build(deps): bump the actions-updates group across 1 directory with 10 updates by dependabot[bot] · Pull Request #293 · edera-dev/linux-kernel-oci

dependabot · 2026-11-02T00:44:40Z

Bumps the actions-updates group with 10 updates in the / directory:

Package	From	To
step-security/harden-runner	`2.20.1`	`2.22.3`
docker/setup-buildx-action	`4.2.0`	`4.4.1`
actions/upload-artifact	`7.0.1`	`7.0.2`
actions/download-artifact	`8.0.1`	`8.0.2`
astral-sh/setup-uv	`10.1.0`	`10.3.3`
edera-dev/actions/report-disk-space	`0.0.17`	`0.0.20`
edera-dev/actions/reclaim-disk-space	`0.0.17`	`0.0.20`
edera-dev/actions/configure-azure-sccache	`0.0.17`	`0.0.20`
edera-dev/actions/.github/workflows/advisory-review.yml	`0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8`	`72785a27a033e2a64c53d9d55c88253fa174cc16`
actions/create-github-app-token	`3.2.0`	`3.3.0`

Updates step-security/harden-runner from 2.20.1 to 2.22.3

Release notes

Sourced from step-security/harden-runner's releases.

v2.22.3

What's Changed

Added support for Avrea-hosted runners (enterprise tier)

Fixed unexpected blocking of allowed connections caused by GitHub’s DNS resolver and outbound proxy experiment on GitHub-hosted Linux runners

Added a feature flag to disable implicit AWS endpoint allowances on self-hosted Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.2...v2.22.3

v2.22.2

What's Changed

Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS

Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier)

Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2

v2.22.1

What's Changed

Fixed security rules not initializing on GHES self-hosted runners

Fixed GHES connectivity in block mode by implicitly allowing the GHES hostname

Full Changelog: step-security/harden-runner@v2.22.0...v2.22.1

v2.22.0

What's Changed

Linux ARM64 support for community tier

GHES support for self-hosted VMs (enterprise tier)

MacOS and Windows runner deny list support for block policy (enterprise tier).

Full Changelog: step-security/harden-runner@v2.21.1...v2.22.0

v2.21.1

What's Changed

Improved performance of the disable-sudo feature.

Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.

Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.

Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

v2.21.0

What's Changed

Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.

Improved Support for AWS CodeBuild GitHub Actions Runners.

Bug fixes.

... (truncated)

Commits

46b06ce Merge pull request #711 from step-security/rc-46
f82eb4b Merge pull request #710 from h0x0er/jatin/tp-avrea
665b85a update agent-self-hosted, agent-bravo to v1.9.5 and agent to v0.18.0
80fffe1 detect avrea runners
dc2769a Merge pull request #707 from step-security/rc-45
ab0b273 Merge pull request #706 from h0x0er/rc-45
03ccff8 Remove agent-preinstalled skip for third-party runners
815e48d Skip agent install and post-step cleanup when agent is already installed
ccd8616 Merge pull request #704 from h0x0er/jatin/ghes-endp
037ccfd implicitly add ghes endpoint in allowList
Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.2.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

Skip BuildKit image pre-pulls for explicit endpoints by @crazy-max in docker/setup-buildx-action#624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Use official Buildx releases for cloud driver by @crazy-max in docker/setup-buildx-action#606

Pull BuildKit image before builder creation by @crazy-max in docker/setup-buildx-action#609

Use shared error helpers for Buildx and Docker commands by @crazy-max in docker/setup-buildx-action#620

Bump @docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614

Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in docker/setup-buildx-action#595

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/setup-buildx-action#600

Bump js-yaml from 5.2.0 to 5.3.0 in docker/setup-buildx-action#585

Bump postcss from 8.5.10 to 8.5.25 in docker/setup-buildx-action#598

Bump undici from 6.27.0 to 6.28.0 in docker/setup-buildx-action#601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits

f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
e700274 chore: update generated content
3061c91 skip BuildKit image pre-pulls for explicit endpoints
594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
bd6e702 chore: update generated content
6268c9d pull BuildKit image before builder creation
e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
533ed8e build(deps): bump the codeql-actions group with 2 updates
bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
d5079fb chore: update generated content
Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

Update the readme by @danwkennedy in actions/download-artifact#473

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Update @actions/artifact to 6.3.1 by @tunc-d in actions/download-artifact#492

Prepare download-artifact v8.0.2 by @tunc-d in actions/download-artifact#493

New Contributors

@tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
e455989 Prepare download-artifact v8.0.2
a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
29bb7ce Update @actions/artifact to 6.3.1
484a0b5 Update the readme (#473)
See full diff in compare view

Updates astral-sh/setup-uv from 10.1.0 to 10.3.3

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change)

Also a big thank you to @soujasK for a set of bugfixes 👏

🐛 Bug fixes

Use Astral mirror for version manifests with GitHub fallback @eifinger (#1119)

fix: allow whitespace in uv requirement specifiers @soujasK (#1112)

fix: resolve ~= specifiers with PEP 440 semantics @soujasK (#1111)

fix: only report a saved cache when saving succeeded @soujasK (#1110)

🧰 Maintenance

chore: update known checksums for 0.13.6 @github-actions[bot] (#1117)

📚 Documentation

docs: use JSDoc for compatible release specifier comment @eifinger (#1113)

docs: update version references to v10.3.2 @github-actions[bot] (#1104)

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

chore: update known checksums for 0.13.5 @github-actions[bot] (#1103)

📚 Documentation

docs: update version references to v10.3.1 @github-actions[bot] (#1102)

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

fix: preserve cache error class names in save-cache bundle @dannyward630 (#1093)

🧰 Maintenance

... (truncated)

Commits

68559e9 Use Astral mirror for version manifests with GitHub fallback (#1119)
0192b69 chore: update known checksums for 0.13.6 (#1117)
2f29784 docs: use JSDoc for compatible release specifier comment (#1113)
9c73321 fix: allow whitespace in uv requirement specifiers (#1112)
80fbe01 fix: resolve ~= specifiers with PEP 440 semantics (#1111)
36b7b57 fix: only report a saved cache when saving succeeded (#1110)
56618ca docs: update version references to v10.3.2 (#1104)
07a047e chore: update known checksums for 0.13.5 (#1103)
e1b8536 docs: update version references to v10.3.1 (#1102)
18d369b chore(deps): roll up Dependabot updates (#1101)
Additional commits viewable in compare view

Updates edera-dev/actions/report-disk-space from 0.0.17 to 0.0.20

Commits

819227d feat(push-metrics): push directly to azure monitor managed prometheus with re...
672ae82 feat(advisory-review): share the PR review and test coverage checks (#31)
faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
d72451e feat: add push-metrics action (#30)
f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
See full diff in compare view

Updates edera-dev/actions/reclaim-disk-space from 0.0.17 to 0.0.20

Commits

819227d feat(push-metrics): push directly to azure monitor managed prometheus with re...
672ae82 feat(advisory-review): share the PR review and test coverage checks (#31)
faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
d72451e feat: add push-metrics action (#30)
f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
See full diff in compare view

Updates edera-dev/actions/configure-azure-sccache from 0.0.17 to 0.0.20

Commits

819227d feat(push-metrics): push directly to azure monitor managed prometheus with re...
672ae82 feat(advisory-review): share the PR review and test coverage checks (#31)
faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
d72451e feat: add push-metrics action (#30)
f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
See full diff in compare view

Updates edera-dev/actions/.github/workflows/advisory-review.yml from 0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8 to 72785a27a033e2a64c53d9d55c88253fa174cc16

Commits

72785a2 feat(advisory-review): run the checks on Opus 5.5 at max effort
3bb6513 test(advisory-review): mark the literal backticks in the link pattern
f9f8d3a test(advisory-review): stop the contract checks racing their own pipes
See full diff in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)

deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)

deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)

support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)

validate private-key input (#376) (f24bbd8)

Commits

64ab729 chore(main): release 3.3.0 (#402)
f3a828e ci: create signed dist commits in release workflow (#404)
655017f docs: clarify when owner grants access to all repositories (#378)
12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
a47236f feat: update permission inputs (#399)
a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
e85f677 test: omit stack traces from snapshots (#401)
9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…0 updates Bumps the actions-updates group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.20.1` | `2.22.3` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.1.0` | `10.3.3` | | [edera-dev/actions/report-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.20` | | [edera-dev/actions/reclaim-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.20` | | [edera-dev/actions/configure-azure-sccache](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.20` | | [edera-dev/actions/.github/workflows/advisory-review.yml](https://github.com/edera-dev/actions) | `0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8` | `72785a27a033e2a64c53d9d55c88253fa174cc16` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` | Updates `step-security/harden-runner` from 2.20.1 to 2.22.3 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@b09bb98...46b06ce) Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...f87e599) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) Updates `astral-sh/setup-uv` from 10.1.0 to 10.3.3 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@bec219d...68559e9) Updates `edera-dev/actions/report-disk-space` from 0.0.17 to 0.0.20 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...819227d) Updates `edera-dev/actions/reclaim-disk-space` from 0.0.17 to 0.0.20 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...819227d) Updates `edera-dev/actions/configure-azure-sccache` from 0.0.17 to 0.0.20 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...819227d) Updates `edera-dev/actions/.github/workflows/advisory-review.yml` from 0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8 to 72785a27a033e2a64c53d9d55c88253fa174cc16 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@0c15ad1...72785a2) Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@bcd2ba4...64ab729) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: edera-dev/actions/report-disk-space dependency-version: 0.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: edera-dev/actions/reclaim-disk-space dependency-version: 0.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: edera-dev/actions/configure-azure-sccache dependency-version: 0.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: edera-dev/actions/.github/workflows/advisory-review.yml dependency-version: 72785a27a033e2a64c53d9d55c88253fa174cc16 dependency-type: direct:production dependency-group: actions-updates - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 2, 2026

dependabot Bot requested review from alexandermerritt, azenla, bleggett, kaniini and tycho as code owners November 2, 2026 00:44

Navigation Menu

Repository navigation

build(deps): bump the actions-updates group across 1 directory with 10 updates - #293

build(deps): bump the actions-updates group across 1 directory with 10 updates#293
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-updates-d4a355b34a

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

v2.22.3

What's Changed

v2.22.2

What's Changed

v2.22.1

What's Changed

v2.22.0

What's Changed

v2.21.1

What's Changed

v2.21.0

What's Changed

v4.4.1

v4.4.0

v4.3.0

v7.0.2

What's Changed

New Contributors

v8.0.2

What's Changed

New Contributors

v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

🐛 Bug fixes

🧰 Maintenance

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

3.2.0 (2026-05-12)

Features

Bug Fixes

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants