Bump the all-actions group across 1 directory with 7 updates by dependabot[bot] · Pull Request #170 · JaclynCodes/dependabot-core

dependabot · 2026-06-21T16:06:43Z

Bumps the all-actions group with 7 updates in the / directory:

Package	From	To
actions/checkout	`6`	`7`
ruby/setup-ruby	`1.306.0`	`1.314.0`
actions/create-github-app-token	`3.1.1`	`3.2.0`
rubygems/configure-rubygems-credentials	`2.0.0`	`2.1.0`
docker/login-action	`4.1.0`	`4.2.0`
actions/stale	`10.2.0`	`10.3.0`
zizmorcore/zizmor-action	`0.5.3`	`0.5.6`

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464

update error wording by @aiqiaoy in actions/checkout#2467

New Contributors

@aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

Update changelog by @ericsciple in actions/checkout#2357

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

Update changelog for v6.0.3 by @yaananth in actions/checkout#2446

New Contributors

@yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

Clarify v6 README by @ericsciple in actions/checkout#2328

Full Changelog: actions/checkout@v6...v6.0.1

Commits

9c091bb update error wording (#2467)
1044a6d getting ready for checkout v7 release (#2464)
f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
d914b26 upgrade module to esm and update dependencies (#2463)
537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459)
130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
0f9f3aa Bump actions/publish-immutable-action (#2458)
f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
See full diff in compare view

Updates ruby/setup-ruby from 1.306.0 to 1.314.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.314.0

What's Changed

Add support for ubuntu-26.04 and ubuntu-26.04-arm by @eregon in ruby/setup-ruby#923

Full Changelog: ruby/setup-ruby@v1.313.0...v1.314.0

v1.313.0

What's Changed

Add jruby-10.0.6.0 by @ruby-builder-bot in ruby/setup-ruby#921

Full Changelog: ruby/setup-ruby@v1.312.0...v1.313.0

v1.312.0

What's Changed

Use BUNDLE_LOCKFILE when detecting the lockfile by @Thomascountz in ruby/setup-ruby#919

New Contributors

@Thomascountz made their first contribution in ruby/setup-ruby#919

Full Changelog: ruby/setup-ruby@v1.311.0...v1.312.0

v1.311.0

What's Changed

Add jruby-9.4.15.0 by @ruby-builder-bot in ruby/setup-ruby#920

Full Changelog: ruby/setup-ruby@v1.310.0...v1.311.0

v1.310.0

What's Changed

Add ruby-4.0.5 by @ruby-builder-bot in ruby/setup-ruby#918

Full Changelog: ruby/setup-ruby@v1.309.0...v1.310.0

v1.309.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#917

Full Changelog: ruby/setup-ruby@v1.308.0...v1.309.0

v1.308.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#912

Full Changelog: ruby/setup-ruby@v1.307.0...v1.308.0

... (truncated)

Commits

9eb537c Add support for ubuntu-26.04 and ubuntu-26.04-arm
e1a3b10 Improve versions-strings-for-builder.rb
0df5288 Remove gem install sassc on Windows JRuby
89f9052 Add jruby-10.0.6.0
12fd324 Use BUNDLE_LOCKFILE when detecting the lockfile
a99ac84 Add jruby-9.4.15.0
afeafc3 Add ruby-4.0.5
28c65f7 Update CRuby releases on Windows
97ecb7b Update CRuby releases on Windows
6aaa311 Add ruby-4.0.4
Additional commits viewable in compare view

Updates actions/create-github-app-token from 3.1.1 to 3.2.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.2.0

3.2.0 (2026-05-12)

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)

support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)

validate private-key input (#376) (f24bbd8)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.2.0 (2026-05-12)

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)

support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)

validate private-key input (#376) (f24bbd8)

Commits

bcd2ba4 chore(main): release 3.2.0 (#370)
f24bbd8 fix: validate private-key input (#376)
363531b docs: capitalize Git as a proper noun in README (#374)
fd28011 docs: update procedure to configure Git (#287)
85eb8dd feat: support full repository names in repositories input (#372)
c9aabb8 build(deps-dev): bump yaml from 2.8.3 to 2.8.4 in the development-dependencie...
e02e816 build(deps-dev): bump undici from 7.24.6 to 8.2.0 (#366)
8d835bf build(deps-dev): bump esbuild from 0.27.4 to 0.28.0 in the development-depend...
952a2a7 feat: add support for enterprise-level GitHub Apps (#263)
43e5c34 fix(deps): bump @actions/core from 3.0.0 to 3.0.1 in the production-dependenc...
Additional commits viewable in compare view

Updates rubygems/configure-rubygems-credentials from 2.0.0 to 2.1.0

Release notes

Sourced from rubygems/configure-rubygems-credentials's releases.

v2.1.0

This release switches the action runtime from Node 20 to Node 24. The node24 declaration in action.yml removes the deprecation warning that every consumer — most visibly through rubygems/release-gem — has seen since GitHub announced the Node 20 deprecation, and gets ahead of runners switching JavaScript actions to Node 24 by default on June 16, 2026.

Note for self-hosted runners: the node24 runtime requires actions/runner 2.327.1 or later. GitHub-hosted runners are unaffected.

The pending major dependency updates are included as well: zod 4, @actions/core 3, and @actions/http-client 4. The actions toolkit majors ship only ES module builds now, so the build pipeline emits ES modules internally, while the bundled dist/index.js the runner executes remains CommonJS. The action's inputs, outputs, and behavior are unchanged.

Thanks to @dduugg for first proposing the runtime switch in #413.

What's Changed

Clean up stale development configuration by @hsbt in rubygems/configure-rubygems-credentials#420

Switch to Node 24 and adopt pending major dependency updates by @hsbt in rubygems/configure-rubygems-credentials#421

Full Changelog: rubygems/configure-rubygems-credentials@v2.0.0...v2.1.0

Commits

dc5a8d8 Merge pull request #421 from rubygems/claude/dreamy-albattani-d69d88
d6f98c9 Bump @actions/http-client from 3.0.2 to 4.0.1
96335c2 Bump @actions/core from 2.0.3 to 3.0.1
8e3b799 Emit ES modules and run Jest in ESM mode
2df41ce Bump zod from 3.23.8 to 4.4.3
1d21f26 Align @types/node with the Node 24 runtime
4adc9f5 Raise the TypeScript target to es2024
0ce8f7b Build and test with Node 24 in CI
ae2cae9 Declare node24 as the action runtime
2af1e88 Merge pull request #417 from rubygems/dependabot/github_actions/actions/check...
Additional commits viewable in compare view

Updates docker/login-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/login-action's releases.

v4.2.0

Bump @actions/core from 3.0.0 to 3.0.1 in docker/login-action#976

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in docker/login-action#960

Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in docker/login-action#970

Bump brace-expansion from 2.0.1 to 5.0.6 in docker/login-action#993

Bump fast-xml-builder from 1.1.4 to 1.2.0 in docker/login-action#985

Bump fast-xml-parser from 5.3.6 to 5.8.0 in docker/login-action#963

Bump http-proxy-agent and https-proxy-agent to 9.0.0 in docker/login-action#961

Bump postcss from 8.5.6 to 8.5.10 in docker/login-action#979

Bump tar from 6.2.1 to 7.5.15 in docker/login-action#991

Bump vite from 7.3.1 to 7.3.3 in docker/login-action#986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

Commits

650006c Merge pull request #960 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
99df1a3 chore: update generated content
3ab375f build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
39d8580 Merge pull request #970 from docker/dependabot/npm_and_yarn/docker/actions-to...
4eefcd3 chore: update generated content
56d092c build(deps): bump @docker/actions-toolkit from 0.86.0 to 0.90.0
e2e31ca Merge pull request #976 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
0bced94 chore: update generated content
3e75a0f build(deps): bump @actions/core from 3.0.0 to 3.0.1
365bebd Merge pull request #984 from docker/dependabot/github_actions/aws-actions/con...
Additional commits viewable in compare view

Updates actions/stale from 10.2.0 to 10.3.0

Release notes

Sourced from actions/stale's releases.

v10.3.0

What's Changed

Bug Fix

Enhancement: ignore stale labeling events by @shamoon in actions/stale#1311

Dependency Updates

Upgrade dependencies (@actions/core, @octokit/plugin-retry, @typescript-eslint) by @Copilot in actions/stale#1335

New Contributors

@shamoon made their first contribution in actions/stale#1311

Full Changelog: actions/stale@v10...v10.3.0

Commits

eb5cf3a chore: upgrade dependencies and bump version to 10.3.0 (#1335)
db5d06a Enhancement: ignore stale labeling events (#1311)
See full diff in compare view

Updates zizmorcore/zizmor-action from 0.5.3 to 0.5.6

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.6

1.25.2 is now available via the action

1.25.2 is now the default version of zizmor used by the action

v0.5.5

This is a no-op release.

v0.5.4

1.25.0 is now available via the action

1.25.0 is now the default version of zizmor used by the action

Commits

5f14fd0 Sync zizmor versions (#114)
a16621b Bump pins in README (#112)
1c03e04 chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the github-ac...
b572f7b Sync zizmor versions (#111)
06928c5 chore(deps): bump github/codeql-action in the github-actions group (#109)
5ea8b96 docs: Update link to GitHub docs (#108)
849ac26 chore(deps): bump the github-actions group with 2 updates (#106)
814f977 Bump pins in README (#103)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `7` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.306.0` | `1.314.0` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.1.1` | `3.2.0` | | [rubygems/configure-rubygems-credentials](https://github.com/rubygems/configure-rubygems-credentials) | `2.0.0` | `2.1.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.2.0` | | [actions/stale](https://github.com/actions/stale) | `10.2.0` | `10.3.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.3` | `0.5.6` | Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v6...v7) Updates `ruby/setup-ruby` from 1.306.0 to 1.314.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@c4e5b13...9eb537c) Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@1b10c78...bcd2ba4) Updates `rubygems/configure-rubygems-credentials` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/rubygems/configure-rubygems-credentials/releases) - [Commits](rubygems/configure-rubygems-credentials@762a4b7...dc5a8d8) Updates `docker/login-action` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@4907a6d...650006c) Updates `actions/stale` from 10.2.0 to 10.3.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@b5d41d4...eb5cf3a) Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.6 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@b1d7e1f...5f14fd0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: ruby/setup-ruby dependency-version: 1.314.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: rubygems/configure-rubygems-credentials dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: docker/login-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: actions/stale dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-28T16:07:17Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 21, 2026

JaclynCodes approved these changes Jun 21, 2026

View reviewed changes

dependabot Bot closed this Jun 28, 2026

dependabot Bot deleted the dependabot/github_actions/all-actions-fe0f31b0d6 branch June 28, 2026 16:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-actions group across 1 directory with 7 updates#170

Bump the all-actions group across 1 directory with 7 updates#170
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-fe0f31b0d6

dependabot Bot commented on behalf of github Jun 21, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.0

What's Changed

New Contributors

v6.0.3

What's Changed

New Contributors

v6.0.2

What's Changed

v6.0.1

What's Changed

v1.314.0

What's Changed

v1.313.0

What's Changed

v1.312.0

What's Changed

New Contributors

v1.311.0

What's Changed

v1.310.0

What's Changed

v1.309.0

What's Changed

v1.308.0

What's Changed

v3.2.0

3.2.0 (2026-05-12)

Features

Bug Fixes

Changelog

3.2.0 (2026-05-12)

Features

Bug Fixes

v2.1.0

What's Changed

v4.2.0

v10.3.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

v0.5.6

v0.5.5

v0.5.4

Uh oh!

dependabot Bot commented on behalf of github Jun 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 21, 2026 •

edited

Loading