Skip to content

Bump the actions group across 1 directory with 5 updates#16

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-361259f08a
Open

Bump the actions group across 1 directory with 5 updates#16
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-361259f08a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps the actions group with 5 updates in the / directory:

Package From To
generoi/github-actions 1 2
dawidd6/action-download-artifact 20 21
actions/upload-artifact 7.0.0 7.0.1
actions/setup-node 6.3.0 6.4.0
actions/create-github-app-token 2 3

Updates generoi/github-actions from 1 to 2

Commits
  • f0c0cf3 Expose pr_url from composer-update, add PR button to vuln chat alert
  • 0d146de Fix: from_entries requires {key, value} — version was being dropped
  • 0551329 Add raw lock structure debug
  • a109866 Add md5 debug to identify lock-file timing issue
  • 3258b58 Fix: snapshot composer.lock to tempfile before composer ops
  • 7297f6f Skip PR creation when composer.lock diff is metadata-only
  • facdae4 Add version-diff debug output
  • af004e6 Fix: use git show HEAD:composer.lock for pre-update state
  • e14ff42 Append version-change table to auto-update PR body
  • 679c30a Fix: remove template expression from shell comment
  • Additional commits viewable in compare view

Updates dawidd6/action-download-artifact from 20 to 21

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v21

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v20...v21

Commits
  • b6e2e70 node_modules: update (#405)
  • 1708cb3 Download artifacts in creation order (#398)
  • 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404)
  • 0414c42 build(deps): bump @​actions/core from 3.0.0 to 3.0.1 (#401)
  • c802aad build(deps): bump @​actions/github from 9.1.0 to 9.1.1 (#400)
  • ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402)
  • 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399)
  • 09d0677 build(deps): bump @​actions/github from 9.0.0 to 9.1.0 (#396)
  • See full diff in compare view

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • See full diff in compare view

Updates actions/setup-node from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

Commits

Updates actions/create-github-app-token from 2 to 3

Release notes

Sourced from actions/create-github-app-token's releases.

v3.0.0

3.0.0 (2026-03-14)

Bug Fixes

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
  • Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

v3.0.0-beta.6

3.0.0-beta.6 (2026-03-13)

Bug Fixes

  • deps: bump @​actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
  • deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
  • deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
  • deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

v3.0.0-beta.5

3.0.0-beta.5 (2026-03-13)

  • fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (d53a1cd)

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.

v3.0.0-beta.4

3.0.0-beta.4 (2026-03-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)
  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)
  • deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
  • deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)

... (truncated)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

Commits
  • bcd2ba4 chore(main): release 3.2.0 (#370)
  • f24bbd8 fix: validate private-key input (#376)
  • 363531b docs: capitalize Git as a proper noun in README (#374)
  • fd28011 docs: update procedure to configure Git (#287)
  • 85eb8dd feat: support full repository names in repositories input (#372)
  • c9aabb8 build(deps-dev): bump yaml from 2.8.3 to 2.8.4 in the development-dependencie...
  • e02e816 build(deps-dev): bump undici from 7.24.6 to 8.2.0 (#366)
  • 8d835bf build(deps-dev): bump esbuild from 0.27.4 to 0.28.0 in the development-depend...
  • 952a2a7 feat: add support for enterprise-level GitHub Apps (#263)
  • 43e5c34 fix(deps): bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependenc...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 30, 2026
Bumps the actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [generoi/github-actions](https://github.com/generoi/github-actions) | `1` | `2` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `20` | `21` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.3.0` | `6.4.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2` | `3` |



Updates `generoi/github-actions` from 1 to 2
- [Commits](v1...v2)

Updates `dawidd6/action-download-artifact` from 20 to 21
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@8305c0f...b6e2e70)

Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)

Updates `actions/create-github-app-token` from 2 to 3
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@v2...v3)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '21'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: generoi/github-actions
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-361259f08a branch from 3049451 to 0d2090c Compare May 14, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants