chore(deps): update github-actions deps (major) by renovate-bot · Pull Request #8229 · jaegertracing/jaeger

renovate-bot · 2026-03-21T22:32:33Z

This PR contains the following updates:

Package	Type	Update	Change
crazy-max/ghaction-import-gpg	action	major	`v6.3.0` → `v7.0.0`
docker/login-action	action	major	`v3` → `v4`
docker/setup-qemu-action	action	major	`v3.7.0` → `v4.0.0`

Release Notes

crazy-max/ghaction-import-gpg (crazy-max/ghaction-import-gpg)

`v7.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #241
Switch to ESM and update config/test wiring by @crazy-max in #239
Bump @actions/core from 1.11.1 to 3.0.0 in #232
Bump @actions/exec from 1.1.1 to 3.0.0 in #242
Bump brace-expansion from 1.1.11 to 1.1.12 in #221
Bump minimatch from 3.1.2 to 3.1.5 in #240
Bump openpgp from 6.1.0 to 6.3.0 in #233

Full Changelog: crazy-max/ghaction-import-gpg@v6.3.0...v7.0.0

docker/login-action (docker/login-action)

`v4`

Compare Source

docker/setup-qemu-action (docker/setup-qemu-action)

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #245
Switch to ESM and update config/test wiring by @crazy-max in #241
Bump @actions/core from 1.11.1 to 3.0.0 in #244
Bump @docker/actions-toolkit from 0.67.0 to 0.77.0 in #243
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #240
Bump js-yaml from 3.14.1 to 3.14.2 in #231
Bump lodash from 4.17.21 to 4.17.23 in #238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

Configuration

📅 Schedule: Branch creation - "on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: Mend Renovate <bot@renovateapp.com>

Copilot

Pull request overview

Updates several GitHub Actions used by the CI/release workflows to newer major versions, primarily for GPG key import, Docker registry login, and QEMU setup.

Changes:

Bump crazy-max/ghaction-import-gpg from v6.3.0 to v7.0.0 in the release workflow.
Bump docker/login-action from v3 to v4 where GHCR login is performed.
Bump docker/setup-qemu-action from v3.7.0 to v4.0.0 across multiple workflows.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
.github/workflows/ci-release.yml	Updates GPG import action + Docker login + QEMU setup for the release pipeline.
.github/workflows/ci-e2e-opensearch.yml	Updates QEMU setup action for OpenSearch e2e runs.
.github/workflows/ci-e2e-elasticsearch.yml	Updates QEMU setup action for Elasticsearch e2e runs.
.github/workflows/ci-docker-hotrod.yml	Updates QEMU setup action for Hotrod docker builds.
.github/workflows/ci-docker-build.yml	Updates QEMU setup action for docker image builds.
.github/workflows/ci-docker-all-in-one.yml	Updates Docker login action + QEMU setup for all-in-one builds.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-21T22:34:33Z

    - name: Configure GPG Key
      if: ${{ inputs.dry_run != true }}
-      uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
+      uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0


crazy-max/ghaction-import-gpg@v7 switches the action runtime to Node 24. Since this workflow runs on the custom jaeger-linux-amd64-32core-1200GB_SSD runner label (not GitHub-hosted), the job will fail if that runner isn't updated to an Actions Runner version that supports node24. Please either confirm/ensure the runner is upgraded accordingly, or keep this action on a Node-20-compatible major until the runner fleet is updated.

Suggested change

uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0

uses: crazy-max/ghaction-import-gpg@v6.0.0 # Node 20-compatible major; avoid node24 requirement of v7

Copilot · 2026-03-21T22:34:33Z

        password: ${{ secrets.GITHUB_TOKEN }}

-    - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
+    - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0


docker/setup-qemu-action@v4 also moves to a Node 24 runtime. Because this workflow runs on a custom runner label, please verify the self-hosted runner is on an Actions Runner version that supports node24 before merging, otherwise the release workflow may start failing at this step.

Suggested change

- uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0

- uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c1ac # v3.2.0

codecov · 2026-03-21T22:41:41Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.63%. Comparing base (4afa357) to head (7d56816).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8229      +/-   ##
==========================================
+ Coverage   95.61%   95.63%   +0.02%     
==========================================
  Files         319      319              
  Lines       16793    16793              
==========================================
+ Hits        16056    16060       +4     
+ Misses        582      579       -3     
+ Partials      155      154       -1

Flag	Coverage Δ
badger_direct	`9.05% <ø> (ø)`
badger_e2e	`1.04% <ø> (ø)`
cassandra-4.x-direct-manual	`13.25% <ø> (ø)`
cassandra-4.x-e2e-auto	`1.03% <ø> (ø)`
cassandra-4.x-e2e-manual	`1.03% <ø> (ø)`
cassandra-5.x-direct-manual	`13.25% <ø> (ø)`
cassandra-5.x-e2e-auto	`1.03% <ø> (ø)`
cassandra-5.x-e2e-manual	`1.03% <ø> (ø)`
clickhouse	`1.16% <ø> (ø)`
elasticsearch-6.x-direct	`16.83% <ø> (ø)`
elasticsearch-7.x-direct	`16.86% <ø> (ø)`
elasticsearch-8.x-direct	`17.01% <ø> (ø)`
elasticsearch-8.x-e2e	`1.04% <ø> (ø)`
elasticsearch-9.x-e2e	`1.04% <ø> (ø)`
grpc_direct	`7.79% <ø> (ø)`
grpc_e2e	`1.04% <ø> (ø)`
kafka-3.x-v2	`1.04% <ø> (ø)`
memory_v2	`1.04% <ø> (ø)`
opensearch-1.x-direct	`16.91% <ø> (ø)`
opensearch-2.x-direct	`16.91% <ø> (ø)`
opensearch-2.x-e2e	`1.04% <ø> (ø)`
opensearch-3.x-e2e	`1.04% <ø> (ø)`
query	`1.04% <ø> (ø)`
tailsampling-processor	`0.52% <ø> (ø)`
unittests	`94.32% <ø> (+0.02%)`	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

chore(deps): update github-actions deps

7d56816

Signed-off-by: Mend Renovate <bot@renovateapp.com>

renovate-bot requested a review from a team as a code owner March 21, 2026 22:32

Copilot AI review requested due to automatic review settings March 21, 2026 22:32

Copilot started reviewing on behalf of renovate-bot March 21, 2026 22:32 View session

Copilot AI reviewed Mar 21, 2026

View reviewed changes

yurishkuro added the changelog:dependencies Update to dependencies label Mar 21, 2026

yurishkuro approved these changes Mar 21, 2026

View reviewed changes

yurishkuro merged commit 938562f into jaegertracing:main Mar 21, 2026
73 of 75 checks passed

renovate-bot deleted the renovate/major-github-actions-deps branch March 21, 2026 23:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github-actions deps (major)#8229

chore(deps): update github-actions deps (major)#8229
yurishkuro merged 1 commit intojaegertracing:mainfrom
renovate-bot:renovate/major-github-actions-deps

renovate-bot commented Mar 21, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

codecov Bot commented Mar 21, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

	uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0
	uses: crazy-max/ghaction-import-gpg@v6.0.0 # Node 20-compatible major; avoid node24 requirement of v7

	- uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
	- uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c1ac # v3.2.0

Conversation

renovate-bot commented Mar 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.0.0

v4

v4.0.0

Configuration

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

codecov Bot commented Mar 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate-bot commented Mar 21, 2026 •

edited

Loading

`v7.0.0`

`v4`

`v4.0.0`

codecov Bot commented Mar 21, 2026 •

edited

Loading