Skip to content

feat: update dataaxiom/ghcr-cleanup-action to v1.2.1 #minor#470

Closed
public-glueops-renovatebot[bot] wants to merge 1 commit into
mainfrom
renovate/dataaxiom-ghcr-cleanup-action-1.2.x
Closed

feat: update dataaxiom/ghcr-cleanup-action to v1.2.1 #minor#470
public-glueops-renovatebot[bot] wants to merge 1 commit into
mainfrom
renovate/dataaxiom-ghcr-cleanup-action-1.2.x

Conversation

@public-glueops-renovatebot

@public-glueops-renovatebot public-glueops-renovatebot Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
dataaxiom/ghcr-cleanup-action action minor v1.0.16v1.2.1 v1.2.2

Release Notes

dataaxiom/ghcr-cleanup-action (dataaxiom/ghcr-cleanup-action)

v1.2.1

Compare Source

  • fix: tolerate every 404 on package version delete (was: fail on the second) (fix #​121)
  • fix: eliminate spurious "wasn't found" warnings from cosign signature dual-cascade race
  • fix: per-image log buffer flushes audit trail even when a cascade errors mid-flight

v1.2.0

Compare Source

  • feature: cross-run manifest cache; warm runs only fetch newly-published manifests (hit rate logged)
  • perf: parallel API throughout — package pagination, manifest fetches, untag PUTs, child/referrer deletes
  • perf: batched untagging — one reload per batch instead of one per tag
  • perf: push token reuse across untag PUTs + 429/secondary rate-limit retries on registry auth
  • fix: repository input is now informational; cleanup uses owner + package directly (supports unlinked / cross-account packages)
  • log volume cap at 1000 lines per group (info); per-image log output buffered to avoid interleaving under concurrent deletes
  • package version upgrades

v1.1.0

Compare Source

  • fix: preserve OCI 1.1 subject-bearing referrers (cosign sigstore-bundles, attestations) during cleanup — were silently deleted as untagged #​71
  • fix: keep-n-tagged now gates untag operations; a matched tag is not stripped from an image that keep-n-tagged would protect (#​99, #​101)
  • fix: shared multi-arch platform digests no longer cascade-deleted when one of multiple parent indexes is removed (#​91)
  • fix: delete-partial-images excludes fully ghost images #​112
  • fix: Octokit error output visible at all log levels (was suppressed when log-level was error or warn)
  • fix: expand-packages rejects fine-grained PATs upfront with a clear message
  • fix: setFailed message no longer overwritten by an empty Error in early-failure paths
  • feat: ReDoS guard on user-supplied regex (delete-tags, exclude-tags, package) when use-regex: true
  • feat: code refactor/split, removal of anys where possible using typed classes
  • chore(deps): Node.js 24
  • docs: README rewrite + Limitations section (5,000-download undeletable policy, nested-manifest non-support)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/dataaxiom-ghcr-cleanup-action-1.2.x branch from 1e4ec25 to 589b3a8 Compare June 24, 2026 18:47
@public-glueops-renovatebot public-glueops-renovatebot Bot changed the title feat: update dataaxiom/ghcr-cleanup-action to v1.2.0 #minor feat: update dataaxiom/ghcr-cleanup-action to v1.2.1 #minor Jun 24, 2026
@public-glueops-renovatebot public-glueops-renovatebot Bot changed the title feat: update dataaxiom/ghcr-cleanup-action to v1.2.1 #minor feat: update dataaxiom/ghcr-cleanup-action to v1.2.1 #minor - autoclosed Jun 29, 2026
@public-glueops-renovatebot public-glueops-renovatebot Bot deleted the renovate/dataaxiom-ghcr-cleanup-action-1.2.x branch June 29, 2026 11:24
@public-glueops-renovatebot public-glueops-renovatebot Bot changed the title feat: update dataaxiom/ghcr-cleanup-action to v1.2.1 #minor - autoclosed feat: update dataaxiom/ghcr-cleanup-action to v1.2.1 #minor Jun 29, 2026
@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/dataaxiom-ghcr-cleanup-action-1.2.x branch 2 times, most recently from 589b3a8 to 3f097cc Compare June 29, 2026 12:52
@venkatamutyala

Copy link
Copy Markdown
Contributor

Superseded by #478 (consolidates the open dependency updates).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant