Skip to content

chore(deps): bump the github-actions group across 1 directory with 11 updates - #5

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2e81e806e2
Closed

chore(deps): bump the github-actions group across 1 directory with 11 updates#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2e81e806e2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026

Copy link
Copy Markdown

Bumps the github-actions group with 11 updates in the / directory:

Package From To
actions/checkout 6.0.1 6.0.2
actions/setup-node 6.1.0 6.3.0
docker/setup-qemu-action 3.7.0 4.0.0
docker/setup-buildx-action 3.6.1 4.0.0
autofix-ci/action 1.3.2 1.3.3
docker/login-action 3.3.0 4.0.0
zizmorcore/zizmor-action 0.3.0 0.5.2
plbstl/first-contribution 4.1.0 4.2.0
xalvarez/prevent-file-change-action 1.9.1 3.0.0
actions/upload-artifact 4.4.3 7.0.0
actions/stale 10.1.1 10.2.0

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • See full diff in compare view

Updates actions/setup-node from 6.1.0 to 6.3.0

Release notes

Sourced from actions/setup-node's releases.

v6.3.0

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

v6.2.0

What's Changed

Documentation

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.2.0

Commits

Updates docker/setup-qemu-action from 3.7.0 to 4.0.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.0.0

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

Commits
  • ce36039 Merge pull request #245 from crazy-max/node24
  • 6386344 node 24 as default runtime
  • 1ea3db7 Merge pull request #243 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • b56a002 chore: update generated content
  • c43f02d build(deps): bump @​docker/actions-toolkit from 0.67.0 to 0.77.0
  • ce10c58 Merge pull request #244 from docker/dependabot/npm_and_yarn/actions/core-3.0.0
  • 429fc9d chore: update generated content
  • 060e5f8 build(deps): bump @​actions/core from 1.11.1 to 3.0.0
  • 44be13e Merge pull request #231 from docker/dependabot/npm_and_yarn/js-yaml-3.14.2
  • 1897438 chore: update generated content
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.6.1 to 4.0.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.0.0

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v3.12.0

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

v3.11.1

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

... (truncated)

Commits
  • 4d04d5d Merge pull request #485 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • cd74e05 chore: update generated content
  • eee38ec build(deps): bump @​docker/actions-toolkit from 0.77.0 to 0.79.0
  • 7a83f65 Merge pull request #484 from docker/dependabot/github_actions/docker/setup-qe...
  • a5aa967 Merge pull request #464 from crazy-max/rm-deprecated
  • e73d53f build(deps): bump docker/setup-qemu-action from 3 to 4
  • 28a438e Merge pull request #483 from crazy-max/node24
  • 034e9d3 chore: update generated content
  • b4664d8 remove deprecated inputs/outputs
  • a8257de node 24 as default runtime
  • Additional commits viewable in compare view

Updates autofix-ci/action from 1.3.2 to 1.3.3

Release notes

Sourced from autofix-ci/action's releases.

autofix-ci/action 1.3.3

What's Changed

  • Move Autofix API from .ci to .com TLD. This aims to improve overall reliability (#32). api.autofix.ci will remain available as an alias for the time being.

Full Changelog: autofix-ci/action@v1.3.2...v1.3.3

Commits
  • 7a166d7 move autofix api from api.autofix.ci to autofix-api.maximilianhils.com
  • See full diff in compare view

Updates docker/login-action from 3.3.0 to 4.0.0

Release notes

Sourced from docker/login-action's releases.

v4.0.0

Full Changelog: docker/login-action@v3.7.0...v4.0.0

v3.7.0

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Full Changelog: docker/login-action@v3.3.0...v3.4.0

Commits
  • b45d80f Merge pull request #929 from crazy-max/node24
  • 176cb9c node 24 as default runtime
  • cad8984 Merge pull request #920 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 92cbcb2 chore: update generated content
  • 5a2d6a7 build(deps): bump the aws-sdk-dependencies group with 2 updates
  • 44512b6 Merge pull request #928 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 28737a5 chore: update generated content
  • dac0793 build(deps): bump @​docker/actions-toolkit from 0.76.0 to 0.77.0
  • 62029f3 Merge pull request #919 from docker/dependabot/npm_and_yarn/actions/core-3.0.0
  • 08c8f06 chore: update generated content
  • Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.3.0 to 0.5.2

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.2

What's Changed

  • zizmor 1.23.1 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.1...v0.5.2

v0.5.1

What's Changed

  • zizmor 1.23.0 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.0...v0.5.1

v0.5.0

What's Changed

New Contributors

Full Changelog: zizmorcore/zizmor-action@v0.4.1...v0.5.0

v0.4.1

This version fixes an error in the 0.4.0 release that prevented non-relative use of the action.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

This new version of zizmor-action brings two major changes:

  • The new fail-on-no-inputs option can be used to control whether zizmor-action fails if no inputs were collected by zizmor. The default remains true, reflecting the pre-existing behavior.

  • The action's use of the official zizmor Docker images is now fully hash-checked internally, preventing accidental or malicious modification to the images. This also means that subsequent releases of zizmor will induce a release of this action, rather than the action always picking up the latest version by default.

What's Changed

... (truncated)

Commits
  • 71321a2 Sync zizmor versions (#96)
  • 5ed31db Bump pins (#95)
  • 195d10a Sync zizmor versions (#94)
  • c65bc88 chore(deps): bump github/codeql-action in the github-actions group (#93)
  • c2c887f chore(deps): bump zizmorcore/zizmor-action in the github-actions group (#91)
  • 5507ab0 Bump pins in README (#90)
  • 0dce257 chore(deps): bump peter-evans/create-pull-request (#88)
  • fb94974 Expose output-file as an output when advanced-security: true (#87)
  • 867562a chore(deps): bump the github-actions group with 2 updates (#85)
  • 7462f07 Bump pins in README (#84)
  • Additional commits viewable in compare view

Updates plbstl/first-contribution from 4.1.0 to 4.2.0

Release notes

Sourced from plbstl/first-contribution's releases.

v4.2.0

Internal Improvements

  • Updated NPM and GitHub Action dependencies to latest (including major bumps)
  • Switched bundler from rollup to rolldown
  • Recompiled dist with updated deps and tooling
  • Added additional debug logs to improve troubleshooting
  • Fixed test issues and improved coverage setup
  • Minor CI and lint configuration updates

Documentation

  • Cleaned up and simplified README
  • Improved descriptions in action.yml

Full Changelog: plbstl/first-contribution@v4.1.0...v4.2.0

Commits
  • 4fb1541 update package.json version from 4.1.0 to 4.2.0
  • eda0cad simplify resolve.alias in rolldown & vitest configs
  • d19a59d fix nodejs import error when in action runner
  • f1ecb1a remove $$ from README
  • 3459e04 add debug logs to is_first_time_contributor & was_the_first_contribution ...
  • 2c455c4 recompile dist
  • 4d753ed change bundler from rollup to rolldown
  • e62ccec release: add reminder to update commit SHA in README examples
  • 26f7b1d improve descriptions in action.yml
  • 04458bc simplify README
  • Additional commits viewable in compare view

Updates xalvarez/prevent-file-change-action from 1.9.1 to 3.0.0

Release notes

Sourced from xalvarez/prevent-file-change-action's releases.

v3.0.0 (2025-09-30)

What's Changed

BREAKING CHANGES

  • The action no longer works with Node.js versions other than v24.

Full Changelog: xalvarez/prevent-file-change-action@v2.0.0...v3.0.0

v2.0.0 (2025-02-25)

What's Changed

BREAKING CHANGES

Full Changelog: xalvarez/prevent-file-change-action@v1.9.1...v2.0.0

Commits
  • 8ba6c9f Prepare release 3.0.0 (#1236)
  • a03983b Upgrade Node.js to v24 (#1235)
  • 0d2a947 Bump the npm-dev-dependencies group across 1 directory with 3 updates
  • b6dc7fb Bump github/codeql-action from 3.30.4 to 3.30.5
  • 5f88df2 Bump actions/setup-node from 4.4.0 to 5.0.0 (#1219)
  • 17046de Bump github/codeql-action from 3.30.3 to 3.30.4
  • 108a2d7 Bump typescript-eslint in the npm-dev-dependencies group
  • 3a12df2 Bump the npm-dev-dependencies group with 3 updates
  • 79d1942 Bump the npm-dev-dependencies group with 3 updates
  • 011ba61 Bump @​types/node in the npm-dev-dependencies group
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4.4.3 to 7.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • Additional commits viewable in compare view

Updates actions/stale from 10.1.1 to 10.2.0

Release notes

Sourced from actions/stale's releases.

v10.2.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.2.0

Commits
  • b5d41d4 build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#1313)
  • dcd2b94 Fix punycode and url.parse Deprecation Warnings (#1312)
  • d6f8a33 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1304)

… updates

Bumps the github-actions group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.1.0` | `6.3.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.7.0` | `4.0.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.6.1` | `4.0.0` |
| [autofix-ci/action](https://github.com/autofix-ci/action) | `1.3.2` | `1.3.3` |
| [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `4.0.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.3.0` | `0.5.2` |
| [plbstl/first-contribution](https://github.com/plbstl/first-contribution) | `4.1.0` | `4.2.0` |
| [xalvarez/prevent-file-change-action](https://github.com/xalvarez/prevent-file-change-action) | `1.9.1` | `3.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.4.3` | `7.0.0` |
| [actions/stale](https://github.com/actions/stale) | `10.1.1` | `10.2.0` |



Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.1...de0fac2)

Updates `actions/setup-node` from 6.1.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6.1.0...53b8394)

Updates `docker/setup-qemu-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@c7c5346...ce36039)

Updates `docker/setup-buildx-action` from 3.6.1 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v3.6.1...4d04d5d)

Updates `autofix-ci/action` from 1.3.2 to 1.3.3
- [Release notes](https://github.com/autofix-ci/action/releases)
- [Commits](autofix-ci/action@635ffb0...7a166d7)

Updates `docker/login-action` from 3.3.0 to 4.0.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v3.3.0...b45d80f)

Updates `zizmorcore/zizmor-action` from 0.3.0 to 0.5.2
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@e639db9...71321a2)

Updates `plbstl/first-contribution` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/plbstl/first-contribution/releases)
- [Commits](plbstl/first-contribution@4b2b042...4fb1541)

Updates `xalvarez/prevent-file-change-action` from 1.9.1 to 3.0.0
- [Release notes](https://github.com/xalvarez/prevent-file-change-action/releases)
- [Commits](xalvarez/prevent-file-change-action@004d9f1...8ba6c9f)

Updates `actions/upload-artifact` from 4.4.3 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.4.3...bbbca2d)

Updates `actions/stale` from 10.1.1 to 10.2.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@9971854...b5d41d4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: autofix-ci/action
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: plbstl/first-contribution
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: xalvarez/prevent-file-change-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 30, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 30, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-2e81e806e2 branch March 30, 2026 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants