Bump the actions-dependencies group across 1 directory with 11 updates #1272
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the actions-dependencies group with 11 updates in the /.github/workflows directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `4.2.2` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.3` | `4.0.5` | | [seanmiddleditch/gha-setup-ninja](https://github.com/seanmiddleditch/gha-setup-ninja) | `5` | `6` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.1` | `4.6.2` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.0.0` | `5.5.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.23.2` | `3.28.15` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.8` | `4.2.1` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.0` | `3.0.1` | | [TheMrMilchmann/setup-msvc-dev](https://github.com/themrmilchmann/setup-msvc-dev) | `3.0.0` | `3.0.1` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.17.0` | `0.30.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.1` | `2.4.1` | Updates `actions/checkout` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.1.1...11bd719) Updates `actions/deploy-pages` from 4.0.3 to 4.0.5 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@87c3283...d6db901) Updates `seanmiddleditch/gha-setup-ninja` from 5 to 6 - [Release notes](https://github.com/seanmiddleditch/gha-setup-ninja/releases) - [Commits](seanmiddleditch/gha-setup-ninja@96bed6e...3b1f8f9) Updates `actions/upload-artifact` from 4.3.1 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4.3.1...ea165f8) Updates `actions/setup-python` from 5.0.0 to 5.5.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@0a5c615...8d9ed9a) Updates `github/codeql-action` from 3.23.2 to 3.28.15 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3.23.2...45775bd) Updates `actions/download-artifact` from 4.1.8 to 4.2.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@fa0a91b...95815c3) Updates `actions/upload-pages-artifact` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@0252fc4...56afc60) Updates `TheMrMilchmann/setup-msvc-dev` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/themrmilchmann/setup-msvc-dev/releases) - [Commits](TheMrMilchmann/setup-msvc-dev@48edcef...fb19abb) Updates `aquasecurity/trivy-action` from 0.17.0 to 0.30.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@84384bd...6c175e9) Updates `ossf/scorecard-action` from 2.3.1 to 2.4.1 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@0864cf1...f49aabe) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: actions/deploy-pages dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-dependencies - dependency-name: seanmiddleditch/gha-setup-ninja dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: actions/setup-python dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: github/codeql-action dependency-version: 3.28.15 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: actions/download-artifact dependency-version: 4.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: actions/upload-pages-artifact dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-dependencies - dependency-name: TheMrMilchmann/setup-msvc-dev dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: ossf/scorecard-action dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
dependabot
bot
added
the
github_actions
lukaszstolarczuk
approved these changes
Apr 16, 2025
bratpiorka
approved these changes
Apr 16, 2025
dependabot
bot
deleted the
dependabot/github_actions/dot-github/workflows/actions-dependencies-01ffc0d1d3
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the actions-dependencies group with 11 updates in the /.github/workflows directory:
4.1.14.2.24.0.34.0.5564.3.14.6.25.0.05.5.03.23.23.28.154.1.84.2.13.0.03.0.13.0.03.0.10.17.00.30.02.3.12.4.1Updates
actions/checkoutfrom 4.1.1 to 4.2.2Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
11bd719Prepare 4.2.2 Release (#1953)e3d2460Expand unit test coverage (#1946)163217durl-helper.tsnow leverages well-known environment variables. (#1941)eef6144Prepare 4.2.1 release (#1925)6b42224Add workflow file for publishing releases to immutable action package (#1919)de5a000Check out other refs/* by commit if provided, fall back to ref (#1924)d632683Prepare 4.2.0 release (#1878)6d193bfBump braces from 3.0.2 to 3.0.3 (#1777)db0cee9Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872)b684943Add Ref and Commit outputs (#1180)Updates
actions/deploy-pagesfrom 4.0.3 to 4.0.5Release notes
Sourced from actions/deploy-pages's releases.
Commits
d6db901Merge pull request #324 from actions/error-message-request-id055f425compile changes5ab929bInclude request id in the error message of an error response3ff795bMerge pull request #318 from actions/dependabot/npm_and_yarn/non-breaking-cha...f5a2f0dUpdate distributables after Dependabot 🤖1364cdeBump the non-breaking-changes group with 2 updates2ed07f7Merge pull request #316 from actions/dependabot/npm_and_yarn/non-breaking-cha...d5a892bBump the non-breaking-changes group with 1 update05977f5Merge pull request #314 from actions/dependabot/npm_and_yarn/non-breaking-cha...9414024Update distributables after Dependabot 🤖Updates
seanmiddleditch/gha-setup-ninjafrom 5 to 6Release notes
Sourced from seanmiddleditch/gha-setup-ninja's releases.
Commits
3b1f8f9Bump undici from 5.28.4 to 5.28.5 (#33)7fa4bc0matrix: include: v1.12.1 on ubuntu-24.04-arm (#34)78f0be8Add Ninja 1.12.1 support, including improved platform detection (#29)d3403b5Add Ninja v1.12.1 to the testing (#32)Updates
actions/upload-artifactfrom 4.3.1 to 4.6.2Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
ea165f8Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release0839620Prepare for new release of actions/upload-artifact with new toolkit cache ver...4cec3d8Merge pull request #673 from actions/yacaovsnc/artifact_2.2.2e9fad96license cache update for artifactb26fd06Update to use artifact 2.2.2 package65c4c4aMerge pull request #662 from actions/yacaovsnc/add_variable_for_concurrency_a...0207619move files back to satisfy licensed ci1ecca81licensed cache updates9742269Expose env vars to controll concurrency and timeout6f51ac0Merge pull request #656 from bdehamer/bdehamer/artifact-digestUpdates
actions/setup-pythonfrom 5.0.0 to 5.5.0Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
8d9ed9aAdd e2e Testing for free threaded and Bump@action/cachefrom 4.0.0 to 4.0.3 ...19e4675Add support for .tool-versions file in setup-python (#1043)6fd11e1Bump@actions/globfrom 0.4.0 to 0.5.0 (#1015)9e62be8Support free threaded Python versions like '3.13t' (#973)6ca8e85Bump@vercel/nccfrom 0.38.1 to 0.38.3 (#1016)8039c45fix: install PyPy on Linux ARM64 (#1011)4237552Improve Advanced Usage examples (#645)709bfa5Bump requests from 2.24.0 to 2.32.2 in /tests/data (#1019)ceb20b2Bump@actions/http-clientfrom 2.2.1 to 2.2.3 (#1020)0dc2d2cBump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#1014)Updates
github/codeql-actionfrom 3.23.2 to 3.28.15Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
45775bdMerge pull request #2854 from github/update-v3.28.15-a35ae8c38dd78aabUpdate CHANGELOG.md with bug fix detailse40af59Update changelog for v3.28.15a35ae8cMerge pull request #2843 from github/cklin/diff-informed-compatbb59df6Merge pull request #2842 from github/henrymercer/zip644b508f5Merge pull request #2845 from github/mergeback/v3.28.14-to-main-fc7e4a0fca00afbUpdate checked-in dependencies2969c78Update changelog and version after v3.28.14fc7e4a0Merge pull request #2844 from github/update-v3.28.14-362ef4ce2be0175cUpdate changelog for v3.28.14Updates
actions/download-artifactfrom 4.1.8 to 4.2.1Release notes
Sourced from actions/download-artifact's releases.
Commits
95815c3Merge pull request #391 from GhadimiR/main278fca4Move log statements6890984Merge branch 'main' into mainf9415c0Run unit tests in CI76a6eb5Merge pull request #392 from GhadimiR/add_unit_testsa2426d7Merge branch 'main' into add_unit_tests3ffa694lint53f6aa5Add extra assertion to download single artifact testb456700lint9eab798Configure tsconfigUpdates
actions/upload-pages-artifactfrom 3.0.0 to 3.0.1Release notes
Sourced from actions/upload-pages-artifact's releases.
Commits
56afc60Merge pull request #94 from SilverRainZ/maind12fdfbMerge branch 'main' into mainaef5542Merge pull request #88 from uiolee/patch-129cedd7Merge branch 'main' into patch-1a69c22eMerge pull request #92 from actions/dependabot/github_actions/non-breaking-ch...794e304Group tar's output to prevent it from messing up logs14007f6Bump the non-breaking-changes group with 1 update0191170Merge pull request #91 from actions/dependabot-grouping0e7832dUpdate Dependabot config to group non-breaking changes1a6d9faUpdate README.mdUpdates
TheMrMilchmann/setup-msvc-devfrom 3.0.0 to 3.0.1Release notes
Sourced from TheMrMilchmann/setup-msvc-dev's releases.
Commits
fb19abbRelease 3.0.1Updates
aquasecurity/trivy-actionfrom 0.17.0 to 0.30.0Release notes
Sourced from aquasecurity/trivy-action's releases.
... (truncated)
Commits
6c175e9chore: bump trivy to v0.60.0 (#453)53e8848Improve README/SBOM (#439)ef1b561fix: typo in description of an input for action.yaml (#452)a11da62fix: Update default ...Description has been truncated