Skip to content

chore(deps): bump the github-actions-dependencies group across 3 directories with 8 updates#486

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-934f24da5a
Closed

chore(deps): bump the github-actions-dependencies group across 3 directories with 8 updates#486
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-934f24da5a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2025

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 6 updates in the / directory:

Package From To
actions/checkout 4.2.2 5.0.0
hoverkraft-tech/ci-github-publish 0.7.1 0.8.0
hoverkraft-tech/ci-github-common 0.23.1 0.24.0
docker/login-action 3.4.0 3.5.0
sigstore/cosign-installer 3.9.1 3.9.2
actions/create-github-app-token 2.0.6 2.1.1

Bumps the github-actions-dependencies group with 1 update in the /actions/docker/sign-images directory: sigstore/cosign-installer.
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/release-chart directory: hoverkraft-tech/ci-github-common, mikefarah/yq and appany/helm-oci-chart-releaser.

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates hoverkraft-tech/ci-github-publish from 0.7.1 to 0.8.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish's releases.

0.8.0

Release Summary

This release updates actions dependencies and improves documentation for actions and workflows. Dependency upgrades include the CI GitHub container and the super-linter to their latest versions. No user-facing features or bug fixes were introduced.

Breaking change(s)

Requires GitHub Runner ≥ v2.327.1.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.7.1...0.8.0

Commits
  • 6d9e5d4 docs: update actions and workflows documentation
  • 6db8ce3 build(deps): Bump the github-actions-dependencies group across 6 directories ...
  • 9cf48fd build(deps): Bump super-linter/super-linter
  • 1b487d9 docs: update actions and workflows documentation
  • ea58918 Merge pull request #142 from hoverkraft-tech/dependabot/github_actions/github...
  • aa363f1 build(deps): Bump the github-actions-dependencies group across 2 directories ...
  • f13e51c docs: update actions and workflows documentation
  • 30c5b76 build(deps): Bump hoverkraft-tech/ci-github-container
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common from 0.23.1 to 0.24.0

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.24.0

Release Summary

CI dependencies refreshed, notably actions/checkout v5, actions/first-interaction v3, amannn/action-semantic-pull-request v6, CodeQL patches, actions/download-artifact v5 and Super-linter upgraded to v8. Actions and workflows documentation updated.

Breaking change(s)

Super-Linter v8 updates rules and removes some linters (See https://github.com/super-linter/super-linter/releases/tag/v8.0.0), actions/checkout v5 requires GitHub Runner ≥ v2.327.1, amannn/action-semantic-pull-request v6 moves to Node 24/ESM, and actions/download-artifact v5 changes the output path for single-ID downloads.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.23.1...0.24.0

Commits
  • b488399 chore(deps): bump super-linter/super-linter
  • 29242b5 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • f53d86e chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 2138b59 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • a148351 chore(deps): bump hoverkraft-tech/ci-github-publish
  • e616343 chore: rename logo image
  • 13b74cf docs: update actions and workflows documentation
  • See full diff in compare view

Updates docker/login-action from 3.4.0 to 3.5.0

Release notes

Sourced from docker/login-action's releases.

v3.5.0

Full Changelog: docker/login-action@v3.4.0...v3.5.0

Commits
  • 184bdaa Merge pull request #878 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 5c6bc94 chore: update generated content
  • caf4058 build(deps): bump the aws-sdk-dependencies group with 2 updates
  • ef38ec3 Merge pull request #860 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • d52e8ef chore: update generated content
  • 9644ab7 build(deps): bump the aws-sdk-dependencies group with 2 updates
  • 7abd1d5 Merge pull request #875 from docker/dependabot/npm_and_yarn/form-data-2.5.5
  • 1a81202 Merge pull request #876 from crazy-max/aws-public-dual-stack
  • d1ab30d chore: update generated content
  • f25ff28 support dual-stack for aws public ecr
  • Additional commits viewable in compare view

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

Updates actions/create-github-app-token from 2.0.6 to 2.1.1

Release notes

Sourced from actions/create-github-app-token's releases.

v2.1.1

2.1.1 (2025-08-11)

Bug Fixes

v2.1.0

2.1.0 (2025-08-08)

Features

Commits
  • a8d6161 build(release): 2.1.1 [skip ci]
  • 5204204 fix: revert "use node24 as runner" (#278)
  • 0f859bf build(release): 2.1.0 [skip ci]
  • a1cbe0f feat: use node24 as runner (#267)
  • d7ee281 build(deps-dev): bump the development-dependencies group across 1 directory w...
  • 93c1f04 build(deps-dev): bump the development-dependencies group with 4 updates (#255)
  • dff4b11 ci(test): set permissions in test workflow (#247)
  • 6d44c9f docs(README): Client ID can be used as App ID (#251)
  • See full diff in compare view

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

Updates hoverkraft-tech/ci-github-common from 0.23.1 to 0.24.0

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.24.0

Release Summary

CI dependencies refreshed, notably actions/checkout v5, actions/first-interaction v3, amannn/action-semantic-pull-request v6, CodeQL patches, actions/download-artifact v5 and Super-linter upgraded to v8. Actions and workflows documentation updated.

Breaking change(s)

Super-Linter v8 updates rules and removes some linters (See https://github.com/super-linter/super-linter/releases/tag/v8.0.0), actions/checkout v5 requires GitHub Runner ≥ v2.327.1, amannn/action-semantic-pull-request v6 moves to Node 24/ESM, and actions/download-artifact v5 changes the output path for single-ID downloads.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.23.1...0.24.0

Commits
  • b488399 chore(deps): bump super-linter/super-linter
  • 29242b5 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • f53d86e chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 2138b59 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • a148351 chore(deps): bump hoverkraft-tech/ci-github-publish
  • e616343 chore: rename logo image
  • 13b74cf docs: update actions and workflows documentation
  • See full diff in compare view

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

Updates sigstore/cosign-installer from 3.9.1 to 3.9.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.9.2

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

Commits

Updates hoverkraft-tech/ci-github-common from 0.23.1 to 0.24.0

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.24.0

Release Summary

CI dependencies refreshed, notably actions/checkout v5, actions/first-interaction v3, amannn/action-semantic-pull-request v6, CodeQL patches, actions/download-artifact v5 and Super-linter upgraded to v8. Actions and workflows documentation updated.

Breaking change(s)

Super-Linter v8 updates rules and removes some linters (See https://github.com/super-linter/super-linter/releases/tag/v8.0.0), actions/checkout v5 requires GitHub Runner ≥ v2.327.1, amannn/action-semantic-pull-request v6 moves to Node 24/ESM, and actions/download-artifact v5 changes the output path for single-ID downloads.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.23.1...0.24.0

Commits
  • b488399 chore(deps): bump super-linter/super-linter
  • 29242b5 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • f53d86e chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 2138b59 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • a148351 chore(deps): bump hoverkraft-tech/ci-github-publish
  • e616343 chore: rename logo image
  • 13b74cf docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common from 0.23.1 to 0.24.0

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.24.0

Release Summary

CI dependencies refreshed, notably actions/checkout v5, actions/first-interaction v3, amannn/action-semantic-pull-request v6, CodeQL patches, actions/download-artifact v5 and Super-linter upgraded to v8. Actions and workflows documentation updated.

Breaking change(s)

Super-Linter v8 updates rules and removes some linters (See https://github.com/super-linter/super-linter/releases/tag/v8.0.0), actions/checkout v5 requires GitHub Runner ≥ v2.327.1, amannn/action-semantic-pull-request v6 moves to Node 24/ESM, and actions/download-artifact v5 changes the output path for single-ID downloads.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.23.1...0.24.0

Commits
  • b488399 chore(deps): bump super-linter/super-linter
  • 29242b5 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • f53d86e chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 2138b59 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • a148351 chore(deps): bump hoverkraft-tech/ci-github-publish
  • e616343 chore: rename logo image
  • 13b74cf docs: update actions and workflows documentation
  • See full diff in compare view

Updates mikefarah/yq from 4.46.1 to 4.47.1

Release notes

Sourced from mikefarah/yq's releases.

v4.47.1 - Merge Anchor fixes (with flag)

  • Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @​stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes
  • Fixed panic for syntax error when creating a map #2423
  • Bumped dependencies
Changelog

Sourced from mikefarah/yq's changelog.

4.47.1:

  • Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @​stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes
  • Fixed panic for syntax error when creating a map #2423
  • Bumped dependencies

4.46.1:

  • Added INI support
  • Fixed 'add' operator when piped in with no data #2378, #2383, #2384
  • Fixed delete after slice problem (bad node path) #2387 Thanks @​antoinedeschenes
  • Fixed yq small build Thanks @​imzue
  • Switched to YAML org supported go-yaml!
  • Bumped dependencies

4.45.4:

  • Fixing wrong map() behaviour on empty map #2359
  • Bumped dependencies

4.45.3:

  • Fixing regression introduced with in 4.45.2 with #2325 fix 😓 sorry folks!
  • Bumped dependencies

4.45.2:

4.45.1:

  • Create parent directories when --split-exp is used, Thanks @​rudo-thomas
  • Bumped dependencies

4.44.6:

4.44.5:

  • Fixing release pipeline

4.44.4:

  • Format comments with a gray foreground (Thanks @​gabe565)
  • Fixed handling of nulls with sort_by expressions #2164
  • Force no color output when NO_COLOR env presents (Thanks @​narqo)
  • Fixed array subtraction update bug #2159

... (truncated)

Commits

Updates appany/helm-oci-chart-releaser from 0.4.2 to 0.5.0

Commits
  • d94988c Merge pull request #23 from mrsimonemms/main
  • 651d604 Add option to sign Helm chart
  • 391b4c1 Merge pull request #21 from cuichenli/patch-1
  • 36f49f4 Merge pull request #22 from neilime/ci/initialize
  • 14dcfd7 ci: initialize basic CI
  • 883db9e feat: store generated chart artifact in temp
  • 81def81 ci: add dependabot config
  • 3bf0cd3 Update README.md
  • e5d34c4 Merge pull request #19 from MartinLoeper/main
  • f13f27a fix: if condition
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you un...

Description has been truncated

…ctories with 8 updates

Bumps the github-actions-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` |
| [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish) | `0.7.1` | `0.8.0` |
| [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common) | `0.23.1` | `0.24.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.4.0` | `3.5.0` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.9.1` | `3.9.2` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.0.6` | `2.1.1` |

Bumps the github-actions-dependencies group with 1 update in the /actions/docker/sign-images directory: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/release-chart directory: [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common), [mikefarah/yq](https://github.com/mikefarah/yq) and [appany/helm-oci-chart-releaser](https://github.com/appany/helm-oci-chart-releaser).


Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...08c6903)

Updates `hoverkraft-tech/ci-github-publish` from 0.7.1 to 0.8.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@7ce3b41...6d9e5d4)

Updates `hoverkraft-tech/ci-github-common` from 0.23.1 to 0.24.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@6857ef6...b488399)

Updates `docker/login-action` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@74a5d14...184bdaa)

Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@398d4b0...d58896d)

Updates `actions/create-github-app-token` from 2.0.6 to 2.1.1
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@df432ce...a8d6161)

Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@398d4b0...d58896d)

Updates `hoverkraft-tech/ci-github-common` from 0.23.1 to 0.24.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@6857ef6...b488399)

Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@398d4b0...d58896d)

Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@398d4b0...d58896d)

Updates `hoverkraft-tech/ci-github-common` from 0.23.1 to 0.24.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@6857ef6...b488399)

Updates `hoverkraft-tech/ci-github-common` from 0.23.1 to 0.24.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@6857ef6...b488399)

Updates `mikefarah/yq` from 4.46.1 to 4.47.1
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@1187c95...f03c9dc)

Updates `appany/helm-oci-chart-releaser` from 0.4.2 to 0.5.0
- [Release notes](https://github.com/appany/helm-oci-chart-releaser/releases)
- [Commits](appany/helm-oci-chart-releaser@dd0551c...d94988c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: docker/login-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: mikefarah/yq
  dependency-version: 4.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: appany/helm-oci-chart-releaser
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 19, 2025
@dependabot @github

dependabot Bot commented on behalf of github Aug 20, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 20, 2025
@dependabot dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-934f24da5a branch August 20, 2025 07:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants