Skip to content

feat(versioning): add a github-actions versioning - #42712

Merged
jamietanna merged 1 commit into
mainfrom
feat/actions
Apr 17, 2026
Merged

feat(versioning): add a github-actions versioning#42712
jamietanna merged 1 commit into
mainfrom
feat/actions

Conversation

@jamietanna

@jamietanna jamietanna commented Apr 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Changes

GitHub Actions' versioning somewhat mirrors the SemVer-style versioning,
but doesn't quite.

This is in the case that it's common to use (mutable) tags like v7 or
v4.2, as well as full SemVer style v1.2.3andv1.3.4-rc2`, doesn't
quite match it.

In addition, with GitHub's recent move to introduce Immutable Tags,
these require new releases to be a full SemVer major.minor.patch tag.

However, we don't currently have a way to take users from @v7 to
@v8.1.1, in the case they're using Immutable Tags.

Given this isn't currently straightforward with any of our existing
SemVer-y versioning modules like semver-coerced or semver-partial,
we should instead introduce a specific Versioning module.

This mostly covers the functionality that semver-partial has, but
needs to take advantage of the allVersions parameter to find the
"shortest" possible tag for a given resolved Semantic Version.

This was previously attempted in previous changes, but reverted in
#42707 due to additional complexity.

We won't turn it on by default right now, but in #42713

Context

Please select one of the following:

  • This closes an existing Issue, Closes: #
  • This doesn't close an Issue, but I accept the risk that this PR may be closed if maintainers disagree with its opening or implementation

AI assistance disclosure

Did you use AI tools to create any part of this pull request?

Please select one option and, if yes, briefly describe how AI was used (e.g., code, tests, docs) and which tool(s) you used.

  • No — I did not use AI for this contribution.
  • Yes — minimal assistance (e.g., IDE autocomplete, small code completions, grammar fixes).
  • Yes — substantive assistance (AI-generated non‑trivial portions of code, tests, or documentation).
  • Yes — other (please describe):

Initial work by Claude Sonnet 4.6 to bootstrap the github-actions from semver-partial, but then modified by hand to add "shortest" path detection

Documentation (please check one with an [x])

  • I have updated the documentation, or
  • No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

  • Code inspection only, or
  • Newly added/modified unit tests, or
  • No unit tests, but ran on a real repository, or
  • Both unit tests + ran on a real repository

The public repository: JamieTanna-Mend-testing/setup-uv#3

jamietanna
jamietanna commented Apr 17, 2026
View reviewed changes
Comment thread lib/modules/versioning/github-actions/index.ts Outdated
@jamietanna
jamietanna force-pushed the feat/actions branch 4 times, most recently from 94933f1 to 1b8b097 Compare April 17, 2026 15:55
@jamietanna
jamietanna requested a review from a team April 17, 2026 15:56
@jamietanna
jamietanna removed the request for review from a team April 17, 2026 15:58
@jamietanna
jamietanna requested review from a team and zharinov April 17, 2026 16:00
@jamietanna
jamietanna marked this pull request as ready for review April 17, 2026 16:00
@github-actions
github-actions Bot requested a review from viceice April 17, 2026 16:00
@jamietanna Claude Sonnet 4.6
feat(versioning): add a github-actions versioning
5306786 
GitHub Actions' versioning somewhat mirrors the SemVer-style versioning,
but doesn't quite.

This is in the case that it's common to use (mutable) tags like `v7` or
`v4.2`, as well as full SemVer style` `v1.2.3` and `v1.3.4-rc2`, doesn't
quite match it.

In addition, with GitHub's recent move to introduce Immutable Tags,
these require new releases to be a full SemVer `major.minor.patch` tag.

However, we don't currently have a way to take users from `@v7` to
`@v8.1.1`, in the case they're using Immutable Tags.

Given this isn't currently straightforward with any of our existing
SemVer-y versioning modules like `semver-coerced` or `semver-partial`,
we should instead introduce a specific Versioning module.

This mostly covers the functionality that `semver-partial` has, but
needs to take advantage of the `allVersions` parameter to find the
"shortest" possible tag for a given resolved Semantic Version.

This was previously attempted in previous changes, but reverted in
db64cc6 due to additional complexity.

We won't turn it on by default right now, but as a future change.

Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io>
@jamietanna
jamietanna enabled auto-merge April 17, 2026 16:39
@jamietanna
jamietanna added this pull request to the merge queue Apr 17, 2026
Merged via the queue into main with commit d508716 Apr 17, 2026
46 checks passed
@jamietanna
jamietanna deleted the feat/actions branch April 17, 2026 19:14
@github-actions

github-actions Bot commented Apr 17, 2026

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 43.129.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

renovate Bot added a commit to sdwilsh/ansible-playbooks that referenced this pull request Apr 17, 2026
@renovate
chore(deps): update dependency renovatebot/renovate to v43.129.0
d3eb49d 
##### [\`43.129.0\`](https://github.com/renovatebot/renovate/releases/tag/43.129.0)

##### Features

- **versioning:** add a `github-actions` versioning ([#42712](renovatebot/renovate#42712)) ([d508716](renovatebot/renovate@d508716))

---
##### [\`43.128.1\`](https://github.com/renovatebot/renovate/releases/tag/43.128.1)

##### Bug Fixes

- **datasource/npm:** catch invalid engines ([#42718](renovatebot/renovate#42718)) ([06cf949](renovatebot/renovate@06cf949))

##### Continuous Integration

- add an auto-label for new `monorepo.json` onboarding ([#42660](renovatebot/renovate#42660)) ([5cfb467](renovatebot/renovate@5cfb467))
- **auto-label:** manually comment + close issues ([#42722](renovatebot/renovate#42722)) ([170cf56](renovatebot/renovate@170cf56))

---
##### [\`43.128.0\`](renovatebot/renovate@43.127.3...43.128.0)


---
##### [\`43.127.3\`](https://github.com/renovatebot/renovate/releases/tag/43.127.3)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.35.2 (main) ([#42717](renovatebot/renovate#42717)) ([a4456c1](renovatebot/renovate@a4456c1))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v4.5.24 (main) ([#42665](renovatebot/renovate#42665)) ([19a2409](renovatebot/renovate@19a2409))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.6.23 (main) ([#42715](renovatebot/renovate#42715)) ([1953812](renovatebot/renovate@1953812))

##### Code Refactoring

- **logger:** use expose to load bunyan ([#42714](renovatebot/renovate#42714)) ([954ec4f](renovatebot/renovate@954ec4f))

---
##### [\`43.127.2\`](https://github.com/renovatebot/renovate/releases/tag/43.127.2)

##### Bug Fixes

- **manager/github-actions:** revert recent changes ([#42707](renovatebot/renovate#42707)) ([db64cc6](renovatebot/renovate@db64cc6)), closes [#42690](renovatebot/renovate#42690) [#42683](renovatebot/renovate#42683) [#42685](renovatebot/renovate#42685)
- **presets:** restore custom `versioning` ([#42693](renovatebot/renovate#42693)) ([5437860](renovatebot/renovate@5437860))

##### Miscellaneous Chores

- **deps:** update devcontainers/ci action to v0.3.1900000449 (main) ([#42705](renovatebot/renovate#42705)) ([fe10c94](renovatebot/renovate@fe10c94))

---
##### [\`43.127.1\`](renovatebot/renovate@43.127.0...43.127.1)


---
##### [\`43.127.0\`](renovatebot/renovate@43.126.0...43.127.0)


---
##### [\`43.126.0\`](https://github.com/renovatebot/renovate/releases/tag/43.126.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.34.0 (main) ([#42697](renovatebot/renovate#42697)) ([4b61c70](renovatebot/renovate@4b61c70))

##### Miscellaneous Chores

- **deps:** update dependency node to v24.15.0 (main) ([#42695](renovatebot/renovate#42695)) ([dc90208](renovatebot/renovate@dc90208))

---
##### [\`43.125.1\`](https://github.com/renovatebot/renovate/releases/tag/43.125.1)

##### Bug Fixes

- **manager/github-actions:** override `versioning` for Actions with Immutable Tags ([#42690](renovatebot/renovate#42690)) ([1b0785b](renovatebot/renovate@1b0785b))

---
##### [\`43.125.0\`](https://github.com/renovatebot/renovate/releases/tag/43.125.0)

##### Features

- **replacements:** migrate users to astral/setup-uv v8 ([#42683](renovatebot/renovate#42683)) ([f5859c2](renovatebot/renovate@f5859c2))

---
##### [\`43.124.1\`](https://github.com/renovatebot/renovate/releases/tag/43.124.1)

##### Bug Fixes

- **docker:** only set `replaceString` if requested ([#42649](renovatebot/renovate#42649)) ([f6d4106](renovatebot/renovate@f6d4106))

---
##### [\`43.124.0\`](https://github.com/renovatebot/renovate/releases/tag/43.124.0)

##### Features

- **manager/github-actions:** use `semver-partial` as default versioning ([#42685](renovatebot/renovate#42685)) ([da04b8e](renovatebot/renovate@da04b8e)), closes [#42331](renovatebot/renovate#42331)

##### Documentation

- fix link in vulnerabilityAlerts docs ([#42680](renovatebot/renovate#42680)) ([b0fd397](renovatebot/renovate@b0fd397))

##### Continuous Integration

- **auto-prs:** handle draft PRs better ([#42686](renovatebot/renovate#42686)) ([0a86cc5](renovatebot/renovate@0a86cc5))

---
##### [\`43.123.8\`](https://github.com/renovatebot/renovate/releases/tag/43.123.8)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.35 (main) ([#42681](renovatebot/renovate#42681)) ([4b597ec](renovatebot/renovate@4b597ec))
- **package-rules:** correctly merge `force.enabled` ([#42679](renovatebot/renovate#42679)) ([ae22250](renovatebot/renovate@ae22250)), closes [#42666](renovatebot/renovate#42666)

##### Tests

- **git:** test failing when no git author is configured ([#42676](renovatebot/renovate#42676)) ([f9bddb9](renovatebot/renovate@f9bddb9))

---
##### [\`43.123.7\`](https://github.com/renovatebot/renovate/releases/tag/43.123.7)

##### Miscellaneous Chores

- **deps:** update vitest monorepo to v4.1.4 (main) ([#42677](renovatebot/renovate#42677)) ([7907192](renovatebot/renovate@7907192))

##### Build System

- **deps:** update node.js to v24.15.0 (main) ([#42678](renovatebot/renovate#42678)) ([a40a0f0](renovatebot/renovate@a40a0f0))

---
##### [\`43.123.6\`](https://github.com/renovatebot/renovate/releases/tag/43.123.6)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.34 (main) ([#42675](renovatebot/renovate#42675)) ([5251496](renovatebot/renovate@5251496))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.6.22 (main) ([#42674](renovatebot/renovate#42674)) ([f69abc5](renovatebot/renovate@f69abc5))

---
##### [\`43.123.5\`](https://github.com/renovatebot/renovate/releases/tag/43.123.5)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.33 (main) ([#42673](renovatebot/renovate#42673)) ([d33efe2](renovatebot/renovate@d33efe2))

---
##### [\`43.123.4\`](https://github.com/renovatebot/renovate/releases/tag/43.123.4)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.32 (main) ([#42669](renovatebot/renovate#42669)) ([a14d85b](renovatebot/renovate@a14d85b))

---
##### [\`43.123.3\`](https://github.com/renovatebot/renovate/releases/tag/43.123.3)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.31 (main) ([#42668](renovatebot/renovate#42668)) ([7d2c1ac](renovatebot/renovate@7d2c1ac))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.6.21 (main) ([#42667](renovatebot/renovate#42667)) ([f891066](renovatebot/renovate@f891066))

---
##### [\`43.123.2\`](renovatebot/renovate@43.123.1...43.123.2)


---
##### [\`43.123.1\`](https://github.com/renovatebot/renovate/releases/tag/43.123.1)

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v4.5.22 (main) ([#42658](renovatebot/renovate#42658)) ([9e33c20](renovatebot/renovate@9e33c20))

##### Build System

- **deps:** update dependency [@renovatebot/pgp](https://github.com/renovatebot/pgp) to v1.3.6 (main) ([#42657](renovatebot/renovate#42657)) ([80146b2](renovatebot/renovate@80146b2))

##### Continuous Integration

- auto-label `needs-discussion` on externally-raised Issues ([#42656](renovatebot/renovate#42656)) ([6a0e718](renovatebot/renovate@6a0e718))

---
##### [\`43.123.0\`](https://github.com/renovatebot/renovate/releases/tag/43.123.0)

##### Features

- add XcodeGen manager for Swift package dependencies in project.yml files ([#41889](renovatebot/renovate#41889)) ([0ff55d2](renovatebot/renovate@0ff55d2))
- **presets:** add `BUN_CONFIG_MAX_HTTP_REQUESTS` to safe global env ([#41350](renovatebot/renovate#41350)) ([1316fd7](renovatebot/renovate@1316fd7))
- **presets:** add changelogUrl link for Forgejo and Gitea digest updates ([#41786](renovatebot/renovate#41786)) ([0f9a516](renovatebot/renovate@0f9a516))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v4.5.21 (main) ([#42654](renovatebot/renovate#42654)) ([3891a11](renovatebot/renovate@3891a11))

##### Code Refactoring

- **terraform-module:** replace interfaces with zod schemas and inline fixtures ([#42399](renovatebot/renovate#42399)) ([914c55b](renovatebot/renovate@914c55b))

---
##### [\`43.122.0\`](https://github.com/renovatebot/renovate/releases/tag/43.122.0)

##### Features

- **manager/ant:** support custom `registryUrls` ([#42641](renovatebot/renovate#42641)) ([28ab04b](renovatebot/renovate@28ab04b))

##### Documentation

- use single quotes ([#42648](renovatebot/renovate#42648)) ([3c8521e](renovatebot/renovate@3c8521e))

##### Miscellaneous Chores

- **deps:** update github/codeql-action action to v4.35.2 (main) ([#42650](renovatebot/renovate#42650)) ([40100d0](renovatebot/renovate@40100d0))

---
##### [\`43.121.0\`](https://github.com/renovatebot/renovate/releases/tag/43.121.0)

##### Features

- **manager/ant:** add `coords=` attribute syntax support ([#42635](renovatebot/renovate#42635)) ([15c8ab5](renovatebot/renovate@15c8ab5))
- **terraform-provider:** use registry v2 API for release timestamps ([#42340](renovatebot/renovate#42340)) ([f421075](renovatebot/renovate@f421075))

##### Bug Fixes

- **git:** don't pass extraCloneOpts to ls-remote when local clone exists ([#42491](renovatebot/renovate#42491)) ([70fa962](renovatebot/renovate@70fa962))
- **gitlab:** loosen re-approve constraints during updatePr ([#42528](renovatebot/renovate#42528)) ([7b4f75b](renovatebot/renovate@7b4f75b))

##### Documentation

- correct name of `osv-offline` ([#42486](renovatebot/renovate#42486)) ([0fbc124](renovatebot/renovate@0fbc124))
- **minimum-release-age:** add reference to cooldowns ([#42640](renovatebot/renovate#42640)) ([25e47df](renovatebot/renovate@25e47df))

##### Miscellaneous Chores

- **deps:** update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1 (main) ([#42642](renovatebot/renovate#42642)) ([61947e2](renovatebot/renovate@61947e2))

##### Code Refactoring

- **cache:** Remove obsolete compress flag ([#42563](renovatebot/renovate#42563)) ([f49de7a](renovatebot/renovate@f49de7a))

##### Build System

- **deps:** update dependency [@renovatebot/osv-offline](https://github.com/renovatebot/osv-offline) to v2.5.0 (main) ([#42645](renovatebot/renovate#42645)) ([4cb4030](renovatebot/renovate@4cb4030))

---
##### [\`43.120.2\`](https://github.com/renovatebot/renovate/releases/tag/43.120.2)

##### Bug Fixes

- **vulnerability:** remove matchFileNames restriction from GitHub vulnerability alerts ([#42636](renovatebot/renovate#42636)) ([593a2b1](renovatebot/renovate@593a2b1))

---
##### [\`43.120.1\`](https://github.com/renovatebot/renovate/releases/tag/43.120.1)

##### Bug Fixes

- **logger:** log file using pretty format not working ([#42319](renovatebot/renovate#42319)) ([1c886e0](renovatebot/renovate@1c886e0))

---
##### [\`43.120.0\`](https://github.com/renovatebot/renovate/releases/tag/43.120.0)

##### Features

- **vulnerability:** add severity and CVSS details to GitHub Dependabot alerts ([#42568](renovatebot/renovate#42568)) ([1e906e8](renovatebot/renovate@1e906e8))

##### Miscellaneous Chores

- **instrumentation:** add timing statistics for `getReleases` ([#42523](renovatebot/renovate#42523)) ([f635ae2](renovatebot/renovate@f635ae2))

---
##### [\`43.119.0\`](https://github.com/renovatebot/renovate/releases/tag/43.119.0)

##### Features

- **manager/ant:** add <import> file traversal ([#42631](renovatebot/renovate#42631)) ([76dcc66](renovatebot/renovate@76dcc66))

---
##### [\`43.118.2\`](https://github.com/renovatebot/renovate/releases/tag/43.118.2)

##### Bug Fixes

- **util/git:** allow setting `config.hooksPath` ([#42630](renovatebot/renovate#42630)) ([33c1bf5](renovatebot/renovate@33c1bf5)), closes [#42588](renovatebot/renovate#42588) [#42628](https://github.com/renovatebot/renovate/issues/42628)

---
##### [\`43.118.1\`](https://github.com/renovatebot/renovate/releases/tag/43.118.1)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.30 (main) ([#42629](renovatebot/renovate#42629)) ([015264e](renovatebot/renovate@015264e))

##### Miscellaneous Chores

- expose known environment variables ([#42201](renovatebot/renovate#42201)) ([b39b50f](renovatebot/renovate@b39b50f))

---
##### [\`43.118.0\`](https://github.com/renovatebot/renovate/releases/tag/43.118.0)

##### Features

- **manager/ant:** add property resolution and .properties file support ([#42175](renovatebot/renovate#42175)) ([ef8e6c8](renovatebot/renovate@ef8e6c8))

---
##### [\`43.117.0\`](https://github.com/renovatebot/renovate/releases/tag/43.117.0)

##### Features

- **bitbucket-pipelines:** update file patterns to support shared configs ([#41704](renovatebot/renovate#41704)) ([53bd796](renovatebot/renovate@53bd796))
- **cache:** add a in-memory expiry map to package file cache ([#42531](renovatebot/renovate#42531)) ([5184761](renovatebot/renovate@5184761))

---
##### [\`43.116.1\`](https://github.com/renovatebot/renovate/releases/tag/43.116.1)

##### Build System

- **deps:** update dependency [@renovatebot/pgp](https://github.com/renovatebot/pgp) to v1.3.5 (main) ([#42626](renovatebot/renovate#42626)) ([7363aee](renovatebot/renovate@7363aee))

---
##### [\`43.116.0\`](https://github.com/renovatebot/renovate/releases/tag/43.116.0)

##### Features

- **osv:** mark malicious packages with `skipReason`s ([#42510](renovatebot/renovate#42510)) ([01f2479](renovatebot/renovate@01f2479))

##### Miscellaneous Chores

- **deps:** update dependency typescript to v6 (main) ([#42615](renovatebot/renovate#42615)) ([d9417b0](renovatebot/renovate@d9417b0))

##### Code Refactoring

- move `requireConfig` to `InheritConfig` ([#41385](renovatebot/renovate#41385)) ([36f9d4a](renovatebot/renovate@36f9d4a))

---
##### [\`43.115.1\`](https://github.com/renovatebot/renovate/releases/tag/43.115.1)

##### Miscellaneous Chores

- **deps:** update actions/github-script action to v9 (main) ([#42613](renovatebot/renovate#42613)) ([1fac64b](renovatebot/renovate@1fac64b))
- **deps:** update actions/upload-pages-artifact action to v5 (main) ([#42614](renovatebot/renovate#42614)) ([cf79688](renovatebot/renovate@cf79688))
- **deps:** update dependency vitest-mock-extended to v4 (main) ([#42616](renovatebot/renovate#42616)) ([1afe9a7](renovatebot/renovate@1afe9a7))
- **deps:** update nick-fields/retry action to v4 (main) ([#42617](renovatebot/renovate#42617)) ([7eee338](renovatebot/renovate@7eee338))
- **deps:** update slackapi/slack-github-action action to v3 (main) ([#42619](renovatebot/renovate#42619)) ([d2d8297](renovatebot/renovate@d2d8297))
- **deps:** update vitest monorepo to v4.1.3 (main) ([#42623](renovatebot/renovate#42623)) ([6cf2410](renovatebot/renovate@6cf2410))
- drop obsolete tsconfig ([#42622](renovatebot/renovate#42622)) ([fcf1e20](renovatebot/renovate@fcf1e20))
- **renovate:** disable next branch ([#42620](renovatebot/renovate#42620)) ([d2abeb4](renovatebot/renovate@d2abeb4))
- **tsdown:** migrate config ([#42621](renovatebot/renovate#42621)) ([32964bd](renovatebot/renovate@32964bd))
- **types:** add `skipStage=enrichment` ([#42585](renovatebot/renovate#42585)) ([4faa847](renovatebot/renovate@4faa847))

##### Build System

- **deps:** update dependency p-queue to v9.1.2 (main) ([#42624](renovatebot/renovate#42624)) ([19baa76](renovatebot/renovate@19baa76))
- **deps:** update dependency simple-git to v3.35.2 (main) ([#42588](renovatebot/renovate#42588)) ([a7b5b48](renovatebot/renovate@a7b5b48))

---
##### [\`43.115.0\`](https://github.com/renovatebot/renovate/releases/tag/43.115.0)

##### Features

- **packageRules:** bumpVersions.type sync ([#42540](renovatebot/renovate#42540)) ([0389869](renovatebot/renovate@0389869))

---
##### [\`43.114.0\`](https://github.com/renovatebot/renovate/releases/tag/43.114.0)

##### Features

- **manager/mise:** add support for openfga ([#42611](renovatebot/renovate#42611)) ([203c5fe](renovatebot/renovate@203c5fe))

##### Miscellaneous Chores

- **deps:** update zizmorcore/zizmor-action action to v0.5.3 (main) ([#42607](renovatebot/renovate#42607)) ([c815d30](renovatebot/renovate@c815d30))
- **types:** add a strong type for `ToolName` and `ConstraintName` ([#42589](renovatebot/renovate#42589)) ([1044a80](renovatebot/renovate@1044a80)), closes [#41849](renovatebot/renovate#41849)

---
##### [\`43.113.0\`](https://github.com/renovatebot/renovate/releases/tag/43.113.0)

##### Features

- **sbt:** support anonymous objects and dotted symbols for version declaration ([#40699](renovatebot/renovate#40699)) ([ef3c964](renovatebot/renovate@ef3c964))

##### Bug Fixes

- **workers/repository:** don't include `skipReason`'d dependencies in flattened updates ([#42595](renovatebot/renovate#42595)) ([f8b4477](renovatebot/renovate@f8b4477)), closes [#42510](renovatebot/renovate#42510)

##### Miscellaneous Chores

- **deps:** update actions/cache action to v5.0.5 (main) ([#42598](renovatebot/renovate#42598)) ([a808338](renovatebot/renovate@a808338))
- **deps:** update containerbase/internal-tools action to v4.5.20 (main) ([#42602](renovatebot/renovate#42602)) ([d2131a7](renovatebot/renovate@d2131a7))
- **deps:** update dependency [@smithy/util-stream](https://github.com/smithy/util-stream) to v4.5.22 (main) ([#42603](renovatebot/renovate#42603)) ([81e51cb](renovatebot/renovate@81e51cb))

---
##### [\`43.112.1\`](https://github.com/renovatebot/renovate/releases/tag/43.112.1)

##### Bug Fixes

- **cache:** Improve SQLite cache error handling ([#42557](renovatebot/renovate#42557)) ([50a2bac](renovatebot/renovate@50a2bac))

##### Code Refactoring

- **dashboard:** align terminology with other sections ([#42354](renovatebot/renovate#42354)) ([27f0797](renovatebot/renovate@27f0797))

---
##### [\`43.112.0\`](https://github.com/renovatebot/renovate/releases/tag/43.112.0)

##### Features

- **cache:** Add `writeSchema` to Maven cache provider ([#42570](renovatebot/renovate#42570)) ([e33aa4c](renovatebot/renovate@e33aa4c))

##### Miscellaneous Chores

- **deps:** update dependency oxlint-tsgolint to v0.20.0 (main) ([#42593](renovatebot/renovate#42593)) ([d80881e](renovatebot/renovate@d80881e))

---
##### [\`43.111.3\`](https://github.com/renovatebot/renovate/releases/tag/43.111.3)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.29 (main) ([#42592](renovatebot/renovate#42592)) ([edc474a](renovatebot/renovate@edc474a))

##### Documentation

- add Renovate Operator as Kubernetes-native option ([#42506](renovatebot/renovate#42506)) ([91a7213](renovatebot/renovate@91a7213))

---
##### [\`43.111.2\`](https://github.com/renovatebot/renovate/releases/tag/43.111.2)

##### Bug Fixes

- **github-actions:** use correct datasource for Zizmor version ([#42587](renovatebot/renovate#42587)) ([ea1e60e](renovatebot/renovate@ea1e60e))

---
##### [\`43.111.1\`](https://github.com/renovatebot/renovate/releases/tag/43.111.1)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.33.28 (main) ([#42580](renovatebot/renovate#42580)) ([216fc99](renovatebot/renovate@216fc99))

##### Documentation

- update references to python to [`8428c32`](renovatebot/renovate@8428c32) (main) ([#42572](renovatebot/renovate#42572)) ([c549ff7](renovatebot/renovate@c549ff7))
- update references to renovatebot/github-action to v46.1.8 (main) ([#42573](renovatebot/renovate#42573)) ([da4e84e](renovatebot/renovate@da4e84e))
- update references to renovatebot/github-action to v46.1.9 (main) ([#42577](renovatebot/renovate#42577)) ([2870abe](renovatebot/renovate@2870abe))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v4.5.19 (main) ([#42574](renovatebot/renovate#42574)) ([f31e3d4](renovatebot/renovate@f31e3d4))
- **deps:** update dependency [@containerbase/istanbul-reports-html](https://github.com/containerbase/istanbul-reports-html) to v1.1.43 (main) ([#42575](renovatebot/renovate#42575)) ([7af9aed](renovatebot/renovate@7af9aed))
- **deps:** update dependency [@containerbase/semantic-release-pnpm](https://github.com/containerbase/semantic-release-pnpm) to v1.3.33 (main) ([#42576](renovatebot/renovate#42576)) ([3870e76](renovatebot/renovate@3870e76))
- **deps:** update dependency nock to v14.0.12 (main) ([#42571](renovatebot/renovate#42571)) ([81791bd](renovatebot/renovate@81791bd))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.6.20 (main) ([#42579](renovatebot/renovate#42579)) ([90a2429](renovatebot/renovate@90a2429))

---
##### [\`43.111.0\`](https://github.com/renovatebot/renovate/releases/tag/43.111.0)

##### Features

- **npm:** Trim response data before caching ([#42559](renovatebot/renovate#42559)) ([b359a1d](renovatebot/renovate@b359a1d))

##### Miscellaneous Chores

- **types:** allow `constraints` to be passed through to `getReleases` ([#42564](renovatebot/renovate#42564)) ([6238715](renovatebot/renovate@6238715))
viceice
viceice reviewed Apr 19, 2026
View reviewed changes
Comment thread lib/modules/versioning/github-actions/index.ts
if (!a || !b) {
return 0;
}
return semver.compare(a, b);

@viceice viceice Apr 19, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we should sort longer version first, otherwise it can suggest v7.0.0 -> v8?

Comment thread lib/modules/versioning/github-actions/index.spec.ts
${'v1.0.0'} | ${'1.0.0'} | ${0}
${'1.0.0'} | ${'v1.0.0'} | ${0}
${'v1.0.0'} | ${'1.0.1'} | ${-1}
${'1.0.1'} | ${'v1.0.0'} | ${1}

@viceice viceice Apr 19, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

v1 -> v1.0.0, v1.0 -> v1.0.00 and vice versa

@github-actions github-actions Bot locked as resolved and limited conversation to collaborators May 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@viceice viceice viceice left review comments
@secustor secustor secustor approved these changes
+1 more reviewer
@zharinov zharinov zharinov approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@jamietanna @zharinov @viceice @secustor