Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 6, 2025

Bumps the github-action-dependencies group with 7 updates in the / directory:

Package From To
actions/checkout 4 5
actions/setup-node 4 5
ruby/setup-ruby 1.229.0 1.263.0
peter-evans/find-comment 3.1.0 4.0.0
peter-evans/create-or-update-comment 3.1.0 5.0.0
slackapi/slack-github-action 1.26.0 2.1.1
cycjimmy/semantic-release-action 4.2.0 5.0.0

Updates actions/checkout from 4 to 5

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates actions/setup-node from 4 to 5

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

Full Changelogactions/setup-node@v4...v4.4.0

... (truncated)

Commits

Updates ruby/setup-ruby from 1.229.0 to 1.263.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.263.0

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.262.0...v1.263.0

v1.262.0

Full Changelog: ruby/setup-ruby@v1.261.0...v1.262.0

v1.261.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.260.0...v1.261.0

v1.260.0

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.259.0...v1.260.0

v1.259.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.258.0...v1.259.0

v1.258.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.257.0...v1.258.0

v1.257.0

What's Changed

... (truncated)

Commits
  • 0481980 Print lockfile contents earlier
  • cf7216d Use new releases of ruby-builder per engine-version
  • 1c58d16 Update CRuby releases on Windows
  • 1dc7956 Test on JRuby 9.4 as well as 10.0
  • b8714f7 Revert "Skip test failing on JRuby on Windows"
  • d3e13b3 Revert "feat: upgrade to node 24"
  • 4df093a Revert "chore: add setup-node for lint job"
  • 866b91c chore: add setup-node for lint job
  • c4cd38d feat: upgrade to node 24
  • 3fee676 Add truffleruby-25.0.0,truffleruby+graalvm-25.0.0
  • Additional commits viewable in compare view

Updates peter-evans/find-comment from 3.1.0 to 4.0.0

Release notes

Sourced from peter-evans/find-comment's releases.

Find Comment v4.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

... (truncated)

Commits
  • b30e6a3 feat: v4 (#389)
  • b4929e7 build(deps-dev): bump @​types/node from 18.19.124 to 18.19.127 (#388)
  • 1f47d94 build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#387)
  • a723a15 build(deps): bump actions/setup-node from 4 to 5 (#386)
  • 8bacb1b build(deps-dev): bump @​types/node from 18.19.123 to 18.19.124 (#385)
  • 048de65 build(deps): bump actions/checkout from 4 to 5 (#384)
  • c02750f build(deps-dev): bump @​types/node from 18.19.122 to 18.19.123 (#383)
  • 092c582 build(deps): bump actions/download-artifact from 4 to 5 (#382)
  • c115bb0 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#381)
  • 8d3be5d build(deps-dev): bump @​types/node from 18.19.121 to 18.19.122 (#380)
  • Additional commits viewable in compare view

Updates peter-evans/create-or-update-comment from 3.1.0 to 5.0.0

Release notes

Sourced from peter-evans/create-or-update-comment's releases.

Create or Update Comment v5.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

... (truncated)

Commits
  • e8674b0 feat: v5 (#439)
  • fffe59e build(deps-dev): bump @​types/node from 18.19.127 to 18.19.129 (#438)
  • 076d572 build(deps-dev): bump @​types/node from 18.19.126 to 18.19.127 (#437)
  • 86a2645 build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#436)
  • be17e0c build(deps-dev): bump @​types/node from 18.19.124 to 18.19.126 (#435)
  • ef75eae build(deps-dev): bump @​types/node from 18.19.123 to 18.19.124 (#433)
  • 82a7ad0 build(deps): bump actions/setup-node from 4 to 5 (#432)
  • f7c845d build(deps-dev): bump @​types/node from 18.19.122 to 18.19.123 (#430)
  • 5da8e07 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#428)
  • 2de7f66 build(deps-dev): bump @​types/node from 18.19.121 to 18.19.122 (#427)
  • Additional commits viewable in compare view

Updates slackapi/slack-github-action from 1.26.0 to 2.1.1

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send v2.1.1

What's Changed

This release fixes an issue where substituted variables might've broken valid JSON or YAML parsings when using the payload-file-path input option.

🐛 Bug fixes

📚 Documentation

🤖 Dependencies

🧰 Maintenance

  • ci: pin action hashes and escape variables with minimum permission in slackapi/slack-github-action#441 - Thanks @​zimeg!
  • build: create separate release branches for tagged releases on publish in slackapi/slack-github-action#457 - Thanks @​zimeg!
  • build: clone repository "docs" and configuration when syncing project docs in slackapi/slack-github-action#467 - Thanks @​lukegalbraithrussell!
  • chore(release): tag version 2.1.1 in slackapi/slack-github-action#474 - Thanks @​zimegDescription has been truncated


    [!NOTE]
    Bumps core GitHub Actions and related third-party actions (checkout, setup-node, Ruby, peter-evans, Slack, semantic-release) to newer major versions across CI workflows.

    • CI Workflows:
      • Core Actions:
        • actions/checkout@v5 in multiple workflows (api-validation, auto-update-native-sdks, build-sample-app, deploy-npm, deploy-sdk, test).
        • actions/setup-node@v6 across workflows (with Node 20 maintained where specified).
        • ruby/setup-ruby updated in build-sample-app to a newer pinned commit (v1.265.0).
      • PR Comment Utilities:
        • peter-evans/find-comment → v4; peter-evans/create-or-update-comment → v5 in sample app build workflows.
      • Release/Deploy:
        • cycjimmy/semantic-release-action → v5.0.2 in deploy-sdk.
        • slackapi/slack-github-action → v2.1.1 in deploy-npm and deploy-sdk notifications.

    Written by Cursor Bugbot for commit 998bf65ad291363f9da10e17b2721de43a5d844e. This will update automatically on new commits. Configure here.

    Note
    Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 6, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 6, 2025 00:11
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 6, 2025
@github-actions
Copy link
Contributor

github-actions bot commented Oct 6, 2025

Sample app builds 📱

Below you will find the list of the latest versions of the sample apps. It's recommended to always download the latest builds of the sample apps to accurately test the pull request.


@dependabot dependabot bot force-pushed the dependabot/github_actions/github-action-dependencies-684bc7e750 branch from 46a1962 to 16575e5 Compare October 13, 2025 00:07
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-action-dependencies-684bc7e750 branch from 16575e5 to 998bf65 Compare October 20, 2025 00:09
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/checkout@v5
- uses: actions/setup-node@v6
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Node Setup Version Mismatch

The actions/setup-node action is updated to v6 in the workflow files, but the PR description states it should be v5. Version v6 of this action does not exist, which will cause workflow failures.

Additional Locations (6)

Fix in Cursor Fix in Web

- name: Install Ruby
uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1.229.0
uses: ruby/setup-ruby@ab177d40ee5483edb974554986f56b33477e21d0 # v1.265.0
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Version Mismatch in Workflow Action

The ruby/setup-ruby action is updated to v1.265.0 in the workflow, but the PR description specifies v1.263.0. This version mismatch could lead to unexpected behavior.

Fix in Cursor Fix in Web

@dependabot dependabot bot force-pushed the dependabot/github_actions/github-action-dependencies-684bc7e750 branch from 998bf65 to 1a3fa12 Compare October 27, 2025 00:06
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-action-dependencies-684bc7e750 branch 2 times, most recently from 786dc1c to 5bded5f Compare November 10, 2025 00:09
…tory with 7 updates

Bumps the github-action-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `5` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `5` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.229.0` | `1.263.0` |
| [peter-evans/find-comment](https://github.com/peter-evans/find-comment) | `3.1.0` | `4.0.0` |
| [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `3.1.0` | `5.0.0` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `1.26.0` | `2.1.1` |
| [cycjimmy/semantic-release-action](https://github.com/cycjimmy/semantic-release-action) | `4.2.0` | `5.0.0` |



Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

Updates `actions/setup-node` from 4 to 5
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v5)

Updates `ruby/setup-ruby` from 1.229.0 to 1.263.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@354a1ad...0481980)

Updates `peter-evans/find-comment` from 3.1.0 to 4.0.0
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@3eae4d3...b30e6a3)

Updates `peter-evans/create-or-update-comment` from 3.1.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@v3.1.0...e8674b0)

Updates `slackapi/slack-github-action` from 1.26.0 to 2.1.1
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](slackapi/slack-github-action@70cd7be...91efab1)

Updates `cycjimmy/semantic-release-action` from 4.2.0 to 5.0.0
- [Release notes](https://github.com/cycjimmy/semantic-release-action/releases)
- [Changelog](https://github.com/cycjimmy/semantic-release-action/blob/main/docs/CHANGELOG.md)
- [Commits](cycjimmy/semantic-release-action@0a51e81...9cc899c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: ruby/setup-ruby
  dependency-version: 1.263.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-action-dependencies
- dependency-name: peter-evans/find-comment
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: slackapi/slack-github-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: cycjimmy/semantic-release-action
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-action-dependencies-684bc7e750 branch from 5bded5f to 4687ff4 Compare November 17, 2025 00:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant