Skip to content

build(deps): bump the all group across 1 directory with 10 updates #3843

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump the all group across 1 directory with 10 updates #3843

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025 •
edited
Loading

Bumps the all group with 10 updates in the / directory:

Package From To
actions/checkout 4 6
peter-evans/create-pull-request 7 8
actions/github-script 7 8
dependabot/fetch-metadata 2.3.0 2.4.0
korthout/backport-action 3 4
actions/upload-artifact 4 6
actions/download-artifact 4 7
docker/build-push-action 5 6
crate-ci/typos 1.32.0 1.40.0
DeterminateSystems/update-flake-lock 24 28

Updates actions/checkout from 4 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Updates peter-evans/create-pull-request from 7 to 8

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.0.0

What's new in v8

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v7.0.11...v8.0.0

Create Pull Request v7.0.11

What's Changed

Full Changelog: peter-evans/create-pull-request@v7.0.10...v7.0.11

Create Pull Request v7.0.10

⚙️ Fixes an issue where updating a pull request failed when targeting a forked repository with the same owner as its parent.

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v7.0.9...v7.0.10

Create Pull Request v7.0.9

⚙️ Fixes an incompatibility with the recently released actions/checkout@v6.

What's Changed

New Contributors

... (truncated)

Commits

Updates actions/github-script from 7 to 8

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

... (truncated)

Commits

Updates dependabot/fetch-metadata from 2.3.0 to 2.4.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.4.0

What's Changed

Full Changelog: dependabot/fetch-metadata@v2...v2.4.0

Commits
  • 08eff52 v2.4.0 (#594)
  • 821b654 Merge pull request #621 from dependabot/dependabot/github_actions/actions/cre...
  • 2c22a37 Bump actions/create-github-app-token from 2.0.2 to 2.0.6
  • 6ad01a0 Add workflow to publish new version of immutable action on every release (#623)
  • 8ca800c Enable caching of npm install/npm ci for setup-node action (#618)
  • 6787635 Merge pull request #616 from dependabot/dependabot/github_actions/actions/cre...
  • a09d4af Bump actions/create-github-app-token from 1.11.3 to 2.0.2
  • 3a5ce46 Remove unnecessary hardcoding of ref (#617)
  • 798f45c Fixup some anchor tags that weren't deeplinking (#614)
  • 6c031ac Tidy up examples slightly (#611)
  • Additional commits viewable in compare view

Updates korthout/backport-action from 3 to 4

Release notes

Sourced from korthout/backport-action's releases.

Backport-action v4.0.0

What's Changed

The action now requires Node 24 to run, which is a breaking change. Runner version 2.327.1 or higher is required from now on.

Other changes

Updated dependencies

Full Changelog: korthout/backport-action@v3.4.1...v4.0.0

Backport-action v3.4.1

What's Changed

Full Changelog: korthout/backport-action@v3.4.0...v3.4.1

Backport-action v3.4.0

What's Changed

You can now automatically enable auto-merge on pull requests created by backport-action thanks to a great contribution from @​jasonwbarnett - enable it using auto_merge_enabled and control the merge method using auto_merge_method.

It's now also easier to contribute to backport-action. Thanks to @​yafanasiev, the CI can push newly built artifacts regardless of whether the PR comes from a fork or not.

Updated dependencies

New Contributors

Full Changelog: korthout/backport-action@v3.3.0...v3.4.0

Backport-action v3.3.0

What's Changed

... (truncated)

Commits
  • 3634249 dist: release 4.0.0
  • e2a0749 Merge pull request #524 from korthout/korthout-release-v4
  • 3781259 docs: prepare for v4
  • d85d794 Merge pull request #523 from korthout/korthout-501-node-24
  • b503286 build: switch to ES2024 as ts target
  • 8e02fa8 build: remove option comments from tsconfig
  • af132ca build: use node24 to run action
  • 2e5f3e2 dist: build new artifacts
  • 75ae242 Merge pull request #522 from korthout/renovate/actions-exec-2.x
  • 79f66cb Update dependency @​actions/exec to v2
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 6

Release notes

Sourced from actions/upload-artifact's releases.

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v4.6.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

What's Changed

... (truncated)

Commits
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • 7d27270 chore: add missing license cache files for @​actions/core, @​actions/io, and mi...
  • 5f643d3 chore: update license files for @​actions/artifact@​5.0.1 dependencies
  • 1df1684 chore: update package-lock.json with @​actions/artifact@​5.0.1
  • b5b1a91 fix: update @​actions/artifact to ^5.0.0 for Node.js 24 punycode fix
  • Additional commits viewable in compare view

Updates actions/download-artifact from 4 to 7

Release notes

Sourced from actions/download-artifact's releases.

v7.0.0

v7 - What's new

[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

v5.0.0

What's Changed

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

... (truncated)

Commits
  • 37930b1 Merge pull request #452 from actions/download-artifact-v7-release
  • 72582b9 doc: update readme
  • 0d2ec9d chore: release v7.0.0 for Node.js 24 support
  • fd7ae8f Merge pull request #451 from actions/fix-storage-blob
  • d484700 chore: restore minimatch.dep.yml license file
  • 03a8080 chore: remove obsolete dependency license files
  • 56fe6d9 chore: update @​actions/artifact license file to 5.0.1
  • 8e3ebc4 chore: update package-lock.json with @​actions/artifact@​5.0.1
  • 1e3c4b4 fix: update @​actions/artifact to ^5.0.0 for Node.js 24 punycode fix
  • 458627d chore: use local @​actions/artifact package for Node.js 24 testing
  • Additional commits viewable in compare view

Updates docker/build-push-action from 5 to 6

Release notes

Sourced from docker/build-push-action's releases.

v6.0.0

[!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_SUMMARY: false environment variable in your workflow.

Full Changelog: docker/build-push-action@v5.4.0...v6.0.0

v5.4.0

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

v5.3.0

Full Changelog: Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 15, 2025
@dependabot dependabot bot requested a review from sveitser as a code owner December 15, 2025 03:10
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 15, 2025
@dependabot dependabot bot added the github_actions Pull requests that update GitHub Actions code label Dec 15, 2025
@github-actions github-actions bot enabled auto-merge (squash) December 15, 2025 03:10
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-c63f779e88 branch 4 times, most recently from 6adc055 to b227f19 Compare December 22, 2025 03:09
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-c63f779e88 branch from b227f19 to 67c013e Compare December 23, 2025 03:10
@dependabot
build(deps): bump the all group across 1 directory with 10 updates
156132c 
Bumps the all group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7` | `8` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `8` |
| [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.3.0` | `2.4.0` |
| [korthout/backport-action](https://github.com/korthout/backport-action) | `3` | `4` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `7` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `5` | `6` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.32.0` | `1.40.0` |
| [DeterminateSystems/update-flake-lock](https://github.com/determinatesystems/update-flake-lock) | `24` | `28` |



Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `peter-evans/create-pull-request` from 7 to 8
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v7...v8)

Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

Updates `dependabot/fetch-metadata` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v2.3.0...v2.4.0)

Updates `korthout/backport-action` from 3 to 4
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](korthout/backport-action@v3...v4)

Updates `actions/upload-artifact` from 4 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v6)

Updates `actions/download-artifact` from 4 to 7
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v7)

Updates `docker/build-push-action` from 5 to 6
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v5...v6)

Updates `crate-ci/typos` from 1.32.0 to 1.40.0
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@v1.32.0...v1.40.0)

Updates `DeterminateSystems/update-flake-lock` from 24 to 28
- [Release notes](https://github.com/determinatesystems/update-flake-lock/releases)
- [Commits](DeterminateSystems/update-flake-lock@v24...v28)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: peter-evans/create-pull-request
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: korthout/backport-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/build-push-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: crate-ci/typos
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: DeterminateSystems/update-flake-lock
  dependency-version: '28'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-c63f779e88 branch from 67c013e to 156132c Compare December 24, 2025 03:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sveitser sveitser Awaiting requested review from sveitser sveitser is a code owner

@jbearer jbearer Awaiting requested review from jbearer jbearer is a code owner

@imabdulbasit imabdulbasit Awaiting requested review from imabdulbasit imabdulbasit is a code owner

@ss-es ss-es Awaiting requested review from ss-es ss-es is a code owner

@pls148 pls148 Awaiting requested review from pls148 pls148 is a code owner

@bfish713 bfish713 Awaiting requested review from bfish713 bfish713 is a code owner

@rob-maron rob-maron Awaiting requested review from rob-maron rob-maron is a code owner

@lukaszrzasik lukaszrzasik Awaiting requested review from lukaszrzasik lukaszrzasik is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant