ci: bump the actions group across 1 directory with 7 updates by dependabot[bot] · Pull Request #66 · bounded-systems/mint

dependabot · 2026-10-14T01:23:33Z

Bumps the actions group with 7 updates in the / directory:

Package	From	To
bounded-systems/.github/.github/workflows/_auto-merge.yml	`a0330aea1a9fc899ff1002bf52d20ef8d9b2edad`	`1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c`
bounded-systems/.github/.github/workflows/_claim-sweep.yml	`14c1a9b3ade8bb6416f46c890eda21823647da09`	`1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c`
bounded-systems/ci-workflows/.github/workflows/osv-scan.yml	`0.1.4`	`0.1.5`
bounded-systems/.github/.github/actions/broker-gh-token	`99e88a0335519cb78be8a1b6623105613fa6aca1`	`1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c`
actions/setup-node	`7.0.0`	`7.1.0`
bounded-systems/.github/.github/workflows/_pr-claim.yml	`bc4cb7dada47cc59eed416372a4851201bd6f503`	`1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c`
bounded-systems/.github/.github/workflows/repo-standard.yml	`99e88a0335519cb78be8a1b6623105613fa6aca1`	`1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c`

Updates bounded-systems/.github/.github/workflows/_auto-merge.yml from a0330aea1a9fc899ff1002bf52d20ef8d9b2edad to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c

Commits

1716efd ci: adopt auto-merge, so a green PR here merges without waiting for a person ...
848335c CLAUDE.md: name scripts/ and its runner in the pre-push commands (#419)
5e180d1 conformance: name the rulesets a row's gate-absent should be attributed to (#...
6a70979 cold-hook-coverage: gate the SessionStart declarations against the cold path ...
bb2589a claim-ceremony: say WHICH 403 it was, so nobody re-derives the transport agai...
See full diff in compare view

Updates bounded-systems/.github/.github/workflows/_claim-sweep.yml from 14c1a9b3ade8bb6416f46c890eda21823647da09 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c

Commits

1716efd ci: adopt auto-merge, so a green PR here merges without waiting for a person ...
848335c CLAUDE.md: name scripts/ and its runner in the pre-push commands (#419)
5e180d1 conformance: name the rulesets a row's gate-absent should be attributed to (#...
6a70979 cold-hook-coverage: gate the SessionStart declarations against the cold path ...
bb2589a claim-ceremony: say WHICH 403 it was, so nobody re-derives the transport agai...
a0330ae _auto-merge: gated means a CI context is required — the claim alone is not a ...
2080f24 PRs open ready, not draft: retire the draft convention (#400)
8851780 conformance: the legacy armer is no longer org-managed, and no longer reporte...
d63837a selftest: the reference caller triggers on merge_group, and conformance measu...
eccc232 claim-ceremony: announce through the injecting proxy, and never send the sent...
Additional commits viewable in compare view

Updates bounded-systems/ci-workflows/.github/workflows/osv-scan.yml from 0.1.4 to 0.1.5

Commits

fb7ca62 ci: bump the actions group across 1 directory with 3 updates (#34)
See full diff in compare view

Updates bounded-systems/.github/.github/actions/broker-gh-token from 99e88a0335519cb78be8a1b6623105613fa6aca1 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c

Commits

1716efd ci: adopt auto-merge, so a green PR here merges without waiting for a person ...
848335c CLAUDE.md: name scripts/ and its runner in the pre-push commands (#419)
5e180d1 conformance: name the rulesets a row's gate-absent should be attributed to (#...
6a70979 cold-hook-coverage: gate the SessionStart declarations against the cold path ...
bb2589a claim-ceremony: say WHICH 403 it was, so nobody re-derives the transport agai...
a0330ae _auto-merge: gated means a CI context is required — the claim alone is not a ...
2080f24 PRs open ready, not draft: retire the draft convention (#400)
8851780 conformance: the legacy armer is no longer org-managed, and no longer reporte...
d63837a selftest: the reference caller triggers on merge_group, and conformance measu...
eccc232 claim-ceremony: announce through the injecting proxy, and never send the sent...
Additional commits viewable in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in actions/setup-node#1421

Support absolute paths in node-version-file by @v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in actions/setup-node#1578

docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in actions/setup-node#1593

Fixed cache recommendation syntax by @SubJunk in actions/setup-node#1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in actions/setup-node#1583

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-node#1584

Pin @types/node to v24 by @v-priyagupta108 in actions/setup-node#1585

Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in actions/setup-node#1599

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-node#1598

Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in actions/setup-node#1590

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-node#1610

Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in actions/setup-node#1602

Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in actions/setup-node#1629

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-node#1616

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-node#1615

Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in actions/setup-node#1631

Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in actions/setup-node#1636

Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in actions/setup-node#1638

Update dependencies and add license files by @v-HarithaVattikuti in actions/setup-node#1642

Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-node#1635

New Contributors

@v-jitenderpalsingh made their first contribution in actions/setup-node#1580

@philip-gai made their first contribution in actions/setup-node#1584

@gperdomor made their first contribution in actions/setup-node#1421

@SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
7207c4f chore: update dependencies and add license files (#1642)
54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
0c54c7b Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
a829419 Bump @types/semver from 7.7.1 to 7.8.0 (#1616)
680d1e4 Support absolute paths in node-version-file (#1633)
db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
Additional commits viewable in compare view

Updates bounded-systems/.github/.github/workflows/_pr-claim.yml from bc4cb7dada47cc59eed416372a4851201bd6f503 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c

Commits

1716efd ci: adopt auto-merge, so a green PR here merges without waiting for a person ...
848335c CLAUDE.md: name scripts/ and its runner in the pre-push commands (#419)
5e180d1 conformance: name the rulesets a row's gate-absent should be attributed to (#...
6a70979 cold-hook-coverage: gate the SessionStart declarations against the cold path ...
bb2589a claim-ceremony: say WHICH 403 it was, so nobody re-derives the transport agai...
a0330ae _auto-merge: gated means a CI context is required — the claim alone is not a ...
2080f24 PRs open ready, not draft: retire the draft convention (#400)
8851780 conformance: the legacy armer is no longer org-managed, and no longer reporte...
d63837a selftest: the reference caller triggers on merge_group, and conformance measu...
eccc232 claim-ceremony: announce through the injecting proxy, and never send the sent...
Additional commits viewable in compare view

Updates bounded-systems/.github/.github/workflows/repo-standard.yml from 99e88a0335519cb78be8a1b6623105613fa6aca1 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c

Commits

1716efd ci: adopt auto-merge, so a green PR here merges without waiting for a person ...
848335c CLAUDE.md: name scripts/ and its runner in the pre-push commands (#419)
5e180d1 conformance: name the rulesets a row's gate-absent should be attributed to (#...
6a70979 cold-hook-coverage: gate the SessionStart declarations against the cold path ...
bb2589a claim-ceremony: say WHICH 403 it was, so nobody re-derives the transport agai...
a0330ae _auto-merge: gated means a CI context is required — the claim alone is not a ...
2080f24 PRs open ready, not draft: retire the draft convention (#400)
8851780 conformance: the legacy armer is no longer org-managed, and no longer reporte...
d63837a selftest: the reference caller triggers on merge_group, and conformance measu...
eccc232 claim-ceremony: announce through the injecting proxy, and never send the sent...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [bounded-systems/.github/.github/workflows/_auto-merge.yml](https://github.com/bounded-systems/.github) | `a0330aea1a9fc899ff1002bf52d20ef8d9b2edad` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [bounded-systems/.github/.github/workflows/_claim-sweep.yml](https://github.com/bounded-systems/.github) | `14c1a9b3ade8bb6416f46c890eda21823647da09` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [bounded-systems/ci-workflows/.github/workflows/osv-scan.yml](https://github.com/bounded-systems/ci-workflows) | `0.1.4` | `0.1.5` | | [bounded-systems/.github/.github/actions/broker-gh-token](https://github.com/bounded-systems/.github) | `99e88a0335519cb78be8a1b6623105613fa6aca1` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [bounded-systems/.github/.github/workflows/_pr-claim.yml](https://github.com/bounded-systems/.github) | `bc4cb7dada47cc59eed416372a4851201bd6f503` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [bounded-systems/.github/.github/workflows/repo-standard.yml](https://github.com/bounded-systems/.github) | `99e88a0335519cb78be8a1b6623105613fa6aca1` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | Updates `bounded-systems/.github/.github/workflows/_auto-merge.yml` from a0330aea1a9fc899ff1002bf52d20ef8d9b2edad to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](bounded-systems/.github@a0330ae...1716efd) Updates `bounded-systems/.github/.github/workflows/_claim-sweep.yml` from 14c1a9b3ade8bb6416f46c890eda21823647da09 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](bounded-systems/.github@14c1a9b...1716efd) Updates `bounded-systems/ci-workflows/.github/workflows/osv-scan.yml` from 0.1.4 to 0.1.5 - [Commits](bounded-systems/ci-workflows@30978ba...fb7ca62) Updates `bounded-systems/.github/.github/actions/broker-gh-token` from 99e88a0335519cb78be8a1b6623105613fa6aca1 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](bounded-systems/.github@99e88a0...1716efd) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `bounded-systems/.github/.github/workflows/_pr-claim.yml` from bc4cb7dada47cc59eed416372a4851201bd6f503 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](bounded-systems/.github@bc4cb7d...1716efd) Updates `bounded-systems/.github/.github/workflows/repo-standard.yml` from 99e88a0335519cb78be8a1b6623105613fa6aca1 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](bounded-systems/.github@99e88a0...1716efd) --- updated-dependencies: - dependency-name: bounded-systems/.github/.github/workflows/_auto-merge.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: bounded-systems/.github/.github/workflows/_claim-sweep.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: bounded-systems/ci-workflows/.github/workflows/osv-scan.yml dependency-version: 0.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: bounded-systems/.github/.github/actions/broker-gh-token dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: bounded-systems/.github/.github/workflows/_pr-claim.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: bounded-systems/.github/.github/workflows/repo-standard.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 14, 2026

bounded-systems-front-desk Bot added this to Front Desk Oct 14, 2026

github-project-automation Bot moved this to Todo in Front Desk Oct 14, 2026

Navigation Menu

Repository navigation

ci: bump the actions group across 1 directory with 7 updates - #66

ci: bump the actions group across 1 directory with 7 updates#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-e988451772

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading