Skip to content

Bump the dependencies group across 1 directory with 5 updates - #1780

Closed
dependabot[bot] wants to merge 1 commit into
krfrom
dependabot/github_actions/dependencies-586761dee5
Closed

Bump the dependencies group across 1 directory with 5 updates#1780
dependabot[bot] wants to merge 1 commit into
krfrom
dependabot/github_actions/dependencies-586761dee5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates in the / directory:

Package From To
actions/checkout 6.0.3 7.0.1
actions/setup-node 6.4.0 7.0.0
JamesIves/github-pages-deploy-action 4.8.0 4.9.0
errata-ai/vale-action 2.1.2 3.0.0
cypress-io/github-action 7.4.0 7.4.1

Updates actions/checkout from 6.0.3 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-node from 6.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates JamesIves/github-pages-deploy-action from 4.8.0 to 4.9.0

Release notes

Sourced from JamesIves/github-pages-deploy-action's releases.

v4.9.0

What's Changed

Bug Fixes 🐝

Build 🔧

Other Changes

New Contributors

Full Changelog: JamesIves/github-pages-deploy-action@v4...v4.9.0

Commits
  • fa24774 Merge remote-tracking branch 'origin/dev' into releases/v4
  • 1e0489f fix: use a dedicated RELEASE_PAT for release creation
  • 737d5af ci: run sponsors README update twice a week instead of daily
  • 5d78d7b ci: run integration tests weekly instead of daily
  • 36c7ef9 Deploy Production Code for Commit b09969f18cbaf8fd7f336068c0c4d9abfdcbf68a 🚀
  • 74a589d Merge remote-tracking branch 'origin/dev' into releases/v4
  • b09969f style: fix prettier formatting in LFS changes
  • 87729a6 feat: add Git LFS support for deployment branch
  • cc13712 fix: add missing checkout step to integration-rebase-conflicts-cleanup
  • d866689 Merge branch 'dev' of https://github.com/JamesIves/github-pages-deploy-action...
  • Additional commits viewable in compare view

Updates errata-ai/vale-action from 2.1.2 to 3.0.0

Release notes

Sourced from errata-ai/vale-action's releases.

v3.0.0

Breaking

Nothing was renamed or removed, but several behaviors changed. Each has a way back.

  • reviewdog 0.17.0 → 0.21.0. Workflows triggered on push using a github-pr-* reporter previously reported nothing (this is not PullRequest build, exit 0). They now lint, and can fail. Pin reviewdog_version: 0.17.0 to keep the old behavior.
  • The level input is honored. It was read from action.yml and never used. Checks that concluded neutral can now conclude failure. Leave level unset for the previous behavior.
  • fail_on_error: true fails on errors only. It previously failed on a finding of any severity for every reporter except the check ones, so a lone suggestion ended the run. Use fail_level: any to restore that.
  • GitHub's 10-annotation limit no longer fails the job when fail_on_error: false. You get a warning naming how many alerts went unshown.
  • Pinning @reviewdog tracks the branch, which is now v3. Pin @v3, or @v2 to stay put.

Added

  • Suggested fixes. Alerts that Vale knows how to resolve are posted as suggested changes you can commit from the pull request — the same replacements the language server offers. Requires reporter: github-pr-review.
  • macOS, Windows, and ARM runners. The action previously only ran on Linux x86-64.
  • New inputs: config, filter, glob, min_alert_level, fail_level, sync, reviewdog_version. workdir is now declared and documented.
  • Caching. Binaries go in the runner's tool cache, and sync: false lets you restore a cached StylesPath instead of re-downloading every package each run.
  • Downloads are verified against each release's published checksums.

Fixed

  • Crash on large output — write EPIPE when reviewdog exited before reading it all (#122)
  • An empty files list failing with lstat : no such file or directory (#141)
  • Pull requests whose diff exceeds 20,000 lines (#153)
  • The annotation limit failing runs regardless of fail_on_error (#89, #150)
  • A warning failing the workflow under fail_on_error: true (#84)
  • Nothing reported on push events (#103)
  • The level input being ignored (#106)
  • Wildcards in files — use the glob input; the warning now says so (#123)
  • Scheduled runs on runners that write a thin event payload (#69)
  • vale_flags splitting on whitespace, which broke --filter='.Level == "error"'
  • Vale's own error is reported when it exits with a runtime error, instead of an exit code

Internal

The action now ships as a single bundled dist/index.js; node_modules is no longer committed, taking the repository from 1,035 tracked files to 23. CI fails if the bundle is out of date with the source.

Full Changelog: vale-cli/vale-action@2.1.2...v3.0.0

Commits
  • 518a913 Point the README at v3
  • dca64de Backtick reviewdog in the README
  • 4063152 Add a fail_level input
  • 1ef5a5f Move the major tag ourselves, whatever the release is called
  • 00a15b5 Treat an empty file list as nothing to lint
  • 40967b1 Point wildcard paths at the glob input
  • d4af982 Survive reviewdog closing its input early
  • febea0f Fail on errors, not on any finding
  • b1d1c1f Give reviewdog a repository when the event payload omits one
  • 6b637c5 Note what a fork's read-only token can't do
  • Additional commits viewable in compare view

Updates cypress-io/github-action from 7.4.0 to 7.4.1

Release notes

Sourced from cypress-io/github-action's releases.

v7.4.1

7.4.1 (2026-06-29)

Bug Fixes

  • deps: update transient dependency to undici 6.27.0 (#1807) (fa4a118)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group across 1 directory with 5 updates
7f6787a 
Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` |
| [JamesIves/github-pages-deploy-action](https://github.com/jamesives/github-pages-deploy-action) | `4.8.0` | `4.9.0` |
| [errata-ai/vale-action](https://github.com/errata-ai/vale-action) | `2.1.2` | `3.0.0` |
| [cypress-io/github-action](https://github.com/cypress-io/github-action) | `7.4.0` | `7.4.1` |



Updates `actions/checkout` from 6.0.3 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...3d3c42e)

Updates `actions/setup-node` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@48b55a0...8207627)

Updates `JamesIves/github-pages-deploy-action` from 4.8.0 to 4.9.0
- [Release notes](https://github.com/jamesives/github-pages-deploy-action/releases)
- [Commits](JamesIves/github-pages-deploy-action@d92aa23...fa24774)

Updates `errata-ai/vale-action` from 2.1.2 to 3.0.0
- [Release notes](https://github.com/errata-ai/vale-action/releases)
- [Commits](vale-cli/vale-action@85f9f7f...518a913)

Updates `cypress-io/github-action` from 7.4.0 to 7.4.1
- [Release notes](https://github.com/cypress-io/github-action/releases)
- [Changelog](https://github.com/cypress-io/github-action/blob/master/CHANGELOG.md)
- [Commits](cypress-io/github-action@948d67d...fa4a118)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: JamesIves/github-pages-deploy-action
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: errata-ai/vale-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: cypress-io/github-action
  dependency-version: 7.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 11, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 11, 2026 09:33
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 11, 2026
@dkstyle dkstyle closed this Aug 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/github_actions/dependencies-586761dee5 branch August 20, 2026 02:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dkstyle