Skip to content

chore(deps): bump the actions group across 1 directory with 8 updates#73

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b2bf8479b7
Open

chore(deps): bump the actions group across 1 directory with 8 updates#73
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b2bf8479b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown

Bumps the actions group with 8 updates in the / directory:

Package From To
actions/checkout 6.0.2 7.0.0
docker/setup-buildx-action 4.0.0 4.1.0
docker/build-push-action 7.1.0 7.2.0
raven-actions/actionlint 2.1.2 2.2.0
zizmorcore/zizmor-action 0.5.3 0.5.7
actions/setup-node 6.0.0 6.4.0
EmbarkStudios/cargo-deny-action 2.0.17 2.0.20
release-plz/action 0.5.128 0.5.130

Updates actions/checkout from 6.0.2 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates docker/setup-buildx-action from 4.0.0 to 4.1.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.1.0

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

Commits
  • d7f5e7f Merge pull request #489 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 92bc5c9 chore: update generated content
  • da11e35 build(deps): bump @​docker/actions-toolkit from 0.79.0 to 0.90.0
  • f021e16 Merge pull request #492 from docker/dependabot/npm_and_yarn/undici-6.24.1
  • b5af94f chore: update generated content
  • 16ad977 build(deps): bump undici from 6.23.0 to 6.25.0
  • d7a12d7 Merge pull request #495 from docker/dependabot/npm_and_yarn/glob-10.5.0
  • 28ff27d build(deps): bump glob from 10.3.12 to 13.0.6
  • daf436b Merge pull request #496 from docker/dependabot/npm_and_yarn/fast-xml-parser-5...
  • 9725348 chore: update generated content
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.1.0 to 7.2.0

Release notes

Sourced from docker/build-push-action's releases.

v7.2.0

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

Commits
  • f9f3042 Merge pull request #1517 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 812d5fd chore: update generated content
  • b6f6693 chore(deps): Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0
  • c1c626e Merge pull request #1525 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
  • 51bb284 chore: update generated content
  • 5f7884d chore(deps): Bump @​actions/core from 3.0.0 to 3.0.1
  • e01deff Merge pull request #1521 from docker/dependabot/npm_and_yarn/fast-xml-parser-...
  • 3804d49 chore: update generated content
  • 71e8947 chore(deps): Bump fast-xml-parser from 5.5.7 to 5.8.0
  • 4925ad2 Merge pull request #1526 from docker/dependabot/npm_and_yarn/postcss-8.5.10
  • Additional commits viewable in compare view

Updates raven-actions/actionlint from 2.1.2 to 2.2.0

Release notes

Sourced from raven-actions/actionlint's releases.

v2.2.0

🔄️ What's Changed

🚀 Features

👥 Contributors

@​DariuszPorowski, @​dependabot[bot] and dependabot[bot]

See details of all code changes: raven-actions/actionlint@v2.1.2...v2.2.0 since previous release.

Commits
  • 3d39aea fix: update link format for Code of Conduct in CONTRIBUTING.md
  • 04e3273 ci: add dog-food regression test for pnpm/workspace repos (#68)
  • cfcda4a feat(ghes): fetch tool from configurable server (#22)
  • fed4b9b fix: optimize tool release fetching to reduce API calls and handle errors gra...
  • 65c4544 fix: update schema URL in action.yml and format table in SECURITY.md
  • 7cc9be5 ci(deps): bump the all group across 1 directory with 3 updates (#65)
  • 8761bcd build(deps): bump the all group with 2 updates (#62)
  • See full diff in compare view

Updates zizmorcore/zizmor-action from 0.5.3 to 0.5.7

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.7

1.26.1 is now available via the action 1.26.1 is now the default version of zizmor used by the action

v0.5.6

  • 1.25.2 is now available via the action
  • 1.25.2 is now the default version of zizmor used by the action

v0.5.5

This is a no-op release.

v0.5.4

  • 1.25.0 is now available via the action
  • 1.25.0 is now the default version of zizmor used by the action
Commits
  • 192e21d Sync zizmor versions (#127)
  • 2720f26 Update README.md with new actions/checkout version (#126)
  • 40b41b8 chore(deps): bump the github-actions group with 2 updates (#123)
  • a687b25 chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-ac...
  • 64a6900 add note to explain that the default value for online-checks is different t...
  • 14050ab chore(deps): bump the github-actions group with 2 updates (#118)
  • ee9b419 chore(deps): bump github/codeql-action in the github-actions group (#116)
  • fddf2b4 Bump pins in README (#115)
  • 5f14fd0 Sync zizmor versions (#114)
  • a16621b Bump pins in README (#112)
  • Additional commits viewable in compare view

Updates actions/setup-node from 6.0.0 to 6.4.0

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

v6.2.0

What's Changed

Documentation

Dependency updates:

New Contributors

... (truncated)

Commits

Updates EmbarkStudios/cargo-deny-action from 2.0.17 to 2.0.20

Commits

Updates release-plz/action from 0.5.128 to 0.5.130

Release notes

Sourced from release-plz/action's releases.

v0.5.130

What's Changed

Full Changelog: release-plz/action@v0.5...v0.5.130

v0.5.129

What's Changed

... (truncated)

Commits
  • e879257 Update to 0.3.159 (#439)
  • 29ecf01 don't threat http 422 errors as special (#438)
  • c6756a4 chore(deps): update dependency cargo-bins/cargo-binstall to v1.20.0 (#437)
  • 0c186bf chore(deps): update dependency taiki-e/install-action to v2.81.8 (#436)
  • 8fe2bb5 chore(deps): lock file maintenance (#435)
  • 675b30f chore(deps): update dependency taiki-e/install-action to v2.81.7 (#433)
  • 7f61f63 chore(deps): update github actions to v6.0.3 (#385)
  • 7600366 chore(deps): update dependency taiki-e/install-action to v2.81.6 (#432)
  • f983e75 chore(deps): update dependency taiki-e/install-action to v2.81.5 (#431)
  • 02994ce chore(deps): update dependency taiki-e/install-action to v2.81.4 (#430)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.1.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.2.0` |
| [raven-actions/actionlint](https://github.com/raven-actions/actionlint) | `2.1.2` | `2.2.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.3` | `0.5.7` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.0.0` | `6.4.0` |
| [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) | `2.0.17` | `2.0.20` |
| [release-plz/action](https://github.com/release-plz/action) | `0.5.128` | `0.5.130` |



Updates `actions/checkout` from 6.0.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...9c091bb)

Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@4d04d5d...d7f5e7f)

Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@bcafcac...f9f3042)

Updates `raven-actions/actionlint` from 2.1.2 to 2.2.0
- [Release notes](https://github.com/raven-actions/actionlint/releases)
- [Commits](raven-actions/actionlint@205b530...3d39aea)

Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.7
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@b1d7e1f...192e21d)

Updates `actions/setup-node` from 6.0.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@2028fbc...48b55a0)

Updates `EmbarkStudios/cargo-deny-action` from 2.0.17 to 2.0.20
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](EmbarkStudios/cargo-deny-action@91bf2b6...bb137d7)

Updates `release-plz/action` from 0.5.128 to 0.5.130
- [Release notes](https://github.com/release-plz/action/releases)
- [Commits](release-plz/action@1528104...e879257)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: raven-actions/actionlint
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: release-plz/action
  dependency-version: 0.5.130
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants