Skip to content

chore(deps): bump the github-actions group with 5 updates#101

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-b728f9e970
Closed

chore(deps): bump the github-actions group with 5 updates#101
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-b728f9e970

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 5 updates:

Package From To
actions/checkout 4 7
actions/upload-pages-artifact 3 5
actions/deploy-pages 4 5
hyperpolymath/a2ml-validate-action 55e8c28bab4e7f2399fdbd57a6da1051369f3847 5468b7ff0f5129a74d25af5f2468df11a706dc70
hyperpolymath/k9-validate-action 7c3c0e9fa5165626e74ecce78109b3295b798b92 08958c9bab64f9941a85938a78122a0d4a3058e8

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Commits

Updates actions/upload-pages-artifact from 3 to 5

Release notes

Sourced from actions/upload-pages-artifact's releases.

v5.0.0

Changelog

See details of all code changes since previous release.

v4.0.0

What's Changed

Full Changelog: actions/upload-pages-artifact@v3.0.1...v4.0.0

v3.0.1

Changelog

See details of all code changes since previous release.

Commits
  • fc324d3 Merge pull request #139 from Tom-van-Woudenberg/patch-1
  • fe9d4b7 Merge branch 'main' into patch-1
  • 0ca1617 Merge pull request #137 from jonchurch/include-hidden-files
  • 57f0e84 Update action.yml
  • 4a90348 v7 --> hash
  • 56f665a Update upload-artifact action to version 7
  • f7615f5 Add include-hidden-files input
  • 7b1f4a7 Merge pull request #127 from heavymachinery/pin-sha
  • 4cc19c7 Pin actions/upload-artifact to SHA
  • 2d163be Merge pull request #107 from KittyChiu/main
  • Additional commits viewable in compare view

Updates actions/deploy-pages from 4 to 5

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.0

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.5

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.4

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.3

Changelog

... (truncated)

Commits
  • cd2ce8f Merge pull request #404 from salmanmkc/node24
  • bbe2a95 Update Node.js version to 24.x
  • 854d7aa Merge pull request #374 from actions/Jcambass-patch-1
  • 306bb81 Add workflow file for publishing releases to immutable action package
  • b742728 Merge pull request #360 from actions/dependabot/npm_and_yarn/npm_and_yarn-513...
  • 7273294 Bump braces in the npm_and_yarn group across 1 directory
  • 963791f Merge pull request #361 from actions/dependabot-friendly
  • 51bb29d Make the rebuild dist workflow safer for Dependabot
  • 89f3d10 Merge pull request #358 from actions/dependabot/npm_and_yarn/non-breaking-cha...
  • bce7355 Merge branch 'main' into dependabot/npm_and_yarn/non-breaking-changes-99c12deb21
  • Additional commits viewable in compare view

Updates hyperpolymath/a2ml-validate-action from 55e8c28bab4e7f2399fdbd57a6da1051369f3847 to 5468b7ff0f5129a74d25af5f2468df11a706dc70

Changelog

Sourced from hyperpolymath/a2ml-validate-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.0.0] - 2026-05-29

Added

  • Initial Marketplace-ready composite action for validating .a2ml manifests.
  • Configurable path, strict, and paths-ignore inputs.
  • GitHub Actions outputs for scanned files, validation errors, and warnings.

Fixed

  • Allow local smoke runs outside GitHub Actions by defaulting missing GITHUB_OUTPUT to /dev/null.
Commits
  • 5468b7f security: re-pin secret scanner onto the real gitleaks gate (#59)
  • bafa539 chore(deps): bump the actions group with 4 updates (#58)
  • See full diff in compare view

Updates hyperpolymath/k9-validate-action from 7c3c0e9fa5165626e74ecce78109b3295b798b92 to 08958c9bab64f9941a85938a78122a0d4a3058e8

Changelog

Sourced from hyperpolymath/k9-validate-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.0.0] - 2026-05-29

Added

  • Initial Marketplace-ready composite action for validating .k9 and .k9.ncl files.
  • Configurable path, strict, and paths-ignore inputs.
  • GitHub Actions outputs for scanned files, validation errors, and warnings.

Fixed

  • Allow local smoke runs outside GitHub Actions by defaulting missing GITHUB_OUTPUT to /dev/null.
Commits
  • 08958c9 security: re-pin secret scanner onto the real gitleaks gate (#38)
  • 01ab911 chore(deps): bump the actions group with 4 updates (#37)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |
| [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3` | `5` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4` | `5` |
| [hyperpolymath/a2ml-validate-action](https://github.com/hyperpolymath/a2ml-validate-action) | `55e8c28bab4e7f2399fdbd57a6da1051369f3847` | `5468b7ff0f5129a74d25af5f2468df11a706dc70` |
| [hyperpolymath/k9-validate-action](https://github.com/hyperpolymath/k9-validate-action) | `7c3c0e9fa5165626e74ecce78109b3295b798b92` | `08958c9bab64f9941a85938a78122a0d4a3058e8` |


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v7)

Updates `actions/upload-pages-artifact` from 3 to 5
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](actions/upload-pages-artifact@v3...v5)

Updates `actions/deploy-pages` from 4 to 5
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@v4...v5)

Updates `hyperpolymath/a2ml-validate-action` from 55e8c28bab4e7f2399fdbd57a6da1051369f3847 to 5468b7ff0f5129a74d25af5f2468df11a706dc70
- [Release notes](https://github.com/hyperpolymath/a2ml-validate-action/releases)
- [Changelog](https://github.com/hyperpolymath/a2ml-validate-action/blob/main/CHANGELOG.md)
- [Commits](hyperpolymath/a2ml-validate-action@55e8c28...5468b7f)

Updates `hyperpolymath/k9-validate-action` from 7c3c0e9fa5165626e74ecce78109b3295b798b92 to 08958c9bab64f9941a85938a78122a0d4a3058e8
- [Release notes](https://github.com/hyperpolymath/k9-validate-action/releases)
- [Changelog](https://github.com/hyperpolymath/k9-validate-action/blob/main/CHANGELOG.md)
- [Commits](hyperpolymath/k9-validate-action@7c3c0e9...08958c9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-pages-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/deploy-pages
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: hyperpolymath/a2ml-validate-action
  dependency-version: 5468b7ff0f5129a74d25af5f2468df11a706dc70
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: hyperpolymath/k9-validate-action
  dependency-version: '08958c9bab64f9941a85938a78122a0d4a3058e8'
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 21, 2026
@sonarqubecloud

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 21, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-b728f9e970 branch July 21, 2026 23:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant