Skip to content

ci(deps): bump the third-party group across 1 directory with 2 updates - #1400

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/third-party-8d9456499c
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/third-party-8d9456499c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the third-party group with 2 updates in the / directory: supabase/setup-cli and SonarSource/sonarqube-scan-action.

Updates supabase/setup-cli from 3.0.0 to 3.0.1

Release notes

Sourced from supabase/setup-cli's releases.

v3.0.1

Summary

  • Allow the CLI's own registry fallback instead of pinning every recent CLI to GHCR (#453). The GHCR default is kept for CLI versions before v2.108.0; newer versions are free to fall back, which reduces exposure to GHCR image-pull throttling.
  • An explicit registry choice by the caller is still preserved.
  • Dependency bumps for ruby/setup-ruby and dev tooling.

Validation

  • CI and E2E passed on main before tagging.

v3 is the moving major-version alias for this release.

Commits
  • 45a513f fix: allow registry fallback in supported CLI versions (#453)
  • aa3515e chore(deps): bump ruby/setup-ruby from 1.319.0 to 1.321.0 in the actions-mino...
  • c44671e chore(deps): bump ruby/setup-ruby from 1.317.0 to 1.319.0 in the actions-mino...
  • 6ffe784 chore(deps): bump ruby/setup-ruby from 1.316.0 to 1.317.0 in the actions-mino...
  • fddb742 chore(deps-dev): bump the bun-minor-patch group with 3 updates (#446)
  • See full diff in compare view

Updates SonarSource/sonarqube-scan-action from 8.2.1 to 8.3.0

Release notes

Sourced from SonarSource/sonarqube-scan-action's releases.

v8.3.0

What's Changed

New Contributors

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0

v8.2.2

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.1...v8.2.2

Commits
  • d209202 Update GitHub Actions dependencies (major) (#271)
  • 0333cb3 Update dependency @​actions/exec to v3 (#270)
  • da4450e Update npm dependencies (#268)
  • c5094d1 SQSCANGHA-168 Update actions/cache action to v5.1.0 (#269)
  • 001613f SQSCANGHA-162 Configure Renovate (#267)
  • 6abe0a7 SQSCANGHA-165 Fix GPG key retrieval through HTTPS proxies (#265)
  • ba9859e SQSCANGHA-159 Bump undici from 6.24.1 to 6.28.1 (#261)
  • 5bc5285 Rename code-quality teams to code-orchestration in CODEOWNERS
  • ad82103 SQSCANGHA-158 NO-JIRA Bump actions/checkout from 7.0.0 to 7.0.1 (#260)
  • 7451daf SQSCANGHA-157 NO-JIRA Bump actions/setup-node from 6.4.0 to 7.0.0 (#259)
  • See full diff in compare view

@dependabot
dependabot Bot requested a review from ericsocrat as a code owner September 28, 2026 04:12
@dependabot dependabot Bot added ci CI/CD / GitHub Actions workflows dependencies Dependency updates (Dependabot) labels Sep 28, 2026
@vercel

vercel Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
tryvit Ready Ready Preview Oct 5, 2026 4:21am UTC

Bumps the third-party group with 2 updates in the / directory: [supabase/setup-cli](https://github.com/supabase/setup-cli) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action).


Updates `supabase/setup-cli` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/supabase/setup-cli/releases)
- [Commits](supabase/setup-cli@46f7f98...45a513f)

Updates `SonarSource/sonarqube-scan-action` from 8.2.1 to 8.3.0
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](SonarSource/sonarqube-scan-action@2291811...d209202)

---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: 8.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: third-party
- dependency-name: supabase/setup-cli
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: third-party
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/main/third-party-8d9456499c branch from 7392657 to 53a5452 Compare October 5, 2026 04:14

This branch was successfully deployed

1 active deployment
Preview — 53a5452d Deployed Oct 5, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci CI/CD / GitHub Actions workflows dependencies Dependency updates (Dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant