Skip to content

chore(github-actions): bump the github-actions group across 1 directory with 10 updates - #716

Merged
AlexanderLanin merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-2e7dc13a63
Aug 18, 2026
Merged

chore(github-actions): bump the github-actions group across 1 directory with 10 updates#716
AlexanderLanin merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-2e7dc13a63

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 10 updates in the / directory:

Package From To
step-security/harden-runner 2.18.0 2.21.0
actions/checkout 4 7
bazel-contrib/setup-bazel 0.18.0 0.19.0
actions/upload-artifact 4 7
eclipse-score/cicd-workflows/.github/workflows/daily.yml 0.0.1 0.0.3
eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml 206a795e30d45de82d541206fde17abe98d2b4bf 7b1b65cbb59d5f817e639a731f018db5adb3028a
eclipse-score/cicd-workflows/.github/workflows/license-check.yml 0.0.0 0.0.3
eclipse-score/cicd-workflows/.github/workflows/docs.yml 206a795e30d45de82d541206fde17abe98d2b4bf 7b1b65cbb59d5f817e639a731f018db5adb3028a
actions/download-artifact 4 8
actions/github-script 7 9

Updates step-security/harden-runner from 2.18.0 to 2.21.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

v2.20.1

What's Changed

  • AWS CodeBuild-hosted runner support
  • Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

v2.20.0

What's Changed

  • Support for block policy for MacOS and Windows GitHub-hosted runners
  • Support for Bitrise MacOS GitHub Actions runners
  • HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

v2.19.4

What's Changed

  • Improvements for HTTPS Monitoring for the Enterprise tier of Harden Runner

Full Changelog: step-security/harden-runner@v2.19.3...v2.19.4

v2.19.3

What's Changed

Full Changelog: step-security/harden-runner@v2.19.2...v2.19.3

v2.19.2

What's Changed

  • Update the Harden Runner agent for enterprise tier to use go 1.26 and fix minor bugs.

Full Changelog: step-security/harden-runner@v2.19.1...v2.19.2

v2.19.1

What's Changed

What the fix changes

  • Harden-Runner will detect ubuntu-slim runners and exit cleanly with an informational log message, instead of post harden runner step failing on chown: invalid user: 'undefined'.

... (truncated)

Commits
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp...
  • c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
  • 40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
  • fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
  • 5361fb1 feat: add build artifacts
  • 286474f feat: Support Bravo agent install on CodeBuild runners
  • 051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
  • Additional commits viewable in compare view

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates bazel-contrib/setup-bazel from 0.18.0 to 0.19.0

Release notes

Sourced from bazel-contrib/setup-bazel's releases.

0.19.0

What's Changed

New Contributors

Full Changelog: bazel-contrib/setup-bazel@0.18.0...0.19.0

Commits
  • c5acdfb Release 0.19.0
  • b496e79 Migrate to ESM (#151)
  • 63ef5dc chore(deps): update dependency yaml to v2.8.3 (#150)
  • 7ff4255 Update Node version to address deprecation warning. (#148)
  • 3096290 chore(deps): update node.js to v24.14.0 (#147)
  • 417f338 Fix syntax error in README.md for disk-cache (#146)
  • 887da5f chore(deps): update node.js to v24.13.1 (#145)
  • 3217c4f fix(deps): update dependency @​actions/tool-cache to v4 (#143)
  • 18fd541 fix(deps): update dependency @​actions/core to v3 (#141)
  • e74b1ab fix(deps): update dependency @​actions/github to v9 (#140)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Updates eclipse-score/cicd-workflows/.github/workflows/daily.yml from 0.0.1 to 0.0.3

Release notes

Sourced from eclipse-score/cicd-workflows/.github/workflows/daily.yml's releases.

v0.0.3

What's Changed

... (truncated)

Commits
  • 8d80e8d feat: add disk cleanup step (#199)
  • 1407282 fix(docs): prevent Pages artifact collisions (#198)
  • 5515d19 fix(workflow): configure Bazel access before pre-commit (#197)
  • eaa8daf chore(deps): bump eclipse-score/devcontainer (#196)
  • 840a5c6 fix: support direct docs publishing (#191)
  • 7fb87a7 feat: add support for private Bazel dependencies in PR checks (#190)
  • 33842dc fix: do not assume to know when users want to use secrets (#188)
  • 46da27c chore(deps): bump github/codeql-action (#183)
  • d7af363 chore(deps): bump actions/upload-artifact from 4 to 7 (#184)
  • c2c7e6d fix: always prune obsolete caches (#187)
  • Additional commits viewable in compare view

Updates eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml from 206a795e30d45de82d541206fde17abe98d2b4bf to 7b1b65cbb59d5f817e639a731f018db5adb3028a

Commits
  • 7b1b65c Enable linux-sandbox for coverage (#207)
  • 89aa80b feat(qnx-build): make more-disk-space level configurable (#208)
  • 324eec6 feat(qnx-build): add logs upload #126 (#203)
  • 7a01a1e chore(deps): bump eclipse-score/devcontainer (#205)
  • 2ebd72d fix: Consider all pull requests when creating docs-publish comment (#204)
  • 4777f90 fix(qnx): restore level 4 disk cleanup (#202)
  • 744fd2e fix: preserve open documentation previews (#201)
  • 8d80e8d feat: add disk cleanup step (#199)
  • 1407282 fix(docs): prevent Pages artifact collisions (#198)
  • 5515d19 fix(workflow): configure Bazel access before pre-commit (#197)
  • Additional commits viewable in compare view

Updates eclipse-score/cicd-workflows/.github/workflows/license-check.yml from 0.0.0 to 0.0.3

Release notes

Sourced from eclipse-score/cicd-workflows/.github/workflows/license-check.yml's releases.

v0.0.3

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 12, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 12, 2026
@github-actions

github-actions Bot commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run --lockfile_mode=error //src:license-check

Status: ⚠️ Needs Review

Click to expand output
[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: aea99a4c-120d-4ee7-8ba2-6404eee60922
Computing main repo mapping: 
Loading: 
Loading: 0 packages loaded
Loading: 0 packages loaded
Loading: 0 packages loaded
Loading: 0 packages loaded
    currently loading: src
WARNING: Target pattern parsing failed.
ERROR: Skipping '//src:license-check': no such target '//src:license-check': target 'license-check' not declared in package 'src' defined by /home/runner/work/docs-as-code/docs-as-code/src/BUILD
ERROR: no such target '//src:license-check': target 'license-check' not declared in package 'src' defined by /home/runner/work/docs-as-code/docs-as-code/src/BUILD
INFO: Elapsed time: 6.734s
INFO: 0 processes.
ERROR: Build did NOT complete successfully
ERROR: Build failed. Not running target

@github-actions

Copy link
Copy Markdown
Contributor

Documentation preview for this pull request is available at:
pr-716: https://eclipse-score.github.io/docs-as-code/pr-716/

…ry with 10 updates

Bumps the github-actions group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.18.0` | `2.21.0` |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |
| [bazel-contrib/setup-bazel](https://github.com/bazel-contrib/setup-bazel) | `0.18.0` | `0.19.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [eclipse-score/cicd-workflows/.github/workflows/daily.yml](https://github.com/eclipse-score/cicd-workflows) | `0.0.1` | `0.0.3` |
| [eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml](https://github.com/eclipse-score/cicd-workflows) | `206a795e30d45de82d541206fde17abe98d2b4bf` | `7b1b65cbb59d5f817e639a731f018db5adb3028a` |
| [eclipse-score/cicd-workflows/.github/workflows/license-check.yml](https://github.com/eclipse-score/cicd-workflows) | `0.0.0` | `0.0.3` |
| [eclipse-score/cicd-workflows/.github/workflows/docs.yml](https://github.com/eclipse-score/cicd-workflows) | `206a795e30d45de82d541206fde17abe98d2b4bf` | `7b1b65cbb59d5f817e639a731f018db5adb3028a` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `9` |



Updates `step-security/harden-runner` from 2.18.0 to 2.21.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@v2.18.0...v2.21.0)

Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

Updates `bazel-contrib/setup-bazel` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/bazel-contrib/setup-bazel/releases)
- [Commits](bazel-contrib/setup-bazel@0.18.0...0.19.0)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `eclipse-score/cicd-workflows/.github/workflows/daily.yml` from 0.0.1 to 0.0.3
- [Release notes](https://github.com/eclipse-score/cicd-workflows/releases)
- [Commits](eclipse-score/cicd-workflows@829b3e1...8d80e8d)

Updates `eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml` from 206a795e30d45de82d541206fde17abe98d2b4bf to 7b1b65cbb59d5f817e639a731f018db5adb3028a
- [Release notes](https://github.com/eclipse-score/cicd-workflows/releases)
- [Commits](eclipse-score/cicd-workflows@206a795...7b1b65c)

Updates `eclipse-score/cicd-workflows/.github/workflows/license-check.yml` from 0.0.0 to 0.0.3
- [Release notes](https://github.com/eclipse-score/cicd-workflows/releases)
- [Commits](eclipse-score/cicd-workflows@c1c90b1...8d80e8d)

Updates `eclipse-score/cicd-workflows/.github/workflows/docs.yml` from 206a795e30d45de82d541206fde17abe98d2b4bf to 7b1b65cbb59d5f817e639a731f018db5adb3028a
- [Release notes](https://github.com/eclipse-score/cicd-workflows/releases)
- [Commits](eclipse-score/cicd-workflows@206a795...7b1b65c)

Updates `actions/download-artifact` from 4 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

Updates `actions/github-script` from 7 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: bazel-contrib/setup-bazel
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: eclipse-score/cicd-workflows/.github/workflows/daily.yml
  dependency-version: 0.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml
  dependency-version: 840a5c60b35c713ed8df13f1969dfb3721a5c529
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: eclipse-score/cicd-workflows/.github/workflows/docs.yml
  dependency-version: 840a5c60b35c713ed8df13f1969dfb3721a5c529
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: eclipse-score/cicd-workflows/.github/workflows/license-check.yml
  dependency-version: 0.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: step-security/harden-runner
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(github-actions): bump the github-actions group with 10 updates chore(github-actions): bump the github-actions group across 1 directory with 10 updates Aug 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-2e7dc13a63 branch from 0fc205b to b98d0ac Compare August 18, 2026 16:35

@AlexanderLanin AlexanderLanin left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what could go wrong?

@AlexanderLanin
AlexanderLanin merged commit 52f5e51 into main Aug 18, 2026
20 of 21 checks passed
@AlexanderLanin
AlexanderLanin deleted the dependabot/github_actions/github-actions-2e7dc13a63 branch August 18, 2026 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

Development

Successfully merging this pull request may close these issues.

1 participant