Skip to content

chore(ci): bump the actions group across 1 directory with 4 updates - #26524

Merged
pront merged 4 commits into
masterfrom
dependabot/github_actions/actions-4a3a8eedec
Oct 8, 2026
Merged

chore(ci): bump the actions group across 1 directory with 4 updates#26524
pront merged 4 commits into
masterfrom
dependabot/github_actions/actions-4a3a8eedec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates in the / directory: actions/checkout, bufbuild/buf-action, github/codeql-action/upload-sarif and crate-ci/typos.

Updates actions/checkout from 6.0.2 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates bufbuild/buf-action from 1.5.0 to 1.6.0

Release notes

Sourced from bufbuild/buf-action's releases.

v1.6.0

What's Changed

New Contributors

Full Changelog: bufbuild/buf-action@v1.5.0...v1.6.0

Commits

Updates github/codeql-action/upload-sarif from 4.38.1 to 4.38.2

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.38.2

  • Update default CodeQL bundle version to 2.27.1. #4160
Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

  • Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

  • The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

  • On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
  • The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
  • Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

  • Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

  • Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
  • Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits
  • 2892aa5 Merge pull request #4168 from github/update-v4.38.2-a6ef2c96f
  • 8ad03a3 Trigger workflows
  • 98af865 Update changelog for v4.38.2
  • a6ef2c9 Merge pull request #4156 from github/mario-campos/fix-validate-cmd
  • 1ef28a1 Merge pull request #4166 from github/dependabot/github_actions/dot-github/wor...
  • 26cb08b Merge pull request #4163 from github/mbg/fix-getCommitOid-stubs
  • f035ce3 Merge pull request #4165 from github/dependabot/npm_and_yarn/npm-minor-8eaed9...
  • 5e4e255 Rebuild
  • b13f5f4 Bump ruby/setup-ruby
  • c87fe57 Rebuild
  • Additional commits viewable in compare view

Updates crate-ci/typos from 1.50.2 to 1.50.3

Release notes

Sourced from crate-ci/typos's releases.

v1.50.3

[1.50.3] - 2026-09-25

Fixes

  • Don'y panicwhen case-converting non-ASCII corrections
Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

Features

[1.50.3] - 2026-09-25

Fixes

  • Don'y panicwhen case-converting non-ASCII corrections

[1.50.2] - 2026-09-15

Fixes

  • Don't panic when files being examined are removed

[1.50.1] - 2026-09-01

Fixes

  • Don't correct asend in Python code

[1.50.0] - 2026-08-28

Features

[1.49.1] - 2026-08-27

Fixes

  • Don't correct the brand name HashiCorp

[1.49.0] - 2026-08-03

Features

  • Updated the dictionary with the July 2026 changes

[1.48.0] - 2026-06-30

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 17:09
@dependabot dependabot Bot added domain: ci Anything related to Vector's CI environment no-changelog Changes in this PR do not need user-facing explanations in the release changelog labels Oct 1, 2026
datadoghq-integration[bot]
datadoghq-integration Bot reviewed Oct 1, 2026
View reviewed changes

@datadoghq-integration datadoghq-integration Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bits Code Review: PASS

More details

All four changes advance commit-pinned GitHub Actions while retaining their existing workflow inputs and triggers; no changed invocation conflicts with the upgrade behavior.

Was this helpful? React 👍 or 👎

Open Bits AI session

🤖 Bits Code Review · Commit 75cc530 · @DataDog review to ask questions

thomasqueirozb
thomasqueirozb approved these changes Oct 1, 2026
View reviewed changes

@thomasqueirozb thomasqueirozb left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving but won't merge until after release

@dependabot
chore(ci): bump the actions group across 1 directory with 4 updates
960c9d9 
Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [bufbuild/buf-action](https://github.com/bufbuild/buf-action), [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) and [crate-ci/typos](https://github.com/crate-ci/typos).


Updates `actions/checkout` from 6.0.2 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.2...3d3c42e)

Updates `bufbuild/buf-action` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/bufbuild/buf-action/releases)
- [Changelog](https://github.com/bufbuild/buf-action/blob/main/RELEASE.md)
- [Commits](bufbuild/buf-action@8c6a16e...85aebf7)

Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1c5b675...2892aa5)

Updates `crate-ci/typos` from 1.50.2 to 1.50.3
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/main/CHANGELOG.md)
- [Commits](crate-ci/typos@512fc24...00f422f)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: bufbuild/buf-action
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: crate-ci/typos
  dependency-version: 1.50.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(ci): bump the actions group with 4 updates chore(ci): bump the actions group across 1 directory with 4 updates Oct 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-4a3a8eedec branch from 75cc530 to 960c9d9 Compare October 2, 2026 16:23
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-06T20:39:31.110901Z 20e33ec New commits
🔒 Security Review ✅ Completed 2026-10-06T20:40:35.945094Z 20e33ec New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@pront
pront added this pull request to the merge queue Oct 8, 2026
Merged via the queue into master with commit ae216ac Oct 8, 2026
62 checks passed
@pront
pront deleted the dependabot/github_actions/actions-4a3a8eedec branch October 8, 2026 17:35
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 8, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@datadoghq-integration datadoghq-integration[bot] datadoghq-integration[bot] left review comments
@thomasqueirozb thomasqueirozb thomasqueirozb approved these changes

Assignees

No one assigned

Labels

domain: ci Anything related to Vector's CI environment no-changelog Changes in this PR do not need user-facing explanations in the release changelog

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@thomasqueirozb @pront