build(deps): bump the github-actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #1453 · TecharoHQ/anubis

dependabot · 2026-02-15T13:24:43Z

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
docker/login-action	`3.6.0`	`3.7.0`
actions/attest-build-provenance	`3.1.0`	`3.2.0`
actions-hub/kubectl	`1.35.0`	`1.35.1`
actions/cache	`5.0.2`	`5.0.3`
amannn/action-semantic-pull-request	`5.5.3`	`6.1.1`
astral-sh/setup-uv	`7.2.0`	`7.3.0`

Updates docker/login-action from 3.6.0 to 3.7.0

Release notes

Sourced from docker/login-action's releases.

v3.7.0

Add scope input to set scopes for the authentication token by @crazy-max in docker/login-action#912

Add support for AWS European Sovereign Cloud ECR by @dphi in docker/login-action#914

Ensure passwords are redacted with registry-auth input by @crazy-max in docker/login-action#911

build(deps): bump lodash from 4.17.21 to 4.17.23 in docker/login-action#915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

Commits

c94ce9f Merge pull request #915 from docker/dependabot/npm_and_yarn/lodash-4.17.23
8339c95 Merge pull request #912 from docker/scope
c83e932 build(deps): bump lodash from 4.17.21 to 4.17.23
b268aa5 chore: update generated content
a603229 documentation for scope input
7567f92 Add scope input to set scopes for the authentication token
0567fa5 Merge pull request #914 from dphi/add-support-for-amazonaws.eu
f6ef577 feat: add support for AWS European Sovereign Cloud ECR registries
916386b Merge pull request #911 from crazy-max/ensure-redact
5b3f94a chore: update generated content
Additional commits viewable in compare view

Updates actions/attest-build-provenance from 3.1.0 to 3.2.0

Release notes

Sourced from actions/attest-build-provenance's releases.

v3.2.0

What's Changed

Bump @actions/core from 1.11.1 to 2.0.1 by @dependabot[bot] in actions/attest-build-provenance#776

Add more documentation on Artifact Metadata Storage Records by @malancas in actions/attest-build-provenance#797

Update actions/attest to latest version v3.2.0 by @malancas in actions/attest-build-provenance#812

Full Changelog: actions/attest-build-provenance@v3.1.0...v3.2.0

Commits

96278af Update actions/attest to latest version v3.2.0 (#812)
6865550 Add more documentation on Artifact Metadata Storage Records (#797)
98f3aa9 Bump @actions/core from 1.11.1 to 2.0.1 (#776)
63e6444 Bump github/codeql-action in the actions-minor group (#782)
3bc61af Bump the npm-development group with 2 updates (#795)
405d0ea Bump the npm-development group with 3 updates (#783)
See full diff in compare view

Updates actions-hub/kubectl from 1.35.0 to 1.35.1

Commits

3ece379 updated kubectl to v1.35.0
See full diff in compare view

Updates actions/cache from 5.0.2 to 5.0.3

Release notes

Sourced from actions/cache's releases.

v5.0.3

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

Bump @actions/cache to v4.1.0

... (truncated)

Commits

cdf6c1f Merge pull request #1695 from actions/Link-/prepare-5.0.3
a1bee22 Add review for the @actions/http-client license
4695763 Add licensed output
dc73bb9 Upgrade dependencies and address security warnings
345d5c2 Add 5.0.3 builds
See full diff in compare view

Updates amannn/action-semantic-pull-request from 5.5.3 to 6.1.1

Release notes

Sourced from amannn/action-semantic-pull-request's releases.

v6.1.1

6.1.1 (2025-08-22)

Bug Fixes

Parse headerPatternCorrespondence properly (#295) (800da4c)

v6.1.0

6.1.0 (2025-08-19)

Features

Support providing regexps for types (#292) (a30288b)

Bug Fixes

Remove trailing whitespace from "unknown release type" error message (#291) (afa4edb)

v6.0.1

6.0.1 (2025-08-13)

Bug Fixes

Actually execute action (#289) (58e4ab4)

v6.0.0

6.0.0 (2025-08-13)

⚠ BREAKING CHANGES

Upgrade action to use Node.js 24 and ESM (#287)

Features

Upgrade action to use Node.js 24 and ESM (#287) (bc0c9a7)

Changelog

Sourced from amannn/action-semantic-pull-request's changelog.

Changelog

6.1.1 (2025-08-22)

Bug Fixes

Parse headerPatternCorrespondence properly (#295) (800da4c)

6.1.0 (2025-08-19)

Features

Support providing regexps for types (#292) (a30288b)

Bug Fixes

Remove trailing whitespace from "unknown release type" error message (#291) (afa4edb)

6.0.1 (2025-08-13)

Bug Fixes

Actually execute action (#289) (58e4ab4)

6.0.0 (2025-08-13)

⚠ BREAKING CHANGES

Upgrade action to use Node.js 24 and ESM (#287)

Features

Upgrade action to use Node.js 24 and ESM (#287) (bc0c9a7)

5.5.3 (2024-06-28)

Bug Fixes

Bump braces dependency (#269. by @EelcoLos) (2d952a1)

5.5.2 (2024-04-24)

Bug Fixes

Bump tar from 6.1.11 to 6.2.1 (#262 by @EelcoLos) (9a90d5a)

5.5.1 (2024-04-24)

... (truncated)

Commits

48f2562 chore: Release 6.1.1 [skip ci]
800da4c fix: Parse headerPatternCorrespondence properly (#295)
677b895 test: Fix broken test
24e6f01 ci: Fix permissions for tagger
7f33ba7 chore: Release 6.1.0 [skip ci]
afa4edb fix: Remove trailing whitespace from "unknown release type" error message (#291)
a30288b feat: Support providing regexps for types (#292)
a46a7c8 build: Move Vitest to devDependencies (#290)
fdd4d3d chore: Release 6.0.1 [skip ci]
58e4ab4 fix: Actually execute action (#289)
Additional commits viewable in compare view

Updates astral-sh/setup-uv from 7.2.0 to 7.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.3.0 🌈 New features and bug fixes for activate-environment

Changes

This release contains a few bug fixes and a new feature for the activate-environment functionality.

🐛 Bug fixes

fix: warn instead of error when no python to cache @eifinger (#762)

fix: use --clear to create venv @eifinger (#761)

🚀 Enhancements

feat: add venv-path input for activate-environment @eifinger (#746)

🧰 Maintenance

chore: update known checksums for 0.10.0 @github-actions[bot] (#759)

refactor: tilde-expansion tests as unittests and no self-hosted tests @eifinger (#760)

chore: update known checksums for 0.9.30 @github-actions[bot] (#756)

chore: update known checksums for 0.9.29 @github-actions[bot] (#748)

📚 Documentation

Fix punctuation @pm-dev563 (#747)

⬆️ Dependency updates

Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 @dependabot[bot] (#753)

Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 @dependabot[bot] (#751)

Bump actions/checkout from 6.0.1 to 6.0.2 @dependabot[bot] (#740)

Bump release-drafter/release-drafter from 6.1.0 to 6.2.0 @dependabot[bot] (#743)

Bump eifinger/actionlint-action from 1.9.3 to 1.10.0 @dependabot[bot] (#731)

Bump actions/setup-node from 6.1.0 to 6.2.0 @dependabot[bot] (#738)

Commits

eac588a Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 (#753)
a97c6cb Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#751)
02182fa fix: warn instead of error when no python to cache (#762)
a3b3eae chore: update known checksums for 0.10.0 (#759)
78cebec fix: use --clear to create venv (#761)
b6b8e2c refactor: tilde-expansion tests as unittests and no self-hosted tests (#760)
e31bec8 chore: update known checksums for 0.9.30 (#756)
db2b65e Bump actions/checkout from 6.0.1 to 6.0.2 (#740)
3511ff7 feat: add venv-path input for activate-environment (#746)
99b0f04 Fix punctuation (#747)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/login-action](https://github.com/docker/login-action) | `3.6.0` | `3.7.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `3.1.0` | `3.2.0` | | [actions-hub/kubectl](https://github.com/actions-hub/kubectl) | `1.35.0` | `1.35.1` | | [actions/cache](https://github.com/actions/cache) | `5.0.2` | `5.0.3` | | [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5.5.3` | `6.1.1` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `7.2.0` | `7.3.0` | Updates `docker/login-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@5e57cd1...c94ce9f) Updates `actions/attest-build-provenance` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@00014ed...96278af) Updates `actions-hub/kubectl` from 1.35.0 to 1.35.1 - [Release notes](https://github.com/actions-hub/kubectl/releases) - [Commits](actions-hub/kubectl@f6d776b...3ece379) Updates `actions/cache` from 5.0.2 to 5.0.3 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@8b402f5...cdf6c1f) Updates `amannn/action-semantic-pull-request` from 5.5.3 to 6.1.1 - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](amannn/action-semantic-pull-request@0723387...48f2562) Updates `astral-sh/setup-uv` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@61cb8a9...eac588a) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions-hub/kubectl dependency-version: 1.35.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/cache dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: amannn/action-semantic-pull-request dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 15, 2026

Xe merged commit 6102697 into main Feb 15, 2026
26 checks passed

dependabot Bot deleted the dependabot/github_actions/github-actions-b6ea32c090 branch February 15, 2026 15:32

BrewTestBot mentioned this pull request Feb 18, 2026

anubis 1.25.0 Homebrew/homebrew-core#268188

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the github-actions group across 1 directory with 6 updates#1453

build(deps): bump the github-actions group across 1 directory with 6 updates#1453
Xe merged 1 commit intomainfrom
dependabot/github_actions/github-actions-b6ea32c090

dependabot Bot commented on behalf of github Feb 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Feb 15, 2026

v3.7.0

v3.2.0

What's Changed

v5.0.3

What's Changed

Releases

How to prepare a release

Changelog

5.0.3

5.0.2

5.0.1

5.0.0

4.3.0

v6.1.1

6.1.1 (2025-08-22)

Bug Fixes

v6.1.0

6.1.0 (2025-08-19)

Features

Bug Fixes

v6.0.1

6.0.1 (2025-08-13)

Bug Fixes

v6.0.0

6.0.0 (2025-08-13)

⚠ BREAKING CHANGES

Features

Changelog

6.1.1 (2025-08-22)

Bug Fixes

6.1.0 (2025-08-19)

Features

Bug Fixes

6.0.1 (2025-08-13)

Bug Fixes

6.0.0 (2025-08-13)

⚠ BREAKING CHANGES

Features

5.5.3 (2024-06-28)

Bug Fixes

5.5.2 (2024-04-24)

Bug Fixes

5.5.1 (2024-04-24)

v7.3.0 🌈 New features and bug fixes for activate-environment

Changes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant