Skip to content

ci(deps): bump the devops group across 1 directory with 24 updates - #11392

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/devops-d49ebe55a0
Open

ci(deps): bump the devops group across 1 directory with 24 updates#11392
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/devops-d49ebe55a0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the devops group with 24 updates in the / directory:

Package From To
actions/checkout 6.0.2 7.0.1
actions/cache 5.0.5 6.1.0
lycheeverse/lychee-action 2.8.0 2.9.0
actions-rust-lang/setup-rust-toolchain 1.16.1 1.17.0
taiki-e/install-action 2.79.3 2.87.3
jayqi/failed-build-issue-action 1.2.0 1.3.0
dorny/paths-filter 4.0.1 4.0.3
actions/deploy-pages 5.0.0 5.0.1
re-actors/alls-green 1.2.2 1.3.0
anthropics/claude-code-action 1.0.142 1.0.213
codecov/codecov-action 6.0.1 7.0.0
actions/setup-node 6.4.0 7.0.0
EmbarkStudios/cargo-deny-action 2.0.18 2.1.1
hadolint/hadolint-action 3.3.0 3.5.0
docker/setup-buildx-action 4.0.0 4.3.0
docker/build-push-action 7.1.0 7.3.0
marocchino/sticky-pull-request-comment 3.0.4 3.0.5
docker/metadata-action 6.0.0 6.2.0
docker/login-action 4.1.0 4.6.0
actions/attest-build-provenance 4.1.0 4.2.2
anchore/sbom-action 0.24.0 0.24.2
docker/scout-action 1.21.0 1.24.0
rlespinasse/github-slug-action 5.6.0 5.7.1
zizmorcore/zizmor-action 0.5.6 0.6.3

Updates actions/checkout from 6.0.2 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/cache from 5.0.5 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Updates lycheeverse/lychee-action from 2.8.0 to 2.9.0

Release notes

Sourced from lycheeverse/lychee-action's releases.

v2.9.0

Summary

This release updates the default lychee version from v0.23.0 to v0.24.2.

The main reason for this release is compatibility with the new lychee 0.24.x release artifacts. Starting with lychee v0.24.0, the archive layout changed, and the lychee binary may now be packaged inside a subdirectory. lychee-action now detects that layout automatically, so users can upgrade without changing their workflows.

If you use:

uses: lycheeverse/lychee-action@v2

you will get the new version once the floating v2 tag has been updated. If you pin exact versions, update to:

uses: lycheeverse/lychee-action@v2.9.0

What’s new from lychee v0.24.x

Better diagnostics

lychee now reports line and column numbers for detected links. This makes broken link reports easier to act on, especially in larger documentation sites or generated reports.

Text fragment checking

lychee can now check URL text fragments, such as links containing #:~:text=.... This helps catch links that point to a valid page but no longer points to the intended highlighted text.

Sitemap support

lychee can now read sitemap.xml inputs. This is useful for checking published websites or generated documentation sites where the sitemap is the easiest source of URLs to validate.

JUnit output

lychee now supports JUnit output. This makes it easier to integrate link checking results with CI systems and test reporting tools that understand JUnit XML.

Redirect and remap visibility

lychee can now show redirects and remaps more clearly. This helps explain why a URL was checked as a different final URL and makes debugging link-checking behavior easier.

Multiple config files

lychee now supports multiple configuration files and expanded config handling. This is useful for repositories that split documentation, website, or package-specific link-checking settings.

Timeout handling

lychee can now accept timeouts explicitly. This gives users more control over how strict their link checks should be for flaky or slow endpoints.

Fixes and reliability improvements

... (truncated)

Commits

Updates actions-rust-lang/setup-rust-toolchain from 1.16.1 to 1.17.0

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v1.17.0

What's Changed

New Contributors

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.16.1...v1.17.0

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.17.0] - 2026-06-25

  • Add new parameter cache-targets that is propagated to Swatinem/rust-cache as cache-targets (#84). This allows disabling caching of the workspace target directory, e.g. when using sccache, while keeping the rest of the cache enabled.

[1.16.1] - 2026-05-08

  • Renamed internally used variable to avoid clashes with globally existing variables. This fixes the interference of the TOOLCHAIN variable as reported in #91.

[1.16.0] - 2026-04-13

  • Add new parameter cache-save-if that is propagated to Swatinem/rust-cache as save-if (#90 by @​ChanTsune)

[1.15.4] - 2026-03-15

  • Bump Swatinem/rust-cache from 2.8.2 to 2.9.1 (#87 by @​hyperfinitism) This gets rid of the warnings about Node.js 20.

[1.15.3] - 2026-03-01

  • Bump Swatinem/rust-cache from 2.8.1 to 2.8.2

[1.15.2] - 2025-10-04

  • Fix: Run the version detection steps in the selected rust-src-dir directory. This should enable the version selection even without a default toolchain installed. Fixes #74.

[1.15.1] - 2025-09-23

  • Update Swatinem/rust-cache to v2.8.1

[1.15.0] - 2025-09-14

  • Add support for non-root source directory. Accept source code and rust-toolchain.toml file in subdirectories of the repository. Adds a new parameter rust-src-dir that controls the lookup for toolchain files and sets a default value for the cache-workspace input. (#69 by @​Kubaryt)

[1.14.1] - 2025-08-28

... (truncated)

Commits
  • 166cdcf Update changelog to v1.17.0
  • 446e959 Merge pull request #97 from actions-rust-lang/dependabot/github_actions/actio...
  • 29eefe9 Merge pull request #96 from somaz94/feat/cache-targets
  • ed33c05 Bump actions/checkout from 6.0.3 to 7.0.0
  • 32bae04 feat: add cache-targets input propagated to Swatinem/rust-cache
  • 46a9d26 Merge pull request #95 from actions-rust-lang/dependabot/github_actions/actio...
  • 54531a0 Bump actions/checkout from 6.0.2 to 6.0.3
  • dc354b3 Merge pull request #94 from actions-rust-lang/dependabot/github_actions/actio...
  • cbb9413 Bump actions/checkout from 6 to 6.0.2
  • See full diff in compare view

Updates taiki-e/install-action from 2.79.3 to 2.87.3

Release notes

Sourced from taiki-e/install-action's releases.

2.87.3

  • Update zizmor@latest to 1.30.0.

  • Update ubi@latest to 0.12.0.

  • Update protoc-gen-connect-openapi@latest to 0.25.8.

  • Update mise@latest to 2026.8.16.

  • Update kingfisher@latest to 2.1.0.

  • Update dprint@latest to 0.57.0.

2.87.2

  • Update typos@latest to 1.50.0.

  • Update tombi@latest to 1.5.0.

  • Update shfmt@latest to 3.14.0.

2.87.1

  • Update uv@latest to 0.12.7.

  • Update typos@latest to 1.49.1.

  • Update syft@latest to 1.51.1.

  • Update prek@latest to 0.5.0.

  • Update d2@latest to 0.8.2.

  • Update cargo-zigbuild@latest to 0.23.3.

  • Update cargo-rdme@latest to 2.2.2.

  • Update biome@latest to 2.5.11.

2.87.0

  • Support kache. (#1980, thanks @​ChrisJr404)

  • Update vacuum@latest to 0.30.1.

  • Update uv@latest to 0.12.6.

  • Update mise@latest to 2026.8.14.

  • Update editorconfig-checker@latest to 3.11.2.

2.86.8

  • Update wasmtime@latest to 48.0.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.4] - 2026-09-02

  • Update uv@latest to 0.12.8.

  • Update protoc@latest to 3.36.1.

  • Update coreutils@latest to 0.11.0.

[2.87.3] - 2026-09-01

  • Update zizmor@latest to 1.30.0.

  • Update ubi@latest to 0.12.0.

  • Update protoc-gen-connect-openapi@latest to 0.25.8.

  • Update mise@latest to 2026.8.16.

  • Update kingfisher@latest to 2.1.0.

  • Update dprint@latest to 0.57.0.

[2.87.2] - 2026-08-30

  • Update typos@latest to 1.50.0.

  • Update tombi@latest to 1.5.0.

  • Update shfmt@latest to 3.14.0.

[2.87.1] - 2026-08-29

  • Update uv@latest to 0.12.7.

  • Update typos@latest to 1.49.1.

  • Update syft@latest to 1.51.1.

... (truncated)

Commits

Updates jayqi/failed-build-issue-action from 1.2.0 to 1.3.0

Release notes

Sourced from jayqi/failed-build-issue-action's releases.

v1.3.0

We've moved! This repository has transferred from jayqi/failed-build-issue-action to drivendataorg/failed-build-issue-action. Old references will continue to redirect but we recommend updating.

  • Changed action to use Node 24 runtime.
  • Changed the github-token input to default to ${{ github.token }}, the token GitHub Actions automatically provides to every job. Basic usage now needs no with: block at all. Passing github-token explicitly still works and is unchanged, and is still how you use a different account, such as a GitHub App or a personal access token.
  • Renamed the refname template variable to refName, matching the camelCase of the other template variables. refname still works but is deprecated and now logs a warning when a template uses it; it will be removed in a future major version.
  • Added a refUrl template variable holding a complete, percent-encoded URL to the branch or tag. The default body-template now uses it for the branch link. Prefer it over building a URL out of refName yourself: refName is display text, and for a pull request from a fork it is prefixed with the owner, e.g., contributor:feature/foo, which is not a valid URL path.
  • Added label-color and label-description inputs, which set the color and description of the label when the action creates it. Both have defaults, so a newly created label gets GitHub's failing-build red and a description naming this action as its source. Both only apply to newly created labels and not to existing labels.
  • Fixed refName naming the wrong branch for pull_request and workflow_run events, which had made the branch link 404 or point at the default branch rather than the branch that failed.
  • Fixed refName truncating branch and tag names containing slashes, so a branch like feature/foo no longer becomes foo with a broken link.
  • Fixed the default body-template hardcoding https://github.com, which generated links to the wrong host on GitHub Enterprise Server. It now uses {{serverUrl}}. Rendered output on github.com is unchanged.
  • Fixed title and body templates HTML-escaping rendered values, which corrupted issue titles and code spans in issue and comment bodies.
  • Fixed the search for an existing issue incorrectly matching pull requests. GitHub's REST API returns pull requests from the issues endpoint, so a pull request carrying the configured label could become the comment target and the action would never open a real issue. Pull requests are now skipped, and the action logs a warning naming any it finds with the label.
  • Fixed the action making an unnecessary API request to search for existing issues when always-create-new-issue is true.
  • Fixed the incorrect required: true on all inputs, changing to required: false. GitHub Actions did not enforce required for action inputs anyway, so this is a metadata fix and does not change behavior.
  • Fixed debug logging of errors printing {} instead of the error. Debug output now includes the error message, stack trace, and, when the failure wraps a GitHub API error, the underlying status and response.
Changelog

Sourced from jayqi/failed-build-issue-action's changelog.

Changelog

v1.3.0 (2026-08-23)

We've moved! This repository has transferred from jayqi/failed-build-issue-action to drivendataorg/failed-build-issue-action. Old references will continue to redirect but we recommend updating.

  • Changed action to use Node 24 runtime.
  • Changed the github-token input to default to ${{ github.token }}, the token GitHub Actions automatically provides to every job. Basic usage now needs no with: block at all. Passing github-token explicitly still works and is unchanged, and is still how you use a different account, such as a GitHub App or a personal access token.
  • Renamed the refname template variable to refName, matching the camelCase of the other template variables. refname still works but is deprecated and now logs a warning when a template uses it; it will be removed in a future major version.
  • Added a refUrl template variable holding a complete, percent-encoded URL to the branch or tag. The default body-template now uses it for the branch link. Prefer it over building a URL out of refName yourself: refName is display text, and for a pull request from a fork it is prefixed with the owner, e.g., contributor:feature/foo, which is not a valid URL path.
  • Added label-color and label-description inputs, which set the color and description of the label when the action creates it. Both have defaults, so a newly created label gets GitHub's failing-build red and a description naming this action as its source. Both only apply to newly created labels and not to existing labels.
  • Fixed refName naming the wrong branch for pull_request and workflow_run events, which had made the branch link 404 or point at the default branch rather than the branch that failed.
  • Fixed refName truncating branch and tag names containing slashes, so a branch like feature/foo no longer becomes foo with a broken link.
  • Fixed the default body-template hardcoding https://github.com, which generated links to the wrong host on GitHub Enterprise Server. It now uses {{serverUrl}}. Rendered output on github.com is unchanged.
  • Fixed title and body templates HTML-escaping rendered values, which corrupted issue titles and code spans in issue and comment bodies.
  • Fixed the search for an existing issue incorrectly matching pull requests. GitHub's REST API returns pull requests from the issues endpoint, so a pull request carrying the configured label could become the comment target and the action would never open a real issue. Pull requests are now skipped, and the action logs a warning naming any it finds with the label.
  • Fixed the action making an unnecessary API request to search for existing issues when always-create-new-issue is true.
  • Fixed the incorrect required: true on all inputs, changing to required: false. GitHub Actions did not enforce required for action inputs anyway, so this is a metadata fix and does not change behavior.
  • Fixed debug logging of errors printing {} instead of the error. Debug output now includes the error message, stack trace, and, when the failure wraps a GitHub API error, the underlying status and response.

v1.2.0 (2024-02-16)

v1.1.1 (2023-02-11)

v1.1.0 (2023-02-11)

  • Added tests.
  • Added more informative error if label does not exist and create-label is false.
  • Updated dependency versions.

v1.0.0 (2022-07-26)

Initial release. 🚀

Commits
  • 940568c Bump the dev-dependencies group across 1 directory with 2 updates (#182)
  • 503f3c2 Transfer from jayqi/failed-build-issue-action to drivendataorg/failed-build-i...
  • a566f41 Remove outdated development section (#181)
  • bcd1cf5 feat: set label color/description on creation; document comment-target semant...
  • 630f1e9 Add Zizmor audit and harden CI workflows (#180)
  • 10951a0 Fix debug error logging (#179)
  • 5126f13 Update integration test (#175)
  • cdebeb0 Changelog maintenance
  • d22929d Rename HISTORY to CHANGELOG
  • fc3d425 Upgrade jest (#173)
  • Additional commits viewable in compare view

Updates dorny/paths-filter from 4.0.1 to 4.0.3

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.3

What's Changed

Security

New Contributors

Full Changelog: dorny/paths-filter@v4...v4.0.3

v4.0.2

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v4.0.1...v4.0.2

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.3

v4.0.2

v4.0.1

v4.0.0

v3.0.4

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

... (truncated)

Commits
  • ceb8a2b Update CHANGELOG.md for v4.0.3 and v3.0.4 (#327)
  • ef09b88 Document safe handling of file list outputs in workflows (#326)
  • 44adc5b Merge commit from fork
  • 4711b7a feat: add 'some-with-excludes' predicate quantifier (#322)
  • 93c889f fix: escape multi-line filenames in list-files shell and csv output
  • b41dfa9 docs: add contents permission to PR example (#248)
  • 9af6e5a fix: scope base-ignored warning to API path (#319)
  • cae9006 docs: update outputs in readme to account for the 'every' predicate-quantifie...
  • 7b450ff docs: update changelog for v4.0.2 (#318)
  • 9280377 fix: work around git dubious ownership errors in container jobs (#317)
  • Additional commits viewable in compare view

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • 368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
  • 7e97763 Validate deployment polling intervals
  • 0143e11 Add backoff and jitter to deployment polling
  • 5e98f10 Merge pull request #440 from actions/user/adwitiya
  • ...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 4, 2026
@dependabot
ci(deps): bump the devops group across 1 directory with 24 updates
4752950 
Bumps the devops group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` |
| [actions/cache](https://github.com/actions/cache) | `5.0.5` | `6.1.0` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.8.0` | `2.9.0` |
| [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain) | `1.16.1` | `1.17.0` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.79.3` | `2.87.3` |
| [jayqi/failed-build-issue-action](https://github.com/jayqi/failed-build-issue-action) | `1.2.0` | `1.3.0` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1` | `4.0.3` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` |
| [re-actors/alls-green](https://github.com/re-actors/alls-green) | `1.2.2` | `1.3.0` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.142` | `1.0.213` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `6.0.1` | `7.0.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` |
| [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) | `2.0.18` | `2.1.1` |
| [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) | `3.3.0` | `3.5.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.3.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.3.0` |
| [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `3.0.4` | `3.0.5` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `6.0.0` | `6.2.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.6.0` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.0` | `4.2.2` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.24.0` | `0.24.2` |
| [docker/scout-action](https://github.com/docker/scout-action) | `1.21.0` | `1.24.0` |
| [rlespinasse/github-slug-action](https://github.com/rlespinasse/github-slug-action) | `5.6.0` | `5.7.1` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.6` | `0.6.3` |



Updates `actions/checkout` from 6.0.2 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.2...3d3c42e)

Updates `actions/cache` from 5.0.5 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@27d5ce7...55cc834)

Updates `lycheeverse/lychee-action` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@8646ba3...e747777)

Updates `actions-rust-lang/setup-rust-toolchain` from 1.16.1 to 1.17.0
- [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases)
- [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md)
- [Commits](actions-rust-lang/setup-rust-toolchain@v1.16.1...166cdcf)

Updates `taiki-e/install-action` from 2.79.3 to 2.87.3
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@65851e1...0758d23)

Updates `jayqi/failed-build-issue-action` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/jayqi/failed-build-issue-action/releases)
- [Changelog](https://github.com/drivendataorg/failed-build-issue-action/blob/main/CHANGELOG.md)
- [Commits](drivendataorg/failed-build-issue-action@1a893bb...940568c)

Updates `dorny/paths-filter` from 4.0.1 to 4.0.3
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@fbd0ab8...ceb8a2b)

Updates `actions/deploy-pages` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@cd2ce8f...368f825)

Updates `re-actors/alls-green` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/re-actors/alls-green/releases)
- [Commits](re-actors/alls-green@05ac938...b5b5b37)

Updates `anthropics/claude-code-action` from 1.0.142 to 1.0.213
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@11ba604...8251c10)

Updates `codecov/codecov-action` from 6.0.1 to 7.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@e79a696...fb8b358)

Updates `actions/setup-node` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@48b55a0...8207627)

Updates `EmbarkStudios/cargo-deny-action` from 2.0.18 to 2.1.1
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](EmbarkStudios/cargo-deny-action@6c8f9fa...3c63498)

Updates `hadolint/hadolint-action` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/hadolint/hadolint-action/releases)
- [Commits](hadolint/hadolint-action@2332a7b...06be81b)

Updates `docker/setup-buildx-action` from 4.0.0 to 4.3.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@4d04d5d...37fe631)

Updates `docker/build-push-action` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@bcafcac...53b7df9)

Updates `marocchino/sticky-pull-request-comment` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@0ea0beb...5770ad5)

Updates `docker/metadata-action` from 6.0.0 to 6.2.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@030e881...dc80280)

Updates `docker/login-action` from 4.1.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@4907a6d...dbcb813)

Updates `actions/attest-build-provenance` from 4.1.0 to 4.2.2
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@a2bbfa2...4d10147)

Updates `anchore/sbom-action` from 0.24.0 to 0.24.2
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@e22c389...3ad7283)

Updates `docker/scout-action` from 1.21.0 to 1.24.0
- [Release notes](https://github.com/docker/scout-action/releases)
- [Commits](docker/scout-action@cd72f26...7c6b6c3)

Updates `rlespinasse/github-slug-action` from 5.6.0 to 5.7.1
- [Release notes](https://github.com/rlespinasse/github-slug-action/releases)
- [Commits](rlespinasse/github-slug-action@e6f2616...0e32991)

Updates `zizmorcore/zizmor-action` from 0.5.6 to 0.6.3
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@5f14fd0...70fb788)

---
updated-dependencies:
- dependency-name: actions-rust-lang/setup-rust-toolchain
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: devops
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: devops
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: devops
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: devops
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: devops
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.213
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: devops
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: devops
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: docker/scout-action
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: devops
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: hadolint/hadolint-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: jayqi/failed-build-issue-action
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: devops
- dependency-name: re-actors/alls-green
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: rlespinasse/github-slug-action
  dependency-version: 5.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: devops
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/devops-d49ebe55a0 branch from f695767 to 4752950 Compare September 4, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants