Skip to content

chore(deps): Bump the github-actions group across 1 directory with 5 updates - #797

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/develop/github-actions-7ee08dd23e
Closed

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/develop/github-actions-7ee08dd23e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 5 updates in the / directory:

Package From To
azure/login 2.3.0 3.1.0
actions/create-github-app-token 3.2.0 3.3.0
actions/upload-artifact 7.0.1 7.0.2
github/gh-aw-actions/setup 0.89.15 0.92.6
actions/download-artifact 8.0.1 8.0.2

Updates azure/login from 2.3.0 to 3.1.0

Release notes

Sourced from azure/login's releases.

Azure Login Action v3.1.0

What's Changed

New Contributors

Full Changelog: Azure/login@v3.0.2...v3.1.0

Azure Login Action v3.0.2

What's Changed

Security & hardening

  • Refactor PowerShell login to a static param()-bound script — eliminates string-interpolation in the AzPS login path so credential/config values can never be re-parsed as PowerShell (injection-safe by construction) by @​MaddyMicrosoft in Azure/login#607
  • Pin third-party GitHub Actions to commit SHAs — supply-chain hardening for the CI/release workflows by @​MaddyMicrosoft in Azure/login#615
  • Add admin-gated Release workflow — reproducible, approval-gated release + rollback pipeline by @​MaddyMicrosoft in Azure/login#610

Telemetry

  • Emit the real action ref in telemetry via GITHUB_ACTION_REF — corrects the previously stale hard-coded value so usage reports the version consumers actually pin by @​MaddyMicrosoft in Azure/login#614

Dependencies

Maintenance & docs

Full Changelog: Azure/login@v3.0.1...v3.1.0

Azure Login Action v3.0.1

What's Changed

Full Changelog: https://github.com/Azure/login/commits/v3.0.1

... (truncated)

Commits
  • a641126 prepare release v3.1.0
  • 3c5b5ce Add max-context-population input to override Azure PowerShell MaxCont… (#642)
  • fcd0340 Bump browserslist from 4.21.4 to 4.28.8 (#637)
  • 5a8018f Bump js-yaml from 3.14.2 to 3.15.2 (#643)
  • a23dddf ci: reduce scheduled test frequency and clarify workflow names (#639)
  • 4c016e0 docs: document immutable release model and correct branch reference (#640)
  • 63f3c38 Automate release tagging via deploy key + self-pin bump (#638)
  • 92a0b67 Add the ability to prevent the masking of clientId (#634)
  • 5cb857d Pin GitHub Actions to full-length commit SHAs (#636)
  • d90bae5 Cap @​actions/exec and @​actions/core below the ESM-only 3.x majors (#628)
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates github/gh-aw-actions/setup from 0.89.15 to 0.92.6

Release notes

Sourced from github/gh-aw-actions/setup's releases.

v0.92.4

Sync of actions from gh-aw at v0.92.4.

v0.92.3

Sync of actions from gh-aw at v0.92.3.

v0.92.2

Sync of actions from gh-aw at v0.92.2.

v0.92.1

Sync of actions from gh-aw at v0.92.1.

v0.92.0

Sync of actions from gh-aw at v0.92.0.

v0.91.14

Sync of actions from gh-aw at v0.91.14.

v0.91.13

Sync of actions from gh-aw at v0.91.13.

v0.91.12

Sync of actions from gh-aw at v0.91.12.

v0.91.11

Sync of actions from gh-aw at v0.91.11.

v0.91.10

Sync of actions from gh-aw at v0.91.10.

v0.91.9

Sync of actions from gh-aw at v0.91.9.

v0.91.8

Sync of actions from gh-aw at v0.91.8.

v0.91.7

Sync of actions from gh-aw at v0.91.7.

v0.91.6

Sync of actions from gh-aw at v0.91.6.

v0.91.5

Sync of actions from gh-aw at v0.91.5.

v0.91.4

Sync of actions from gh-aw at v0.91.4.

v0.91.2

Sync of actions from gh-aw at v0.91.2.

... (truncated)

Commits

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/develop/github-actions-7ee08dd23e branch from c5978a8 to 00a60cf Compare October 26, 2026 14:00
…updates

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [azure/login](https://github.com/azure/login) | `2.3.0` | `3.1.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) | `0.89.15` | `0.92.6` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |



Updates `azure/login` from 2.3.0 to 3.1.0
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@v2.3.0...a641126)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `github/gh-aw-actions/setup` from 0.89.15 to 0.92.6
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@045beb2...8b9c5e9)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: azure/login
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.91.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/develop/github-actions-7ee08dd23e branch from 00a60cf to 5c8705e Compare October 27, 2026 09:25
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 27, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/develop/github-actions-7ee08dd23e branch October 27, 2026 22:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants