Skip to content

chore(deps): bump the github-actions-dependencies group across 4 directories with 4 updates#365

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-38586a48f9
Closed

chore(deps): bump the github-actions-dependencies group across 4 directories with 4 updates#365
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-38586a48f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 3 updates in the / directory: hoverkraft-tech/ci-github-publish, super-linter/super-linter and github/codeql-action.
Bumps the github-actions-dependencies group with 1 update in the /actions/create-and-merge-pull-request directory: actions/github-script.
Bumps the github-actions-dependencies group with 1 update in the /actions/get-matrix-outputs directory: actions/github-script.
Bumps the github-actions-dependencies group with 1 update in the /actions/set-matrix-output directory: actions/github-script.

Updates hoverkraft-tech/ci-github-publish from 0.8.0 to 0.9.1

Release notes

Sourced from hoverkraft-tech/ci-github-publish's releases.

0.9.1

Release Summary

No new features or bug fixes were introduced. Internal: CI now uses hoverkraft-tech/ci-dokumentor 0.1.1 to keep action workflows up to date.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.9.0...0.9.1

0.9.0

Release Summary

Documentation was improved for self-workflow handling in deployment scripts and refreshed across actions and workflows (docs).

Internal: GitHub Actions dependencies were updated across the repository, including bumping actions/cache to 4.3.0 to keep CI stable (build).

Breaking change(s)

GitHub Action documentation generation uses CI Dokumentor. Check Migration guide to adapt your documentation.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.8.0...0.9.0

Commits
  • 2806e03 build(deps): Bump hoverkraft-tech/ci-dokumentor
  • af8469b build(deps): Bump the github-actions-dependencies group across 4 directories ...
  • 7df836a feat(release-actions): uses ci-dokumentor to generate documentation
  • ad54926 docs: update actions and workflows documentation
  • a30a980 feat(release-actions)!: uses ci-dokumentor to generate documentation
  • 00cd9c2 Merge pull request #168 from hoverkraft-tech/dependabot/github_actions/action...
  • 3dd0b0c build(deps): Bump actions/cache
  • 80d20db build(deps): Bump the github-actions-dependencies group across 1 directory wi...
  • 19fbcbe Merge pull request #166 from hoverkraft-tech/dependabot/github_actions/github...
  • 7894f65 build(deps): Bump the github-actions-dependencies group across 2 directories ...
  • Additional commits viewable in compare view

Updates super-linter/super-linter from 8.0.0 to 8.1.0

Release notes

Sourced from super-linter/super-linter's releases.

v8.1.0

8.1.0 (2025-08-20)

🚀 Features

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#6918) (112c95e)
  • bundler: bump rubocop-rails in /dependencies in the rubocop group (#6947) (bdbef71)
  • bundler: bump the rubocop group in /dependencies with 2 updates (#6929) (f7958f1)
  • docker: bump python in the docker-base-images group (#6937) (fed04a2)
  • docker: bump python in the docker-base-images group (#6952) (8d1d341)
  • docker: bump the docker group with 4 updates (#6933) (8fd087d)
  • docker: bump the docker group with 4 updates (#6948) (95bb9b6)
  • docker: bump the docker group with 5 updates (#6896) (f651b3c)
  • docker: bump the docker group with 7 updates (#6911) (1b4e552)
  • java: bump com.pinterest.ktlint:ktlint-cli (#6894) (b5fcc9b)
  • java: bump com.puppycrawl.tools:checkstyle (#6930) (230c55a)
  • npm: bump @​eslint/plugin-kit (#6886) (83aa3a5)
  • npm: bump @​typescript-eslint/eslint-plugin (#6893) (73f831b)
  • npm: bump @​typescript-eslint/eslint-plugin (#6950) (e030d7b)
  • npm: bump @​typescript-eslint/eslint-plugin (#6959) (8723595)
  • npm: bump axios (#6904) (5a4eeeb)
  • npm: bump eslint from 9.31.0 to 9.32.0 in /dependencies (#6920) (6ded212)
  • npm: bump eslint from 9.32.0 to 9.33.0 in /dependencies (#6939) (8e85466)
  • npm: bump eslint-plugin-prettier (#6931) (783c7d0)
  • npm: bump next (#6895) (9d496e9)
  • npm: bump next (#6913) (7b0f0b0)
  • npm: bump next (#6935) (f687fd1)
  • npm: bump next (#6960) (a006caa)
  • npm: bump npm-groovy-lint from 15.2.0 to 15.2.1 in /dependencies (#6922) (00263ef)
  • npm: bump react-router-dom (#6889) (320e5c4)
  • npm: bump react-router-dom (#6936) (00971e7)
  • npm: bump react-router-dom (#6949) (a71d250)
  • npm: bump renovate from 41.37.1 to 41.52.0 in /dependencies (#6919) (5552c4d)
  • npm: bump renovate from 41.52.0 to 41.62.2 in /dependencies (#6940) (7957b77)
  • npm: bump renovate from 41.62.2 to 41.78.1 in /dependencies (#6954) (befbae4)
  • npm: bump stylelint (#6891) (fa38c73)
  • npm: bump textlint (#6916) (cb8d26c)
  • npm: bump the eslint-plugins-configs group across 1 directory with 2 updates (#6890) (8d9b03d)
  • npm: bump the eslint-plugins-configs group across 1 directory with 2 updates (#6912) (712b0e7)
  • npm: bump the npm_and_yarn group across 1 directory with 2 updates (#6901) (a412a4d)

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

Changelog

8.1.0 (2025-08-20)

🚀 Features

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#6918) (112c95e)
  • bundler: bump rubocop-rails in /dependencies in the rubocop group (#6947) (bdbef71)
  • bundler: bump the rubocop group in /dependencies with 2 updates (#6929) (f7958f1)
  • docker: bump python in the docker-base-images group (#6937) (fed04a2)
  • docker: bump python in the docker-base-images group (#6952) (8d1d341)
  • docker: bump the docker group with 4 updates (#6933) (8fd087d)
  • docker: bump the docker group with 4 updates (#6948) (95bb9b6)
  • docker: bump the docker group with 5 updates (#6896) (f651b3c)
  • docker: bump the docker group with 7 updates (#6911) (1b4e552)
  • java: bump com.pinterest.ktlint:ktlint-cli (#6894) (b5fcc9b)
  • java: bump com.puppycrawl.tools:checkstyle (#6930) (230c55a)
  • npm: bump @​eslint/plugin-kit (#6886) (83aa3a5)
  • npm: bump @​typescript-eslint/eslint-plugin (#6893) (73f831b)
  • npm: bump @​typescript-eslint/eslint-plugin (#6950) (e030d7b)
  • npm: bump @​typescript-eslint/eslint-plugin (#6959) (8723595)
  • npm: bump axios (#6904) (5a4eeeb)
  • npm: bump eslint from 9.31.0 to 9.32.0 in /dependencies (#6920) (6ded212)
  • npm: bump eslint from 9.32.0 to 9.33.0 in /dependencies (#6939) (8e85466)
  • npm: bump eslint-plugin-prettier (#6931) (783c7d0)
  • npm: bump next (#6895) (9d496e9)
  • npm: bump next (#6913) (7b0f0b0)
  • npm: bump next (#6935) (f687fd1)
  • npm: bump next (#6960) (a006caa)
  • npm: bump npm-groovy-lint from 15.2.0 to 15.2.1 in /dependencies (#6922) (00263ef)
  • npm: bump react-router-dom (#6889) (320e5c4)
  • npm: bump react-router-dom (#6936) (00971e7)
  • npm: bump react-router-dom (#6949) (a71d250)
  • npm: bump renovate from 41.37.1 to 41.52.0 in /dependencies (#6919) (5552c4d)
  • npm: bump renovate from 41.52.0 to 41.62.2 in /dependencies (#6940) (7957b77)
  • npm: bump renovate from 41.62.2 to 41.78.1 in /dependencies (#6954) (befbae4)
  • npm: bump stylelint (#6891) (fa38c73)
  • npm: bump textlint (#6916) (cb8d26c)
  • npm: bump the eslint-plugins-configs group across 1 directory with 2 updates (#6890) (8d9b03d)
  • npm: bump the eslint-plugins-configs group across 1 directory with 2 updates (#6912) (712b0e7)

... (truncated)

Commits
  • ffde3b2 chore(main): release 8.1.0 (#6902)
  • 7c09bd5 ci(github-actions): bump googleapis/release-please-action (#6968)
  • 2b936d9 deps(npm): bump the textlint group across 1 directory with 2 updates (#6963)
  • a006caa deps(npm): bump next (#6960)
  • 87f91dc ci(dev-npm): bump release-please in /dev-dependencies (#6962)
  • 8723595 deps(npm): bump @​typescript-eslint/eslint-plugin (#6959)
  • befbae4 deps(npm): bump renovate from 41.62.2 to 41.78.1 in /dependencies (#6954)
  • eda5c0e feat: add zizmor (#6957)
  • 95bb9b6 deps(docker): bump the docker group with 4 updates (#6948)
  • e030d7b deps(npm): bump @​typescript-eslint/eslint-plugin (#6950)
  • Additional commits viewable in compare view

Updates github/codeql-action from 3.30.3 to 3.30.5

Release notes

Sourced from github/codeql-action's releases.

v3.30.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

See the full CHANGELOG.md for more information.

v3.30.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
  • Update default CodeQL bundle version to 2.23.1. #3118

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
  • Update default CodeQL bundle version to 2.23.1. #3118

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

3.29.11 - 21 Aug 2025

  • Update default CodeQL bundle version to 2.22.4. #3044

3.29.10 - 18 Aug 2025

No user facing changes.

3.29.9 - 12 Aug 2025

No user facing changes.

3.29.8 - 08 Aug 2025

... (truncated)

Commits
  • 3599b3b Merge pull request #3161 from github/update-v3.30.5-0a67bd46a
  • 2ca0085 Update changelog for v3.30.5
  • 0a67bd4 Merge pull request #3160 from github/mbg/fix/upload-sarif
  • 8e34f2f Add changelog
  • 0b7fc56 Fix upload-sarif not uploading non-.sarif files
  • 94a9b7a Merge pull request #3155 from github/mbg/node/no-install-in-actions
  • a0ae9ba Log what the script is doing
  • b27a8ef Exit if running in an Actions workflow
  • 6592567 Merge pull request #3139 from github/henrymercer/fix-log-message
  • fa64a7d Merge pull request #3154 from github/mbg/node/check-up-to-date-deps
  • Additional commits viewable in compare view

Updates actions/github-script from 7.0.1 to 8.0.0

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

Commits
  • ed59741 Merge pull request #653 from actions/sneha-krip/readme-for-v8
  • 2dc352e Bold minimum Actions Runner version in README
  • 01e118c Update README for Node 24 runtime requirements
  • 8b222ac Apply suggestion from @​salmanmkc
  • adc0eea README for updating actions/github-script from v7 to v8
  • 20fe497 Merge pull request #637 from actions/node24
  • e7b7f22 update licenses
  • 2c81ba0 Update Node.js version support to 24.x
  • f28e40c Merge pull request #610 from actions/nebuk89-patch-1
  • 1ae9958 Update README.md
  • Additional commits viewable in compare view

Updates actions/github-script from 7.0.1 to 8.0.0

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

Commits
  • ed59741 Merge pull request #653 from actions/sneha-krip/readme-for-v8
  • 2dc352e Bold minimum Actions Runner version in README
  • 01e118c Update README for Node 24 runtime requirements
  • 8b222ac Apply suggestion from @​salmanmkc
  • adc0eea README for updating actions/github-script from v7 to v8
  • 20fe497 Merge pull request #637 from actions/node24
  • e7b7f22 update licenses
  • 2c81ba0 Update Node.js version support to 24.x
  • f28e40c Merge pull request #610 from actions/nebuk89-patch-1
  • 1ae9958 Update README.md
  • Additional commits viewable in compare view

Updates actions/github-script from 7.0.1 to 8.0.0

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

@dependabot
chore(deps): bump the github-actions-dependencies group across 4 dire…
408571d 
…ctories with 4 updates

Bumps the github-actions-dependencies group with 3 updates in the / directory: [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish), [super-linter/super-linter](https://github.com/super-linter/super-linter) and [github/codeql-action](https://github.com/github/codeql-action).
Bumps the github-actions-dependencies group with 1 update in the /actions/create-and-merge-pull-request directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 1 update in the /actions/get-matrix-outputs directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions-dependencies group with 1 update in the /actions/set-matrix-output directory: [actions/github-script](https://github.com/actions/github-script).


Updates `hoverkraft-tech/ci-github-publish` from 0.8.0 to 0.9.1
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@6d9e5d4...2806e03)

Updates `super-linter/super-linter` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@5119dcd...ffde3b2)

Updates `github/codeql-action` from 3.30.3 to 3.30.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@192325c...3599b3b)

Updates `actions/github-script` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@60a0d83...ed59741)

Updates `actions/github-script` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@60a0d83...ed59741)

Updates `actions/github-script` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@60a0d83...ed59741)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-publish
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: super-linter/super-linter
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 30, 2025
@dependabot @github

dependabot Bot commented on behalf of github Sep 30, 2025

Copy link
Copy Markdown
Contributor Author

Superseded by #366.

@dependabot dependabot Bot closed this Sep 30, 2025
@dependabot dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-38586a48f9 branch September 30, 2025 13:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants