Skip to content

ci(deps): bump the github-actions group across 1 directory with 3 updates - #516

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-ac7d6d3f5f
Closed

ci(deps): bump the github-actions group across 1 directory with 3 updates#516
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-ac7d6d3f5f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates in the / directory: zizmorcore/zizmor-action, astral-sh/setup-uv and release-drafter/release-drafter.

Updates zizmorcore/zizmor-action from 0.6.3 to 0.6.4

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.4

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: zizmorcore/zizmor-action#1301

Commits

Updates astral-sh/setup-uv from 10.0.1 to 10.2.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

... (truncated)

Commits

Updates release-drafter/release-drafter from 7.7.0 to 7.9.0

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.9.0

What's Changed

New

Dependency Updates

Bug Fixes

Maintenance

New Contributors

  • No new contributors

Full Changelog: release-drafter/release-drafter@v7.8.0...v7.9.0

v7.8.0

What's Changed

Token authentication change

The token action input now takes precedence over env.GITHUB_TOKEN and defaults to ${{ github.token }}. Pass a PAT or GitHub App token through with.token, especially when publishing releases that should trigger downstream workflows:

with:
  token: ${{ secrets.PAT }}
  publish: true

New

... (truncated)

Commits
  • 72967cd chore: release v7.9.0 (#1790)
  • 43cd2a9 feat(autolabeler): sync configured pull request labels (#1787)
  • a99850f feat(autolabeler): support multiple labels, stop rules and fallback (#1785)
  • 26b7080 feat: expose PR labels in Drafter and Check PR outputs (#1782)
  • 58b89af feat: add resolved tag template variable (#1784)
  • 7aa25ba fix(config): provide standard loading for the programmatic API (#1783)
  • 1e80012 fix: skip the missing-baseline warning when from is set (#1789)
  • 57f4179 ci: dogfood Release Drafter and stage npm publishing (#1778)
  • 75620c0 ci(deps): update reviewdog/action-actionlint action to v1.77.0 (#1781)
  • fb48a58 ci: lint GitHub Actions workflows with actionlint (#1780)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
ci(deps): bump the github-actions group across 1 directory with 3 upd…
e2aeed3 
…ates

Bumps the github-actions group with 3 updates in the / directory: [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter).


Updates `zizmorcore/zizmor-action` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@70fb788...cc914d7)

Updates `astral-sh/setup-uv` from 10.0.1 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...c18668a)

Updates `release-drafter/release-drafter` from 7.7.0 to 7.9.0
- [Release notes](https://github.com/release-drafter/release-drafter/releases)
- [Commits](release-drafter/release-drafter@34d8067...72967cd)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: release-drafter/release-drafter
  dependency-version: 7.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code minor PRs that should result in a minor version bump (new small features) labels Oct 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-ac7d6d3f5f branch October 19, 2026 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code minor PRs that should result in a minor version bump (new small features)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants