Skip to content

deps: bump the actions group across 1 directory with 6 updates#272

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-d96daf4a64
Closed

deps: bump the actions group across 1 directory with 6 updates#272
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-d96daf4a64

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 1, 2026

Bumps the actions group with 6 updates in the / directory:

Package From To
actions/checkout 6.0.1 6.0.2
ruby/setup-ruby 1.275.0 1.288.0
KineticCafe/actions-dco 2.0.0 2.1.1
actions/dependency-review-action 4.8.2 4.8.3
reviewdog/action-actionlint 1.69.1 1.71.0
zizmorcore/zizmor-action 0.3.0 0.5.0

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • See full diff in compare view

Updates ruby/setup-ruby from 1.275.0 to 1.288.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.288.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.287.0...v1.288.0

v1.287.0

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.286.0...v1.287.0

v1.286.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.285.0...v1.286.0

v1.285.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.284.0...v1.285.0

v1.284.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.283.0...v1.284.0

v1.283.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.282.0...v1.283.0

v1.282.0

What's Changed

... (truncated)

Commits
  • 09a7688 Add jruby-10.0.3.0
  • 67178a2 Improve the automated PR description
  • ede5b72 Shorten workflow name
  • aaddd68 new-versions.rb is no longer used for RubyInstaller releases
  • c7aa9f4 Move check-new-windows-versions.yml workflow from ruby/ruby-builder to ruby/s...
  • 8d27f39 Improve the mise.toml parser to conform to the TOML specification
  • 90be115 Add truffleruby-33.0.1,truffleruby+graalvm-33.0.1
  • e69dcf3 Update all dependencies to latest
  • 9f55308 Convert to String earlier in generate-windows-versions.rb
  • 80740b3 Add new RubyInstaller releases 4.0.1-1 and 3.2.10-1
  • Additional commits viewable in compare view

Updates KineticCafe/actions-dco from 2.0.0 to 2.1.1

Release notes

Sourced from KineticCafe/actions-dco's releases.

v2.1.1

What's Changed

Full Changelog: KineticCafe/actions-dco@v2.1.0...v2.1.1

v2.1.0

What's Changed

Full Changelog: KineticCafe/actions-dco@v2.0.0...v2.1.0

Changelog

Sourced from KineticCafe/actions-dco's changelog.

KineticCafe/actions-dco Changelog

2.1.0 / 2025-12-17

  • Upgraded dependencies.

  • Added a possible workaround to #198[issue-198].

2.0.0 / 2025-10-17

  • Upgraded dependencies and set runtime as Node v24.

1.3.8 / 2025-09-07

  • Upgrade dependencies.

1.3.7 / 2025-08-23

  • Bump version number as it was forgotten for 1.3.6.

1.3.6 / 2025-08-17

  • Upgrade dependencies.

  • Added debug logs to try to debug #169[issue-169].

  • Change gitSignoffs to use String.prototype.matchAll() instead of Regexp.prototype.exec(), and to use named capture groups. While I don't expect this to fix #169[issue-169] based on the example data provided, it should result in improved pattern matching across multiple commits.

1.3.5 / 2025-08-01

  • Upgrade dependencies.

1.3.4 / 2025-03-01

  • Upgrade dependencies.

1.3.3 / 2025-02-18

  • Upgrade dependencies, resolving a potential security issue.

1.3.2 / 2024-12-01

  • Upgrade dependencies.

1.3.1 / 2024-11-01

  • Upgrade dependencies.

... (truncated)

Commits
  • 6e1652e chore: Update dependencies
  • cd037df deps: bump actions/setup-node in the actions group across 1 directory
  • 07b1ace chore: Update dist to try to fix a token issue
  • b256b18 deps: bump actions/checkout from 5.0.0 to 6.0.0
  • 76b7fc3 fix: Escape the reason in the summary table
  • bc076f2 deps: Update dist/ after dependabot update
  • 3899b64 deps: Add autofix capability to Dependabot PRs
  • dc1cf81 deps: bump js-yaml from 4.1.0 to 4.1.1
  • 28c71a1 deps: bump the bundler group with 2 updates
  • 7fc90a9 deps: bump actions/setup-node from 5.0.0 to 6.0.0
  • Additional commits viewable in compare view

Updates actions/dependency-review-action from 4.8.2 to 4.8.3

Release notes

Sourced from actions/dependency-review-action's releases.

4.8.3

Dependency Review Action v4.8.3

This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.

We have also updated the release process to use a long-lived v4 branch for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.

What's Changed

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3

Commits
  • 05fe457 Merge pull request #1054 from actions/ahpook/release-4.8.3
  • 3a8496c Update generated package files for v4.8.3
  • 0f22a01 Update CONTRIBUTING for new release process
  • 58be343 Updating package versions for 4.8.3
  • 9284e0c Merge pull request #931 from actions/dependabot/npm_and_yarn/spdx-licenses-20...
  • 8b76656 Bump spdx-expression-parse in the spdx-licenses group across 1 directory
  • 43f5f02 Merge pull request #1052 from actions/juxtin/fix-long-summaries
  • f0033fc Merge pull request #1053 from actions/dependabot/npm_and_yarn/fast-xml-parser...
  • b379e2e Bump fast-xml-parser from 5.3.5 to 5.3.6
  • 2e1cf54 Properly truncate long summaries and catch errors
  • Additional commits viewable in compare view

Updates reviewdog/action-actionlint from 1.69.1 to 1.71.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.71.0

v1.71.0: PR #193 - chore(deps): update actionlint to 1.7.11

Release v1.70.0

v1.70.0: PR #191 - chore(deps): update actionlint to 1.7.10

Commits
  • 0d952c5 bump v1.71.0
  • e9dfe1d Merge branch 'main' into releases/v1
  • 2a3d15f Merge pull request #193 from reviewdog/depup/actionlint
  • e5de731 chore(deps): update actionlint to 1.7.11
  • e58ee9d bump v1.70.0
  • 1d73978 Merge branch 'main' into releases/v1
  • f4bb4d5 Merge pull request #191 from reviewdog/depup/actionlint
  • 1c29cc9 chore(deps): update actionlint to 1.7.10
  • See full diff in compare view

Updates zizmorcore/zizmor-action from 0.3.0 to 0.5.0

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.0

What's Changed

New Contributors

Full Changelog: zizmorcore/zizmor-action@v0.4.1...v0.5.0

v0.4.1

This version fixes an error in the 0.4.0 release that prevented non-relative use of the action.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

This new version of zizmor-action brings two major changes:

  • The new fail-on-no-inputs option can be used to control whether zizmor-action fails if no inputs were collected by zizmor. The default remains true, reflecting the pre-existing behavior.

  • The action's use of the official zizmor Docker images is now fully hash-checked internally, preventing accidental or malicious modification to the images. This also means that subsequent releases of zizmor will induce a release of this action, rather than the action always picking up the latest version by default.

What's Changed

New Contributors

Full Changelog: zizmorcore/zizmor-action@v0.3.0...v0.4.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.275.0` | `1.288.0` |
| [KineticCafe/actions-dco](https://github.com/kineticcafe/actions-dco) | `2.0.0` | `2.1.1` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.8.2` | `4.8.3` |
| [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.69.1` | `1.71.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.3.0` | `0.5.0` |



Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@8e8c483...de0fac2)

Updates `ruby/setup-ruby` from 1.275.0 to 1.288.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@d354de1...09a7688)

Updates `KineticCafe/actions-dco` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/kineticcafe/actions-dco/releases)
- [Changelog](https://github.com/KineticCafe/actions-dco/blob/main/Changelog.md)
- [Commits](KineticCafe/actions-dco@cd9508e...6e1652e)

Updates `actions/dependency-review-action` from 4.8.2 to 4.8.3
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@3c4e3dc...05fe457)

Updates `reviewdog/action-actionlint` from 1.69.1 to 1.71.0
- [Release notes](https://github.com/reviewdog/action-actionlint/releases)
- [Commits](reviewdog/action-actionlint@83e4ed2...0d952c5)

Updates `zizmorcore/zizmor-action` from 0.3.0 to 0.5.0
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@e639db9...0dce257)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: ruby/setup-ruby
  dependency-version: 1.288.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: KineticCafe/actions-dco
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: reviewdog/action-actionlint
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 1, 2026
@coveralls
Copy link
Copy Markdown

Coverage Status

coverage: 89.035%. remained the same
when pulling 806795f on dependabot/github_actions/actions-d96daf4a64
into 7de6c8d on main.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 1, 2026
@dependabot dependabot Bot deleted the dependabot/github_actions/actions-d96daf4a64 branch April 1, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant