chore(deps): update github workflows - #6733
Conversation
Codecov Results 📊✅ 96974 passed | ⏭️ 6239 skipped | Total: 103213 | Pass Rate: 93.96% | Execution Time: 362m 33s 📊 Comparison with Base Branch
✨ No test changes detected All tests are passing successfully. ✅ Patch coverage is 100.00%. Project has 2504 uncovered lines. Coverage diff@@ Coverage Diff @@
## main #PR +/-##
==========================================
+ Coverage 89.90% 89.91% +0.01%
==========================================
Files 193 193 —
Lines 24828 24828 —
Branches 8930 8930 —
==========================================
+ Hits 22322 22324 +2
- Misses 2506 2504 -2
- Partials 1416 1414 -2Generated by Codecov Action |
f723b07 to
ab7796a
Compare
4ff0133 to
ae76386
Compare
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
64fb4a7 to
f8ebb7b
Compare
![sentry-warden[bot]](https://avatars.githubusercontent.com/in/2755838?s=60&v=4){kind=small}
6bc2f74 to
1dcbc62
Compare
1dcbc62 to
58362ff
Compare
347bca1 to
3f9c730
Compare
3f9c730 to
c2a9ecc
Compare
c2a9ecc to
c39c69d
Compare
c39c69d to
f67fb98
Compare
1a1b6cf to
d88586b
Compare
d88586b to
b59bcb4
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit b59bcb4. Configure here.
| enable-cache: false | ||
| - name: Install Java | ||
| uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 | ||
| uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 |
There was a problem hiding this comment.
Invalid setup-java action digest
High Severity
The pinned actions/setup-java digest b6effb05e454b25005698d916606bdc6ffcbf961 does not match the digest this PR documents (03ad4de0992f5dab5e18fcb136590ce7c4a0ac95) and does not resolve to a known commit on actions/setup-java. Jobs that install Java via this pin, including the tasks integration workflow, will fail when GitHub Actions cannot fetch the action.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit b59bcb4. Configure here.
b59bcb4 to
7202e2b
Compare
| {% if needs_postgres %} | ||
| postgres: | ||
| image: ghcr.io/getsentry/image-mirror-library-postgres:17-alpine | ||
| image: ghcr.io/getsentry/image-mirror-library-postgres:18-alpine |
There was a problem hiding this comment.
Undocumented Postgres major version bump likely breaks CI
PostgreSQL 18-alpine image does not appear to exist as a stable release, and this change is not mentioned in the PR description which only claims to update GitHub Actions.
Evidence
- The PR title and body explicitly list only GitHub Action updates (
actions/checkout,actions/setup-java,actions/setup-node, etc.) with no mention of a PostgreSQL version change. - PostgreSQL 17 is the current latest stable major version; PostgreSQL 18 has not been released, so the Docker tag
18-alpinealmost certainly does not exist onghcr.io/getsentry/image-mirror-library-postgres. scripts/split_tox_gh_actions/templates/test_group.jinjaline 20 hardcodesghcr.io/getsentry/image-mirror-library-postgres:18-alpine; this template is included bybase.jinja, so the tag is expanded into the generated workflow filestest-integrations-dbs.ymlandtest-integrations-web-1.yml(the groups containingasyncpganddjango), causing CI service container startup failures across those workflows.- Updating a database major version in test infrastructure is a significant compatibility risk that should be reviewed separately, not bundled silently into an unrelated Actions update PR.
Identified by Warden · code-review, find-bugs · U2R-5DG
7202e2b to
f82506c
Compare
| uses: anthropics/claude-code-action@9db594c7a0e82298c121c18b7f08aa1579ce7341 # v1.0.185 | ||
| with: | ||
| anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} | ||
| github_token: ${{ github.token }} |
There was a problem hiding this comment.
Analysis step receives write-capable GitHub token despite claims of no write credential
The step passes github_token: ${{ github.token }} even though the security comment claims it runs with "NO write credential". The workflow-level permissions block grants issues: write to this token, so a compromised third-party action could create issues or modify repository state, contrary to the documented security boundary.
Evidence
- The workflow-level
permissionsblock at the top of the file grantsissues: write. - Line 114 passes
github_token: ${{ github.token }}to theanthropics/claude-code-action. - The context before the hunk includes the comment at line 103 claiming the analysis step has "NO write credential".
- This means the security boundary described in the file header (keeping untrusted logs away from credentialed write channels) is weaker than claimed, because the action receives a token with
issues: writeenabled.
Identified by Warden · find-bugs · EXH-P6R
This PR contains the following updates:
v6.0.3→v7.0.1v6.0.3→v7.0.1be666c2→b6effb0be666c2→b6effb0v6.4.0→v7.0.0v6→v7v1.0.142→v1.0.185v8.2.0→v9.0.0v8.2.0→v9.0.048236a7→d0aa91bd90e69c→66554aav2.26.9→2.28.06143e76→aeb167517-alpine→18-alpine17-alpine→18-alpine20→24Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
actions/checkout (actions/checkout)
v7.0.1Compare Source
v7.0.0Compare Source
v7Compare Source
v6.1.0Compare Source
actions/setup-node (actions/setup-node)
v7.0.0Compare Source
What's Changed
Enhancements:
Bug fixes:
mirrorTokeningetManifestif it's provided by @deiga in #1548Documentation updates:
Dependency update:
New Contributors
Full Changelog: actions/setup-node@v6...v7.0.0
v7Compare Source
v6.5.0Compare Source
What's Changed
Full Changelog: actions/setup-node@v6.4.0...v6.5.0
actions/setup-python (actions/setup-python)
v7.0.0Compare Source
v7Compare Source
anthropics/claude-code-action (anthropics/claude-code-action)
v1.0.185Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.185
v1.0.184Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.184
v1.0.183Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.183
v1.0.182Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.182
v1.0.181Compare Source
v1.0.180Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.180
v1.0.179Compare Source
v1.0.178Compare Source
v1.0.177Compare Source
v1.0.176Compare Source
v1.0.175Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.175
v1.0.174Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.174
v1.0.173Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.173
v1.0.172Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.172
v1.0.171Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.171
v1.0.170Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.170
v1.0.169Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.169
v1.0.168Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.168
v1.0.167Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.167
v1.0.166Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.166
v1.0.165Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.165
v1.0.164Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.164
v1.0.163Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.163
v1.0.162Compare Source
v1.0.161Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.161
v1.0.160Compare Source
v1.0.159Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.159
v1.0.158Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.158
v1.0.157Compare Source
v1.0.156Compare Source
v1.0.155Compare Source
v1.0.154Compare Source
v1.0.153Compare Source
v1.0.152Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.152
v1.0.151Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.151
v1.0.150Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.150
v1.0.149Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.149
v1.0.148Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.148
v1.0.147Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.147
v1.0.146Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.146
v1.0.145Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.145
v1.0.144Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.144
v1.0.143Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.143
astral-sh/setup-uv (astral-sh/setup-uv)
v9.0.0Compare Source
v8.3.2Compare Source
v8.3.1Compare Source
v8.3.0Compare Source
getsentry/craft (getsentry/craft)
v2.28.0Compare Source
New Features ✨
v2.27.2Compare Source
Bug Fixes 🐛
v2.27.1Compare Source
Bug Fixes 🐛
v2.27.0Compare Source
New Features ✨
Bug Fixes 🐛
Documentation 📚
Internal Changes 🔧
Deps Dev
Other
v2.26.14Compare Source
Bug Fixes 🐛
Deps
v2.26.13Compare Source
Internal Changes 🔧
v2.26.12Compare Source
Bug Fixes 🐛
v2.26.11Compare Source
Bug Fixes 🐛
Internal Changes 🔧
v2.26.10Compare Source
Bug Fixes 🐛
actions/node-versions (node)
v24.19.0: 24.19.0Compare Source
Node.js 24.19.0
v24.18.1: 24.18.1Compare Source
Node.js 24.18.1
v24.18.0: 24.18.0Compare Source
Node.js 24.18.0
v24.17.0: 24.17.0Compare Source
Node.js 24.17.0
v24.16.0: 24.16.0Compare Source
Node.js 24.16.0
v24.15.0: 24.15.0Compare Source
Node.js 24.15.0
v24.14.1: 24.14.1Compare Source
Node.js 24.14.1
v24.14.0: 24.14.0Compare Source
Node.js 24.14.0
v24.13.1: 24.13.1Compare Source
Node.js 24.13.1
v24.13.0: 24.13.0Compare Source
Node.js 24.13.0
v24.12.0: 24.12.0Compare Source
Node.js 24.12.0
v24.11.1: 24.11.1Compare Source
Node.js 24.11.1
v24.11.0: 24.11.0Compare Source
Node.js 24.11.0
v24.10.0: 24.10.0Compare Source
Node.js 24.10.0
v24.9.0: 24.9.0Compare Source
Node.js 24.9.0
v24.8.0: 24.8.0Compare Source
Node.js 24.8.0
v24.7.0: 24.7.0Compare Source
Node.js 24.7.0
v24.6.0: 24.6.0Compare Source
Node.js 24.6.0
v24.5.0: 24.5.0Compare Source
Node.js 24.5.0
v24.4.1: 24.4.1Compare Source
Node.js 24.4.1
v24.4.0: 24.4.0Compare Source
Node.js 24.4.0
v24.3.0: 24.3.0Compare Source
Node.js 24.3.0
v24.2.0: 24.2.0Compare Source
Node.js 24.2.0
v24.1.0: 24.1.0Compare Source
Node.js 24.1.0
v24.0.2: 24.0.2Compare Source
Node.js 24.0.2
v24.0.1: 24.0.1Compare Source
Node.js 24.0.1
v24.0.0: 24.0.0Compare Source
Node.js 24.0.0
v22.23.2: 22.23.2Compare Source
Node.js 22.23.2
v22.23.1: 22.23.1Compare Source
Node.js 22.23.1
v22.23.0: 22.23.0Compare Source
Node.js 22.23.0
v22.22.3: 22.22.3Compare Source
Node.js 22.22.3
v22.22.2: 22.22.2Compare Source
Node.js 22.22.2
v22.22.1: 22.22.1Compare Source
Node.js 22.22.1
v22.22.0: 22.22.0Compare Source
Node.js 22.22.0
v22.21.1: 22.21.1Compare Source
Node.js 22.21.1
v22.21.0: 22.21.0Compare Source
Node.js 22.21.0
v22.20.0: 22.20.0Compare Source
Node.js 22.20.0
v22.19.0: 22.19.0Compare Source
Node.js 22.19.0
v22.18.0: 22.18.0Compare Source
Node.js 22.18.0
v22.17.1: 22.17.1Compare Source
Node.js 22.17.1
v22.17.0: 22.17.0Compare Source
Node.js 22.17.0
v22.16.0: 22.16.0Compare Source
Node.js 22.16.0
v22.15.1: 22.15.1Compare Source
Node.js 22.15.1
v22.15.0: 22.15.0Compare Source
Node.js 22.15.0
v22.14.0: 22.14.0Compare Source
Node.js 22.14.0
v22.13.1: 22.13.1Compare Source
Node.js 22.13.1
v22.13.0: 22.13.0Compare Source
Node.js 22.13.0
v22.12.0: 22.12.0Compare Source
Node.js 22.12.0
v22.11.0: 22.11.0Compare Source
Node.js 22.11.0
v22.10.0: 22.10.0Compare Source
Node.js 22.10.0
v22.9.0: 22.9.0Compare Source
Node.js 22.9.0
v22.8.0: 22.8.0Compare Source
Node.js 22.8.0
v22.7.0: 22.7.0Compare Source
Node.js 22.7.0
v22.6.0: 22.6.0Compare Source
Node.js 22.6.0
v22.5.1: 22.5.1Compare Source
Node.js 22.5.1
v22.5.0: 22.5.0Compare Source
Node.js 22.5.0
v22.4.1: 22.4.1Compare Source
Node.js 22.4.1
v22.4.0: 22.4.0Compare Source
Node.js 22.4.0
v22.3.0: 22.3.0Compare Source
Node.js 22.3.0
v22.2.0: 22.2.0Compare Source
Node.js 22.2.0
v22.1.0: 22.1.0Compare Source
Node.js 22.1.0
v22.0.0: 22.0.0Compare Source
Node.js 22.0.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.