deps: Bump the actions group with 6 updates by dependabot[bot] · Pull Request #227 · halostatue/diff-lcs

dependabot · 2026-08-01T01:33:51Z

Bumps the actions group with 6 updates:

Package	From	To
step-security/harden-runner	`2.19.4`	`2.20.0`
actions/checkout	`7.0.0`	`7.0.1`
ruby/setup-ruby	`1.314.0`	`1.321.0`
KineticCafe/actions-dco	`3.1.0`	`3.1.1`
reviewdog/action-actionlint	`1.72.0`	`1.73.0`
zizmorcore/zizmor-action	`0.5.7`	`0.6.1`

Updates step-security/harden-runner from 2.19.4 to 2.20.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.20.0

What's Changed

Support for block policy for MacOS and Windows GitHub-hosted runners

Support for Bitrise MacOS GitHub Actions runners

HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

Commits

bf7454d Merge pull request #673 from step-security/fix/aggregate-error-startup-hang
1188420 Update non-TLS agent to v0.16.2
162cfea Update non-TLS agent to v0.16.1
eb9e1f4 Bring macOS runner updates from PR 674
1a10b01 Update Windows agent to v1.0.7
8b4a105 Apply npm audit fixes with release-age cooldown
3626e03 Default TLS status check failures to enabled
100e08b Update agent-ebpf to v1.8.12
774f75f Update agent to v1.8.9
f312657 Extend missing-agent-dir guard to Linux and macOS cleanup paths
Additional commits viewable in compare view

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518

trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521

escape values passed to --unset by @aiqiaoy in actions/checkout#2530

Various dependency updates

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518

Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521

Escape values passed to --unset by @aiqiaoy in actions/checkout#2530

Various dependency updates

v7.0.0

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Various dependency updates

v6.0.3

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

... (truncated)

Commits

3d3c42e prep v7.0.1 release (#2531)
2880268 escape values passed to --unset (#2530)
12cd223 trim only ascii whitespace for branch (#2521)
62661c4 skip running unsafe pr check if input is default (#2518)
e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
631c942 eslint 9 (#2474)
4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
ba09753 Bump actions/checkout from 6 to 7 (#2488)
b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
Additional commits viewable in compare view

Updates ruby/setup-ruby from 1.314.0 to 1.321.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.321.0

What's Changed

Add jruby-10.1.1.0 by @ruby-builder-bot in ruby/setup-ruby#932

Full Changelog: ruby/setup-ruby@v1.320.0...v1.321.0

v1.320.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#931

Full Changelog: ruby/setup-ruby@v1.319.0...v1.320.0

v1.319.0

What's Changed

Add ruby-3.3.12 by @ruby-builder-bot in ruby/setup-ruby#930

Full Changelog: ruby/setup-ruby@v1.318.0...v1.319.0

v1.318.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#929

Full Changelog: ruby/setup-ruby@v1.317.0...v1.318.0

v1.317.0

What's Changed

Add ruby-4.0.6 by @ruby-builder-bot in ruby/setup-ruby#928

Full Changelog: ruby/setup-ruby@v1.316.0...v1.317.0

v1.316.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#926

Full Changelog: ruby/setup-ruby@v1.315.0...v1.316.0

v1.315.0

What's Changed

Bump actions/checkout from 6 to 7 by @dependabot[bot] in ruby/setup-ruby#924

Add ruby-3.4.10 by @ruby-builder-bot in ruby/setup-ruby#925

Full Changelog: ruby/setup-ruby@v1.314.0...v1.315.0

Commits

95ef2b0 Add jruby-10.1.1.0
a30dfa4 Update CRuby releases on Windows
003a5c4 Add ruby-3.3.12
8e41b36 Update CRuby releases on Windows
6e5d382 Add ruby-4.0.6
d45b1a4 Update CRuby releases on Windows
0dafeac Add ruby-3.4.10
bf35c27 Bump actions/checkout from 6 to 7
See full diff in compare view

Updates KineticCafe/actions-dco from 3.1.0 to 3.1.1

Release notes

Sourced from KineticCafe/actions-dco's releases.

v3.1.1: Fix author parsing when null

What's Changed

fix: Fix author parsing when null by @halostatue in KineticCafe/actions-dco#217

Full Changelog: KineticCafe/actions-dco@v3.1.0...v3.1.1

Changelog

Sourced from KineticCafe/actions-dco's changelog.

KineticCafe/actions-dco Changelog

3.2.0 / 2026-07-25

Added a test case to detect regression of #216[issue-216] or similar parsing errors.

Modified the error handling of JSON response decoding to include a more meaningful error.

Added support for reading .github/dco-check.toml or .dco-check.toml from the repo root on the default branch. If present, this takes precedence over any inline configuration (config:) key. This prevents a PR from "accidentally" changing the DCO check policy. See the configuration documentation for details.

Added a configuration report to the output logs so that transient configurations are still reported for review.

3.1.1 / 2026-07-25

Resolved #216[issue-216] with a fix to the OpenAPI generator oaspec.

3.1.0 / 2026-05-15
Reshaped the sign-off summary written to the action and optionally as a commit comment. The message as added with 3.0.0 was accurate but meaningless. It has now be modified to produce meaningful summaries.

Each commit that fails (up to X commits) will be included in a DCO failure table:
| Commit     | Subject                       | Issue                    |
| ---------- | ----------------------------- | ------------------------ |
| `ff882225` | deps: Bump the actions group… | No Signed-off-by trailer |
When commits are passed, skipped or exempt, they are included in a "pass" table grouped by the identity responsible that signed off:
| Identity                | Commits                        |
| ----------------------- | ------------------------------ |
| dependabot[bot]         | 1 (bot, skipped)               |
| Alice <al…@example.org> | 2 (signed off)                 |
| Bob <bob@example.com>   | 1 (exempt domain @example.com) |
The comment will be headed with a subject indicating that the check was

... (truncated)

Commits

b8ab7a2 fix: Fix author parsing when null
See full diff in compare view

Updates reviewdog/action-actionlint from 1.72.0 to 1.73.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.73.0

What's Changed

feat: add support for running this action without docker by @IlyaGulya in reviewdog/action-actionlint#156

Install pyflakes to composite action by @shogo82148 in reviewdog/action-actionlint#212

Install shellcheck to dockerless by @shogo82148 in reviewdog/action-actionlint#213

pin the version of pyflakes by @shogo82148 in reviewdog/action-actionlint#214

feat: consolidate installation into a dedicated script by @shogo82148 in reviewdog/action-actionlint#215

chore(deps): update reviewdog to 0.21.0 by @github-actions[bot] in reviewdog/action-actionlint#216

chore(deps): update actionlint to 1.7.12 by @github-actions[bot] in reviewdog/action-actionlint#217

fix: correct version_name typo in depup workflow for shellcheck by @shogo82148 in reviewdog/action-actionlint#218

chore(deps): update shellcheck to 0.11.0 by @github-actions[bot] in reviewdog/action-actionlint#219

GitHub native release note by @shogo82148 in reviewdog/action-actionlint#220

chore: update download URLs for actionlint and reviewdog to specific commits by @shogo82148 in reviewdog/action-actionlint#221

New Contributors

@IlyaGulya made their first contribution in reviewdog/action-actionlint#156

Full Changelog: reviewdog/action-actionlint@v1.72.1...v1.73.0

Release v1.72.1

v1.72.1: PR #211 - fix: include digest in Docker image reference for action.yml

Commits

5084226 bump v1.73.0
70f2164 Merge branch 'main' into releases/v1
a499b80 Merge pull request #221 from reviewdog/pin-install-script
b9330b9 chore: update download URLs for actionlint and reviewdog to specific commits
e32ed54 Merge pull request #220 from reviewdog/github-native-release-note
ae14c28 chore: enable generation of release notes in the release workflow
992e934 chore: remove tag trigger from release workflow
f9adc3a Merge pull request #219 from reviewdog/depup/shellcheck
8295541 chore(deps): update shellcheck to 0.11.0
f96c3f1 Merge pull request #218 from reviewdog/correct-version-name-typo
Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.5.7 to 0.6.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.1

zizmor 1.28.0 is now the default version used by the action.

v0.6.0

zizmor 1.27.0 is now the default version used by the action.

What's Changed

Fold Docker image pull output into a collapsed Actions log group by @woodruffw with @Copilot in zizmorcore/zizmor-action#132

Readme: document missing inputs by @staabm in zizmorcore/zizmor-action#130

ci: block version sync workflow on forks by @shaanmajid in zizmorcore/zizmor-action#129

Sync zizmor versions by @github-actions[bot] in zizmorcore/zizmor-action#137

Add collect input by @woodruffw in zizmorcore/zizmor-action#139

New Contributors

@woodruffw with @Copilot made their first contribution in zizmorcore/zizmor-action#132

@staabm made their first contribution in zizmorcore/zizmor-action#130

@shaanmajid made their first contribution in zizmorcore/zizmor-action#129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

Commits

6fc4b00 Sync zizmor versions (#145)
2596f29 chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 in ...
1159a04 Bump pins (#140)
6599ee8 Add collect input (#139)
bec05c8 Sync zizmor versions (#137)
cf59549 Add issue templates (#135)
f72bf17 chore(deps): bump github/codeql-action/upload-sarif (#134)
b2a6fac ci: block version sync workflow on forks (#129)
2d88f44 Readme: document missing inputs (#130)
d81e276 Fold Docker image pull output into a collapsed Actions log group (#132)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.19.4` | `2.20.0` | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.314.0` | `1.321.0` | | [KineticCafe/actions-dco](https://github.com/kineticcafe/actions-dco) | `3.1.0` | `3.1.1` | | [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.72.0` | `1.73.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.7` | `0.6.1` | Updates `step-security/harden-runner` from 2.19.4 to 2.20.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@9af89fc...bf7454d) Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@9c091bb...3d3c42e) Updates `ruby/setup-ruby` from 1.314.0 to 1.321.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@9eb537c...95ef2b0) Updates `KineticCafe/actions-dco` from 3.1.0 to 3.1.1 - [Release notes](https://github.com/kineticcafe/actions-dco/releases) - [Changelog](https://github.com/KineticCafe/actions-dco/blob/main/CHANGELOG.md) - [Commits](KineticCafe/actions-dco@1da0428...b8ab7a2) Updates `reviewdog/action-actionlint` from 1.72.0 to 1.73.0 - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@6fb7acc...5084226) Updates `zizmorcore/zizmor-action` from 0.5.7 to 0.6.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@192e21d...6fc4b00) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: ruby/setup-ruby dependency-version: 1.321.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: KineticCafe/actions-dco dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: reviewdog/action-actionlint dependency-version: 1.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-01T01:34:12Z

✅ DCO Check Passed

Commits

Identity	Commits
dependabot[bot]	1 (bot, skipped)

coveralls · 2026-08-01T01:36:03Z

coverage: 93.695%. remained the same — dependabot/github_actions/actions-3190cc7471 into main

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 1, 2026

Navigation Menu

Uh oh!

deps: Bump the actions group with 6 updates - #227

deps: Bump the actions group with 6 updates#227
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-3190cc7471

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

github-actions Bot commented Aug 1, 2026

Uh oh!

coveralls commented Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

v2.20.0

What's Changed

v7.0.1

What's Changed

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v1.321.0

What's Changed

v1.320.0

What's Changed

v1.319.0

What's Changed

v1.318.0

What's Changed

v1.317.0

What's Changed

v1.316.0

What's Changed

v1.315.0

What's Changed

v3.1.1: Fix author parsing when null

What's Changed

KineticCafe/actions-dco Changelog

3.2.0 / 2026-07-25

3.1.1 / 2026-07-25

3.1.0 / 2026-05-15

Release v1.73.0

What's Changed

New Contributors

Release v1.72.1

v0.6.1

v0.6.0

What's Changed

New Contributors

Uh oh!

github-actions Bot commented Aug 1, 2026

✅ DCO Check Passed

Commits

Uh oh!

coveralls commented Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant