Skip to content

chore(deps): bump the github-actions group across 1 directory with 9 updates - #3447

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dc60f9ebfe
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dc60f9ebfe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 9 updates in the / directory:

Package From To
docker/login-action 4.6.0 4.7.0
actions/upload-artifact 7.0.1 7.0.2
chainguard-dev/actions/nodiff 1.6.36 1.7.2
astral-sh/setup-uv 10.3.0 10.3.3
dangoslen/changelog-enforcer 43d9d695c578fb444f2e5bd23c0e9ec7c97b1d37 d8ac887514c8ddbb6fa82961f14106c3f80ad180
actions/setup-node 7.0.0 7.1.0
goreleaser/goreleaser-action 7.2.3 7.3.0
nowsprinting/check-version-format-action 5.0.6 5.0.8
shogo82148/actions-upload-release-asset 1.10.4 1.10.7

Updates docker/login-action from 4.6.0 to 4.7.0

Release notes

Sourced from docker/login-action's releases.

v4.7.0

Full Changelog: docker/login-action@v4.6.0...v4.7.0

Commits
  • 81c6f93 Merge pull request #1100 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 1b16c8d Merge pull request #1096 from docker/dependabot/npm_and_yarn/uuid-14.0.3
  • ac86b5e [dependabot skip] chore: update generated content
  • 1476d84 build(deps): bump @​docker/actions-toolkit from 0.94.0 to 0.107.0
  • 503cee6 Merge pull request #1095 from docker/dependabot/github_actions/actions/create...
  • f093535 Merge pull request #1099 from docker/dependabot/github_actions/codecov/codeco...
  • d5ae7f1 Merge pull request #1098 from docker/dependabot/github_actions/docker/bake-ac...
  • 6f97507 Merge pull request #1097 from docker/dependabot/github_actions/docker/bake-ac...
  • 006d61f Merge pull request #1094 from docker/dependabot/github_actions/codeql-actions...
  • 93f5f52 Merge pull request #1093 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates chainguard-dev/actions/nodiff from 1.6.36 to 1.7.2

Release notes

Sourced from chainguard-dev/actions/nodiff's releases.

v1.7.2

What's Changed

Full Changelog: chainguard-dev/actions@v1.7.1...v1.7.2

v1.7.1

What's Changed

Full Changelog: chainguard-dev/actions@v1.7.0...v1.7.1

v1.7.0

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.42...v1.7.0

v1.6.42

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.41...v1.6.42

v1.6.41

What's Changed

... (truncated)

Commits
  • 8f31e94 feat(setup-spdx): default to SPDX tools-java 2.0.7 (#1099)
  • e1b1032 feat(setup-monitoring): bump kube-prometheus-stack to 92.11.0 (#1098)
  • 193c185 git-tag: make prerelease bumps sort after the release they follow (#1096)
  • f8ab535 git-tag: fix garbled tagger and stop rewriting global git config (#1095)
  • a3ef335 feat(setup-kind): default to k8s 1.36.x (#1097)
  • e941041 chore: bump pinned tool default versions (#1094)
  • d50c16b build(deps): bump step-security/harden-runner from 2.21.1 to 2.22.2 (#1079)
  • c53d2cb fix(otel-export): isolate job telemetry and capture revisions (#1093)
  • f3dfb4c build(deps-dev): bump vite (#1089)
  • b32b083 Fix failing Dependabot PRs: apt-faster DEP-11 test and otel-export OTel bump ...
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 10.3.0 to 10.3.3

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

🧰 Maintenance

... (truncated)

Commits
  • 68559e9 Use Astral mirror for version manifests with GitHub fallback (#1119)
  • 0192b69 chore: update known checksums for 0.13.6 (#1117)
  • 2f29784 docs: use JSDoc for compatible release specifier comment (#1113)
  • 9c73321 fix: allow whitespace in uv requirement specifiers (#1112)
  • 80fbe01 fix: resolve ~= specifiers with PEP 440 semantics (#1111)
  • 36b7b57 fix: only report a saved cache when saving succeeded (#1110)
  • 56618ca docs: update version references to v10.3.2 (#1104)
  • 07a047e chore: update known checksums for 0.13.5 (#1103)
  • e1b8536 docs: update version references to v10.3.1 (#1102)
  • 18d369b chore(deps): roll up Dependabot updates (#1101)
  • Additional commits viewable in compare view

Updates dangoslen/changelog-enforcer from 43d9d695c578fb444f2e5bd23c0e9ec7c97b1d37 to d8ac887514c8ddbb6fa82961f14106c3f80ad180

Changelog

Sourced from dangoslen/changelog-enforcer's changelog.

CHANGELOG

Inspired from Keep a Changelog

[UNRELEASED]

Dependencies

  • Bump dangoslen/dependabot-changelog-helper from 3 to 4 (#309)
  • Bump ncipollo/release-action from 1.14.0 to 1.21.0 (#308)

Security

  • Harden repository workflows: remove the verified label from pull requests when new commits are pushed, and update actions/checkout to v6

[v3.7.0]

Changed

  • Now runs on Node 24
    • Updates .nvmrc to set the version
    • Updates node version in action.yml

Dependencies

  • Bump stefanzweifel/git-auto-commit-action from 5.0.0 to 5.0.1 (#287)
  • Bump eslint from 8.57.0 to 9.7.0 (#288)
  • Bump thollander/actions-comment-pull-request from 2 to 3 (#303)
  • Bump actions/checkout from 4.1.2 to 6.0.2 (#302)

[v3.6.1]

Changed

  • Fix Github Actions Annotations (#281)

Fixed

  • Handle skipLabels that contains emojis by properly looking for : characters in the label extractor regex (fixes #284)

Dependencies

  • Bump eslint from 8.56.0 to 8.57.0 (#282)
  • Bump actions/checkout from 4.1.1 to 4.1.2 (#283)

[v3.6.0]

Changed

  • Now runs on Node 20
    • Updates .nvmrc to set the version
    • Updates node version in action.yml

Dependencies

  • Bump node-fetch from 2.6.12 to 2.7.0 (#264, #270)
  • Bump actions/checkout from 3.5.3 to 4.1.1 (#266, #267, #271, #275)
  • Bump @vercel/ncc from 0.36.1 to 0.38.1 (#268, #276)
  • Bump jest from 29.6.2 to 29.7.0 (#269)
  • Bump stefanzweifel/git-auto-commit-action from 4.16.0 to 5.0.0 (#272)
  • Bump @actions/github from 5.1.1 to 6.0.0 (#273)

... (truncated)

Commits

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 7.2.3 to 7.3.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v7.3.0

What's Changed

Full Changelog: goreleaser/goreleaser-action@v7.2.3...v7.3.0

Commits
  • a4f02ab chore: update generated files
  • e27eb77 chore(deps): bump the npm group with 2 updates (#580)
  • f5b4e31 chore(deps): bump undici from 6.28.0 to 6.29.0 (#579)
  • 2d42c26 ci(deps): bump codecov/codecov-action (#581)
  • 73cd4ff feat: reuse the goreleaser binary from the runner tool cache (#577)
  • 97a9607 chore: update generated files
  • 689e48f chore(deps): bump js-yaml from 5.2.3 to 5.4.1 in the npm group (#578)
  • 7e6b514 chore: update generated files
  • 4ec1183 chore(deps): bump js-yaml from 5.2.2 to 5.2.3 (#573)
  • 59060fd chore: update generated files
  • Additional commits viewable in compare view

Updates nowsprinting/check-version-format-action from 5.0.6 to 5.0.8

Release notes

Sourced from nowsprinting/check-version-format-action's releases.

v5.0.8

What’s Changed

🧰 Maintenance

v5.0.7

What’s Changed

🧰 Maintenance

Commits
  • 62b39fc Merge pull request #378 from nowsprinting/release/5.0.8
  • 22ea859 Bump version to v5.0.8
  • 9544ed2 Merge pull request #377 from nowsprinting/dependabot/npm_and_yarn/babel/core-...
  • 8ddc1ed Merge pull request #376 from nowsprinting/dependabot/npm_and_yarn/brace-expan...
  • 39616b5 Merge pull request #375 from nowsprinting/dependabot/npm_and_yarn/handlebars-...
  • aa2a515 Bump @​babel/core from 7.29.0 to 7.29.7
  • 6aee8c2 Bump brace-expansion from 1.1.18 to 1.1.21
  • 093897d Bump handlebars from 4.7.9 to 4.7.10
  • bb367e7 Merge pull request #374 from nowsprinting/release/5.0.7
  • 49c9f79 Bump version to v5.0.7
  • Additional commits viewable in compare view

Updates shogo82148/actions-upload-release-asset from 1.10.4 to 1.10.7

Release notes

Sourced from shogo82148/actions-upload-release-asset's releases.

v1.10.7

What's Changed

Full Changelog: shogo82148/actions-upload-release-asset@v1.10.6...v1.10.7

v1.10.6

What's Changed

Full Changelog: shogo82148/actions-upload-release-asset@v1.10.5...v1.10.6

... (truncated)

Commits
  • 73f83b1 Merge pull request #1394 from shogo82148/dependabot/npm_and_yarn/undici-6.29.1
  • c05b57c npm run bundle
  • 549e9b5 Bump undici from 6.29.0 to 6.29.1
  • 1e98aa1 Merge pull request #1393 from shogo82148/dependabot/github_actions/reviewdog/...
  • eaf40ba Merge pull request #1392 from shogo82148/dependabot/github_actions/codeql-act...
  • 89b3463 Merge pull request #1391 from shogo82148/dependabot/npm_and_yarn/rollup/plugi...
  • 0a856c3 Merge pull request #1390 from shogo82148/dependabot/npm_and_yarn/rollup-4.65.0
  • 768bbed Bump reviewdog/action-actionlint from 1.80.4 to 1.80.6
  • 028e5d6 Bump the codeql-actions group with 3 updates
  • bff8abf Bump @​rollup/plugin-typescript from 12.3.0 to 12.3.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

//: # ...

Description has been truncated

…updates

Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [docker/login-action](https://github.com/docker/login-action) | `4.6.0` | `4.7.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [chainguard-dev/actions/nodiff](https://github.com/chainguard-dev/actions) | `1.6.36` | `1.7.2` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.3.0` | `10.3.3` |
| [dangoslen/changelog-enforcer](https://github.com/dangoslen/changelog-enforcer) | `43d9d695c578fb444f2e5bd23c0e9ec7c97b1d37` | `d8ac887514c8ddbb6fa82961f14106c3f80ad180` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.3` | `7.3.0` |
| [nowsprinting/check-version-format-action](https://github.com/nowsprinting/check-version-format-action) | `5.0.6` | `5.0.8` |
| [shogo82148/actions-upload-release-asset](https://github.com/shogo82148/actions-upload-release-asset) | `1.10.4` | `1.10.7` |



Updates `docker/login-action` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@dbcb813...81c6f93)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `chainguard-dev/actions/nodiff` from 1.6.36 to 1.7.2
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@0bacfe7...8f31e94)

Updates `astral-sh/setup-uv` from 10.3.0 to 10.3.3
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@1c37ad0...68559e9)

Updates `dangoslen/changelog-enforcer` from 43d9d695c578fb444f2e5bd23c0e9ec7c97b1d37 to d8ac887514c8ddbb6fa82961f14106c3f80ad180
- [Release notes](https://github.com/dangoslen/changelog-enforcer/releases)
- [Changelog](https://github.com/dangoslen/changelog-enforcer/blob/main/CHANGELOG.md)
- [Commits](dangoslen/changelog-enforcer@43d9d69...d8ac887)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `goreleaser/goreleaser-action` from 7.2.3 to 7.3.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@f06c13b...a4f02ab)

Updates `nowsprinting/check-version-format-action` from 5.0.6 to 5.0.8
- [Release notes](https://github.com/nowsprinting/check-version-format-action/releases)
- [Commits](nowsprinting/check-version-format-action@af8787b...62b39fc)

Updates `shogo82148/actions-upload-release-asset` from 1.10.4 to 1.10.7
- [Release notes](https://github.com/shogo82148/actions-upload-release-asset/releases)
- [Commits](shogo82148/actions-upload-release-asset@aaba0f5...73f83b1)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: chainguard-dev/actions/nodiff
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: dangoslen/changelog-enforcer
  dependency-version: d8ac887514c8ddbb6fa82961f14106c3f80ad180
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: nowsprinting/check-version-format-action
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: shogo82148/actions-upload-release-asset
  dependency-version: 1.10.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 1, 2026 18:46
@github-actions github-actions Bot added the area/tooling Affects the dev or user toolchain (e.g. tests, ci, build tools) label Nov 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/tooling Affects the dev or user toolchain (e.g. tests, ci, build tools) dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants