Skip to content

chore(deps): bump the actions group across 1 directory with 7 updates#359

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-617dc30e8d
Open

chore(deps): bump the actions group across 1 directory with 7 updates#359
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-617dc30e8d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 7 updates in the / directory:

Package From To
actions/checkout 6 7
docker/setup-qemu-action 3.6.0 4.2.0
docker/setup-buildx-action 4.1.0 4.2.0
docker/build-push-action 7.2.0 7.3.0
aws-actions/configure-aws-credentials 6.2.0 6.2.2
aws-actions/amazon-ecr-login 2.1.5 2.1.6
astral-sh/setup-uv 7.6.0 8.3.2

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Commits

Updates docker/setup-qemu-action from 3.6.0 to 4.2.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

v4.1.0

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

v4.0.0

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

v3.7.0

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

Commits
  • 96fe6ef Merge pull request #315 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 31f08d3 [dependabot skip] chore: update generated content
  • 4e7017a build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 0eca235 Merge pull request #314 from crazy-max/fix-yarn-preapprove-actions-toolkit
  • ea66a41 chore: allow actions-toolkit to bypass yarn age gate
  • 451542b Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • 532ae00 [dependabot skip] chore: update generated content
  • b6f5af6 build(deps): bump undici from 6.26.0 to 6.27.0
  • cf96b86 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
  • f0ba643 [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

Commits
  • bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 321c814 [dependabot skip] chore: update generated content
  • b9a36ef build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • 5c7b8ae [dependabot skip] chore: update generated content
  • 037e618 build(deps): bump undici from 6.25.0 to 6.27.0
  • 66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
  • 409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
  • 2211273 [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.2.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

Commits
  • 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 154298c [dependabot skip] chore: update generated content
  • cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9c69730 [dependabot skip] chore: update generated content
  • bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
  • a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
  • 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
  • c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
  • d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.0 to 6.2.2

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)
Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

Bug Fixes

  • skip credential check on output-env-credentials: false (#1778) (58e7c47)
  • assumeRole failing from session tag size too large (#1808) (d6f5dc3)

6.1.3 (2026-05-28)

Bug Fixes

  • fix: allow kubelet token symlink in #1805

6.1.2 (2026-05-26)

Bug Fixes

6.1.1 (2026-05-05)

Miscellaneous Chores

... (truncated)

Commits
  • 517a711 chore(main): release 6.2.2 (#1876)
  • d01d678 chore: release 6.2.2
  • 8efa52b chore(deps-dev): bump vitest dependencies (#1874)
  • 8e1eed5 chore(deps-dev): bump @​smithy/property-provider from 4.4.4 to 4.4.6 (#1869)
  • 112421a chore(deps-dev): bump @​biomejs/biome from 2.5.1 to 2.5.2 (#1868)
  • fbc01c6 chore(deps-dev): bump @​types/node from 26.0.1 to 26.1.0 (#1871)
  • b12ca87 chore(deps-dev): bump memfs from 4.57.8 to 4.58.0 (#1873)
  • d314f7f chore: Update dist
  • a53b65b chore(deps): bump @​aws-sdk/client-sts from 3.1076.0 to 3.1080.0 (#1867)
  • 338d2c1 chore(deps-dev): bump sigstore from 4.1.0 to 4.1.1 (#1864)
  • Additional commits viewable in compare view

Updates aws-actions/amazon-ecr-login from 2.1.5 to 2.1.6

Release notes

Sourced from aws-actions/amazon-ecr-login's releases.

v2.1.6

See the changelog for details about the changes included in this release.

Changelog

Sourced from aws-actions/amazon-ecr-login's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.1.6 (2026-06-10)

Bug Fixes

  • use realpathSync for main module check (#955) (ba52b8c)

Dependency Updates

  • deps: bump @​aws-sdk/client-ecr from 3.1043.0 to 3.1045.0 (#1057) (b0e05b3)
  • deps: bump @​aws-sdk/client-ecr from 3.1045.0 to 3.1050.0 (#1071) (232323c)
  • deps: bump @​aws-sdk/client-ecr from 3.1050.0 to 3.1054.0 (#1087) (c7e6a40)
  • deps: bump @​aws-sdk/client-ecr from 3.1054.0 to 3.1061.0 (#1100) (c96b184)
  • deps: bump @​aws-sdk/client-ecr from 3.1061.0 to 3.1065.0 (#1114) (cf74b49)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1043.0 to 3.1045.0 (#1054) (8f1dd37)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1045.0 to 3.1050.0 (#1072) (8e32190)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1050.0 to 3.1054.0 (#1086) (5b9998f)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1054.0 to 3.1061.0 (#1101) (93ad116)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1061.0 to 3.1065.0 (#1112) (48e2e44)
  • deps: bump @​aws-sdk/credential-providers (#1055) (9a1166e)
  • deps: bump @​aws-sdk/credential-providers (#1074) (ab879f0)
  • deps: bump @​aws-sdk/credential-providers (#1085) (1a7efcf)
  • deps: bump @​aws-sdk/credential-providers (#1099) (040ce46)
  • deps: bump @​aws-sdk/credential-providers (#1115) (afa57de)
  • deps: bump https-proxy-agent from 9.0.0 to 9.1.0 (#1113) (52a2eef)

2.1.5 (2026-05-06)

Dependency Updates

  • bump @​aws-sdk/client-ecr from 3.1038.0 to 3.1043.0 (#1040)
  • bump @​aws-sdk/client-ecr-public from 3.1034.0 to 3.1043.0 (#1032, #1041)
  • bump @​aws-sdk/credential-providers (#1030, #1043)

2.1.4 (2026-04-22)

Dependency Updates

  • bump @​actions/core from 3.0.0 to 3.0.1 (#1015)
  • bump @​aws-sdk/client-ecr from 3.1030.0 to 3.1034.0 (#1017)
  • bump @​aws-sdk/client-ecr-public from 3.1026.0 to 3.1034.0 (#1016)
  • bump @​aws-sdk/credential-providers (#1014)

... (truncated)

Commits
  • d539f09 chore(release): 2.1.6
  • d27be98 chore: Update dist (#1123)
  • afa57de chore(deps): bump @​aws-sdk/credential-providers (#1115)
  • cf74b49 chore(deps): bump @​aws-sdk/client-ecr from 3.1061.0 to 3.1065.0 (#1114)
  • ed78a08 chore: Update dist (#1119)
  • 52a2eef chore(deps): bump https-proxy-agent from 9.0.0 to 9.1.0 (#1113)
  • 48e2e44 chore(deps): bump @​aws-sdk/client-ecr-public from 3.1061.0 to 3.1065.0 (#1112)
  • 9075999 chore(deps-dev): bump @​vercel/ncc from 0.38.4 to 0.44.0 (#1111)
  • 737404b chore: Update dist (#1109)
  • 93ad116 chore(deps): bump @​aws-sdk/client-ecr-public from 3.1054.0 to 3.1061.0 (#1101)
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 7.6.0 to 8.3.2

Release notes

Sourced from astral-sh/setup-uv's releases.

v8.2.0 🌈 New inputs quiet and download-from-astral-mirror

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details. In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token. All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

... (truncated)

Commits
  • 11f9893 chore: roll up Dependabot updates (#948)
  • f798556 docs: update version references to v8.3.1 (#946)
  • e80544d chore: update known checksums for 0.11.28 (#947)
  • f98e069 Change update-docs PR labels from 'update-docs' to 'documentation' (#945)
  • cd46263 chore: update known checksums for 0.11.27 (#944)
  • 11245c7 docs: update version references to v8.3.0 (#939)
  • d31148d Strip environment markers from detected uv dependency pins (#938)
  • 17c3989 Fix cache keys for Python version ranges (#937)
  • 3cc3c11 chore(deps): roll up Dependabot updates (#936)
  • 9225f84 chore(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0 (#924)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 6, 2026
@dependabot
dependabot Bot requested a review from nogueiraanderson as a code owner July 6, 2026 00:36
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-617dc30e8d branch 2 times, most recently from 1526fc5 to 1fb661e Compare July 14, 2026 15:35
---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: aws-actions/amazon-ecr-login
  dependency-version: 2.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-617dc30e8d branch from 1fb661e to d45599c Compare July 20, 2026 00:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants