chore(deps): bump the gh-actions group across 1 directory with 5 updates by dependabot[bot] · Pull Request #4195 · SwissDataScienceCenter/renku

dependabot · 2025-09-29T18:01:58Z

Bumps the gh-actions group with 5 updates in the / directory:

Package	From	To
buildpacks/github-actions	`5.9.3`	`5.9.4`
actions/setup-java	`4`	`5`
actions/github-script	`7`	`8`
SwissDataScienceCenter/renku-actions	`1.19.0`	`1.19.1`
actions/setup-node	`4`	`5`

Updates buildpacks/github-actions from 5.9.3 to 5.9.4

Release notes

Sourced from buildpacks/github-actions's releases.

5.9.4

⛏ Dependency Upgrades

Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#369) @dependabot

🚧 Tasks

Bump Go Modules (#371) @buildpack-bot

Bump Go Modules (#368) @buildpack-bot

Bump Go Modules (#367) @buildpack-bot

Bump Go Modules (#366) @buildpack-bot

Commits

f6d0ae1 Bump Go Modules (#371)
70aa3fa Bump Go Modules (#368)
7c13e06 Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#369)
c08cd7b Bump Go Modules (#367)
243fc42 Bump Go Modules (#366)
See full diff in compare view

Updates actions/setup-java from 4 to 5

Release notes

Sourced from actions/setup-java's releases.

v5.0.0

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in actions/setup-java#888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in actions/setup-java#798

Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in actions/setup-java#730

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-java#833

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-java#887

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-java#896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in actions/setup-java#859

Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in actions/setup-java#848

New Contributors

@gowridurgad made their first contribution in actions/setup-java#848

@salmanmkc made their first contribution in actions/setup-java#888

Full Changelog: actions/setup-java@v4...v5.0.0

v4.7.1

What's Changed

Documentation changes

Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @aparnajyothi-y in actions/setup-java#704

Remove duplicated GraalVM section in documentation by @Marcono1234 in actions/setup-java#716

Dependency updates:

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in actions/setup-java#766

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in actions/setup-java#744

Upgrade ts-jest from 29.1.2 to 29.2.5 by @dependabot in actions/setup-java#743

Upgrade @action/cache to 4.0.3 by @aparnajyothi-y in actions/setup-java#773

Full Changelog: actions/setup-java@v4...v4.7.1

v4.7.0

What's Changed

Configure Dependabot settings by @HarithaVattikuti in actions/setup-java#722

README Update: Added a permissions section by @benwells in actions/setup-java#723

Upgrade cache from version 3.2.4 to 4.0.0 by @aparnajyothi-y in actions/setup-java#724

Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in actions/setup-java#728

Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in actions/setup-java#727

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot in actions/setup-java#729

... (truncated)

Commits

dded088 Bump actions/checkout from 4 to 5 (#896)
0913e9a Upgrade to node 24 (#888)
e9343db Bumps form-data (#887)
ae2b61d Bump undici from 5.28.5 to 5.29.0 (#833)
c190c18 Bump eslint-plugin-jest from 27.9.0 to 29.0.1 (#730)
67aec00 Fix: prevent default installation of JetBrains pre-releases (#859)
ebb356c Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failu...
f4f1212 Update publish-immutable-actions.yml (#798)
See full diff in compare view

Updates actions/github-script from 7 to 8

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

Update Node.js version support to 24.x by @salmanmkc in actions/github-script#637

README for updating actions/github-script from v7 to v8 by @sneha-krip in actions/github-script#653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

@salmanmkc made their first contribution in actions/github-script#637

@sneha-krip made their first contribution in actions/github-script#653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

Upgrade husky to v9 by @benelan in actions/github-script#482

Add workflow file for publishing releases to immutable action package by @Jcambass in actions/github-script#485

Upgrade IA Publish by @Jcambass in actions/github-script#486

Fix workflow status badges by @joshmgross in actions/github-script#497

Update usage of actions/upload-artifact by @joshmgross in actions/github-script#512

Clear up package name confusion by @joshmgross in actions/github-script#514

Update dependencies with npm audit fix by @joshmgross in actions/github-script#515

Specify that the used script is JavaScript by @timotk in actions/github-script#478

chore: Add Dependabot for NPM and Actions by @nschonni in actions/github-script#472

Define permissions in workflows and update actions by @joshmgross in actions/github-script#531

chore: Add Dependabot for .github/actions/install-dependencies by @nschonni in actions/github-script#532

chore: Remove .vscode settings by @nschonni in actions/github-script#533

ci: Use github/setup-licensed by @nschonni in actions/github-script#473

make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @iamstarkov in actions/github-script#508

Remove octokit README updates for v7 by @joshmgross in actions/github-script#557

docs: add "exec" usage examples by @neilime in actions/github-script#546

Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @dependabot[bot] in actions/github-script#563

Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @dependabot[bot] in actions/github-script#575

Clearly document passing inputs to the script by @joshmgross in actions/github-script#603

Update README.md by @nebuk89 in actions/github-script#610

New Contributors

@benelan made their first contribution in actions/github-script#482

@Jcambass made their first contribution in actions/github-script#485

@timotk made their first contribution in actions/github-script#478

@iamstarkov made their first contribution in actions/github-script#508

@neilime made their first contribution in actions/github-script#546

@nebuk89 made their first contribution in actions/github-script#610

Full Changelog: actions/github-script@v7...v7.1.0

... (truncated)

Commits

ed59741 Merge pull request #653 from actions/sneha-krip/readme-for-v8
2dc352e Bold minimum Actions Runner version in README
01e118c Update README for Node 24 runtime requirements
8b222ac Apply suggestion from @salmanmkc
adc0eea README for updating actions/github-script from v7 to v8
20fe497 Merge pull request #637 from actions/node24
e7b7f22 update licenses
2c81ba0 Update Node.js version support to 24.x
See full diff in compare view

Updates SwissDataScienceCenter/renku-actions from 1.19.0 to 1.19.1

Release notes

Sourced from SwissDataScienceCenter/renku-actions's releases.

v1.19.1

What's Changed

fix: do not try to delete js resources by @leafty in SwissDataScienceCenter/renku-actions#118

Full Changelog: SwissDataScienceCenter/renku-actions@v1.19.0...v1.19.1

Commits

5e968ae fix: do not try to delete js resources (#118)
See full diff in compare view

Updates actions/setup-node from 4 to 5

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false
Upgrade action to use node24 by @salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in actions/setup-node#1227

Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in actions/setup-node#1273

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-node#1295

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-node#1332

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-node#1345

New Contributors

@priya-kinthali made their first contribution in actions/setup-node#1348

@salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in actions/setup-node#98

Add support for indented eslint output by @fregante in actions/setup-node#1245

Enhancement:

Support private mirrors by @marco-ippolito in actions/setup-node#1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in actions/setup-node#1262

New Contributors

@FloEdelmann made their first contribution in actions/setup-node#98

@fregante made their first contribution in actions/setup-node#1245

@marco-ippolito made their first contribution in actions/setup-node#1240

Full Changelog: actions/setup-node@v4...v4.4.0

... (truncated)

Commits

a0853c2 Bump actions/checkout from 4 to 5 (#1345)
b7234cc Upgrade action to use node24 (#1325)
d7a1131 Enhance caching in setup-node with automatic package manager detection (#1348)
5e2628c Bumps form-data (#1332)
65becef Bump undici from 5.28.5 to 5.29.0 (#1295)
7e24a65 Bump uuid from 9.0.1 to 11.1.0 (#1273)
08f58d1 Bump @octokit/request-error and @actions/github (#1227)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [buildpacks/github-actions](https://github.com/buildpacks/github-actions) | `5.9.3` | `5.9.4` | | [actions/setup-java](https://github.com/actions/setup-java) | `4` | `5` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `8` | | [SwissDataScienceCenter/renku-actions](https://github.com/swissdatasciencecenter/renku-actions) | `1.19.0` | `1.19.1` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `5` | Updates `buildpacks/github-actions` from 5.9.3 to 5.9.4 - [Release notes](https://github.com/buildpacks/github-actions/releases) - [Commits](buildpacks/github-actions@v5.9.3...v5.9.4) Updates `actions/setup-java` from 4 to 5 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v4...v5) Updates `actions/github-script` from 7 to 8 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7...v8) Updates `SwissDataScienceCenter/renku-actions` from 1.19.0 to 1.19.1 - [Release notes](https://github.com/swissdatasciencecenter/renku-actions/releases) - [Commits](SwissDataScienceCenter/renku-actions@v1.19.0...v1.19.1) Updates `actions/setup-node` from 4 to 5 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v5) --- updated-dependencies: - dependency-name: buildpacks/github-actions dependency-version: 5.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions - dependency-name: actions/setup-java dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: actions/github-script dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: SwissDataScienceCenter/renku-actions dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions - dependency-name: actions/setup-node dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-10-06T14:08:02Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 29, 2025

dependabot Bot requested a review from a team as a code owner September 29, 2025 18:01

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 29, 2025

dependabot Bot closed this Oct 6, 2025

dependabot Bot deleted the dependabot/github_actions/gh-actions-09845ae2c4 branch October 6, 2025 14:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the gh-actions group across 1 directory with 5 updates#4195

chore(deps): bump the gh-actions group across 1 directory with 5 updates#4195
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/gh-actions-09845ae2c4

dependabot Bot commented on behalf of github Sep 29, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

5.9.4

⛏ Dependency Upgrades

🚧 Tasks

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Bug Fixes

New Contributors

v4.7.1

What's Changed

Documentation changes

Dependency updates:

v4.7.0

What's Changed

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

New Contributors

v7.1.0

What's Changed

New Contributors

v1.19.1

What's Changed

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v4.4.0

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 29, 2025 •

edited

Loading