build(deps): bump the github-actions group across 1 directory with 4 updates by dependabot[bot] · Pull Request #8 · synkube/charts

dependabot · 2026-05-01T17:32:54Z

Bumps the github-actions group with 4 updates in the / directory: github/codeql-action, tj-actions/changed-files, azure/setup-kubectl and docker/login-action.

Updates github/codeql-action from 4.35.2 to 4.35.3

Release notes

Sourced from github/codeql-action's releases.

v4.35.3

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837

Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850

Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853

Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852

Update default CodeQL bundle version to 2.25.3. #3865

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.35.3 - 01 May 2026

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837

Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850

Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853

Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852

Update default CodeQL bundle version to 2.25.3. #3865

4.35.2 - 15 Apr 2026

The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795

The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789

Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794

Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807

Update default CodeQL bundle version to 2.25.2. #3823

4.35.1 - 27 Mar 2026

Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

4.35.0 - 27 Mar 2026

Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767

Update default CodeQL bundle version to 2.25.1. #3773

4.34.1 - 20 Mar 2026

Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

4.34.0 - 20 Mar 2026

Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569

We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584

Update default CodeQL bundle version to 2.25.0. #3585

4.33.0 - 16 Mar 2026

Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

To opt out of this change:

Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

... (truncated)

Commits

e46ed2c Merge pull request #3867 from github/update-v4.35.3-8c6e48dbe
b73d1d1 Add changelog entry for #3853
24e0bb0 Reorder changelog entries
ec298da Update changelog for v4.35.3
8c6e48d Merge pull request #3865 from github/update-bundle/codeql-bundle-v2.25.3
7190983 Add changelog note
2bb2095 Update default bundle to codeql-bundle-v2.25.3
7851e55 Merge pull request #3850 from github/mbg/private-registry/cloudsmith-gcp
262a15f Add generic non-printable chars test for OIDC configs
a6109b1 Merge pull request #3853 from github/mbg/start-proxy/improved-checks
Additional commits viewable in compare view

Updates tj-actions/changed-files from 47.0.5 to 47.0.6

Release notes

Sourced from tj-actions/changed-files's releases.

v47.0.6

What's Changed

Upgraded to v47.0.5 by @github-actions[bot] in tj-actions/changed-files#2816

Updated README.md by @github-actions[bot] in tj-actions/changed-files#2817

chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in tj-actions/changed-files#2818

chore(deps-dev): bump @types/node from 25.3.3 to 25.3.5 by @dependabot[bot] in tj-actions/changed-files#2820

chore(deps): bump github/codeql-action from 4.32.5 to 4.32.6 by @dependabot[bot] in tj-actions/changed-files#2819

chore(deps-dev): bump @types/node from 25.3.5 to 25.5.0 by @dependabot[bot] in tj-actions/changed-files#2825

chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in tj-actions/changed-files#2824

chore(deps): bump github/codeql-action from 4.32.6 to 4.35.1 by @dependabot[bot] in tj-actions/changed-files#2834

chore(deps-dev): bump eslint-plugin-jest from 29.15.0 to 29.15.1 by @dependabot[bot] in tj-actions/changed-files#2831

chore(deps): bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in tj-actions/changed-files#2830

chore(deps): bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 by @dependabot[bot] in tj-actions/changed-files#2829

chore(deps-dev): bump jest from 30.2.0 to 30.3.0 by @dependabot[bot] in tj-actions/changed-files#2822

chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in tj-actions/changed-files#2849

chore(deps-dev): bump prettier from 3.8.1 to 3.8.3 by @dependabot[bot] in tj-actions/changed-files#2848

chore(deps-dev): bump @types/node from 25.5.0 to 25.6.0 by @dependabot[bot] in tj-actions/changed-files#2846

chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in tj-actions/changed-files#2844

chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in tj-actions/changed-files#2843

chore(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in tj-actions/changed-files#2837

Full Changelog: tj-actions/changed-files@v47.0.5...v47.0.6

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

47.0.6 - (2026-04-18)

🔄 Update

Updated README.md (#2817)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (c23d52b) - (github-actions[bot])

⚙️ Miscellaneous Tasks

deps: Bump lodash from 4.17.23 to 4.18.1 (#2837) (9426d40) - (dependabot[bot])

deps: Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#2843) (32de080) - (dependabot[bot])

deps: Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2844) (2487d12) - (dependabot[bot])

deps-dev: Bump @types/node from 25.5.0 to 25.6.0 (#2846) (cef85a3) - (dependabot[bot])

deps-dev: Bump prettier from 3.8.1 to 3.8.3 (#2848) (7b082de) - (dependabot[bot])

deps: Bump github/codeql-action from 4.35.1 to 4.35.2 (#2849) (07224ca) - (dependabot[bot])

deps-dev: Bump jest from 30.2.0 to 30.3.0 (#2822) (2bb1357) - (dependabot[bot])

deps: Bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 (#2829) (cc98117) - (dependabot[bot])

deps: Bump yaml from 2.8.2 to 2.8.3 (#2830) (786e421) - (dependabot[bot])

deps-dev: Bump eslint-plugin-jest from 29.15.0 to 29.15.1 (#2831) (726b41b) - (dependabot[bot])

deps: Bump github/codeql-action from 4.32.6 to 4.35.1 (#2834) (2c3585e) - (dependabot[bot])

deps: Bump actions/download-artifact from 8.0.0 to 8.0.1 (#2824) (3d37a7f) - (dependabot[bot])

deps-dev: Bump @types/node from 25.3.5 to 25.5.0 (#2825) (445b0eb) - (dependabot[bot])

deps: Bump github/codeql-action from 4.32.5 to 4.32.6 (#2819) (4f892cd) - (dependabot[bot])

deps-dev: Bump @types/node from 25.3.3 to 25.3.5 (#2820) (6118651) - (dependabot[bot])

deps: Bump actions/setup-node from 6.2.0 to 6.3.0 (#2818) (e517d7a) - (dependabot[bot])

⬆️ Upgrades

Upgraded to v47.0.5 (#2816)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (4750530) - (github-actions[bot])

47.0.5 - (2026-03-03)

🔄 Update

Updated README.md (#2805)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> (35dace0) - (github-actions[bot])

Updated README.md (#2803)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (9ee99eb) - (github-actions[bot])

⚙️ Miscellaneous Tasks

... (truncated)

Commits

9426d40 chore(deps): bump lodash from 4.17.23 to 4.18.1 (#2837)
32de080 chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#2843)
2487d12 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2844)
cef85a3 chore(deps-dev): bump @types/node from 25.5.0 to 25.6.0 (#2846)
7b082de chore(deps-dev): bump prettier from 3.8.1 to 3.8.3 (#2848)
07224ca chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#2849)
2bb1357 chore(deps-dev): bump jest from 30.2.0 to 30.3.0 (#2822)
cc98117 chore(deps): bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 (#2829)
786e421 chore(deps): bump yaml from 2.8.2 to 2.8.3 (#2830)
726b41b chore(deps-dev): bump eslint-plugin-jest from 29.15.0 to 29.15.1 (#2831)
Additional commits viewable in compare view

Updates azure/setup-kubectl from 4.0.1 to 5.1.0

Release notes

Sourced from azure/setup-kubectl's releases.

v5.1.0

Changed

#243 Migrate to ESM with esbuild and vitest

Replaced @vercel/ncc with esbuild for ESM bundling

Replaced jest/ts-jest with vitest for testing

Upgraded @actions/core to ^3.0.0, @actions/exec to ^3.0.0, @actions/tool-cache to ^4.0.0

Updated tsconfig.json to NodeNext module resolution

Add npm run build step to CI unit-tests workflow

Security

#242 Bump picomatch

#244 Bump handlebars from 4.7.8 to 4.7.9

#247 Bump vite from 8.0.3 to 8.0.5

#245 Bump github/codeql-action in CI workflows

v5.0.0

Changed

#233 Update Node.js runtime from node20 to node24

#228 Replace cdn.dl.k8s.io with dl.k8s.io

#219 Remove download redirects, use cdn.dl.k8s.io domain

#190 Update stableVersionUrl to dl.k8s.io

#235 Bump undici from 6.23.0 to 6.24.1

#226 Bump undici and @actions/http-client

#230 Bump minimatch

Added

#172 Enhance version handling: auto-resolve kubectl major.minor to latest patch

#171 Add husky precommit check

Changelog

Sourced from azure/setup-kubectl's changelog.

Changelog

[5.1.0] - 2026-04-11

Changed

#243 Migrate to ESM with esbuild and vitest

Replaced @vercel/ncc with esbuild for ESM bundling

Replaced jest/ts-jest with vitest for testing

Upgraded @actions/core to ^3.0.0, @actions/exec to ^3.0.0, @actions/tool-cache to ^4.0.0

Updated tsconfig.json to NodeNext module resolution

Add npm run build step to CI unit-tests workflow

Security

#242 Bump picomatch

#244 Bump handlebars from 4.7.8 to 4.7.9

#247 Bump vite from 8.0.3 to 8.0.5

#245 Bump github/codeql-action in CI workflows

[5.0.0] - 2026-03-25

Changed

#233 Update Node.js runtime from node20 to node24

#228 Replace cdn.dl.k8s.io with dl.k8s.io

#219 Remove download redirects, use cdn.dl.k8s.io domain

#190 Update stableVersionUrl to dl.k8s.io

#235 Bump undici from 6.23.0 to 6.24.1

#226 Bump undici and @actions/http-client

#230 Bump minimatch

Added

#172 Enhance version handling: auto-resolve kubectl major.minor to latest patch

#171 Add husky precommit check

[4.0.1] - 2025-06-17

Remove erronious 'v' prefix on previous changelog for v4.0.0 that led to "vv4.0.0" tag issue

Dependabot fixes

[4.0.0] - 2024-01-30

Changed

#90 Migrate to node 20 as node 16 is deprecated

Commits

8293235 build
6522dcd release: prepare v5.1.0 (#249)
06b670f Bump vite from 8.0.3 to 8.0.5 (#247)
5f8d819 Migrate to ESM with esbuild and vitest (#243)
08845d9 Bump github/codeql-action in /.github/workflows in the actions group (#245)
f59556b Bump handlebars from 4.7.8 to 4.7.9 (#244)
50eb415 Bump picomatch (#242)
c8baf13 release: v5.0.0 — node24 upgrade and dependency updates (#240)
5934a11 Bump github/codeql-action in /.github/workflows in the actions group (#237)
06dc4a8 Bump undici from 6.23.0 to 6.24.1 (#235)
Additional commits viewable in compare view

Updates docker/login-action from 4.0.0 to 4.1.0

Release notes

Sourced from docker/login-action's releases.

v4.1.0

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in docker/login-action#945

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in docker/login-action#930

Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in docker/login-action#932 docker/login-action#936

Bump brace-expansion from 1.1.12 to 1.1.13 in docker/login-action#952

Bump fast-xml-parser from 5.3.4 to 5.3.6 in docker/login-action#942

Bump flatted from 3.3.3 to 3.4.2 in docker/login-action#944

Bump glob from 10.3.12 to 10.5.0 in docker/login-action#940

Bump handlebars from 4.7.8 to 4.7.9 in docker/login-action#949

Bump http-proxy-agent and https-proxy-agent to 8.0.0 in docker/login-action#937

Bump lodash from 4.17.23 to 4.18.1 in docker/login-action#958

Bump minimatch from 3.1.2 to 3.1.5 in docker/login-action#941

Bump picomatch from 4.0.3 to 4.0.4 in docker/login-action#948

Bump undici from 6.23.0 to 6.24.1 in docker/login-action#938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

Commits

4907a6d Merge pull request #930 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
1e233e6 chore: update generated content
6c24ead build(deps): bump the aws-sdk-dependencies group with 2 updates
ee034d7 Merge pull request #958 from docker/dependabot/npm_and_yarn/lodash-4.18.1
1527209 Merge pull request #937 from docker/dependabot/npm_and_yarn/proxy-agent-depen...
d39362a build(deps): bump lodash from 4.17.23 to 4.18.1
a6f092b chore: update generated content
60953f0 build(deps): bump the proxy-agent-dependencies group with 2 updates
62c6885 Merge pull request #936 from docker/dependabot/npm_and_yarn/docker/actions-to...
102c0e6 chore: update generated content
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the github-actions group with 4 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action), [tj-actions/changed-files](https://github.com/tj-actions/changed-files), [azure/setup-kubectl](https://github.com/azure/setup-kubectl) and [docker/login-action](https://github.com/docker/login-action). Updates `github/codeql-action` from 4.35.2 to 4.35.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@95e58e9...e46ed2c) Updates `tj-actions/changed-files` from 47.0.5 to 47.0.6 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@22103cc...9426d40) Updates `azure/setup-kubectl` from 4.0.1 to 5.1.0 - [Release notes](https://github.com/azure/setup-kubectl/releases) - [Changelog](https://github.com/Azure/setup-kubectl/blob/main/CHANGELOG.md) - [Commits](Azure/setup-kubectl@776406b...8293235) Updates `docker/login-action` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@b45d80f...4907a6d) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: tj-actions/changed-files dependency-version: 47.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: azure/setup-kubectl dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot assigned bsgrigorov May 1, 2026

dependabot Bot added dependencies workflows labels May 1, 2026

dependabot Bot requested a review from a team as a code owner May 1, 2026 17:32

dependabot Bot added dependencies workflows labels May 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the github-actions group across 1 directory with 4 updates#8

build(deps): bump the github-actions group across 1 directory with 4 updates#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-be89d36a45

dependabot Bot commented on behalf of github May 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 1, 2026

v4.35.3

CodeQL Action Changelog

[UNRELEASED]

4.35.3 - 01 May 2026

4.35.2 - 15 Apr 2026

4.35.1 - 27 Mar 2026

4.35.0 - 27 Mar 2026

4.34.1 - 20 Mar 2026

4.34.0 - 20 Mar 2026

4.33.0 - 16 Mar 2026

v47.0.6

What's Changed

Changelog

47.0.6 - (2026-04-18)

🔄 Update

⚙️ Miscellaneous Tasks

⬆️ Upgrades

47.0.5 - (2026-03-03)

🔄 Update

⚙️ Miscellaneous Tasks

v5.1.0

Changed

Security

v5.0.0

Changed

Added

Changelog

[5.1.0] - 2026-04-11

Changed

Security

[5.0.0] - 2026-03-25

Changed

Added

[4.0.1] - 2025-06-17

[4.0.0] - 2024-01-30

Changed

v4.1.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant