Bump the github-actions group across 1 directory with 11 updates #2154

dependabot · 2025-08-19T06:43:59Z

Bumps the github-actions group with 11 updates in the / directory:

Package	From	To
actions/checkout	`4.2.2`	`5.0.0`
actions/setup-python	`5.4.0`	`5.6.0`
actions/setup-node	`4.2.0`	`4.4.0`
actions/upload-artifact	`4.6.1`	`4.6.2`
actions/download-artifact	`4.1.9`	`5.0.0`
docker/login-action	`3.3.0`	`3.5.0`
docker/build-push-action	`6.15.0`	`6.18.0`
softprops/action-gh-release	`2.2.1`	`2.3.2`
reviewdog/action-suggester	`1.20.0`	`1.21.0`
ossf/scorecard-action	`2.4.1`	`2.4.2`
github/codeql-action	`3.28.11`	`3.29.10`

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

Prepare v5.0.0 release by @salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

Prepare release v4.3.0 by @salmanmkc in actions/checkout#2237

New Contributors

@motss made their first contribution in actions/checkout#1971

@mouismail made their first contribution in actions/checkout#1977

@benwells made their first contribution in actions/checkout#2043

@nebuk89 made their first contribution in actions/checkout#2194

@salmanmkc made their first contribution in actions/checkout#2236

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

V4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707

v4.1.4

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692

Add dependabot config by @cory-miller in actions/checkout#1688

Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693

Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643

v4.1.3

... (truncated)

Commits

08c6903 Prepare v5.0.0 release (#2238)
9f26565 Update actions checkout to use node 24 (#2226)
08eba0b Prepare release v4.3.0 (#2237)
631c7dc Update package dependencies (#2236)
8edcb1b Update CODEOWNERS for actions (#2224)
09d2aca Update README.md (#2194)
85e6279 Adjust positioning of user email note and permissions heading (#2044)
009b9ae Documentation update - add recommended permissions to Readme (#2043)
cbb7224 Update README.md (#1977)
3b9b8c8 docs: update README.md (#1971)
See full diff in compare view

Updates actions/setup-python from 5.4.0 to 5.6.0

Release notes

Sourced from actions/setup-python's releases.

v5.6.0

What's Changed

Workflow updates related to Ubuntu 20.04 by @aparnajyothi-y in actions/setup-python#1065

Fix for Candidate Not Iterable Error by @aparnajyothi-y in actions/setup-python#1082

Upgrade semver and @types/semver by @dependabot in actions/setup-python#1091

Upgrade prettier from 2.8.8 to 3.5.3 by @dependabot in actions/setup-python#1046

Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in actions/setup-python#1081

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

What's Changed

Enhancements:

Support free threaded Python versions like '3.13t' by @colesbury in actions/setup-python#973

Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @action/cache from 4.0.0 to 4.0.3 by @priya-kinthali in actions/setup-python#1056

Add support for .tool-versions file in setup-python by @mahabaleshwars in actions/setup-python#1043

Bug fixes:

Fix architecture for pypy on Linux ARM64 by @mayeut in actions/setup-python#1011 This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in actions/setup-python#1016

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in actions/setup-python#1015

New Contributors

@colesbury made their first contribution in actions/setup-python#973

@mahabaleshwars made their first contribution in actions/setup-python#1043

Full Changelog: actions/setup-python@v5...v5.5.0

Commits

a26af69 Bump ts-jest from 29.1.2 to 29.3.2 (#1081)
30eafe9 Bump prettier from 2.8.8 to 3.5.3 (#1046)
5d95bc1 Bump semver and @types/semver (#1091)
6ed2c67 Fix for Candidate Not Iterable Error (#1082)
e348410 Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (#1065)
8d9ed9a Add e2e Testing for free threaded and Bump @action/cache from 4.0.0 to 4.0.3 ...
19e4675 Add support for .tool-versions file in setup-python (#1043)
6fd11e1 Bump @actions/glob from 0.4.0 to 0.5.0 (#1015)
9e62be8 Support free threaded Python versions like '3.13t' (#973)
6ca8e85 Bump @vercel/ncc from 0.38.1 to 0.38.3 (#1016)
Additional commits viewable in compare view

Updates actions/setup-node from 4.2.0 to 4.4.0

Release notes

Sourced from actions/setup-node's releases.

v4.4.0

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in actions/setup-node#98

Add support for indented eslint output by @fregante in actions/setup-node#1245

Enhancement:

Support private mirrors by @marco-ippolito in actions/setup-node#1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in actions/setup-node#1262

New Contributors

@FloEdelmann made their first contribution in actions/setup-node#98

@fregante made their first contribution in actions/setup-node#1245

@marco-ippolito made their first contribution in actions/setup-node#1240

Full Changelog: actions/setup-node@v4...v4.4.0

v4.3.0

What's Changed

Dependency updates

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in actions/setup-node#1200

Upgrade @action/cache from 4.0.0 to 4.0.2 by @gowridurgad in actions/setup-node#1251

Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in actions/setup-node#1203

Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot in actions/setup-node#1220

New Contributors

@gowridurgad made their first contribution in actions/setup-node#1251

Full Changelog: actions/setup-node@v4...v4.3.0

Commits

49933ea Bump @action/cache from 4.0.2 to 4.0.3 (#1262)
e3ce749 feat: support private mirrors (#1240)
40337cb Add support for indented eslint output (#1245)
1ccdddc Make eslint-compact matcher compatible with Stylelint (#98)
cdca736 Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#1220)
22c0e74 Bump @vercel/ncc from 0.38.1 to 0.38.3 (#1203)
a7c2d94 actions/cache upgrade (#1251)
8026329 Bump @actions/glob from 0.4.0 to 0.5.0 (#1200)
See full diff in compare view

Updates actions/upload-artifact from 4.6.1 to 4.6.2

Release notes

Sourced from actions/upload-artifact's releases.

v4.6.2

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in actions/upload-artifact#685

New Contributors

@salmanmkc made their first contribution in actions/upload-artifact#685

Full Changelog: actions/upload-artifact@v4...v4.6.2

Commits

ea165f8 Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release
0839620 Prepare for new release of actions/upload-artifact with new toolkit cache ver...
See full diff in compare view

Updates actions/download-artifact from 4.1.9 to 5.0.0

Release notes

Sourced from actions/download-artifact's releases.

v5.0.0

What's Changed

Update README.md by @nebuk89 in actions/download-artifact#407

BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in actions/download-artifact#416

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

By name: name: my-artifact → extracted to path/ (direct)

By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

By name: name: my-artifact → extracted to path/ (unchanged)

By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:

You download artifacts by name

You download multiple artifacts by ID

You already use merge-multiple: true as a workaround

⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):
- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist
# Files were in: dist/my-artifact/
Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):
</tr></table> 

... (truncated)

Commits

634f93c Merge pull request #416 from actions/single-artifact-id-download-path
b19ff43 refactor: resolve download path correctly in artifact download tests (mainly ...
e262cbe bundle dist
bff23f9 update docs
fff8c14 fix download path logic when downloading a single artifact by id
448e3f8 Merge pull request #407 from actions/nebuk89-patch-1
47225c4 Update README.md
d3f86a1 Merge pull request #404 from actions/robherley/v4.3.0
fc02353 prep for v4.3.0 release
7745437 Merge pull request #402 from actions/joshmgross/download-by-id-example
Additional commits viewable in compare view

Updates docker/login-action from 3.3.0 to 3.5.0

Release notes

Sourced from docker/login-action's releases.

v3.5.0

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in docker/login-action#874 docker/login-action#876

Bump @aws-sdk/client-ecr to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @aws-sdk/client-ecr-public to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in docker/login-action#870

Bump form-data from 2.5.1 to 2.5.5 in docker/login-action#875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Bump @actions/core from 1.10.1 to 1.11.1 in docker/login-action#791

Bump @aws-sdk/client-ecr to 3.766.0 in docker/login-action#789 docker/login-action#856

Bump @aws-sdk/client-ecr-public to 3.758.0 in docker/login-action#789 docker/login-action#856

Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in docker/login-action#801 docker/login-action#806 docker/login-action#858

Bump cross-spawn from 7.0.3 to 7.0.6 in docker/login-action#814

Bump https-proxy-agent from 7.0.5 to 7.0.6 in docker/login-action#823

Bump path-to-regexp from 6.2.2 to 6.3.0 in docker/login-action#777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

Commits

184bdaa Merge pull request #878 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
5c6bc94 chore: update generated content
caf4058 build(deps): bump the aws-sdk-dependencies group with 2 updates
ef38ec3 Merge pull request #860 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
d52e8ef chore: update generated content
9644ab7 build(deps): bump the aws-sdk-dependencies group with 2 updates
7abd1d5 Merge pull request #875 from docker/dependabot/npm_and_yarn/form-data-2.5.5
1a81202 Merge pull request #876 from crazy-max/aws-public-dual-stack
d1ab30d chore: update generated content
f25ff28 support dual-stack for aws public ecr
Additional commits viewable in compare view

Updates docker/build-push-action from 6.15.0 to 6.18.0

Release notes

Sourced from docker/build-push-action's releases.

v6.18.0

Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 in docker/build-push-action#1381

[!NOTE] Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

Bump @docker/actions-toolkit from 0.59.0 to 0.61.0 by @crazy-max in docker/build-push-action#1364

[!NOTE] Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

Handle no default attestations env var by @crazy-max in docker/build-push-action#1343

Only print secret keys in build summary output by @crazy-max in docker/build-push-action#1353

Bump @docker/actions-toolkit from 0.56.0 to 0.59.0 in docker/build-push-action#1352

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

Commits

2634353 Merge pull request #1381 from docker/dependabot/npm_and_yarn/docker/actions-t...
c0432d2 chore: update generated content
0bb1f27 set builder driver and endpoint attributes for dbc summary support
5f9dbf9 chore(deps): Bump @docker/actions-toolkit from 0.61.0 to 0.62.1
0788c44 Merge pull request #1375 from crazy-max/remove-gcr
aa179ca e2e: remove GCR
1dc7386 Merge pull request #1364 from crazy-max/history-export-cmd
9c9803f chore: update generated content
db1f6c4 DOCKER_BUILD_EXPORT_LEGACY env var to opt-in for legacy export
721e8c7 Bump @docker/actions-toolkit from 0.59.0 to 0.61.0
Additional commits viewable in compare view

Updates softprops/action-gh-release from 2.2.1 to 2.3.2

Release notes

Sourced from softprops/action-gh-release's releases.

v2.3.2

fix: revert fs readableWebStream change

v2.3.1

What's Changed

Bug fixes 🐛

fix: fix file closing issue by @WailGree in softprops/action-gh-release#629

New Contributors

@WailGree made their first contribution in softprops/action-gh-release#629

Full Changelog: softprops/action-gh-release@v2.3.0...v2.3.1

v2.3.0

Migrate from jest to vitest

Replace mime with mime-types

Bump to use node 24

Dependency updates

Full Changelog: softprops/action-gh-release@v2.2.2...v2.3.0

v2.2.2

What's Changed

Bug fixes 🐛

fix: updating release draft status from true to false by @galargh in softprops/action-gh-release#316

Other Changes 🔄

chore: simplify ref_type test by @steinybot in softprops/action-gh-release#598

fix(docs): clarify the default for tag_name by @muzimuzhi in softprops/action-gh-release#599

test(release): add unit tests when searching for a release by @rwaskiewicz in softprops/action-gh-release#603

dependency updates

New Contributors

@steinybot made their first contribution in softprops/action-gh-release#598

@muzimuzhi made their first contribution in softprops/action-gh-release#599

@galargh made their first contribution in softprops/action-gh-release#316

@rwaskiewicz made their first contribution in softprops/action-gh-release#603

Full Changelog: softprops/action-gh-release@v2.2.1...v2.2.2

Changelog

Sourced from softprops/action-gh-release's changelog.

2.3.2

fix: revert fs readableWebStream change

2.3.1

Bug fixes 🐛

fix: fix file closing issue by @WailGree in softprops/action-gh-release#629

2.3.0

Migrate from jest to vitest

Replace mime with mime-types

Bump to use node 24

Dependency updates

2.2.2

What's Changed

Bug fixes 🐛

fix: updating release draft status from true to false by @galargh in softprops/action-gh-release#316

Other Changes 🔄

chore: simplify ref_type test by @steinybot in softprops/action-gh-release#598

fix(docs): clarify the default for tag_name by @muzimuzhi in softprops/action-gh-release#599

test(release): add unit tests when searching for a release by @rwaskiewicz in softprops/action-gh-release#603

dependency updates

2.2.1

What's Changed

Bug fixes 🐛

fix: big file uploads by @xen0n in softprops/action-gh-release#562

Other Changes 🔄

chore(deps): bump @types/node from 22.10.1 to 22.10.2 by @dependabot in softprops/action-gh-release#559

chore(deps): bump @types/node from 22.10.2 to 22.10.5 by @dependabot in softprops/action-gh-release#569

chore: update error and warning messages for not matching files in files field by @ytimocin in softprops/action-gh-release#568

2.2.0

What's Changed

Exciting New Features 🎉

... (truncated)

Commits

72f2c25 release 2.3.2
552dc55 fix: revert fs:readableWebStream change (#632)
f3cad8b release 2.3.1
07a2257 fix: fix file closing issue (#629)
d5382d3 release 2.3.0
a0e2122 feat: migrate from jest to vitest (#626)
8836085 chore: replace mime with mime-types (#624)
8646335 chore: bump node to 20.19.2
46b2847 chore(deps): bump the npm group across 1 directory with 5 updates (#623)
37fd9d0 chore(deps): bump undici from 5.28.5 to 5.29.0 (#621)
Additional commits viewable in compare view

Updates reviewdog/action-suggester from 1.20.0 to 1.21.0

Release notes

Sourced from reviewdog/action-suggester's releases.

Release v1.21.0

What's Changed

chore(deps): update reviewdog/action-depup action to v1.6.4 by @renovate in reviewdog/action-suggester#72

chore(deps): update reviewdog/action-alex action to v1.15.3 by @renovate in reviewdog/action-suggester#71

chore(deps): update reviewdog/action-actionlint action to v1.65.2 by @renovate in reviewdog/action-suggester#73

chore(deps): update reviewdog/action-misspell action to v1.26.3 by @renovate in reviewdog/action-suggester#74

chore(deps): update dependency go to 1.24 by @renovate in reviewdog/action-suggester#68

chore(deps): update reviewdog/action-alex action to v1.15.4 by @renovate in reviewdog/action-suggester#75

chore(deps): update reviewdog/action-shellcheck action to v1.29.3 by @renovate in reviewdog/action-suggester#76

chore(deps): update reviewdog/reviewdog to 0.20.3 by @github-actions in reviewdog/action-suggester#66

Full Changelog: reviewdog/action-suggester@v1.20.2...v1.21.0

Release v1.20.2

What's Changed

Pin reviewdog install script version with commit SHA by @haya14busa in reviewdog/action-suggester#70

Full Changelog: reviewdog/action-suggester@v1.20.1...v1.20.2

Release v1.20.1

What's Changed

Pin GitHub Actions with commit SHA using pinact by @haya14busa in reviewdog/action-suggester#69

Full Changelog: reviewdog/action-suggester@v1.20.0...v1.20.1

Commits

4747dbc Merge pull request #66 from reviewdog/depup/reviewdog/reviewdog
970bd8f Merge pull request #76 from reviewdog/renovate/reviewdog-action-shellcheck-1.x
c0a8005 Merge pull request #75 from reviewdog/renovate/reviewdog-action-alex-1.x
a2a2035 Merge pull request #68 from reviewdog/renovate/go-1.x
6a88f4c Merge pull request #74 from reviewdog/renovate/reviewdog-action-misspell-1.x
2ddaa83 chore(deps): update reviewdog/action-shellcheck action to v1.29.3
5ff49f5 chore(deps): update reviewdog/action-alex action to v1.15.4
9ebb58c Merge pull request #73 from reviewdog/renovate/reviewdog-action-actionlint-1.x
1332ba6 chore(deps): update reviewdog/action-misspell action to v1.26.3
fe58c2a chore(deps): update reviewdog/action-actionlint action to v1.65.2
Additional commits viewable in compare view

Updates ossf/scorecard-action from 2.4.1 to 2.4.2

Release notes

Sourced from ossf/scorecard-action's releases.

v2.4.2

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

Commits

05b42c6 🌱 bump docker to ghcr v2.4.2 (#1548)
b225da6 Bump github.com/ossf/scorecard/v5 from v5.2.0 to v5.2.1 (#1550)
9399f6f 🌱 Bump the docker-images group across 1 directory with 2 updates (#1...
e1daa8c 🌱 Bump the github-actions group across 1 directory with 5 updates (#...
9fe6511 🌱 Bump golang.org/x/net from 0.39.0 to 0.40.0 (#1542)
25b9cd9 🌱 Bump github.com/ossf/scorecard/v5 from v5.1.1 to v5.2.0 (#1547)
18cc9b8 🌱 Bump golang.org/x/net from 0.38.0 to 0.39.0 (#1536)
db78142 🌱 Bump the github-actions group with 2 updates (#1538)
de386ed 🌱 Bump golang from 1.24.1 to 1.24.2 in the docker-images group (#1534)
5b7cedb 🌱 Bump github.com/sigstore/cosign/v2 from 2.4.3 to 2.5.0 (#1537)
Additional commits viewable in compare view

Updates github/codeql-action from 3.28.11 to 3.29.10

Release notes

Sourced from github/codeql-action's releases.

v3.29.10

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.8

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

Fix an issue where the Action would autodetect unsupported languages such as HTML.

Bumps the github-actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.4.0` | `5.6.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.2.0` | `4.4.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `4.6.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.9` | `5.0.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `3.5.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.15.0` | `6.18.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.2.1` | `2.3.2` | | [reviewdog/action-suggester](https://github.com/reviewdog/action-suggester) | `1.20.0` | `1.21.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.1` | `2.4.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.11` | `3.29.10` | Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...08c6903) Updates `actions/setup-python` from 5.4.0 to 5.6.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@4237552...a26af69) Updates `actions/setup-node` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@1d0ff46...49933ea) Updates `actions/upload-artifact` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@4cec3d8...ea165f8) Updates `actions/download-artifact` from 4.1.9 to 5.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@cc20338...634f93c) Updates `docker/login-action` from 3.3.0 to 3.5.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@9780b0c...184bdaa) Updates `docker/build-push-action` from 6.15.0 to 6.18.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@471d1dc...2634353) Updates `softprops/action-gh-release` from 2.2.1 to 2.3.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@c95fe14...72f2c25) Updates `reviewdog/action-suggester` from 1.20.0 to 1.21.0 - [Release notes](https://github.com/reviewdog/action-suggester/releases) - [Commits](reviewdog/action-suggester@a3026c6...4747dbc) Updates `ossf/scorecard-action` from 2.4.1 to 2.4.2 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@f49aabe...05b42c6) Updates `github/codeql-action` from 3.28.11 to 3.29.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@6bb031a...96f518a) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: reviewdog/action-suggester dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 3.29.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-08-19T19:21:08Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 19, 2025

dependabot bot closed this Aug 19, 2025

dependabot bot deleted the dependabot/github_actions/github-actions-60feeeca4d branch August 19, 2025 19:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the github-actions group across 1 directory with 11 updates #2154

Bump the github-actions group across 1 directory with 11 updates #2154

Uh oh!

dependabot bot commented on behalf of github Aug 19, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Aug 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the github-actions group across 1 directory with 11 updates #2154

Bump the github-actions group across 1 directory with 11 updates #2154

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.0

What's Changed

New Contributors

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v5.6.0

What's Changed

v5.5.0

What's Changed

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

v4.4.0

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

v4.3.0

What's Changed

Dependency updates

New Contributors

v4.6.2

What's Changed

New Contributors

v5.0.0

What's Changed

v5.0.0

🚨 Breaking Change

What Changed

Migration Guide

✅ No Action Needed If:

⚠️ Action Required If:

v3.5.0

v3.4.0

v6.18.0

v6.17.0

v6.16.0

v2.3.2

v2.3.1

What's Changed

Bug fixes 🐛

New Contributors

v2.3.0

v2.2.2

What's Changed

Bug fixes 🐛

Other Changes 🔄

New Contributors

2.3.2

2.3.1

Bug fixes 🐛

2.3.0

2.2.2

What's Changed

Bug fixes 🐛

Other Changes 🔄

2.2.1

What's Changed

Bug fixes 🐛

Other Changes 🔄

dependabot bot commented on behalf of github Aug 19, 2025 •

edited

Loading