Update all by renovate[bot] · Pull Request #268 · DataDog/datadog-agent-dev

renovate · 2026-05-01T00:46:11Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/setup-python	action	minor	`v6.0.0` → `v6.2.0`
actions/upload-artifact	action	patch	`v7.0.0` → `v7.0.1`
astral-sh/setup-uv	action	minor	`v8.0.0` → `v8.1.0`
dtolnay/rust-toolchain (changelog)	action	digest	`5d45857` → `29eef33`
pypa/gh-action-pypi-publish	action	minor	`v1.13.0` → `v1.14.0`
python	uses-with	minor	`3.12` → `3.14`
softprops/action-gh-release	action	minor	`v2.4.0` → `v2.6.2`
taiki-e/install-action	action	minor	`v2.62.27` → `v2.77.5`	`v2.79.0` (+6)

Release Notes

actions/setup-python (actions/setup-python)

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancements:

Add support for pip-install input by @gowridurgad in #1201
Add graalpy early-access and windows builds by @timfel in #880

Dependency and Documentation updates:

Enhanced wording and updated example usage for allow-prereleases by @yarikoptic in #979
Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @dependabot in #1139
Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @dependabot in #1094
Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @dependabot in #1199
Upgrade requests from 2.32.2 to 2.32.4 by @dependabot in #1130
Upgrade prettier from 3.5.3 to 3.6.2 by @dependabot in #1234
Upgrade @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @dependabot in #1235

New Contributors

@yarikoptic made their first contribution in #979

Full Changelog: actions/setup-python@v6...v6.1.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

astral-sh/setup-uv (astral-sh/setup-uv)

`v8.1.0`: 🌈 New input `no-project`

Compare Source

Changes

This add the a new boolean input no-project.
It only makes sense to use in combination with activate-environment: true and will append --no project to the uv venv call. This is for example useful if you have a pyproject.toml file with parts unparseable by uv

🚀 Enhancements

Add input no-project in combination with activate-environment @eifinger (#856)

🧰 Maintenance

fix: grant contents:write to validate-release job @eifinger (#860)
Add a release-gate step to the release workflow @zanieb (#859)
Draft commitish releases @eifinger (#858)
Add action-types.yml to instructions @eifinger (#857)
chore: update known checksums for 0.11.7 @github-actions[bot] (#853)
Refactor version resolving @eifinger (#852)
chore: update known checksums for 0.11.6 @github-actions[bot] (#850)
chore: update known checksums for 0.11.5 @github-actions[bot] (#845)
chore: update known checksums for 0.11.4 @github-actions[bot] (#843)
Add a release workflow @zanieb (#839)
chore: update known checksums for 0.11.3 @github-actions[bot] (#836)

📚 Documentation

Update ignore-nothing-to-cache documentation @eifinger (#833)
Pin setup-uv docs to v8 @eifinger (#829)

⬆️ Dependency updates

chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 @dependabot[bot] (#855)

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

`v1.14.0`

Compare Source

Audit your supply chain regularly!

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @whitequark 💰 in #397.

📝 Docs

@woodruffw 💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #388 and @him2him2 💰 brushed up some grammar in the README and SECURITY docs via #395.

🛠️ Internal Updates

@woodruffw 💰 bumped sigstore and pypi-attestations in the lock file (#391) and @webknjaz 💰 added infra for using type annotations in the project (#381).

💪 New Contributors

@him2him2 made their first contribution in #395
@whitequark made their first contribution in #397

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @webknjaz 🇺🇦

🙏 Special Thanks to @facutuesca 💰 and @woodruffw 💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

actions/python-versions (python)

`v3.14.5`: 3.14.5

Compare Source

Python 3.14.5

`v3.14.4`: 3.14.4

Compare Source

Python 3.14.4

`v3.14.3`: 3.14.3

Compare Source

Python 3.14.3

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

`v3.13.13`: 3.13.13

Compare Source

Python 3.13.13

`v3.13.12`: 3.13.12

Compare Source

Python 3.13.12

`v3.13.11`: 3.13.11

Compare Source

Python 3.13.11

`v3.13.10`: 3.13.10

Compare Source

Python 3.13.10

`v3.13.9`: 3.13.9

Compare Source

Python 3.13.9

`v3.13.8`: 3.13.8

Compare Source

Python 3.13.8

`v3.13.7`: 3.13.7

Compare Source

Python 3.13.7

`v3.13.6`: 3.13.6

Compare Source

Python 3.13.6

`v3.13.5`: 3.13.5

Compare Source

Python 3.13.5

`v3.13.4`: 3.13.4

Compare Source

Python 3.13.4

`v3.13.3`: 3.13.3

Compare Source

Python 3.13.3

`v3.13.2`: 3.13.2

Compare Source

Python 3.13.2

`v3.13.1`: 3.13.1

Compare Source

Python 3.13.1

`v3.13.0`: 3.13.0

Compare Source

Python 3.13.0

softprops/action-gh-release (softprops/action-gh-release)

`v2.6.2`

Compare Source

What's Changed

Other Changes 🔄

chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in #775
chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by @dependabot[bot] in #777
chore(deps): bump vite from 8.0.0 to 8.0.5 by @dependabot[bot] in #781

Full Changelog: softprops/action-gh-release@v2...v2.6.2

`v2.6.1`

Compare Source

2.6.1 is a patch release focused on restoring linked discussion thread creation when
discussion_category_name is set. It fixes #764, where the draft-first publish flow
stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: preserve discussion category on publish by @chenrui333 in #765

`v2.6.0`

Compare Source

2.6.0 is a minor release centered on previous_tag support for generate_release_notes,
which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range.
It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync,
a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where
GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Exciting New Features 🎉

feat: support previous_tag for generate_release_notes by @pocesar in #372

Bug fixes 🐛

fix: recover concurrent asset metadata 404s by @chenrui333 in #760

Other Changes 🔄

docs: clarify reused draft release behavior by @chenrui333 in #759
docs: clarify working_directory input by @chenrui333 in #761
ci: verify dist bundle freshness by @chenrui333 in #762
fix: clarify immutable prerelease uploads by @chenrui333 in #763

`v2.5.3`

Compare Source

2.5.3 is a patch release focused on the remaining path-handling and release-selection bugs uncovered after 2.5.2.
It fixes #639, #571, #280, #614, #311, #403, and #368.
It also adds documentation clarifications for #541, #645, #542, #393, and #411,
where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: prefer token input over GITHUB_TOKEN by @chenrui333 in #751
fix: clean up duplicate drafts after canonicalization by @chenrui333 in #753
fix: support Windows-style file globs by @chenrui333 in #754
fix: normalize refs-tag inputs by @chenrui333 in #755
fix: expand tilde file paths by @chenrui333 in #756

Other Changes 🔄

docs: clarify token precedence by @chenrui333 in #752
docs: clarify GitHub release limits by @chenrui333 in #758
documentation clarifications for empty-token handling, preserve_order, and special-character asset filename behavior

Full Changelog: softprops/action-gh-release@v2...v2.5.3

`v2.5.2`

Compare Source

2.5.2 is a patch release focused on the remaining release-creation and prerelease regressions in the 2.5.x bug-fix cycle.
It fixes #705, fixes #708, fixes #740, fixes #741, and fixes #722.
Regression testing covers the shared-tag race, prerelease event behavior, dotfile asset labels,
same-filename concurrent uploads, and blocked-tag cleanup behavior.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: canonicalize releases after concurrent create by @chenrui333 in #746
fix: preserve prereleased events for prereleases by @chenrui333 in #748
fix: restore dotfile asset labels by @chenrui333 in #749
fix: handle upload already_exists races across workflows by @api2062 in #745
fix: clean up orphan drafts when tag creation is blocked by @chenrui333 in #750

New Contributors

@api2062 made their first contribution in #745

Full Changelog: softprops/action-gh-release@v2...v2.5.2

`v2.5.1`

Compare Source

2.5.1 is a patch release focused on regressions introduced in 2.5.0 and on release lookup reliability.
It fixes #713, addresses #703, and fixes #724. Regression testing shows that
current master no longer reproduces the finalize-race behavior reported in #704 and #709.

What's Changed

Bug fixes 🐛

fix: fetch correct asset URL after finalization; test; some refactoring by @pzhlkj6612 in #738
fix: release marked as 'latest' despite make_latest: false by @Boshen in #715
fix: use getReleaseByTag API instead of iterating all releases by @kim-em in #725

Other Changes 🔄

dependency updates, including the ESM/runtime compatibility refresh in #731

New Contributors

@autarch made their first contribution in #716
@pzhlkj6612 made their first contribution in #738
@Boshen made their first contribution in #715
@kim-em made their first contribution in #725

Full Changelog: softprops/action-gh-release@v2...v2.5.1

`v2.5.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat: mark release as draft until all artifacts are uploaded by @dumbmoron in #692

Other Changes 🔄

chore(deps): bump the npm group across 1 directory with 5 updates by @dependabot[bot] in #697
chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the github-actions group by @dependabot[bot] in #689

New Contributors

@dumbmoron made their first contribution in #692

Full Changelog: softprops/action-gh-release@v2.4.2...v2.5.0

`v2.4.2`

Compare Source

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in #684

Other Changes 🔄

dependency updates

New Contributors

@BeryJu made their first contribution in #684

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

`v2.4.1`

Compare Source

What's Changed

Other Changes 🔄

fix(util): support brace expansion globs containing commas in parseInputFiles by @Copilot in #672
fix: gracefully fallback to body when body_path cannot be read by @Copilot in #671

Full Changelog: softprops/action-gh-release@v2...v2.4.1

taiki-e/install-action (taiki-e/install-action)

`v2.77.5`: 2.77.5

Compare Source

Update biome@latest to 2.4.15.
Update mise@latest to 2026.5.4.
Update cargo-deny@latest to 0.19.5.

`v2.77.4`: 2.77.4

Compare Source

Update tombi@latest to 0.11.1.
Update cargo-llvm-cov@latest to 0.8.6.
Update uv@latest to 0.11.12.

`v2.77.3`: 2.77.3

Compare Source

Update typos@latest to 1.46.1.
Update rclone@latest to 1.74.1.
Update tombi@latest to 0.11.0.
Update osv-scanner@latest to 2.3.8.
Update mise@latest to 2026.5.3.

`v2.77.2`: 2.77.2

Compare Source

Update martin@latest to 1.9.0.
Update wasm-bindgen@latest to 0.2.121.
Update uv@latest to 0.11.11.
Update mise@latest to 2026.5.1.
Update prek@latest to 0.3.13.
Update tombi@latest to 0.10.6.

`v2.77.1`: 2.77.1

Compare Source

Support taiki-e/install-action@rust tag.
Update tombi@latest to 0.10.3.
Update martin@latest to 1.8.2.

`v2.77.0`: 2.77.0

Compare Source

Support rust. (#1779)

This installs rust using rustup.

If rustup is not yet installed, this action downloads rustup-init for the current platform using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

This also supports installing additional components at the same time by +<additional> syntax:
```
- uses: taiki-e/install-action@v2
  with:
    # Install rust stable with rustfmt component and wasm32-wasip1 target.
    tool: rust+rustfmt+wasm32-wasip1
    # When installing another rust version:
    # tool: rust@nightly + rustfmt + wasm32-wasip1
```
Fix issue where x86_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.
Update mise@latest to 2026.5.0.
Diagnostic improvements.