ci(deps): bump the github-actions group across 1 directory with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates in the / directory: actions/checkout, epam/ai-dial-ci, dorny/test-reporter and actions/upload-artifact.

Updates actions/checkout from 6.0.3 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

• skip running unsafe pr check if input is default by @​aiqiaoy in actions/checkout#2518
• trim only ascii whitespace for branch by @​aiqiaoy in actions/checkout#2521
• escape values passed to --unset by @​aiqiaoy in actions/checkout#2530
• Various dependency updates

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

• [BREAKING] backport allow-unsafe-pr-checkout to v6 by @​aiqiaoy in actions/checkout#2500
• backport fixes to releases-v6 by @​aiqiaoy in actions/checkout#2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

• Skip running unsafe pr check if input is default by @​aiqiaoy in actions/checkout#2518
• Trim only ascii whitespace for branch by @​aiqiaoy in actions/checkout#2521
• Escape values passed to --unset by @​aiqiaoy in actions/checkout#2530
• Various dependency updates

v7.0.0

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Various dependency updates

v6.0.3

• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

... (truncated)

Commits

• 3d3c42e prep v7.0.1 release (#2531)
• 2880268 escape values passed to --unset (#2530)
• 12cd223 trim only ascii whitespace for branch (#2521)
• 62661c4 skip running unsafe pr check if input is default (#2518)
• e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
• 631c942 eslint 9 (#2474)
• 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
• ba09753 Bump actions/checkout from 6 to 7 (#2488)
• b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
• e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
• Additional commits viewable in compare view

Updates epam/ai-dial-ci from 4.7.2 to 4.11.0

Release notes

Sourced from epam/ai-dial-ci's releases.

4.11.0

[!tip] Additional ORT configuration changes are recommended with this release

1. Remove all resolutions from .ort.yml file
2. Get a fresh ORT scan report
3. Create new issue(s) in ai-dial-ort-config - one issue per package is advised
4. Ensure findings were addressed (e.g. curations were created and merged into main)
5. Repeat ORT scan, verify report is clear now
6. Create resolutions in .ort.yml file for findings that can't be fixed by curations

What's Changed

• feat: switch to forked ORT configuration repository by @​nepalevov in epam/ai-dial-ci#596
• ci(dependabot): enable auto-merge for Dependabot PRs by @​nepalevov in epam/ai-dial-ci#603
• ci(deps): bump docker/setup-buildx-action from 4.1.0 to 4.3.0 in /actions/build_docker by @​dependabot[bot] in epam/ai-dial-ci#590
• ci(deps): bump github/codeql-action/upload-sarif in / by @​dependabot[bot] in epam/ai-dial-ci#602
• ci(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 in /actions/build_docker by @​dependabot[bot] in epam/ai-dial-ci#541
• ci(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 in /actions/build_docker by @​dependabot[bot] in epam/ai-dial-ci#542
• ci(deps): bump actions/cache from 5.0.5 to 6.1.0 in /actions/python_prepare by @​dependabot[bot] in epam/ai-dial-ci#538
• ci(deps): bump marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5 by @​dependabot[bot] in epam/ai-dial-ci#549
• ci(deps): bump digital-blueprint/gitlab-pipeline-trigger-action from 1.4.0 to 1.4.3 by @​dependabot[bot] in epam/ai-dial-ci#571
• ci(deps): bump docker/login-action from 4.2.0 to 4.6.0 in /actions/build_docker by @​dependabot[bot] in epam/ai-dial-ci#570
• ci(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 in /actions/build_docker by @​dependabot[bot] in epam/ai-dial-ci#550
• ci(deps): bump actions/checkout in / by @​dependabot[bot] in epam/ai-dial-ci#597

Full Changelog: epam/ai-dial-ci@4.10.0...4.11.0

4.10.0

What's Changed

• feat!: add application-url parameter to test action trigger in deploy-review-command by @​daryapyskwork in epam/ai-dial-ci#583
• feat: Update ORT by @​nepalevov in epam/ai-dial-ci#586
• fix: pass default e2e branch name for review command by @​tataranovich in epam/ai-dial-ci#585

Full Changelog: epam/ai-dial-ci@4.9.0...4.10.0

4.9.0

What's Changed

• feat: update inputs for perf tests by @​daryapyskwork in epam/ai-dial-ci#578
• feat: use ADMIN_LOGIN/ADMIN_PASSWORD instead of users file for dial admin perf tests by @​daryapyskwork in epam/ai-dial-ci#579
• fix: switch default branch for E2E tests by @​tataranovich in epam/ai-dial-ci#584

Full Changelog: epam/ai-dial-ci@4.8.0...4.9.0

4.8.0

What's Changed

• feat: add devcontainer config for isolated development by @​tataranovich in epam/ai-dial-ci#539
• feat: uv package manager for python workflows by @​tataranovich in epam/ai-dial-ci#555

... (truncated)

Commits

• 3974fc6 ci(deps): bump actions/checkout in / (#597)
• 2647c7c ci(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 in /actions/build_d...
• 7c93bad ci(deps): bump docker/login-action from 4.2.0 to 4.6.0 in /actions/build_dock...
• ecf9291 ci(deps): bump digital-blueprint/gitlab-pipeline-trigger-action from 1.4.0 to...
• 12ae60f ci(deps): bump marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5 (#549)
• 1a24cf4 ci(dependabot): enable auto-merge for Dependabot PRs (#603)
• 6de420c ci(deps): bump actions/cache from 5.0.5 to 6.1.0 in /actions/python_prepare (...
• f2338a1 ci(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 in /actions/build...
• a1a9b7d ci(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 in /actions/build...
• 3fd40da ci(deps): bump github/codeql-action/upload-sarif in / (#602)
• Additional commits viewable in compare view

Updates dorny/test-reporter from 1 to 3

Release notes

Sourced from dorny/test-reporter's releases.

v3.0.0

Note: The v3 release requires NodeJS 24 runtime on GitHub Actions runners.

What's Changed

• Upgrade action runtime to Node.js 24 by @​dav-tb in dorny/test-reporter#738
• Explicitly use lowest permissions required to run workflow by @​jozefizso in dorny/test-reporter#745

Other Changes

• Bump @​typescript-eslint/parser from 8.57.0 to 8.57.1 by @​dependabot[bot] in dorny/test-reporter#742
• Bump @​types/adm-zip from 0.5.7 to 0.5.8 by @​dependabot[bot] in dorny/test-reporter#743
• Bump flatted from 3.4.1 to 3.4.2 by @​dependabot[bot] in dorny/test-reporter#744

New Contributors

• @​dav-tb made their first contribution in dorny/test-reporter#738

Full Changelog: dorny/test-reporter@v2.7.0...v3.0.0

v2.7.0

What's Changed

• Feature: Add slug-prefix output for link anchors dorny/test-reporter#731
• Feature: Report jest-junit testsuite errors as failures dorny/test-reporter#155
• Security: Update dependencies to fix reported security vulnerabilities

Other Changes

• Bump eslint from 9.39.3 to 9.39.4 by @​dependabot[bot] in dorny/test-reporter#732
• Bump @​typescript-eslint/parser from 8.56.1 to 8.57.0 by @​dependabot[bot] in dorny/test-reporter#733
• Bump jest from 30.2.0 to 30.3.0 by @​dependabot[bot] in dorny/test-reporter#734
• Bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in dorny/test-reporter#736
• Update flatted package to v3.4.1 to fix a vulnerability by @​jozefizso in dorny/test-reporter#739

New Contributors

• @​dt-thomas-durand made their first contribution in dorny/test-reporter#731
• @​johnbartholomew made their first contribution in dorny/test-reporter#155

Full Changelog: dorny/test-reporter@v2.6.0...v2.7.0

v2.6.0

We updated all dependency packages to latest versions to fix reported security vulnerabilities.

What's Changed

• Fix: For workflow_run events, resolve the commit of the check run from related pull request head commits first (matching workflow_run.head_branch, then first PR), and fall back to workflow_run.head_sha for non-PR runs dorny/test-reporter#673
• Change: The test-reporter action will listed all artifacts associated with the build run dorny/test-reporter#693
• Maintenance: Upgrade to ESLint v9 dorny/test-reporter#629

New Contributors

• @​azchohfi made their first contribution in dorny/test-reporter#673

Full Changelog: dorny/test-reporter@v2.5.0...v2.6.0

... (truncated)

Changelog

Sourced from dorny/test-reporter's changelog.

Changelog

3.1.0

• Feature: Add list-files input to control test report file listing dorny/test-reporter#773
• Feature: Add summary_file output with the path to the generated summary in Markdown format dorny/test-reporter#772

3.0.0

• Feature: Use NodeJS 24 LTS as default runtime dorny/test-reporter#738

2.7.0

• Feature: Add slug-prefix output for link anchors dorny/test-reporter#731
• Feature: Report jest-junit testsuite errors as failures dorny/test-reporter#155
• Security: Update dependencies to fix reported security vulnerabilities

2.6.0

• Fix: For workflow_run events, resolve the commit of the check run from related pull request head commits first (matching workflow_run.head_branch, then first PR), and fall back to workflow_run.head_sha for non-PR runs dorny/test-reporter#673
• Change: The test-reporter action will listed all artifacts associated with the build run dorny/test-reporter#693
• Maintenance: Upgrade to ESLint v9 dorny/test-reporter#629

2.5.0

• Feature: Add Nette Tester support with tester-junit reporter dorny/test-reporter#707
• Maintenance: Bump actions/upload-artifact from 5 to 6 dorny/test-reporter#695

2.4.0

• Feature: Add PHPUnit support with JUnit XML dialect parser dorny/test-reporter#422
• Feature: Add JUnit XML sample files and tests for validation dorny/test-reporter#701
• Fix: Refactor deprecated String.substr() function to use String.substring() dorny/test-reporter#704

2.3.0

• Feature: Add Python support with python-xunit reporter (pytest) dorny/test-reporter#643
• Feature: Add pytest traceback parsing and directory-mapping option dorny/test-reporter#238
• Performance: Update sax.js to fix large XML file parsing dorny/test-reporter#681
• Documentation: Complete documentation for all supported reporters dorny/test-reporter#691
• Security: Bump js-yaml and mocha in /reports/mocha (fixes prototype pollution) dorny/test-reporter#682

2.2.0

• Feature: Add collapsed option to control report summary visibility dorny/test-reporter#664
• Fix badge encoding for values including underscore and hyphens dorny/test-reporter#672
• Fix missing report-title attribute in action definition dorny/test-reporter#637
• Refactor variable names to fix shadowing issues dorny/test-reporter#630

2.1.1

• Fix error when a TestMethod element does not have a className attribute in a trx file dorny/test-reporter#623
• Add stack trace from trx to summary dorny/test-reporter#615
• List only failed tests dorny/test-reporter#606
• Add type definitions to github-utils.ts dorny/test-reporter#604
• Avoid split on undefined dorny/test-reporter#258
• Return links to summary report dorny/test-reporter#588
• Add step summary short summary dorny/test-reporter#589
• Fix for empty TRX TestDefinitions dorny/test-reporter#582

... (truncated)

Commits

• a43b3a5 test-reporter release v3.0.0
• 79216dc Merge pull request #744 from dorny/dependabot/npm_and_yarn/flatted-3.4.2
• 62c3873 Merge pull request #745 from dorny/feature/workflow_permissions
• bd74ca6 Explicitly use lowest permissions required to run workflow
• 0c2b2aa Merge pull request #738 from dav-tb/feature/node24-runtime
• f7eee30 Use the @types/node definitions for NodeJS 24 runtime
• ad0a96f Upgrade action runtime to Node.js 24
• 543415c Merge pull request #741 from dorny/release/v2.7.0
• f1284d0 Bump flatted from 3.4.1 to 3.4.2
• 3c1b53f Merge pull request #743 from dorny/dependabot/npm_and_yarn/types/adm-zip-0.5.8
• Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in actions/upload-artifact#754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in actions/upload-artifact#762
• Support direct file uploads by @​danwkennedy in actions/upload-artifact#764

New Contributors

• @​Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

• Upload Artifact Node 24 support by @​salmanmkc in actions/upload-artifact#719
• fix: update @​actions/artifact for Node.js 24 punycode deprecation by @​salmanmkc in actions/upload-artifact#744
• prepare release v6.0.0 for Node.js 24 support by @​salmanmkc in actions/upload-artifact#745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

• Update README.md by @​GhadimiR in actions/upload-artifact#681
• Update README.md by @​nebuk89 in actions/upload-artifact#712
• Readme: spell out the first use of GHES by @​danwkennedy in actions/upload-artifact#727
• Update GHES guidance to include reference to Node 20 version by @​patrikpolyak in actions/upload-artifact#725
• Bump @actions/artifact to v4.0.0
• Prepare v5.0.0 by @​danwkennedy in actions/upload-artifact#734

... (truncated)

Commits

• 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
• 634250c Include changes in typespec/ts-http-runtime 0.3.5
• e454baa Readme: bump all the example versions to v7 (#796)
• 74fad66 Update the readme with direct upload details (#795)
• bbbca2d Support direct file uploads (#764)
• 589182c Upgrade the module to ESM and bump dependencies (#762)
• 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
• 02a8460 Add proxy integration test
• b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
• e516bc8 docs: correct description of Node.js 24 support in README
• Additional commits viewable in compare view