Skip to content

chore(deps): bump the github-actions-dependencies group across 2 directories with 5 updates#368

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-c1cb631fff
Closed

chore(deps): bump the github-actions-dependencies group across 2 directories with 5 updates#368
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-c1cb631fff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 3 updates in the / directory: hoverkraft-tech/ci-github-publish, super-linter/super-linter and github/codeql-action.
Bumps the github-actions-dependencies group with 2 updates in the /actions/create-or-update-comment directory: peter-evans/find-comment and peter-evans/create-or-update-comment.

Updates hoverkraft-tech/ci-github-publish from 0.9.2 to 0.10.1

Release notes

Sourced from hoverkraft-tech/ci-github-publish's releases.

0.10.1

Release Summary

Fixes: deployment stability and miscellaneous issues in the deploy scope.

Internal: dependency updates for GitHub Actions across two directories.

Breaking change(s)

No breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.10.0...0.10.1

0.10.0

Release Summary

No user-facing features or fixes in this release. Internal: CI dependencies updated by bumping hoverkraft-tech/ci-github-container to 0.28.0

Breaking changes

CI now requires GitHub Actions Runner ≥ v2.327.1 and Node.js 24.x due to the ci-github-container 0.28.0 update. 

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.9.3...0.10.0

0.9.3

Release Summary

GitHub Actions dependencies were updated.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.9.2...0.9.3

Commits
  • 00adc37 build(deps): Bump the github-actions-dependencies group across 2 directories ...
  • 3ddfd11 fix(deploy): misc issues
  • da0272d build(deps): Bump hoverkraft-tech/ci-github-container
  • ce4c807 build(deps): Bump the github-actions-dependencies group across 4 directories ...
  • d1beb30 chore: remove useless ghadocs file
  • See full diff in compare view

Updates super-linter/super-linter from 8.0.0 to 8.2.0

Release notes

Sourced from super-linter/super-linter's releases.

v8.2.0

8.2.0 (2025-09-30)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#6973) (1e6cd2f)
  • bundler: bump rubocop in /dependencies in the rubocop group (#6999) (0c0b832)
  • bundler: bump rubocop-performance (#7014) (1f7db0b)
  • bundler: bump the rubocop group in /dependencies with 2 updates (#7071) (1680ba2)
  • bundler: bump the rubocop group in /dependencies with 3 updates (#6989) (dee2e4e)
  • docker: bump aquasecurity/trivy in the docker group (#7080) (41480db)
  • docker: bump goreleaser/goreleaser in the docker group (#7070) (c2c988a)
  • docker: bump the docker group across 1 directory with 4 updates (#7031) (a1aae7d)
  • docker: bump the docker group with 3 updates (#6995) (54c24c1)
  • docker: bump the docker group with 3 updates (#7000) (9df4ad9)
  • docker: bump the docker group with 3 updates (#7043) (e2dbaa1)
  • docker: bump the docker group with 5 updates (#6974) (8ea4f49)
  • docker: bump the docker group with 8 updates (#7056) (ccb8ba0)
  • java: bump com.puppycrawl.tools:checkstyle (#6991) (6fc26f0)
  • java: bump com.puppycrawl.tools:checkstyle (#7072) (96c0ec9)
  • npm: bump @​babel/eslint-parser in /dependencies (#7017) (c0393aa)
  • npm: bump @​typescript-eslint/eslint-plugin (#6992) (d37840f)
  • npm: bump @​typescript-eslint/eslint-plugin (#7003) (6d3fb85)
  • npm: bump @​typescript-eslint/eslint-plugin (#7023) (a974afd)
  • npm: bump @​typescript-eslint/eslint-plugin (#7059) (dc633f9)
  • npm: bump @​typescript-eslint/eslint-plugin (#7074) (ecf5001)
  • npm: bump @​typescript-eslint/eslint-plugin (#7081) (7412580)
  • npm: bump axios (#7040) (407092f)
  • npm: bump eslint from 9.33.0 to 9.34.0 in /dependencies (#6977) (0480c3e)
  • npm: bump eslint from 9.34.0 to 9.35.0 in /dependencies (#7016) (aa8b43f)

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

Changelog

8.2.0 (2025-09-30)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#6973) (1e6cd2f)
  • bundler: bump rubocop in /dependencies in the rubocop group (#6999) (0c0b832)
  • bundler: bump rubocop-performance (#7014) (1f7db0b)
  • bundler: bump the rubocop group in /dependencies with 2 updates (#7071) (1680ba2)
  • bundler: bump the rubocop group in /dependencies with 3 updates (#6989) (dee2e4e)
  • docker: bump aquasecurity/trivy in the docker group (#7080) (41480db)
  • docker: bump goreleaser/goreleaser in the docker group (#7070) (c2c988a)
  • docker: bump the docker group across 1 directory with 4 updates (#7031) (a1aae7d)
  • docker: bump the docker group with 3 updates (#6995) (54c24c1)
  • docker: bump the docker group with 3 updates (#7000) (9df4ad9)
  • docker: bump the docker group with 3 updates (#7043) (e2dbaa1)
  • docker: bump the docker group with 5 updates (#6974) (8ea4f49)
  • docker: bump the docker group with 8 updates (#7056) (ccb8ba0)
  • java: bump com.puppycrawl.tools:checkstyle (#6991) (6fc26f0)
  • java: bump com.puppycrawl.tools:checkstyle (#7072) (96c0ec9)
  • npm: bump @​babel/eslint-parser in /dependencies (#7017) (c0393aa)
  • npm: bump @​typescript-eslint/eslint-plugin (#6992) (d37840f)
  • npm: bump @​typescript-eslint/eslint-plugin (#7003) (6d3fb85)
  • npm: bump @​typescript-eslint/eslint-plugin (#7023) (a974afd)
  • npm: bump @​typescript-eslint/eslint-plugin (#7059) (dc633f9)
  • npm: bump @​typescript-eslint/eslint-plugin (#7074) (ecf5001)
  • npm: bump @​typescript-eslint/eslint-plugin (#7081) (7412580)
  • npm: bump axios (#7040) (407092f)
  • npm: bump eslint from 9.33.0 to 9.34.0 in /dependencies (#6977) (0480c3e)

... (truncated)

Commits
  • 7bba2ee chore(main): release 8.2.0 (#6972)
  • 8c221da deps(python): bump the pip group across 1 directory with 2 updates (#7079)
  • 41480db deps(docker): bump aquasecurity/trivy in the docker group (#7080)
  • 7412580 deps(npm): bump @​typescript-eslint/eslint-plugin (#7081)
  • d42850b deps(npm): bump renovate from 41.131.12 to 41.132.2 in /dependencies (#7082)
  • 9106b37 feat: add pre-commit (#7064)
  • 9c98974 deps(npm): bump react-router-dom (#7069)
  • 92f78b7 deps(python): bump the pip group across 1 directory with 3 updates (#7078)
  • ecf5001 deps(npm): bump @​typescript-eslint/eslint-plugin (#7074)
  • 98635c9 deps(npm): bump the npm group across 1 directory with 5 updates (#7077)
  • Additional commits viewable in compare view

Updates github/codeql-action from 3.30.5 to 3.30.6

Release notes

Sourced from github/codeql-action's releases.

v3.30.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #3168

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #3168

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
  • Update default CodeQL bundle version to 2.23.1. #3118

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

3.29.11 - 21 Aug 2025

  • Update default CodeQL bundle version to 2.22.4. #3044

3.29.10 - 18 Aug 2025

No user facing changes.

3.29.9 - 12 Aug 2025

... (truncated)

Commits
  • 64d10c1 Merge pull request #3172 from github/update-v3.30.6-10feb5d2a
  • 909610e Update changelog for v3.30.6
  • 10feb5d Merge pull request #3167 from github/mbg/upload-sarif/find-then-filter
  • 4182ea3 Merge pull request #3168 from github/update-bundle/codeql-bundle-v2.23.2
  • 34afe5b Merge pull request #3171 from github/mbg/start-proxy/telemetry
  • 096fe67 Merge branch 'main' into update-bundle/codeql-bundle-v2.23.2
  • b496401 Merge pull request #3170 from github/mbg/start-proxy/remove-update-workflow
  • d573787 Report registry types that are configured for CodeQL in start-proxy telemetry
  • 1591680 Send a basic status report in start-proxy Action if it succeeds
  • cb5a284 Send status report when start-proxy fails
  • Additional commits viewable in compare view

Updates peter-evans/find-comment from 3.1.0 to 4.0.0

Release notes

Sourced from peter-evans/find-comment's releases.

Find Comment v4.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

... (truncated)

Commits
  • b30e6a3 feat: v4 (#389)
  • b4929e7 build(deps-dev): bump @​types/node from 18.19.124 to 18.19.127 (#388)
  • 1f47d94 build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#387)
  • a723a15 build(deps): bump actions/setup-node from 4 to 5 (#386)
  • 8bacb1b build(deps-dev): bump @​types/node from 18.19.123 to 18.19.124 (#385)
  • 048de65 build(deps): bump actions/checkout from 4 to 5 (#384)
  • c02750f build(deps-dev): bump @​types/node from 18.19.122 to 18.19.123 (#383)
  • 092c582 build(deps): bump actions/download-artifact from 4 to 5 (#382)
  • c115bb0 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#381)
  • 8d3be5d build(deps-dev): bump @​types/node from 18.19.121 to 18.19.122 (#380)
  • Additional commits viewable in compare view

Updates peter-evans/create-or-update-comment from 4.0.0 to 5.0.0

Release notes

Sourced from peter-evans/create-or-update-comment's releases.

Create or Update Comment v5.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

@dependabot
chore(deps): bump the github-actions-dependencies group across 2 dire…
715ac61 
…ctories with 5 updates

Bumps the github-actions-dependencies group with 3 updates in the / directory: [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish), [super-linter/super-linter](https://github.com/super-linter/super-linter) and [github/codeql-action](https://github.com/github/codeql-action).
Bumps the github-actions-dependencies group with 2 updates in the /actions/create-or-update-comment directory: [peter-evans/find-comment](https://github.com/peter-evans/find-comment) and [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment).


Updates `hoverkraft-tech/ci-github-publish` from 0.9.2 to 0.10.1
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@ebb69cb...00adc37)

Updates `super-linter/super-linter` from 8.0.0 to 8.2.0
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@5119dcd...7bba2ee)

Updates `github/codeql-action` from 3.30.5 to 3.30.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3599b3b...64d10c1)

Updates `peter-evans/find-comment` from 3.1.0 to 4.0.0
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@3eae4d3...b30e6a3)

Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@71345be...e8674b0)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-publish
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: super-linter/super-linter
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action
  dependency-version: 3.30.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: peter-evans/find-comment
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 3, 2025
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 8, 2025
@dependabot dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-c1cb631fff branch October 8, 2025 21:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants