Bump the all-actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #2732 · stellar/freighter

dependabot · 2026-04-26T02:08:58Z

Bumps the all-actions group with 6 updates in the / directory:

Package	From	To
peter-evans/create-pull-request	`7.0.9`	`8.1.1`
actions/github-script	`8.0.0`	`9.0.0`
actions/upload-artifact	`5.0.0`	`7.0.1`
kewisch/action-web-ext	`1.3`	`2.0`
mnao305/chrome-extension-upload	`5.0.0`	`6.0.0`
ruby/setup-ruby	`1.268.0`	`1.306.0`

Updates peter-evans/create-pull-request from 7.0.9 to 8.1.1

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.1

What's Changed

build(deps-dev): bump the npm group with 2 updates by @dependabot[bot] in peter-evans/create-pull-request#4305

build(deps): bump minimatch by @dependabot[bot] in peter-evans/create-pull-request#4311

build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in peter-evans/create-pull-request#4316

build(deps): bump @tootallnate/once and jest-environment-jsdom by @dependabot[bot] in peter-evans/create-pull-request#4323

build(deps-dev): bump undici from 6.23.0 to 6.24.0 by @dependabot[bot] in peter-evans/create-pull-request#4328

build(deps-dev): bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in peter-evans/create-pull-request#4334

build(deps): bump picomatch by @dependabot[bot] in peter-evans/create-pull-request#4339

build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in peter-evans/create-pull-request#4344

build(deps-dev): bump the npm group with 3 updates by @dependabot[bot] in peter-evans/create-pull-request#4349

fix: retry post-creation API calls on 422 eventual consistency errors by @peter-evans in peter-evans/create-pull-request#4356

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

Create Pull Request v8.1.0

What's Changed

README.md: bump given GitHub actions to their latest versions by @deining in peter-evans/create-pull-request#4265

build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in peter-evans/create-pull-request#4273

build(deps-dev): bump the npm group with 2 updates by @dependabot[bot] in peter-evans/create-pull-request#4274

build(deps-dev): bump undici from 6.22.0 to 6.23.0 by @dependabot[bot] in peter-evans/create-pull-request#4284

Update distribution by @actions-bot in peter-evans/create-pull-request#4289

fix: Handle remote prune failures gracefully on self-hosted runners by @peter-evans in peter-evans/create-pull-request#4295

feat: add @octokit/plugin-retry to handle retriable server errors by @peter-evans in peter-evans/create-pull-request#4298

New Contributors

@deining made their first contribution in peter-evans/create-pull-request#4265

Full Changelog: peter-evans/create-pull-request@v8.0.0...v8.1.0

Create Pull Request v8.0.0

What's new in v8

Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

chore: Update checkout action version to v6 by @yonas in peter-evans/create-pull-request#4258

Update actions/checkout references to @v6 in docs by @Copilot in peter-evans/create-pull-request#4259

feat: v8 by @peter-evans in peter-evans/create-pull-request#4260

New Contributors

@yonas made their first contribution in peter-evans/create-pull-request#4258

@Copilot made their first contribution in peter-evans/create-pull-request#4259

Full Changelog: peter-evans/create-pull-request@v7.0.11...v8.0.0

Create Pull Request v7.0.11

What's Changed

fix: restrict remote prune to self-hosted runners by @peter-evans in peter-evans/create-pull-request#4250

... (truncated)

Commits

5f6978f fix: retry post-creation API calls on 422 eventual consistency errors (#4356)
d32e88d build(deps-dev): bump the npm group with 3 updates (#4349)
8170bcc build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#4344)
0041819 build(deps): bump picomatch (#4339)
b993918 build(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#4334)
36d7c84 build(deps-dev): bump undici from 6.23.0 to 6.24.0 (#4328)
a45d1fb build(deps): bump @tootallnate/once and jest-environment-jsdom (#4323)
3499eb6 build(deps): bump the github-actions group with 2 updates (#4316)
3f3b473 build(deps): bump minimatch (#4311)
6699836 build(deps-dev): bump the npm group with 2 updates (#4305)
Additional commits viewable in compare view

Updates actions/github-script from 8.0.0 to 9.0.0

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.

Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.

getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.

If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in actions/github-script#695

ci: use deployment: false for integration test environments by @salmanmkc in actions/github-script#712

feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in actions/github-script#700

New Contributors

@Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits

3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
ca10bbd fix: use @octokit/core/types import for v7 compatibility
86e48e2 merge: incorporate main branch changes
c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
ff8117e ci: fix user-agent test to handle orchestration ID
81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
3953caf docs: update README examples from @v8 to @v9, add getOctokit docs and v9 brea...
c17d55b ci: add getOctokit integration test job
a047196 test: add getOctokit integration tests via callAsyncFunction
Additional commits viewable in compare view

Updates actions/upload-artifact from 5.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795

Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796

Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in actions/upload-artifact#754

Upgrade the module to ESM and bump dependencies by @danwkennedy in actions/upload-artifact#762

Support direct file uploads by @danwkennedy in actions/upload-artifact#764

New Contributors

@Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in actions/upload-artifact#719

fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in actions/upload-artifact#744

prepare release v6.0.0 for Node.js 24 support by @salmanmkc in actions/upload-artifact#745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

Commits

043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
634250c Include changes in typespec/ts-http-runtime 0.3.5
e454baa Readme: bump all the example versions to v7 (#796)
74fad66 Update the readme with direct upload details (#795)
bbbca2d Support direct file uploads (#764)
589182c Upgrade the module to ESM and bump dependencies (#762)
47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
02a8460 Add proxy integration test
b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
e516bc8 docs: correct description of Node.js 24 support in README
Additional commits viewable in compare view

Updates kewisch/action-web-ext from 1.3 to 2.0

Release notes

Sourced from kewisch/action-web-ext's releases.

v2.0

What's Changed

update KNOWN_LICENSE by @phuwit in kewisch/action-web-ext#57

Update dependencies by @kewisch in kewisch/action-web-ext#64

Add separate approvalTimeout for AMOv5 by @Texarkanine in kewisch/action-web-ext#63

New Contributors

@phuwit made their first contribution in kewisch/action-web-ext#57

@Texarkanine made their first contribution in kewisch/action-web-ext#63

Full Changelog: kewisch/action-web-ext@v1.3...v2.0

Commits

84a13bb Update README examples to v2
71db58a feat: add separate approvalTimeout for AMOv5
fbb85b9 chore: Followup changes from dependencies
804de9f chore: Update to node24
1f9d9a3 chore: Update github actions
d9530cf chore: Update dependencies
9c16a12 chore: Update depdendencies correctly
de63225 chore: Update dependencies
3de9513 chore: update KNOWN_LICENSE
See full diff in compare view

Updates mnao305/chrome-extension-upload from 5.0.0 to 6.0.0

Release notes

Sourced from mnao305/chrome-extension-upload's releases.

v6.0.0

💥 Breaking Changes

Upgrade Node.js version from 20 to 24 by @ali-kamalizade in mnao305/chrome-extension-upload#31

New Contributors

@ali-kamalizade made their first contribution in mnao305/chrome-extension-upload#31

Full Changelog: mnao305/chrome-extension-upload@v5.0.0...v6.0.0

Commits

fdfe794 update readme
712b1f9 6.0.0
33a086a Upgrade Node.js version from 20 to 24 (#31)
cbba77b docs: update README
See full diff in compare view

Updates ruby/setup-ruby from 1.268.0 to 1.306.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.306.0

What's Changed

Add truffleruby-34.0.1,truffleruby+graalvm-34.0.1 by @ruby-builder-bot in ruby/setup-ruby#909

Full Changelog: ruby/setup-ruby@v1.305.0...v1.306.0

v1.305.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#908

Full Changelog: ruby/setup-ruby@v1.304.0...v1.305.0

v1.304.0

What's Changed

Add jruby-10.1.0.0 by @ruby-builder-bot in ruby/setup-ruby#906

Full Changelog: ruby/setup-ruby@v1.303.0...v1.304.0

v1.303.0

What's Changed

Add ruby-4.0.3 by @ruby-builder-bot in ruby/setup-ruby#903

Full Changelog: ruby/setup-ruby@v1.302.0...v1.303.0

v1.302.0

Full Changelog: ruby/setup-ruby@v1.301.0...v1.302.0

v1.301.0

What's Changed

Add truffleruby-34.0.0,truffleruby+graalvm-34.0.0 by @ruby-builder-bot in ruby/setup-ruby#901

Full Changelog: ruby/setup-ruby@v1.300.0...v1.301.0

v1.300.0

What's Changed

Refactor matrix script by @ntkme in ruby/setup-ruby#897

Add jruby-10.0.5.0 by @ruby-builder-bot in ruby/setup-ruby#900

Full Changelog: ruby/setup-ruby@v1.299.0...v1.300.0

v1.299.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#896

... (truncated)

Commits

c4e5b13 Add truffleruby-34.0.1,truffleruby+graalvm-34.0.1
0cb964f Update CRuby releases on Windows
94e4d89 Add jruby-10.1.0.0
60ecfba Add ruby-4.0.3
7372622 Give a better error for TruffleRuby 34+ on macOS Intel
4c56a21 Darwin-x86_64 is no longer supported on TruffleRuby 34+
5d9c71d Add truffleruby-34.0.0,truffleruby+graalvm-34.0.0
e65c17d Add jruby-10.0.5.0
ba696ad Refactor matrix script
2327de0 TruffleRuby 34+ does not support macOS Intel
Additional commits viewable in compare view

Bumps the all-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.9` | `8.1.1` | | [actions/github-script](https://github.com/actions/github-script) | `8.0.0` | `9.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `5.0.0` | `7.0.1` | | [kewisch/action-web-ext](https://github.com/kewisch/action-web-ext) | `1.3` | `2.0` | | [mnao305/chrome-extension-upload](https://github.com/mnao305/chrome-extension-upload) | `5.0.0` | `6.0.0` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.268.0` | `1.306.0` | Updates `peter-evans/create-pull-request` from 7.0.9 to 8.1.1 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@84ae59a...5f6978f) Updates `actions/github-script` from 8.0.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@ed59741...3a2844b) Updates `actions/upload-artifact` from 5.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@330a01c...043fb46) Updates `kewisch/action-web-ext` from 1.3 to 2.0 - [Release notes](https://github.com/kewisch/action-web-ext/releases) - [Commits](kewisch/action-web-ext@fe10add...84a13bb) Updates `mnao305/chrome-extension-upload` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/mnao305/chrome-extension-upload/releases) - [Commits](mnao305/chrome-extension-upload@4008e29...fdfe794) Updates `ruby/setup-ruby` from 1.268.0 to 1.306.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@v1.268.0...v1.306.0) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: kewisch/action-web-ext dependency-version: '2.0' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: mnao305/chrome-extension-upload dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: ruby/setup-ruby dependency-version: 1.305.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 26, 2026

dependabot Bot requested review from Copilot and removed request for Copilot April 26, 2026 02:09

dependabot Bot changed the title ~~Bump the all-actions group with 6 updates~~ Bump the all-actions group across 1 directory with 6 updates Apr 27, 2026

dependabot Bot force-pushed the dependabot/github_actions/all-actions-6a5650a8dc branch from 5d4ea0f to 6761015 Compare April 27, 2026 17:48

dependabot Bot requested review from Copilot and removed request for Copilot April 27, 2026 17:48

dependabot Bot force-pushed the dependabot/github_actions/all-actions-6a5650a8dc branch from 6761015 to c613651 Compare May 3, 2026 02:09

dependabot Bot requested review from Copilot and removed request for Copilot May 3, 2026 02:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-actions group across 1 directory with 6 updates#2732

Bump the all-actions group across 1 directory with 6 updates#2732
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/all-actions-6a5650a8dc

dependabot Bot commented on behalf of github Apr 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Create Pull Request v8.1.1

What's Changed

Create Pull Request v8.1.0

What's Changed

New Contributors

Create Pull Request v8.0.0

What's new in v8

What's Changed

New Contributors

Create Pull Request v7.0.11

What's Changed

v9.0.0

What's Changed

New Contributors

v7.0.1

What's Changed

v7.0.0

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v6.0.0

v6 - What's new

Node.js 24

What's Changed

v2.0

What's Changed

New Contributors

v6.0.0

💥 Breaking Changes

New Contributors

v1.306.0

What's Changed

v1.305.0

What's Changed

v1.304.0

What's Changed

v1.303.0

What's Changed

v1.302.0

v1.301.0

What's Changed

v1.300.0

What's Changed

v1.299.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 26, 2026 •

edited

Loading