Update [Github] Update GHA Dependencies by renovate-bot · Pull Request #194274 · llvm/llvm-project

renovate-bot · 2026-04-27T00:31:16Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
EnricoMi/publish-unit-test-result-action	action	minor	`v2.23.0` → `v2.24.0`
actions/attest-build-provenance	action	patch	`v4.1.0` → `v4.1.1`
actions/checkout	action	patch	`v6.0.2` → `v6.0.3`
actions/checkout	action	patch	`v6.0.1` → `v6.0.3`
actions/create-github-app-token	action	minor	`v3.1.1` → `v3.2.0`
actions/labeler	action	minor	`v6.0.1` → `v6.2.0`
actions/setup-node	action	minor	`v6.3.0` → `v6.5.0`
actions/setup-python	action	minor	`v6.2.0` → `v6.3.0`
actions/upload-artifact	action	patch	`v7.0.0` → `v7.0.1`
aminya/setup-cpp	action	patch	`v1.8.0` → `v1.8.1`
docker/login-action	action	minor	`v4.1.0` → `v4.4.0`
ghcr.io/llvm/amd64/ci-ubuntu-24.04-github-automation	container	digest	`82b5304` → `f419363`
ghcr.io/llvm/ci-ubuntu-24.04	container	digest	`cc4fd65` → `26c16c2`
ghcr.io/llvm/ci-ubuntu-24.04-abi-tests	container	digest	`cb3aea3` → `a948062`
ghcr.io/llvm/ci-ubuntu-24.04-lint	container	digest	`91665a4` → `416874e`
ghcr.io/llvm/libc-ubuntu-24.04	container	digest	`a902fb5` → `b9c8ea7`
github/codeql-action	action	minor	`v4.35.2` → `v4.37.0`	`v4.37.1`
hendrikmuhs/ccache-action	action	patch	`v1.2.22` → `v1.2.23`
zizmorcore/zizmor-action	action	minor	`v0.5.3` → `v0.6.0`

Release Notes

EnricoMi/publish-unit-test-result-action (EnricoMi/publish-unit-test-result-action)

`v2.24.0`

Compare Source

Adds the following improvements:

Fix: use env var indirection for inputs #737
Upgrading dependencies

Full Changelog: EnricoMi/publish-unit-test-result-action@v2.23.0...v2.24.0

actions/attest-build-provenance (actions/attest-build-provenance)

`v4.1.1`

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Update actions/attest to v4.1.1 by @bdehamer in #858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/create-github-app-token (actions/create-github-app-token)

`v3.2.0`

Compare Source

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)
support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
validate private-key input (#376) (f24bbd8)

actions/labeler (actions/labeler)

`v6.2.0`

Compare Source

What's Changed

Bug Fix

Improve PR number validation and warning messages in input handling by @chiranjib-swain in #939

Dependency Updates

Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override by @dependabot in #943
Bump @typescript-eslint/eslint-plugin from 8.59.1 to 8.61.1 by @dependabot in #942

Full Changelog: actions/labeler@v6.1.0...v6.2.0

`v6.1.0`

Compare Source

Enhancements

Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by @bluca in #923

Bug Fixes

Improve Labeler Action documentation and permission error handling by @chiranjib-swain in #897
Preserve manually added labels during workflow runs and refine label synchronization logic by @chiranjib-swain in #917

Dependency Updates

Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by @dependabot in #877
Upgrade minimatch from 10.0.1 to 10.2.3 by @dependabot in #926
Upgrade dependencies (@actions/core, @actions/github, js-yaml, minimatch, @typescript-eslint) by @Copilot in #934

New Contributors

@chiranjib-swain made their first contribution in #897
@bluca made their first contribution in #923
@Copilot made their first contribution in #934

Full Changelog: actions/labeler@v6...v6.1.0

actions/setup-node (actions/setup-node)

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

actions/setup-python (actions/setup-python)

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

aminya/setup-cpp (aminya/setup-cpp)

`v1.8.1`

Compare Source

docker/login-action (docker/login-action)

`v4.4.0`

Compare Source

`v4.3.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #1022
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
Bump js-yaml from 4.1.1 to 5.2.0 in #1028
Bump sigstore from 4.1.0 to 4.1.1 in #1031
Bump tmp from 0.2.5 to 0.2.7 in #1002
Bump undici from 6.24.1 to 6.27.0 in #1020
Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

github/codeql-action (github/codeql-action)

`v4.37.0`

Compare Source

Update default CodeQL bundle version to 2.26.0. #3995
In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

`v4.36.3`

Compare Source

No user facing changes.

`v4.36.2`

Compare Source

Cache CodeQL CLI version information across Actions steps. #3943
Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937
Update default CodeQL bundle version to 2.25.6. #3948

`v4.36.1`

Compare Source

No user facing changes.

`v4.36.0`

Compare Source

Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894
Add support for SHA-256 Git object IDs. #3893
Update default CodeQL bundle version to 2.25.5. #3926

`v4.35.5`

Compare Source

We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #3899
For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #3791
If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #3892
Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #3880

`v4.35.4`

Compare Source

Update default CodeQL bundle version to 2.25.4. #3881

`v4.35.3`

Compare Source

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837
Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850
Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853
Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852
Update default CodeQL bundle version to 2.25.3. #3865

hendrikmuhs/ccache-action (hendrikmuhs/ccache-action)

`v1.2.23`

Compare Source

What's Changed

Bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in #436
Bump @types/node from 25.5.0 to 25.6.0 by @dependabot[bot] in #440
Update ccache to 4.13.3 by @crueter in #441
Bump brace-expansion by @dependabot[bot] in #438
Support platforms without upstream ccache/sccache releases by @luhenry in #439

New Contributors

@luhenry made their first contribution in #439

Full Changelog: hendrikmuhs/ccache-action@v1.2.22...v1.2.23

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

`v0.6.0`

Compare Source

zizmor 1.27.0 is now the default version used by the action.

What's Changed

Fold Docker image pull output into a collapsed Actions log group by @woodruffw with @Copilot in #132
Readme: document missing inputs by @staabm in #130
ci: block version sync workflow on forks by @shaanmajid in #129
Sync zizmor versions by @github-actions[bot] in #137
Add collect input by @woodruffw in #139

New Contributors

@woodruffw with @Copilot made their first contribution in #132
@staabm made their first contribution in #130
@shaanmajid made their first contribution in #129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

`v0.5.7`

Compare Source

1.26.1 is now available via the action
1.26.1 is now the default version of zizmor used by the action

`v0.5.6`

Compare Source

1.25.2 is now available via the action
1.25.2 is now the default version of zizmor used by the action

`v0.5.5`

Compare Source

This is a no-op release.

`v0.5.4`

Compare Source

1.25.0 is now available via the action
1.25.0 is now the default version of zizmor used by the action

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 12:59 AM, only on Monday (* 0 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

llvmbot · 2026-04-27T00:31:57Z

@llvm/pr-subscribers-libcxx

@llvm/pr-subscribers-github-workflow

Author: Mend Renovate (renovate-bot)

Changes

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	`v6.3.0` → `v6.4.0`
ghcr.io/llvm/ci-ubuntu-24.04-abi-tests	container	digest	`cb3aea3` → `efa89c9`
hendrikmuhs/ccache-action	action	patch	`v1.2.22` → `v1.2.23`
python	uses-with	minor	`3.11.9` → `3.14.4`

Release Notes

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

`v6.4.0`

Compare Source

</details>

<details>
<summary>hendrikmuhs/ccache-action (hendrikmuhs/ccache-action)</summary>

`v1.2.23`

Compare Source

What's Changed

Bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in #436
Bump @types/node from 25.5.0 to 25.6.0 by @dependabot[bot] in #440
Update ccache to 4.13.3 by @crueter in #441
Bump brace-expansion by @dependabot[bot] in #438
Support platforms without upstream ccache/sccache releases by @luhenry in #439

New Contributors

@luhenry made their first contribution in #439

Full Changelog: <hendrikmuhs/ccache-action@v1.2.22...v1.2.23>

</details>

<details>
<summary>actions/python-versions (python)</summary>

`v3.14.4`: 3.14.4

Compare Source

Python 3.14.4

`v3.14.3`: 3.14.3

Compare Source

Python 3.14.3

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

`v3.13.13`: 3.13.13

Compare Source

Python 3.13.13

`v3.13.12`: 3.13.12

Compare Source

Python 3.13.12

`v3.13.11`: 3.13.11

Compare Source

Python 3.13.11

`v3.13.10`: 3.13.10

Compare Source

Python 3.13.10

`v3.13.9`: 3.13.9

Compare Source

Python 3.13.9

`v3.13.8`: 3.13.8

Compare Source

Python 3.13.8

`v3.13.7`: 3.13.7

Compare Source

Python 3.13.7

`v3.13.6`: 3.13.6

Compare Source

Python 3.13.6

`v3.13.5`: 3.13.5

Compare Source

Python 3.13.5

`v3.13.4`: 3.13.4

Compare Source

Python 3.13.4

`v3.13.3`: 3.13.3

Compare Source

Python 3.13.3

`v3.13.2`: 3.13.2

Compare Source

Python 3.13.2

`v3.13.1`: 3.13.1

Compare Source

Python 3.13.1

`v3.13.0`: 3.13.0

Compare Source

Python 3.13.0

`v3.12.13`: 3.12.13

Compare Source

Python 3.12.13

`v3.12.12`: 3.12.12

Compare Source

Python 3.12.12

`v3.12.11`: 3.12.11

Compare Source

Python 3.12.11

`v3.12.10`: 3.12.10

Compare Source

Python 3.12.10

`v3.12.9`: 3.12.9

Compare Source

Python 3.12.9

`v3.12.8`: 3.12.8

Compare Source

Python 3.12.8

`v3.12.7`: 3.12.7

Compare Source

Python 3.12.7

`v3.12.6`: 3.12.6

Compare Source

Python 3.12.6

`v3.12.5`: 3.12.5

Compare Source

Python 3.12.5

`v3.12.4`: 3.12.4

Compare Source

Python 3.12.4

`v3.12.3`: 3.12.3

Compare Source

Python 3.12.3

`v3.12.2`: 3.12.2

Compare Source

Python 3.12.2

`v3.12.1`: 3.12.1

Compare Source

Python 3.12.1

`v3.12.0`: 3.12.0

Compare Source

Python 3.12.0

`v3.11.15`: 3.11.15

Compare Source

Python 3.11.15

`v3.11.14`: 3.11.14

Compare Source

Python 3.11.14

`v3.11.13`: 3.11.13

Compare Source

Python 3.11.13

`v3.11.12`: 3.11.12

Compare Source

Python 3.11.12

`v3.11.11`: 3.11.11

Compare Source

Python 3.11.11

`v3.11.10`: 3.11.10

Compare Source

Python 3.11.10

</details>

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 12:59 AM, only on Monday (* 0 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Full diff: https://github.com/llvm/llvm-project/pull/194274.diff

12 Files Affected:

(modified) .github/workflows/ci-post-commit-analyzer.yml (+1-1)
(modified) .github/workflows/libc-fullbuild-tests.yml (+1-1)
(modified) .github/workflows/libc-overlay-tests.yml (+1-1)
(modified) .github/workflows/libclang-abi-tests.yml (+2-2)
(modified) .github/workflows/libclang-python-tests.yml (+1-1)
(modified) .github/workflows/llvm-abi-tests.yml (+2-2)
(modified) .github/workflows/llvm-bugs.yml (+1-1)
(modified) .github/workflows/mlir-spirv-tests.yml (+1-1)
(modified) .github/workflows/premerge.yaml (+1-1)
(modified) .github/workflows/release-binaries.yml (+1-1)
(modified) .github/workflows/spirv-tests.yml (+1-1)
(modified) .github/workflows/sycl-tests.yml (+1-1)

diff --git a/.github/workflows/ci-post-commit-analyzer.yml b/.github/workflows/ci-post-commit-analyzer.yml
index 9af759a547aa5..7833ced5bd7fd 100644
--- a/.github/workflows/ci-post-commit-analyzer.yml
+++ b/.github/workflows/ci-post-commit-analyzer.yml
@@ -46,7 +46,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
         with:
           # A full build of llvm, clang, lld, and lldb takes about 250MB
           # of ccache space. There's not much reason to have more than this,
diff --git a/.github/workflows/libc-fullbuild-tests.yml b/.github/workflows/libc-fullbuild-tests.yml
index 3a9d1436d5d48..4660dd195da89 100644
--- a/.github/workflows/libc-fullbuild-tests.yml
+++ b/.github/workflows/libc-fullbuild-tests.yml
@@ -117,7 +117,7 @@ jobs:
     # Do not use direct GHAC access even though it is supported by sccache. GHAC rejects
     # frequent small object writes.
     - name: Setup ccache
-      uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+      uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
       with:
         max-size: 1G
         key: libc_fullbuild_${{ matrix.c_compiler }}
diff --git a/.github/workflows/libc-overlay-tests.yml b/.github/workflows/libc-overlay-tests.yml
index 07059e0271af5..d61138b866534 100644
--- a/.github/workflows/libc-overlay-tests.yml
+++ b/.github/workflows/libc-overlay-tests.yml
@@ -53,7 +53,7 @@ jobs:
     # Do not use direct GHAC access even though it is supported by sccache. GHAC rejects
     # frequent small object writes.
     - name: Setup ccache
-      uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+      uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
       with:
         max-size: 1G
         key: libc_overlay_build_${{ matrix.os }}_${{ matrix.compiler.c_compiler }}
diff --git a/.github/workflows/libclang-abi-tests.yml b/.github/workflows/libclang-abi-tests.yml
index 9b8718d5539aa..5375daeb48bf8 100644
--- a/.github/workflows/libclang-abi-tests.yml
+++ b/.github/workflows/libclang-abi-tests.yml
@@ -86,7 +86,7 @@ jobs:
     needs: abi-dump-setup
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:cb3aea3ecdd521194ca12cfa239ab5a53f9e160a13a55ae3abdc1dfbf134476e" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:efa89c9ac6c1d3493b2e943d3d1e0c6d2a8a128840b48c14a4a003e1fee44d28" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
     strategy:
       matrix:
         name:
@@ -131,7 +131,7 @@ jobs:
     if: github.repository_owner == 'llvm'
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:cb3aea3ecdd521194ca12cfa239ab5a53f9e160a13a55ae3abdc1dfbf134476e" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:efa89c9ac6c1d3493b2e943d3d1e0c6d2a8a128840b48c14a4a003e1fee44d28" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
     needs:
       - abi-dump-setup
       - abi-dump
diff --git a/.github/workflows/libclang-python-tests.yml b/.github/workflows/libclang-python-tests.yml
index b417cd74c61a9..2384dafeaa93c 100644
--- a/.github/workflows/libclang-python-tests.yml
+++ b/.github/workflows/libclang-python-tests.yml
@@ -41,7 +41,7 @@ jobs:
           persist-credentials: false
           python-version: ${{ matrix.python-version }}
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
         with:
           max-size: 2G
           key: spirv-ubuntu-24.04
diff --git a/.github/workflows/llvm-abi-tests.yml b/.github/workflows/llvm-abi-tests.yml
index cb6c7601afe02..678fe07105c47 100644
--- a/.github/workflows/llvm-abi-tests.yml
+++ b/.github/workflows/llvm-abi-tests.yml
@@ -74,7 +74,7 @@ jobs:
     needs: abi-dump-setup
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:cb3aea3ecdd521194ca12cfa239ab5a53f9e160a13a55ae3abdc1dfbf134476e" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b"
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:efa89c9ac6c1d3493b2e943d3d1e0c6d2a8a128840b48c14a4a003e1fee44d28" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b"
     strategy:
       matrix:
         name:
@@ -135,7 +135,7 @@ jobs:
     if: github.repository_owner == 'llvm'
     runs-on: ubuntu-24.04
     container:
-      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:cb3aea3ecdd521194ca12cfa239ab5a53f9e160a13a55ae3abdc1dfbf134476e" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b
+      image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests@sha256:efa89c9ac6c1d3493b2e943d3d1e0c6d2a8a128840b48c14a4a003e1fee44d28" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b
     needs:
       - abi-dump-setup
       - abi-dump
diff --git a/.github/workflows/llvm-bugs.yml b/.github/workflows/llvm-bugs.yml
index 8f4a525c85d28..9fbe82d44fd73 100644
--- a/.github/workflows/llvm-bugs.yml
+++ b/.github/workflows/llvm-bugs.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-24.04
     if: github.repository == 'llvm/llvm-project'
     steps:
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
           check-latest: true
diff --git a/.github/workflows/mlir-spirv-tests.yml b/.github/workflows/mlir-spirv-tests.yml
index c9b1bc5542a45..d20b969b1197f 100644
--- a/.github/workflows/mlir-spirv-tests.yml
+++ b/.github/workflows/mlir-spirv-tests.yml
@@ -32,7 +32,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
         with:
           max-size: 2G
           key: spirv-mlir-ubuntu-24.04
diff --git a/.github/workflows/premerge.yaml b/.github/workflows/premerge.yaml
index 8026c98328a2c..35be0f97d9396 100644
--- a/.github/workflows/premerge.yaml
+++ b/.github/workflows/premerge.yaml
@@ -210,7 +210,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 2
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
         with:
           max-size: "2000M"
       - name: Install Ninja
diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml
index 1ea01738d75b7..49b8151cd3435 100644
--- a/.github/workflows/release-binaries.yml
+++ b/.github/workflows/release-binaries.yml
@@ -234,7 +234,7 @@ jobs:
     # get changed unexpectedly.
     - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
       with:
-        python-version: '3.11.9'
+        python-version: '3.14.4'
 
     # For some reason this is needed on Windows or else the build system can't find python3.lib.
     - name: Setup Python library path
diff --git a/.github/workflows/spirv-tests.yml b/.github/workflows/spirv-tests.yml
index e95e1cb557bc4..7a5b1ded03bf9 100644
--- a/.github/workflows/spirv-tests.yml
+++ b/.github/workflows/spirv-tests.yml
@@ -28,7 +28,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
         with:
           max-size: 2G
           key: spirv-ubuntu-24.04
diff --git a/.github/workflows/sycl-tests.yml b/.github/workflows/sycl-tests.yml
index dc10efd9140ae..b120929b7023f 100644
--- a/.github/workflows/sycl-tests.yml
+++ b/.github/workflows/sycl-tests.yml
@@ -27,7 +27,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@33522472633dbd32578e909b315f5ee43ba878ce # v1.2.22
+        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
         with:
           max-size: 2G
           key: sycl-ubuntu-24.04

tstellar · 2026-05-11T16:01:14Z

Is there some way to keep the commit messages from these changes under a certain length. I've noticed in the past, the commit messages are huge and it makes it harder to browse the history.

github-actions · 2026-05-12T10:30:44Z

🐧 Linux x64 Test Results

180951 tests passed
2563 tests skipped
1 test failed

Failed Tests

(click on a test name to see its output)

lldb-api

lldb-api.functionalities/gdb_remote_client/TestGdbClientModuleLoad.py

Script:
--
/usr/bin/python3 /home/gha/actions-runner/_work/llvm-project/llvm-project/lldb/test/API/dotest.py -u CXXFLAGS -u CFLAGS --env LLVM_LIBS_DIR=/home/gha/actions-runner/_work/llvm-project/llvm-project/build/./lib --env LLVM_INCLUDE_DIR=/home/gha/actions-runner/_work/llvm-project/llvm-project/build/include --env LLVM_TOOLS_DIR=/home/gha/actions-runner/_work/llvm-project/llvm-project/build/./bin --libcxx-include-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/include/c++/v1 --libcxx-include-target-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/include/x86_64-unknown-linux-gnu/c++/v1 --libcxx-library-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/./lib/x86_64-unknown-linux-gnu --triple x86_64-unknown-linux-gnu --build-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/lldb-test-build --lldb-module-cache-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/lldb-test-build/module-cache-lldb/lldb-api --clang-module-cache-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/lldb-test-build/module-cache-clang/lldb-api --executable /home/gha/actions-runner/_work/llvm-project/llvm-project/build/./bin/lldb --lldb-python-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/local/lib/python3.12/dist-packages --compiler /home/gha/actions-runner/_work/llvm-project/llvm-project/build/./bin/clang --dsymutil /home/gha/actions-runner/_work/llvm-project/llvm-project/build/./bin/dsymutil --make /usr/bin/gmake --llvm-tools-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/./bin --lldb-obj-root /home/gha/actions-runner/_work/llvm-project/llvm-project/build/tools/lldb --lldb-libs-dir /home/gha/actions-runner/_work/llvm-project/llvm-project/build/./lib --cmake-build-type Release /home/gha/actions-runner/_work/llvm-project/llvm-project/lldb/test/API/functionalities/gdb_remote_client -p TestGdbClientModuleLoad.py
--
Exit Code: 1

Command Output (stdout):
--
Skipping the following test categories: msvcstl, dsym, pdb, gmodules, debugserver, objc

--
Command Output (stderr):
--
PASS: LLDB (/home/gha/actions-runner/_work/llvm-project/llvm-project/build/bin/clang-x86_64) :: test_android_app_process (TestGdbClientModuleLoad.TestGdbClientModuleLoad.test_android_app_process)

--- FileCheck trace (code=1) ---
/home/gha/actions-runner/_work/llvm-project/llvm-project/build/./bin/FileCheck /home/gha/actions-runner/_work/llvm-project/llvm-project/lldb/test/API/functionalities/gdb_remote_client/TestGdbClientModuleLoad.py -check-prefix=VDSO

FileCheck input:
[  0] 98FC07B8 0x0000000000ef0000 [vdso] (0xef0000)
[  1] 75B11BBB-EF8B-5645-B9B1-A7261EC8ABCF-05413284 0x0000000000ed8ed0 /home/gha/actions-runner/bin/Runner.Worker 


FileCheck output:

/home/gha/actions-runner/_work/llvm-project/llvm-project/lldb/test/API/functionalities/gdb_remote_client/TestGdbClientModuleLoad.py:151:10: error: VDSO: expected string not found in input
 # VDSO: [ 0] {{.*}} 0x0000000000ee0000 {{.*}}module_load
         ^
<stdin>:1:1: note: scanning from here
[ 0] 98FC07B8 0x0000000000ef0000 [vdso] (0xef0000)
^

Input file: <stdin>
Check file: /home/gha/actions-runner/_work/llvm-project/llvm-project/lldb/test/API/functionalities/gdb_remote_client/TestGdbClientModuleLoad.py

-dump-input=help explains the following input dump.

Input was:
<<<<<<
             1: [ 0] 98FC07B8 0x0000000000ef0000 [vdso] (0xef0000) 
check:151'0    {                                                     search range start (exclusive)
check:151'1                                                          error: no match found in search range
             2: [ 1] 75B11BBB-EF8B-5645-B9B1-A7261EC8ABCF-05413284 0x0000000000ed8ed0 /home/gha/actions-runner/bin/Runner.Worker  
check:151'2                                                                                                                       } search range end (exclusive)
>>>>>>



FAIL: LLDB (/home/gha/actions-runner/_work/llvm-project/llvm-project/build/bin/clang-x86_64) :: test_vdso (TestGdbClientModuleLoad.TestGdbClientModuleLoad.test_vdso)
Log Files:
 - /home/gha/actions-runner/_work/llvm-project/llvm-project/build/lldb-test-build/functionalities/gdb_remote_client/TestGdbClientModuleLoad/Failure_test_vdso.log
======================================================================
FAIL: test_vdso (TestGdbClientModuleLoad.TestGdbClientModuleLoad.test_vdso)
   This test checks vdso loading in the situation where the process does
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/gha/actions-runner/_work/llvm-project/llvm-project/lldb/test/API/functionalities/gdb_remote_client/TestGdbClientModuleLoad.py", line 150, in test_vdso
    self.filecheck("image list", __file__, "-check-prefix=VDSO")
  File "/home/gha/actions-runner/_work/llvm-project/llvm-project/lldb/packages/Python/lldbsuite/test/lldbtest.py", line 2760, in filecheck
    self.assertEqual(cmd_status, 0)
AssertionError: 1 != 0
Config=x86_64-/home/gha/actions-runner/_work/llvm-project/llvm-project/build/bin/clang
----------------------------------------------------------------------
Ran 2 tests in 0.138s

FAILED (failures=1)

--

If these failures are unrelated to your changes (for example tests are broken or flaky at HEAD), please open an issue at https://github.com/llvm/llvm-project/issues and add the infrastructure label.

boomanaiden154 · 2026-05-14T04:24:42Z

Is there some way to keep the commit messages from these changes under a certain length. I've noticed in the past, the commit messages are huge and it makes it harder to browse the history.

I'm not sure there's any configuration option. I generally edit the commit message to something reasonable but leave the PR description just for the record.

github-actions · 2026-05-18T06:45:41Z

🪟 Windows x64 Test Results

140334 tests passed
5817 tests skipped

✅ The build succeeded and all tests passed.

tstellar · 2026-05-19T18:25:08Z

Is there some way to keep the commit messages from these changes under a certain length. I've noticed in the past, the commit messages are huge and it makes it harder to browse the history.

I'm not sure there's any configuration option. I generally edit the commit message to something reasonable but leave the PR description just for the record.

Doesn't the PR description end up being used for the commit message?

boomanaiden154

LGTM

tstellar · 2026-07-21T13:33:35Z

/cherry-pick 2494243

llvmbot · 2026-07-21T14:58:10Z

Failed to cherry-pick: 2494243

https://github.com/llvm/llvm-project/actions/runs/29834986671

Please manually backport the fix and push it to your github fork. Once this is done, please create a pull request

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action) | action | minor | `v2.23.0` → `v2.24.0` | | | [actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance) | action | patch | `v4.1.0` → `v4.1.1` | | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v6.0.2` → `v6.0.3` | | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v6.0.1` → `v6.0.3` | | | [actions/create-github-app-token](https://redirect.github.com/actions/create-github-app-token) | action | minor | `v3.1.1` → `v3.2.0` | | | [actions/labeler](https://redirect.github.com/actions/labeler) | action | minor | `v6.0.1` → `v6.2.0` | | | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | minor | `v6.3.0` → `v6.5.0` | | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | minor | `v6.2.0` → `v6.3.0` | | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | patch | `v7.0.0` → `v7.0.1` | | | [aminya/setup-cpp](https://redirect.github.com/aminya/setup-cpp) | action | patch | `v1.8.0` → `v1.8.1` | | | [docker/login-action](https://redirect.github.com/docker/login-action) | action | minor | `v4.1.0` → `v4.4.0` | | | ghcr.io/llvm/amd64/ci-ubuntu-24.04-github-automation | container | digest | `82b5304` → `f419363` | | | ghcr.io/llvm/ci-ubuntu-24.04 | container | digest | `cc4fd65` → `26c16c2` | | | ghcr.io/llvm/ci-ubuntu-24.04-abi-tests | container | digest | `cb3aea3` → `a948062` | | | ghcr.io/llvm/ci-ubuntu-24.04-lint | container | digest | `91665a4` → `416874e` | | | ghcr.io/llvm/libc-ubuntu-24.04 | container | digest | `a902fb5` → `b9c8ea7` | | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | minor | `v4.35.2` → `v4.37.0` | `v4.37.1` | | [hendrikmuhs/ccache-action](https://redirect.github.com/hendrikmuhs/ccache-action) | action | patch | `v1.2.22` → `v1.2.23` | | | [zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action) | action | minor | `v0.5.3` → `v0.6.0` | | (cherry picked from commit 2494243)

forking-renovate Bot assigned boomanaiden154 Apr 27, 2026

llvmbot added the github:workflow label Apr 27, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 2 times, most recently from 1b02ce6 to 5dda250 Compare May 4, 2026 14:08

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 3 times, most recently from 85f8709 to d64bbc4 Compare May 11, 2026 14:07

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from d64bbc4 to c6f3ccf Compare May 12, 2026 09:34

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from c6f3ccf to 310ef59 Compare May 14, 2026 02:56

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 3 times, most recently from c0dea5c to 8a2b570 Compare May 18, 2026 06:10

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 4 times, most recently from 8cd2b18 to 16673eb Compare May 19, 2026 18:10

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 6 times, most recently from 572365d to 6e90587 Compare May 25, 2026 12:04

llvmorg-github-actions Bot added the libc++ libc++ C++ Standard Library. Not GNU libstdc++. Not libc++abi. label May 25, 2026

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from 6e90587 to 85bba8a Compare May 26, 2026 17:53

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch 8 times, most recently from 458ed7c to de3685c Compare June 1, 2026 19:26

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from de3685c to 078bc7c Compare July 18, 2026 23:25

Update [Github] Update GHA Dependencies

a83a8cc

renovate-bot force-pushed the renovate/github-update-gha-dependencies branch from 078bc7c to a83a8cc Compare July 19, 2026 01:49

boomanaiden154 approved these changes Jul 19, 2026

View reviewed changes

boomanaiden154 merged commit 2494243 into llvm:main Jul 19, 2026
160 of 163 checks passed

tstellar added this to the LLVM 23.x Release milestone Jul 21, 2026

github-project-automation Bot added this to LLVM Release Status Jul 21, 2026

github-project-automation Bot moved this to Needs Triage in LLVM Release Status Jul 21, 2026

github-project-automation Bot moved this from Needs Triage to Done in LLVM Release Status Jul 21, 2026

llvmbot added the release:cherry-pick-failed label Jul 21, 2026

Uh oh!

Conversation

renovate-bot commented Apr 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Features

Bug Fixes

What's Changed

Bug Fix

Dependency Updates

Enhancements

Bug Fixes

Dependency Updates

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

llvmbot commented Apr 27, 2026 • edited by llvmorg-github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

v3.14.4: 3.14.4

v3.14.3: 3.14.3

v3.14.2: 3.14.2

v3.14.1: 3.14.1

v3.14.0: 3.14.0

v3.13.13: 3.13.13

v3.13.12: 3.13.12

v3.13.11: 3.13.11

v3.13.10: 3.13.10

v3.13.9: 3.13.9

v3.13.8: 3.13.8

v3.13.7: 3.13.7

v3.13.6: 3.13.6

v3.13.5: 3.13.5

v3.13.4: 3.13.4

v3.13.3: 3.13.3

v3.13.2: 3.13.2

v3.13.1: 3.13.1

v3.13.0: 3.13.0

v3.12.13: 3.12.13

v3.12.12: 3.12.12

v3.12.11: 3.12.11

v3.12.10: 3.12.10

v3.12.9: 3.12.9

v3.12.8: 3.12.8

v3.12.7: 3.12.7

v3.12.6: 3.12.6

v3.12.5: 3.12.5

v3.12.4: 3.12.4

v3.12.3: 3.12.3

v3.12.2: 3.12.2

v3.12.1: 3.12.1

v3.12.0: 3.12.0

v3.11.15: 3.11.15

v3.11.14: 3.11.14

v3.11.13: 3.11.13

v3.11.12: 3.11.12

v3.11.11: 3.11.11

v3.11.10: 3.11.10

Configuration

Uh oh!

tstellar commented May 11, 2026

Uh oh!

github-actions Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

renovate-bot commented Apr 27, 2026 •

edited

Loading

llvmbot commented Apr 27, 2026 •

edited by llvmorg-github-actions Bot

Loading

`v3.14.4`: 3.14.4

`v3.14.3`: 3.14.3

`v3.14.2`: 3.14.2

`v3.14.1`: 3.14.1

`v3.14.0`: 3.14.0

`v3.13.13`: 3.13.13

`v3.13.12`: 3.13.12

`v3.13.11`: 3.13.11

`v3.13.10`: 3.13.10

`v3.13.9`: 3.13.9

`v3.13.8`: 3.13.8

`v3.13.7`: 3.13.7

`v3.13.6`: 3.13.6

`v3.13.5`: 3.13.5

`v3.13.4`: 3.13.4

`v3.13.3`: 3.13.3

`v3.13.2`: 3.13.2

`v3.13.1`: 3.13.1

`v3.13.0`: 3.13.0

`v3.12.13`: 3.12.13

`v3.12.12`: 3.12.12

`v3.12.11`: 3.12.11

`v3.12.10`: 3.12.10

`v3.12.9`: 3.12.9

`v3.12.8`: 3.12.8

`v3.12.7`: 3.12.7

`v3.12.6`: 3.12.6

`v3.12.5`: 3.12.5

`v3.12.4`: 3.12.4

`v3.12.3`: 3.12.3

`v3.12.2`: 3.12.2

`v3.12.1`: 3.12.1

`v3.12.0`: 3.12.0

`v3.11.15`: 3.11.15

`v3.11.14`: 3.11.14

`v3.11.13`: 3.11.13

`v3.11.12`: 3.11.12

`v3.11.11`: 3.11.11

`v3.11.10`: 3.11.10

github-actions Bot commented May 12, 2026 •

edited

Loading

github-actions Bot commented May 18, 2026 •

edited

Loading