Skip to content

chore: bump the github-actions-dependencies group across 11 directories with 9 updates#516

Merged
neilime merged 1 commit intomainfrom
dependabot/github_actions/github-actions-dependencies-4234c3242f
Apr 27, 2026
Merged

chore: bump the github-actions-dependencies group across 11 directories with 9 updates#516
neilime merged 1 commit intomainfrom
dependabot/github_actions/github-actions-dependencies-4234c3242f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026 •
edited by neilime
Loading

Bumps the github-actions-dependencies group with 7 updates in the / directory:

Package From To
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml 0.22.0 0.23.0
hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml 0.3.0 0.4.0
hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml 0.22.0 0.23.0
actions/github-script 8.0.0 9.0.0
hoverkraft-tech/ci-github-nodejs 0.22.0 0.23.0
github/codeql-action 4.35.1 4.35.2
tj-actions/changed-files 47.0.5 47.0.6

Bumps the github-actions-dependencies group with 2 updates in the /actions/create-and-merge-pull-request directory: actions/github-script and peter-evans/create-pull-request.
Bumps the github-actions-dependencies group with 1 update in the /actions/create-or-update-comment directory: actions/github-script.
Bumps the github-actions-dependencies group with 1 update in the /actions/get-issue-number directory: actions/github-script.
Bumps the github-actions-dependencies group with 1 update in the /actions/get-matrix-outputs directory: actions/github-script.
Bumps the github-actions-dependencies group with 1 update in the /actions/local-workflow-actions directory: actions/github-script.
Bumps the github-actions-dependencies group with 2 updates in the /actions/parse-ci-reports directory: actions/github-script and hoverkraft-tech/ci-github-nodejs.
Bumps the github-actions-dependencies group with 1 update in the /actions/repository-owner-is-organization directory: actions/github-script.
Bumps the github-actions-dependencies group with 2 updates in the /actions/set-matrix-output directory: actions/github-script and actions/upload-artifact.
Bumps the github-actions-dependencies group with 1 update in the /actions/slugify directory: actions/github-script.
Bumps the github-actions-dependencies group with 1 update in the /actions/working-directory directory: actions/github-script.

Updates hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml from 0.22.0 to 0.23.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml's releases.

0.23.0

Release Summary

This release introduces a user-facing authentication update: GitHub App token generation now uses the GitHub App Client ID instead of the App ID, aligning the action with GitHub’s recommended approach for JWT issuance and future compatibility. (The GitHub Blog)

Internal changes include refreshed actions and workflows documentation plus dependency updates across GitHub Actions-related packages.

Breaking change(s)

Breaking change: configurations using the GitHub App numeric App ID for token generation must be updated to use the GitHub App Client ID instead, because the new release switches that identifier in its authentication flow.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.22.0...0.23.0

Commits
  • 48e0c54 feat!: use GitHub App Client ID instead of App ID for token generation
  • 1087330 build(deps): Bump the github-actions-dependencies group across 6 directories ...
  • 5abe6f4 Merge pull request #359 from hoverkraft-tech/dependabot/github_actions/github...
  • 0ac8c40 build(deps): Bump the github-actions-dependencies group across 18 directories...
  • 553fc21 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml from 0.3.0 to 0.4.0

Release notes

Sourced from hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml's releases.

0.4.0

Release Summary

This release mainly expands the public documentation with new golden paths for applications and multi-app patterns, a Kubernetes probes best practices guide, a DevX best practices section, and broader methodology and workflow setup content. It also improves the public docs experience by organizing projects by categories, fixing the project sidebar TOC, correcting GitHub edit links, and resolving missing assets during document rewriting.

Internal changes include CI and documentation generation improvements such as nested folder indexing, asset validation, linting and testing, and refactors to the inject-docs and index page implementation. It also includes routine dependency bumps and large batches of automated action documentation updates across the platform.

Breaking change(s)

Workflow sync-docs-dispatcher.yml now requires github-app-client-id instead of github-app-id, so existing workflow configurations must be updated to use the new input name.

What's Changed

... (truncated)

Commits
  • f3c9291 docs: update action documentation
  • 3889cf0 chore(deps): Bump follow-redirects in /application
  • 7c78f1e docs: update action documentation
  • 2507115 docs: update action documentation
  • 1d19389 chore(deps-dev): Bump @​typescript-eslint/parser
  • 88d526c chore(deps): Bump the github-actions-dependencies group across 1 directory wi...
  • 35f5107 docs: update action documentation
  • e38ef3c docs(hoverkraft-tech/ci-github-publish): update documentation
  • 1e7ddc6 docs: update action documentation
  • ae8ba6a docs(hoverkraft-tech/github-action-ovh-mks-scaling): update documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml from 0.22.0 to 0.23.0

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml's releases.

0.23.0

Release Summary

This release adds two user-facing improvements: actions/package now supports a package dir input, and package no longer archives the generated npm tarball before upload.

It also fixes has-installed-dependencies so unexpected errors are handled properly.

Internal changes include repeated documentation refreshes for actions and workflows, plus multiple dependency updates across npm packages and GitHub Actions.

Breaking change(s)

The package action now uploads the package tarball without archiving it first, so consumers downloading the artifact must handle the raw tarball directly; the updated documentation explicitly notes downloading by artifact ID with skip-decompress: true.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.22.0...0.23.0

Commits
  • 9d465a0 docs: update actions and workflows documentation
  • 003452f chore(deps): bump actions/cache
  • 575833c chore(deps): bump the npm-dependencies group across 4 directories with 3 updates
  • d78651a chore(deps): bump the github-actions-dependencies group across 10 directories...
  • 5141ab8 docs: update actions and workflows documentation
  • 7948262 chore(deps): bump github/codeql-action
  • c342fb8 docs: update actions and workflows documentation
  • 833fdc2 chore(deps): bump the github-actions-dependencies group across 10 directories...
  • b979eae chore(deps): bump the npm-dependencies group across 4 directories with 2 updates
  • 7a91470 chore(deps): bump the npm-dependencies group across 4 directories with 2 updates
  • Additional commits viewable in compare view

Updates actions/github-script from 8.0.0 to 9.0.0

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits
  • 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
  • ca10bbd fix: use @​octokit/core/types import for v7 compatibility
  • 86e48e2 merge: incorporate main branch changes
  • c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
  • afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
  • ff8117e ci: fix user-agent test to handle orchestration ID
  • 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
  • 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
  • c17d55b ci: add getOctokit integration test job
  • a047196 test: add getOctokit integration tests via callAsyncFunction
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-nodejs from 0.22.0 to 0.23.0

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs's releases.

0.23.0

Release Summary

This release adds two user-facing improvements: actions/package now supports a package dir input, and package no longer archives the generated npm tarball before upload.

It also fixes has-installed-dependencies so unexpected errors are handled properly.

Internal changes include repeated documentation refreshes for actions and workflows, plus multiple dependency updates across npm packages and GitHub Actions.

Breaking change(s)

The package action now uploads the package tarball without archiving it first, so consumers downloading the artifact must handle the raw tarball directly; the updated documentation explicitly notes downloading by artifact ID with skip-decompress: true.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.22.0...0.23.0

Commits
  • 9d465a0 docs: update actions and workflows documentation
  • 003452f chore(deps): bump actions/cache
  • 575833c chore(deps): bump the npm-dependencies group across 4 directories with 3 updates
  • d78651a chore(deps): bump the github-actions-dependencies group across 10 directories...
  • 5141ab8 docs: update actions and workflows documentation
  • 7948262 chore(deps): bump github/codeql-action
  • c342fb8 docs: update actions and workflows documentation
  • 833fdc2 chore(deps): bump the github-actions-dependencies group across 10 directories...
  • b979eae chore(deps): bump the npm-dependencies group across 4 directories with 2 updates
  • 7a91470 chore(deps): bump the npm-dependencies group across 4 directories with 2 updates
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 27, 2026
@dependabot dependabot Bot mentioned this pull request Apr 27, 2026
Closed
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 27, 2026

Hi, thank you for creating your PR, we will check it out very soon

@neilime neilime changed the title chore: bump the github-actions-dependencies group across 11 directories with 10 updates chore: bump the github-actions-dependencies group across 11 directories with 9 updates Apr 27, 2026
@dependabot @neilime
chore: bump the github-actions-dependencies group across 11 directori…
ce17e29 
…es with 9 updates

Bumps the github-actions-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml](https://github.com/hoverkraft-tech/ci-github-publish) | `0.22.0` | `0.23.0` |
| [hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml](https://github.com/hoverkraft-tech/public-docs) | `0.3.0` | `0.4.0` |
| [hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.22.0` | `0.23.0` |
| [actions/github-script](https://github.com/actions/github-script) | `8.0.0` | `9.0.0` |
| [hoverkraft-tech/ci-github-nodejs](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.22.0` | `0.23.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.35.1` | `4.35.2` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `47.0.5` | `47.0.6` |

Bumps the github-actions-dependencies group with 2 updates in the /actions/create-and-merge-pull-request directory: [actions/github-script](https://github.com/actions/github-script) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request).
Bumps the github-actions-dependencies group with 1 update in the /actions/create-or-update-comment directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 1 update in the /actions/get-issue-number directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 1 update in the /actions/get-matrix-outputs directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 1 update in the /actions/local-workflow-actions directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 2 updates in the /actions/parse-ci-reports directory: [actions/github-script](https://github.com/actions/github-script) and [hoverkraft-tech/ci-github-nodejs](https://github.com/hoverkraft-tech/ci-github-nodejs).
Bumps the github-actions-dependencies group with 1 update in the /actions/repository-owner-is-organization directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 2 updates in the /actions/set-matrix-output directory: [actions/github-script](https://github.com/actions/github-script) and [actions/upload-artifact](https://github.com/actions/upload-artifact).
Bumps the github-actions-dependencies group with 1 update in the /actions/slugify directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 1 update in the /actions/working-directory directory: [actions/github-script](https://github.com/actions/github-script).

Updates `hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@b56be56...48e0c54)

Updates `hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/hoverkraft-tech/public-docs/releases)
- [Commits](hoverkraft-tech/public-docs@c40c17f...f3c9291)

Updates `hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@775ce09...9d465a0)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `hoverkraft-tech/ci-github-nodejs` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@775ce09...9d465a0)

Updates `github/codeql-action` from 4.35.1 to 4.35.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@c10b806...95e58e9)

Updates `tj-actions/changed-files` from 47.0.5 to 47.0.6
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@22103cc...9426d40)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `peter-evans/create-pull-request` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c0f553f...5f6978f)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `hoverkraft-tech/ci-github-nodejs` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@775ce09...9d465a0)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Emilien Escalle <emilien.escalle@escemi.com>
@neilime neilime force-pushed the dependabot/github_actions/github-actions-dependencies-4234c3242f branch from 7748b08 to ce17e29 Compare April 27, 2026 08:24
@neilime neilime merged commit b4bf648 into main Apr 27, 2026
34 checks passed
@neilime neilime deleted the dependabot/github_actions/github-actions-dependencies-4234c3242f branch April 27, 2026 08:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@neilime