Repository navigation
build(deps): bump the github-actions group with 12 updates - #87
Conversation
Bumps the github-actions group with 12 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5.0.1` | `7.0.1` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.4.0` | `7.0.0` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `9.2.1` | `9.3.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `6.0.1` | `7.1.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6.0.0` | `7.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.0` | `4.38.3` | | [snyk/actions/golang](https://github.com/snyk/actions) | `0.4.0` | `1.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `7.0.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.1.0` | | [actions/cache](https://github.com/actions/cache) | `4.3.0` | `6.1.0` | | [nick-fields/retry](https://github.com/nick-fields/retry) | `3.0.2` | `4.0.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `6.4.0` | `7.3.0` | Updates `actions/checkout` from 5.0.1 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@93cb6ef...3d3c42e) Updates `actions/setup-go` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@4a36011...b7ad1da) Updates `golangci/golangci-lint-action` from 9.2.1 to 9.3.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@82606bf...ba0d7d2) Updates `codecov/codecov-action` from 6.0.1 to 7.1.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@e79a696...303a32d) Updates `actions/upload-artifact` from 6.0.0 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@b7c566a...cf430e0) Updates `github/codeql-action/upload-sarif` from 4.36.0 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@7211b7c...24c5418) Updates `snyk/actions/golang` from 0.4.0 to 1.0.0 - [Release notes](https://github.com/snyk/actions/releases) - [Commits](snyk/actions@b98d498...9adf32b) Updates `actions/setup-python` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...5fda3b9) Updates `actions/setup-node` from 6.4.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@48b55a0...949feb2) Updates `actions/cache` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...55cc834) Updates `nick-fields/retry` from 3.0.2 to 4.0.0 - [Release notes](https://github.com/nick-fields/retry/releases) - [Commits](nick-fields/retry@ce71cc2...ad98453) Updates `goreleaser/goreleaser-action` from 6.4.0 to 7.3.0 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@e435ccd...a4f02ab) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: golangci/golangci-lint-action dependency-version: 9.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: snyk/actions/golang dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: nick-fields/retry dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: goreleaser/goreleaser-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
|
Merge-driver verdict: CLEAN at An independent adversarial reviewer (Sonnet, high effort, cold brief) reviewed this Dependabot PR. It found no blocking findings. Scope: only Supply chain (real): all 12 new SHAs equal their tag's commit, checked with Breaking changes checked against this repo's inputs (real, from release notes and
Coverage gap, recorded:
Non-blocking notes:
Gate items:
|
|
Gate met at |
Bumps the github-actions group with 12 updates:
5.0.17.0.16.4.07.0.09.2.19.3.06.0.17.1.16.0.07.0.24.36.04.38.30.4.01.0.06.2.07.0.06.4.07.1.04.3.06.1.03.0.24.0.06.4.07.3.0Updates
actions/checkoutfrom 5.0.1 to 7.0.1Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
actions/setup-gofrom 6.4.0 to 7.0.0Release notes
Sourced from actions/setup-go's releases.
Commits
b7ad1dachore(deps): bump@actions/cacheto 6.2.0 (#771)0778a10Migrate to ESM and upgrade dependencies (#763)924ae3achore: bump version to 6.5.0 in package.json and package-lock.json (#762)e91cc3bBump@actions/cacheto 5.1.0, log cache write denied (#758)4a2405echore: update@types/nodeand@typescript-eslintdependencies to latest versi...78961f6chore: update@actionsdependencies and refresh license cache (#744)Updates
golangci/golangci-lint-actionfrom 9.2.1 to 9.3.0Release notes
Sourced from golangci/golangci-lint-action's releases.
Commits
ba0d7d2chore: prepare release v9.3.0efd0857feat: add no-run-logs-group as experimental option (#1403)ed485debuild(deps): bump undici from 6.24.0 to 6.27.08872e8dbuild(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 (#1400)b163415build(deps): bump tmp from 0.2.6 to 0.2.7 (#1399)e52a9f8build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-ac...8182aa3build(deps): bump tmp from 0.2.5 to 0.2.6 (#1397)5403a41build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-ac...Updates
codecov/codecov-actionfrom 6.0.1 to 7.1.1Release notes
Sourced from codecov/codecov-action's releases.
Commits
303a32dchore(release): 7.1.1 (#1973)0b35c9echore(release): 7.1.0 (#1971)fb8b358chore(release): 7.0.0 (#1957)ca0a928ci: remove Enforce License Compliance workflow (#1950)Updates
actions/upload-artifactfrom 6.0.0 to 7.0.2Release notes
Sourced from actions/upload-artifact's releases.
Commits
cf430e0Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2c2acdedchore: prepare v7.0.2 release4687c1bMerge pull request #821 from actions/tunc-d-upload-artifact-package-bump8cbe1beBump@actions/artifactto 6.3.1043fb46Merge pull request #797 from actions/yacaovsnc/update-dependency634250cInclude changes in typespec/ts-http-runtime 0.3.5e454baaReadme: bump all the example versions to v7 (#796)74fad66Update the readme with direct upload details (#795)bbbca2dSupport direct file uploads (#764)589182cUpgrade the module to ESM and bump dependencies (#762)Updates
github/codeql-action/upload-sariffrom 4.36.0 to 4.38.3Release notes
Sourced from github/codeql-action/upload-sarif's releases.
... (truncated)
Changelog
Sourced from github/codeql-action/upload-sarif's changelog.
... (truncated)
Commits
24c5418Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc69e87c5Add changelog note for #418423b6828Update changelog for v4.38.3e0b52dbMerge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci6b99698Pin Python 3.13.15 for older CLI versions in multi-language check63d3d63Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.27377a10Add changelog notec1a30cdUpdate default bundle to codeql-bundle-v2.27.2d208ec7Merge pull request #4200 from github/mbg/esm/migrate-pr-checksa71b0c6Replace__dirnameinsync.tsUpdates
snyk/actions/golangfrom 0.4.0 to 1.0.0Release notes
Sourced from snyk/actions/golang's releases.
... (truncated)
Commits
9adf32bchore(ci): adjust to build release based on current branch (#202)ce71ff9feat: release stable v1.0.0 (#201)de2dda6chore(ci): pin action to immutable sha (#199)6f87086chore(ci): generate GitHub releases based on commits (#198)e222141fix: update upload-sarif documentations (#196)42be729chore: add security.md [PRODSEC-5886] (#197)10a13ebfix: synchronizing Github actions templates (#195)7d78c83chore: fixing wrong github warning markdown2f3c869docs: add contributing and support sections (#194)ae57bdffix: synchronize actions with the snyk-images repository (#193)Updates
actions/setup-pythonfrom 6.2.0 to 7.0.0Release notes
Sourced from actions/setup-python's releases.