chore(deps): bump the github-actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #54 · qa-test-automation-frameworks/selenium-testng-java-framework

dependabot · 2026-10-20T03:54:31Z

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
actions/setup-node	`7.0.0`	`7.1.0`
actions/setup-java	`6.0.0`	`6.1.0`
actions/download-artifact	`8.0.1`	`8.0.2`
actions/cache	`5.1.0`	`6.1.0`
actions/deploy-pages	`5.0.0`	`5.0.1`
actions/github-script	`373c709c69115d41ff229c7e5df9f8788daa9553`	`3a2844b7e9c422d3c10d287c895573f7108da1b3`

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in actions/setup-node#1421

Support absolute paths in node-version-file by @v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in actions/setup-node#1578

docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in actions/setup-node#1593

Fixed cache recommendation syntax by @SubJunk in actions/setup-node#1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in actions/setup-node#1583

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-node#1584

Pin @types/node to v24 by @v-priyagupta108 in actions/setup-node#1585

Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in actions/setup-node#1599

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-node#1598

Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in actions/setup-node#1590

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-node#1610

Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in actions/setup-node#1602

Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in actions/setup-node#1629

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-node#1616

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-node#1615

Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in actions/setup-node#1631

Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in actions/setup-node#1636

Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in actions/setup-node#1638

Update dependencies and add license files by @v-HarithaVattikuti in actions/setup-node#1642

Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-node#1635

New Contributors

@v-jitenderpalsingh made their first contribution in actions/setup-node#1580

@philip-gai made their first contribution in actions/setup-node#1584

@gperdomor made their first contribution in actions/setup-node#1421

@SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
7207c4f chore: update dependencies and add license files (#1642)
54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
0c54c7b Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
a829419 Bump @types/semver from 7.7.1 to 7.8.0 (#1616)
680d1e4 Support absolute paths in node-version-file (#1633)
db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
Additional commits viewable in compare view

Updates actions/setup-java from 6.0.0 to 6.1.0

Release notes

Sourced from actions/setup-java's releases.

v6.1.0

What's Changed

Preserve compound Liberica build versions from .sdkmanrc by @brunoborges with @Copilot in actions/setup-java#1268

Support Temurin on Linux RISC-V by @yawkat in actions/setup-java#1269

Stop GPG agent before removing signature-verification home by @brunoborges with @Copilot in actions/setup-java#1273

Prefer Zulu 4-segment hotfix builds when resolving version ranges by @brunoborges in actions/setup-java#1278

Support Temurin JEP 322 patch versions like 26.0.2.1+1 by @brunoborges in actions/setup-java#1279

chore(deps): bump undici from 6.28.0 to 6.29.0 by @dependabot[bot] in actions/setup-java#1274

chore(deps): bump the monthly-npm-updates group with 13 updates by @dependabot[bot] in actions/setup-java#1276

feat: support Maven server credential origins by @YunaBraska in actions/setup-java#1282

Support Maven plugin repositories in generated settings.xml by @brunoborges in actions/setup-java#1286

New Contributors

@yawkat made their first contribution in actions/setup-java#1269

@YunaBraska made their first contribution in actions/setup-java#1282

Full Changelog: actions/setup-java@v6.0.1...v6.1.0

v6.0.1

What's Changed

Fix failing GitHub Actions job for temurin 17 by @brunoborges with @Copilot in actions/setup-java#1259

Fix Temurin EA E2E signature verification by @brunoborges with @Copilot in actions/setup-java#1260

Fix Alpine GPG verification failures and support multiple keys by @brunoborges in actions/setup-java#1262

Fix import-safe checks when scripts are run from a path with symlinks by @otaconix in actions/setup-java#1265

Avoid macOS GPG socket overflow on long runner paths by @brunoborges with @Copilot in actions/setup-java#1266

Complete v6 release highlights in README by @brunoborges in actions/setup-java#1254

Group and slow routine Dependabot updates by @brunoborges in actions/setup-java#1255

chore(deps-dev): update eslint and globals by @dependabot[bot] in actions/setup-java#1256

New Contributors

@otaconix made their first contribution in actions/setup-java#1265

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

Commits

b843ebf Support Maven plugin repositories in generated settings.xml (#1286)
2a69be2 feat: support Maven server credential origins (#1282)
d0e6e4d chore(deps): bump the monthly-npm-updates group with 13 updates (#1276)
b24925b chore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)
47b3648 Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)
74920aa Prefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)
a78ec39 Stop GPG agent before removing signature-verification home (#1273)
97c5a5e Support Temurin on Linux RISC-V (#1269)
1aa87b6 Preserve compound Liberica build versions from .sdkmanrc (#1268)
de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
Additional commits viewable in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

Update the readme by @danwkennedy in actions/download-artifact#473

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Update @actions/artifact to 6.3.1 by @tunc-d in actions/download-artifact#492

Prepare download-artifact v8.0.2 by @tunc-d in actions/download-artifact#493

New Contributors

@tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
e455989 Prepare download-artifact v8.0.2
a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
29bb7ce Update @actions/artifact to 6.3.1
484a0b5 Update the readme (#473)
See full diff in compare view

Updates actions/cache from 5.1.0 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in actions/cache#1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Update packages, migrate to ESM by @Samirat in actions/cache#1760

Full Changelog: actions/cache@v5...v6.0.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token

Switch redundant "Cache save failed" warning to debug log in save-only

6.0.0

Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2

Migrated to ESM module system

Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)

Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)

Bump fast-xml-parser to v5.5.6

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

... (truncated)

Commits

55cc834 Merge pull request #1768 from jasongin/readonly-cache
d8cd72f Bump @actions/cache to v6.1.0 - handle cache write error due to RO token
2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
e9b91fd Prettier fixes
e4884b8 Rebuild dist
10baf01 Fixed licenses
e39b386 Fix test mock return order
b692820 PR feedback
6074912 Rebuild dist bundles as ESM to match type:module
5a912e8 Fix lint and jest issues
Additional commits viewable in compare view

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog

Add backoff and jitter to deployment polling @yoannchaudet (#444)

Improve deployment request test coverage @adwitiyagoyal (#440)

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits

368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
7e97763 Validate deployment polling intervals
0143e11 Add backoff and jitter to deployment polling
5e98f10 Merge pull request #440 from actions/user/adwitiya
8b0625a Improve deployment request test coverage
See full diff in compare view

Updates actions/github-script from 373c709c69115d41ff229c7e5df9f8788daa9553 to 3a2844b7e9c422d3c10d287c895573f7108da1b3

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `6.0.0` | `6.1.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [actions/cache](https://github.com/actions/cache) | `5.1.0` | `6.1.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` | | [actions/github-script](https://github.com/actions/github-script) | `373c709c69115d41ff229c7e5df9f8788daa9553` | `3a2844b7e9c422d3c10d287c895573f7108da1b3` | Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/setup-java` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@dd06d9c...b843ebf) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) Updates `actions/cache` from 5.1.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@caa2961...55cc834) Updates `actions/deploy-pages` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@cd2ce8f...368f825) Updates `actions/github-script` from 373c709c69115d41ff229c7e5df9f8788daa9553 to 3a2844b7e9c422d3c10d287c895573f7108da1b3 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@373c709...3a2844b) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 3a2844b7e9c422d3c10d287c895573f7108da1b3 dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

prayagv · 2026-10-21T09:01:43Z

Superseded by PR #55, merged to main as 528796a0e905420908b863d138c2dabb41a80757 on 2026-10-21. The owner-authored consolidation applies the same six upstream Action updates using immutable SHAs. Its required CI, Edge/Chrome/Firefox browser matrix, shared-app UI, quality, dependency review, Grid capacity, fresh-clone bootstrap, and scan checks passed on the exact PR head. Closing this Dependabot PR as superseded.

dependabot · 2026-10-21T09:01:52Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 20, 2026

prayagv mentioned this pull request Oct 21, 2026

Refresh pinned Selenium workflow actions #55

Merged

prayagv closed this Oct 21, 2026

dependabot Bot deleted the dependabot/github_actions/github-actions-ca1274edff branch October 21, 2026 09:01

Navigation Menu

Repository navigation

chore(deps): bump the github-actions group across 1 directory with 6 updates - #54

chore(deps): bump the github-actions group across 1 directory with 6 updates#54
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-ca1274edff

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

prayagv commented Oct 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 20, 2026

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

v6.1.0

What's Changed

New Contributors

v6.0.1

What's Changed

New Contributors

v8.0.2

What's Changed

New Contributors

v6.1.0

What's Changed

v6.0.0

What's Changed

Releases

How to prepare a release

Changelog

6.1.0

6.0.0

5.0.4

5.0.3

5.0.2

v5.0.1

Changelog

Uh oh!

prayagv commented Oct 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant