Skip to content

chore(ci): bump the github-actions group with 5 updates#2118

Merged
chaliy merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-b81e275347
Jun 22, 2026
Merged

chore(ci): bump the github-actions group with 5 updates#2118
chaliy merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-b81e275347

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on actions/checkout, dtolnay/rust-toolchain, pnpm/action-setup, taiki-e/install-action and softprops/action-gh-release to permit the latest version.
Updates actions/checkout from 6.0.3 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates dtolnay/rust-toolchain to e081816240890017053eacbb1bdf337761dc5582

Commits

Updates pnpm/action-setup from 6.0.8 to 6.0.9

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.9

What's Changed

Full Changelog: pnpm/action-setup@v6...v6.0.9

Commits

Updates taiki-e/install-action from 2.81.10 to 2.82.2

Release notes

Sourced from taiki-e/install-action's releases.

2.82.2

  • Update xh@latest to 0.26.1.

  • Update uv@latest to 0.11.23.

  • Update trivy@latest to 0.71.2.

  • Update sccache@latest to 0.16.0.

2.82.1

  • Update vacuum@latest to 0.29.4.

  • Update uv@latest to 0.11.22.

  • Update osv-scanner@latest to 2.4.0.

  • Update mise@latest to 2026.6.11.

  • Update martin@latest to 1.11.0.

  • Update just@latest to 1.53.0.

  • Update cargo-zigbuild@latest to 0.23.0.

2.82.0

  • Support cargo-vet. (#1908, thanks @​jakewimmer)

  • Support cargo-crap. (#1905, thanks @​BartoszCiesla)

  • Support cargo-leptos. (#1903, thanks @​404Simon)

  • Update kingfisher@latest to 1.103.0.

  • Update cargo-xwin@latest to 0.23.0.

  • Update wasmtime@latest to 45.0.2.

  • Update cargo-deny@latest to 0.19.9.

  • Update prek@latest to 0.4.5.

  • Update trivy@latest to 0.71.1.

  • Update mise@latest to 2026.6.10.

2.81.11

  • Update wasm-tools@latest to 1.252.0.

  • Update wasm-bindgen@latest to 0.2.125.

... (truncated)

Commits

Updates softprops/action-gh-release from 3.0.0 to 3.0.1

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.1

3.0.1

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.1

  • maintenance release with updated dependencies

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

  • Move the action runtime and bundle target to Node 24
  • Update @types/node to the Node 24 line and allow future Dependabot updates
  • Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

2.6.2

What's Changed

Other Changes 🔄

2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

... (truncated)

Commits
  • 718ea10 release 3.0.1
  • f1a938b chore(deps): bump esbuild from 0.28.0 to 0.28.1 (#802)
  • 0066ead chore(deps): bump vite from 8.0.14 to 8.0.16 (#806)
  • dc643ca chore(deps): bump the npm group with 3 updates (#805)
  • 85ee99b chore(deps): bump actions/checkout in the github-actions group (#804)
  • 9ed3cf9 chore(deps): bump the npm group with 2 updates (#800)
  • 3efcac8 chore(deps): bump the npm group with 3 updates (#798)
  • 05d6b91 chore(deps): bump brace-expansion from 5.0.5 to 5.0.6 (#797)
  • 403a524 chore(deps): bump @​types/node from 24.12.2 to 24.12.3 in the npm group (#796)
  • 437e073 chore(deps): bump the npm group with 4 updates (#792)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(ci): bump the github-actions group with 5 updates
a35ca7c 
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain), [pnpm/action-setup](https://github.com/pnpm/action-setup), [taiki-e/install-action](https://github.com/taiki-e/install-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release) to permit the latest version.

Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

Updates `dtolnay/rust-toolchain` to e081816240890017053eacbb1bdf337761dc5582
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases)
- [Commits](https://github.com/dtolnay/rust-toolchain/commits/e081816240890017053eacbb1bdf337761dc5582)

Updates `pnpm/action-setup` from 6.0.8 to 6.0.9
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@0e279bb...0ebf471)

Updates `taiki-e/install-action` from 2.81.10 to 2.82.2
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Commits](taiki-e/install-action@v2.81.10...v2.82.2)

Updates `softprops/action-gh-release` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@b430933...718ea10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: dtolnay/rust-toolchain
  dependency-version: e081816240890017053eacbb1bdf337761dc5582
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.82.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 22, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 bashkit 38b6b2e Commit Preview URL

Branch Preview URL		 Jun 22 2026, 07:59 PM

@chaliy
chore(ci): keep branch-pinned toolchain/tarpaulin refs on rebump
38b6b2e 
dependabot collapsed two branch-semantic action refs onto version-tag
SHAs, which silently breaks the jobs that rely on the ref name:

- dtolnay/rust-toolchain@<nightly-branch> selects the nightly channel;
  pointing it at the 1.95.0 tag SHA switched fuzz/miri/emscripten/ASAN
  jobs to stable -> 'can't find crate for core' on wasm32 targets.
- taiki-e/install-action@cargo-tarpaulin auto-installs tarpaulin; the
  v2 tag SHA does not -> 'no such command: tarpaulin' in coverage.

Restore those two refs to their branch-pinned SHAs while keeping the
safe bumps (actions/checkout v7, pnpm/action-setup, action-gh-release,
and the install-action calls that pass an explicit tool:).
@chaliy chaliy merged commit c10d713 into main Jun 22, 2026
41 checks passed
@chaliy chaliy deleted the dependabot/github_actions/github-actions-b81e275347 branch June 22, 2026 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chaliy