github core methods by @thomasrockhu-codecov in #1807
build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @app/dependabot in #1803
build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @app/dependabot in #1797
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @app/dependabot in #1798
chore(release): wrapper -0.2.1 by @app/codecov-releaser-app in #1788
build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @app/dependabot in #1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

`v5.4.0`

Compare Source

What's Changed

update wrapper submodule to 0.2.0, add recurse_submodules arg by @matt-codecov in #1780
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @app/dependabot in #1775
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @app/dependabot in #1776
build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @app/dependabot in #1777
Clarify in README that use_pypi bypasses integrity checks too by @webknjaz in #1773
Fix use of safe.directory inside containers by @Flamefire in #1768
Fix description for report_type input by @craigscott-crascit in #1770
build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @app/dependabot in #1765
Fix a typo in the example by @miranska in #1758
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @app/dependabot in #1757
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @app/dependabot in #1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.12.0`

Compare Source

Deprecate install input by @crazy-max in #455
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #434
Bump brace-expansion from 1.1.11 to 1.1.12 in #436
Bump form-data from 2.5.1 to 2.5.5 in #432
Bump undici from 5.28.4 to 5.29.0 in #435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

`v3.11.1`

Compare Source

Fix keep-state not being respected by @crazy-max in #429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

`v3.11.0`

Compare Source

Keep BuildKit state support by @crazy-max in #427
Remove aliases created when installing by default by @hashhar in #139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #422 #425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

`v3.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in #408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

`v3.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.48.0 to 0.54.0 in #402 #404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

dorny/test-reporter (dorny/test-reporter)

`v2.7.0`

Compare Source

What's Changed

Feature: Add slug-prefix output for link anchors #731
Feature: Report jest-junit testsuite errors as failures #155
Security: Update dependencies to fix reported security vulnerabilities

Other Changes

Bump eslint from 9.39.3 to 9.39.4 by @dependabot[bot] in #732
Bump @typescript-eslint/parser from 8.56.1 to 8.57.0 by @dependabot[bot] in #733
Bump jest from 30.2.0 to 30.3.0 by @dependabot[bot] in #734
Bump undici from 6.23.0 to 6.24.1 by @dependabot[bot] in #736
Update flatted package to v3.4.1 to fix a vulnerability by @jozefizso in #739

New Contributors

@dt-thomas-durand made their first contribution in #731
@johnbartholomew made their first contribution in #155

Full Changelog: dorny/test-reporter@v2.6.0...v2.7.0

`v2.6.0`

Compare Source

We updated all dependency packages to latest versions to fix reported security vulnerabilities.

What's Changed

Fix: For workflow_run events, resolve the commit of the check run from related pull request head commits first (matching workflow_run.head_branch, then first PR), and fall back to workflow_run.head_sha for non-PR runs #673
Change: The test-reporter action will listed all artifacts associated with the build run #693
Maintenance: Upgrade to ESLint v9 #629

New Contributors

@azchohfi made their first contribution in #673

Full Changelog: dorny/test-reporter@v2.5.0...v2.6.0

`v2.5.0`

Compare Source

What's Changed

Features

Add Nette Tester JUnit Reporter by @jozefizso in #707

Project maintanance

Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #695

Full Changelog: dorny/test-reporter@v2.4.0...v2.5.0

`v2.4.0`

Compare Source

What's Changed

Create tests for sample JUnit files by @jozefizso in #701
Support for the PHPUnit dialect of JUnit by @mbeccati in #422
Use String.substring() function by @jozefizso in #704

New Contributors

@mbeccati made their first contribution in #422

Full Changelog: dorny/test-reporter@v2.3.0...v2.4.0

`v2.3.0`

Compare Source

What's Changed

Fix short summary formatting when a report title is present by @micmarc in #645
Python support based on Java JUnit parser by @micmarc in #643
Update sax.js to fix large XML file parsing by @phactum-mnestler in #681
Enhance pytest support by @micmarc in #683
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #687
Add missing golang-json reporter to action.yml by @jozefizso in #690
Bump js-yaml from 3.14.0 to 3.14.2 in /reports/jest by @dependabot[bot] in #685
Complete documentation for all supported reporters by @jozefizso in #691
Bump js-yaml and mocha in /reports/mocha by @dependabot[bot] in #682

New Contributors

@phactum-mnestler made their first contribution in #681

Full Changelog: dorny/test-reporter@v2.2.0...v2.3.0

`v2.2.0`

Compare Source

What's Changed

Features

Add collapsed option to control report visibility by @pespinel in #664
- Allows setting reports to collapsed, expanded, or auto mode
- Includes validation for the collapsed input parameter

Bug Fixes

Fix badge encoding for values including the _ underscore character in #672
- Correctly encode URI components for img.shields.io service
Define the report-title attribute in action definition in #637

Dependencies

Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot in #676
Bump actions/upload-artifact from 4 to 5 by @dependabot in #665
Bump actions/setup-node from 5 to 6 by @dependabot in #662
Upgrade dependencies to latest minor releases (#657, #668)
Upgrade jest to v30 (#632, #631)
Bump typescript from 5.8.3 to 5.9.2 by @dependabot in #646

CI/CD

Upgrade actions/checkout to v5 in #658
Upgrade actions/setup-node to v5 in #658

Internal

Refactor variable names and code cleanup (#630)

New Contributors

@pespinel made their first contribution in #664

Full Changelog: dorny/test-reporter@v2.1.1...v2.2.0

Configuration

📅 Schedule: (UTC)

Branch creation
- "every 2nd week starting on the 2 week of the year before 4am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bitwarden-bot · 2026-03-02T02:52:46Z

Internal tracking:

ID: PAS-629
Link: https://bitwarden.atlassian.net/browse/PAS-629

codecov · 2026-03-02T02:56:32Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 37.19%. Comparing base (e38ce48) to head (1a010c0).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #845   +/-   ##
=======================================
  Coverage   37.19%   37.19%           
=======================================
  Files         587      587           
  Lines       31492    31492           
  Branches      904      904           
=======================================
  Hits        11715    11715           
  Misses      19625    19625           
  Partials      152      152

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

renovate Bot requested a review from a team as a code owner March 2, 2026 02:52

bitwarden-bot changed the title ~~[deps]: Update gh minor~~ [PAS-629] [deps]: Update gh minor Mar 2, 2026

renovate Bot changed the title ~~[PAS-629] [deps]: Update gh minor~~ [deps]: Update gh minor Mar 2, 2026

renovate Bot force-pushed the renovate/gh-minor branch 3 times, most recently from 277f5dc to 66b9f91 Compare March 10, 2026 11:17

renovate Bot force-pushed the renovate/gh-minor branch 2 times, most recently from 2344fff to 4ba32a8 Compare March 25, 2026 19:26

renovate Bot force-pushed the renovate/gh-minor branch 2 times, most recently from 77549b1 to 51a491d Compare April 2, 2026 15:03

renovate Bot force-pushed the renovate/gh-minor branch from 51a491d to 90dbe48 Compare April 15, 2026 14:54

renovate Bot force-pushed the renovate/gh-minor branch from 90dbe48 to bb6f0f4 Compare April 27, 2026 03:27

renovate Bot force-pushed the renovate/gh-minor branch from bb6f0f4 to a1ec06a Compare May 22, 2026 17:10

renovate Bot force-pushed the renovate/gh-minor branch 2 times, most recently from 154497b to 62785c7 Compare June 9, 2026 21:51

renovate Bot force-pushed the renovate/gh-minor branch from 62785c7 to 64385be Compare June 16, 2026 03:17

[deps]: Update gh minor

1a010c0

renovate Bot force-pushed the renovate/gh-minor branch from 64385be to 1a010c0 Compare July 3, 2026 03:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[deps]: Update gh minor#845

[deps]: Update gh minor#845
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/gh-minor

renovate Bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

bitwarden-bot commented Mar 2, 2026

Uh oh!

codecov Bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

Enhancements

Documentation

Bug Fixes

Dependency Updates

New Contributors

What's Changed

Enhancements

Dependency Updates

Bug Fixes

New Contributors

What's changed

Enhancements

Dependency Updates

What's Changed

Documentation

Dependency updates

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Other Changes

New Contributors

What's Changed

New Contributors

What's Changed

Features

Project maintanance

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Features

Bug Fixes

Dependencies

CI/CD

Internal

New Contributors

Configuration

Uh oh!

bitwarden-bot commented Mar 2, 2026

Uh oh!

codecov Bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

renovate Bot commented Mar 2, 2026 •

edited

Loading

codecov Bot commented Mar 2, 2026 •

edited

Loading