Skip to content

build(deps): bump the github-actions group across 1 directory with 7 updates - #238

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-057c8e863a
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-057c8e863a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 7 updates in the / directory:

Package From To
actions/checkout 6 7
conda-incubator/setup-miniconda 3.3.0 4.1.0
actions/setup-node 6 7
actions/setup-python 5 7
apache/skywalking-eyes/header 0.8.0 0.9.0
actions/upload-artifact 4 7
actions/download-artifact 4 8

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates conda-incubator/setup-miniconda from 3.3.0 to 4.1.0

Release notes

Sourced from conda-incubator/setup-miniconda's releases.

Version 4.1.0

What's Changed

Features and Enhancements

  • #567[567]: Add Miniforge support for linux-riscv64

Fixes

  • #539539: Look up the tool cache by tool name to fix Miniconda3 cache misses

Tasks and Maintenance

  • #507507: Harden GitHub Actions workflows and add zizmor scanning
  • #508508: Bump vite to 8.0.14 to resolve security advisories
  • #513513: Centralize test action-input fixtures in a shared helper
  • #541541, #551551: Bump codecov/codecov-action from 6 to 7
  • #544544: Bump vite in the npm_and_yarn group
  • #545545, #552552, #561561: Bump actions/checkout from 6.0.2 to 7.0.1
  • #546546, #556556, #566[566]: Bump js-yaml from 4.1.1 to 5.2.3
  • #547547: Bump semver from 7.7.4 to 7.8.5
  • #549549, #558558, #572[572], #575[575]: Bump the npm_and_yarn group (linkify-it, postcss, undici, brace-expansion, @​vitest/mocker, @​vitest/coverage-v8)
  • #550550, #557557: Bump marocchino/sticky-pull-request-comment from 3.0.3 to 3.0.5
  • #553553: Bump actions/cache from 5.0.5 to 6.1.0
  • #554554, #560560, #565[565], #574[574]: Bump zizmorcore/zizmor-action from 0.5.6 to 0.6.3
  • #562[562]: Bump actions/setup-node from 6.4.0 to 7.0.0
  • #573[573]: Bump actions/deploy-pages from 5.0.0 to 5.0.1

... (truncated)

Changelog

Sourced from conda-incubator/setup-miniconda's changelog.

v4.1.0 (2026-09-16)

Features and Enhancements

  • #567[567]: Add Miniforge support for linux-riscv64

Fixes

  • #539539: Look up the tool cache by tool name to fix Miniconda3 cache misses

Tasks and Maintenance

  • #507507: Harden GitHub Actions workflows and add zizmor scanning
  • #508508: Bump vite to 8.0.14 to resolve security advisories
  • #513513: Centralize test action-input fixtures in a shared helper
  • #541541, #551551: Bump codecov/codecov-action from 6 to 7
  • #544544: Bump vite in the npm_and_yarn group
  • #545545, #552552, #561[561]: Bump actions/checkout from 6.0.2 to 7.0.1
  • #546546, #556556, #566[566]: Bump js-yaml from 4.1.1 to 5.2.3
  • #547547: Bump semver from 7.7.4 to 7.8.5
  • #549549, #558[558], #572[572], #575[575]: Bump the npm_and_yarn group (linkify-it, postcss, undici, brace-expansion, @​vitest/mocker, @​vitest/coverage-v8)
  • #550550, #557[557]: Bump marocchino/sticky-pull-request-comment from 3.0.3 to 3.0.5
  • #553553: Bump actions/cache from 5.0.5 to 6.1.0
  • #554554, #560[560], #565[565], #574[574]: Bump zizmorcore/zizmor-action from 0.5.6 to 0.6.3
  • #562[562]: Bump actions/setup-node from 6.4.0 to 7.0.0
  • #573[573]: Bump actions/deploy-pages from 5.0.0 to 5.0.1

... (truncated)

Commits
  • be893c9 Prepare v4.1.0 release (#576)
  • c7e9df3 Bump @​vitest/mocker from 4.1.0 to 5.0.1 in the npm_and_yarn group across 1 di...
  • c9e4d79 Bump the npm_and_yarn group across 1 directory with 4 updates (#572)
  • 0ee587f Add miniforge for linux-riscv64 (#567)
  • 8646c59 Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#574)
  • cdd7904 Bump actions/deploy-pages from 5.0.0 to 5.0.1 (#573)
  • 3770981 Bump js-yaml from 5.2.1 to 5.2.3 (#566)
  • 049518b Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 (#565)
  • 6dac52e Bump actions/setup-node from 6.4.0 to 7.0.0 (#562)
  • e81fd62 Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#560)
  • Additional commits viewable in compare view

Updates actions/setup-node from 6 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates actions/setup-python from 5 to 7

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits

Updates apache/skywalking-eyes/header from 0.8.0 to 0.9.0

Release notes

Sourced from apache/skywalking-eyes/header's releases.

v0.9.0

What's Changed

New Contributors

Full Changelog: apache/skywalking-eyes@v0.8.0...v0.9.0

Commits
  • a196742 docs: fix typo seperated -> separated (#283)
  • ab60c97 feat: add a pnpm resolver for Node.js dependencies (#282)
  • 09ea464 build(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 (#281)
  • 315732d fix: pin docker/login-action to an ASF-approved commit SHA (#280)
  • eddd8f1 fix: don't treat mid-file #! strings as Python shebangs (#279)
  • 6e368ec build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#278)
  • 29bd646 build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#277)
  • 8e837be Add support for Ruby, ERB and slim (#266)
  • f4b890e feat: add header diff command to show header differences (#276)
  • ab3d1fe build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.1 (#275)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-057c8e863a branch from eac2a12 to def68f5 Compare September 25, 2026 12:20
…updates

Bumps the github-actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [conda-incubator/setup-miniconda](https://github.com/conda-incubator/setup-miniconda) | `3.3.0` | `4.1.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6` | `7` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5` | `7` |
| [apache/skywalking-eyes/header](https://github.com/apache/skywalking-eyes) | `0.8.0` | `0.9.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` |



Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `conda-incubator/setup-miniconda` from 3.3.0 to 4.1.0
- [Release notes](https://github.com/conda-incubator/setup-miniconda/releases)
- [Changelog](https://github.com/conda-incubator/setup-miniconda/blob/main/CHANGELOG.md)
- [Commits](conda-incubator/setup-miniconda@v3.3.0...v4.1.0)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

Updates `actions/setup-python` from 5 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v7)

Updates `apache/skywalking-eyes/header` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/apache/skywalking-eyes/releases)
- [Changelog](https://github.com/apache/skywalking-eyes/blob/main/CHANGES.md)
- [Commits](apache/skywalking-eyes@61275cc...a196742)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `actions/download-artifact` from 4 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: apache/skywalking-eyes/header
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: conda-incubator/setup-miniconda
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-057c8e863a branch from def68f5 to b06f08a Compare October 1, 2026 22:35

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants