chore(deps): bump the github-actions-dependencies group across 3 directories with 6 updates by dependabot[bot] · Pull Request #484 · hoverkraft-tech/ci-github-container

dependabot · 2025-08-15T05:01:29Z

Bumps the github-actions-dependencies group with 4 updates in the / directory: actions/checkout, docker/login-action, sigstore/cosign-installer and actions/create-github-app-token.
Bumps the github-actions-dependencies group with 1 update in the /actions/docker/sign-images directory: sigstore/cosign-installer.
Bumps the github-actions-dependencies group with 2 updates in the /actions/helm/release-chart directory: mikefarah/yq and appany/helm-oci-chart-releaser.

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

Prepare v5.0.0 release by @salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

Prepare release v4.3.0 by @salmanmkc in actions/checkout#2237

New Contributors

@motss made their first contribution in actions/checkout#1971

@mouismail made their first contribution in actions/checkout#1977

@benwells made their first contribution in actions/checkout#2043

@nebuk89 made their first contribution in actions/checkout#2194

@salmanmkc made their first contribution in actions/checkout#2236

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

V4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707

v4.1.4

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692

Add dependabot config by @cory-miller in actions/checkout#1688

Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693

Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643

v4.1.3

... (truncated)

Commits

08c6903 Prepare v5.0.0 release (#2238)
9f26565 Update actions checkout to use node 24 (#2226)
08eba0b Prepare release v4.3.0 (#2237)
631c7dc Update package dependencies (#2236)
8edcb1b Update CODEOWNERS for actions (#2224)
09d2aca Update README.md (#2194)
85e6279 Adjust positioning of user email note and permissions heading (#2044)
009b9ae Documentation update - add recommended permissions to Readme (#2043)
cbb7224 Update README.md (#1977)
3b9b8c8 docs: update README.md (#1971)
See full diff in compare view

Updates docker/login-action from 3.4.0 to 3.5.0

Release notes

Sourced from docker/login-action's releases.

v3.5.0

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in docker/login-action#874 docker/login-action#876

Bump @aws-sdk/client-ecr to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @aws-sdk/client-ecr-public to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in docker/login-action#870

Bump form-data from 2.5.1 to 2.5.5 in docker/login-action#875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

Commits

184bdaa Merge pull request #878 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
5c6bc94 chore: update generated content
caf4058 build(deps): bump the aws-sdk-dependencies group with 2 updates
ef38ec3 Merge pull request #860 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
d52e8ef chore: update generated content
9644ab7 build(deps): bump the aws-sdk-dependencies group with 2 updates
7abd1d5 Merge pull request #875 from docker/dependabot/npm_and_yarn/form-data-2.5.5
1a81202 Merge pull request #876 from crazy-max/aws-public-dual-stack
d1ab30d chore: update generated content
f25ff28 support dual-stack for aws public ecr
Additional commits viewable in compare view

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

not fail fast and setup permissions in sigstore/cosign-installer#195

drop old unsupported versions <v2.0.0 in sigstore/cosign-installer#192

Update default to v2.5.3 in sigstore/cosign-installer#196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

d58896d Update default to v2.5.3 (#196)
e40248c drop old unsupported versions <v2.0.0 (#192)
d9374b9 not fail fast and setup permissions (#195)
See full diff in compare view

Updates actions/create-github-app-token from 2.0.6 to 2.1.1

Release notes

Sourced from actions/create-github-app-token's releases.

v2.1.1

2.1.1 (2025-08-11)

Bug Fixes

revert "use node24 as runner" (#278) (5204204), closes actions/create-github-app-token#267

v2.1.0

2.1.0 (2025-08-08)

Features

use node24 as runner (#267) (a1cbe0f)

Commits

a8d6161 build(release): 2.1.1 [skip ci]
5204204 fix: revert "use node24 as runner" (#278)
0f859bf build(release): 2.1.0 [skip ci]
a1cbe0f feat: use node24 as runner (#267)
d7ee281 build(deps-dev): bump the development-dependencies group across 1 directory w...
93c1f04 build(deps-dev): bump the development-dependencies group with 4 updates (#255)
dff4b11 ci(test): set permissions in test workflow (#247)
6d44c9f docs(README): Client ID can be used as App ID (#251)
See full diff in compare view

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

not fail fast and setup permissions in sigstore/cosign-installer#195

drop old unsupported versions <v2.0.0 in sigstore/cosign-installer#192

Update default to v2.5.3 in sigstore/cosign-installer#196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

d58896d Update default to v2.5.3 (#196)
e40248c drop old unsupported versions <v2.0.0 (#192)
d9374b9 not fail fast and setup permissions (#195)
See full diff in compare view

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

not fail fast and setup permissions in sigstore/cosign-installer#195

drop old unsupported versions <v2.0.0 in sigstore/cosign-installer#192

Update default to v2.5.3 in sigstore/cosign-installer#196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

d58896d Update default to v2.5.3 (#196)
e40248c drop old unsupported versions <v2.0.0 (#192)
d9374b9 not fail fast and setup permissions (#195)
See full diff in compare view

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

not fail fast and setup permissions in sigstore/cosign-installer#195

drop old unsupported versions <v2.0.0 in sigstore/cosign-installer#192

Update default to v2.5.3 in sigstore/cosign-installer#196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

d58896d Update default to v2.5.3 (#196)
e40248c drop old unsupported versions <v2.0.0 (#192)
d9374b9 not fail fast and setup permissions (#195)
See full diff in compare view

Updates mikefarah/yq from 4.46.1 to 4.47.1

Release notes

Sourced from mikefarah/yq's releases.

v4.47.1 - Merge Anchor fixes (with flag)

Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes

Fixed panic for syntax error when creating a map #2423

Bumped dependencies

Changelog

Sourced from mikefarah/yq's changelog.

4.47.1:

Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes

Fixed panic for syntax error when creating a map #2423

Bumped dependencies

4.46.1:

Added INI support

Fixed 'add' operator when piped in with no data #2378, #2383, #2384

Fixed delete after slice problem (bad node path) #2387 Thanks @antoinedeschenes

Fixed yq small build Thanks @imzue

Switched to YAML org supported go-yaml!

Bumped dependencies

4.45.4:

Fixing wrong map() behaviour on empty map #2359

Bumped dependencies

4.45.3:

Fixing regression introduced with in 4.45.2 with #2325 fix 😓 sorry folks!

Bumped dependencies

4.45.2:

Added windows arm builds (Thanks @albertocavalcante, @ShukantPal)

Added s390x platform support (Thanks @ashokpariya0)

Additionally push docker images to ghcr.io (Thanks @reegnz)

Fixing add when there is no node match #2325

sort_by works on maps

Bumped dependencies

4.45.1:

Create parent directories when --split-exp is used, Thanks @rudo-thomas

Bumped dependencies

4.44.6:

Fixed deleting items in array bug #2027, #2172; Thanks @jandubois

Docker image for armv7 / raspberry pi3, Thanks @brianegge

Fixed no-colors regression #2218

Fixed various panic scenarios #2211

Bumped dependencies

4.44.5:

Fixing release pipeline

4.44.4:

Format comments with a gray foreground (Thanks @gabe565)

Fixed handling of nulls with sort_by expressions #2164

Force no color output when NO_COLOR env presents (Thanks @narqo)

Fixed array subtraction update bug #2159

... (truncated)

Commits

f03c9dc Bumping version
023c85e Adding test for #2404
a3d9e01 Prepping release notes
ab3be22 Bump github.com/spf13/pflag from 1.0.6 to 1.0.7
93fed3f Bump golang.org/x/net from 0.41.0 to 0.42.0
f42534e Bump github.com/alecthomas/repr from 0.4.0 to 0.5.1
b968963 Merge branch 'stevenwdv-merge-anchor-fix'
92309b1 Fixed test doc gen
d5757fc Working on clarifying docs
db2a455 Fixed tests
Additional commits viewable in compare view

Updates appany/helm-oci-chart-releaser from 0.4.2 to 0.5.0

Commits

d94988c Merge pull request #23 from mrsimonemms/main
651d604 Add option to sign Helm chart
391b4c1 Merge pull request #21 from cuichenli/patch-1
36f49f4 Merge pull request #22 from neilime/ci/initialize
14dcfd7 ci: initialize basic CI
883db9e feat: store generated chart artifact in temp
81def81 ci: add dependabot config
3bf0cd3 Update README.md
e5d34c4 Merge pull request #19 from MartinLoeper/main
f13f27a fix: if condition
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ctories with 6 updates Bumps the github-actions-dependencies group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [docker/login-action](https://github.com/docker/login-action), [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Bumps the github-actions-dependencies group with 1 update in the /actions/docker/sign-images directory: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer). Bumps the github-actions-dependencies group with 2 updates in the /actions/helm/release-chart directory: [mikefarah/yq](https://github.com/mikefarah/yq) and [appany/helm-oci-chart-releaser](https://github.com/appany/helm-oci-chart-releaser). Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...08c6903) Updates `docker/login-action` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@74a5d14...184bdaa) Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@398d4b0...d58896d) Updates `actions/create-github-app-token` from 2.0.6 to 2.1.1 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@df432ce...a8d6161) Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@398d4b0...d58896d) Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@398d4b0...d58896d) Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@398d4b0...d58896d) Updates `mikefarah/yq` from 4.46.1 to 4.47.1 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@1187c95...f03c9dc) Updates `appany/helm-oci-chart-releaser` from 0.4.2 to 0.5.0 - [Release notes](https://github.com/appany/helm-oci-chart-releaser/releases) - [Commits](appany/helm-oci-chart-releaser@dd0551c...d94988c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies - dependency-name: docker/login-action dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: sigstore/cosign-installer dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/create-github-app-token dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: sigstore/cosign-installer dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: sigstore/cosign-installer dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: sigstore/cosign-installer dependency-version: 3.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: mikefarah/yq dependency-version: 4.47.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: appany/helm-oci-chart-releaser dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-08-19T16:14:17Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 15, 2025

dependabot Bot closed this Aug 19, 2025

dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-df428ad9be branch August 19, 2025 16:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the github-actions-dependencies group across 3 directories with 6 updates#484

chore(deps): bump the github-actions-dependencies group across 3 directories with 6 updates#484
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-df428ad9be

dependabot Bot commented on behalf of github Aug 15, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.0

What's Changed

New Contributors

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v3.5.0

v3.9.2

What's Changed

v2.1.1

2.1.1 (2025-08-11)

Bug Fixes

v2.1.0

2.1.0 (2025-08-08)

Features

v3.9.2

What's Changed

v3.9.2

What's Changed

v3.9.2

What's Changed

v4.47.1 - Merge Anchor fixes (with flag)

Uh oh!

dependabot Bot commented on behalf of github Aug 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 15, 2025 •

edited

Loading