Skip to content

Build(deps): bump the github-actions group across 1 directory with 9 updates - #310

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2d91a55f17
Open

Build(deps): bump the github-actions group across 1 directory with 9 updates#310
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2d91a55f17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 9 updates in the / directory:

Package From To
leynos/shared-actions/.github/actions/setup-rust 18bed1ca49a6de3d8882bd72635a32ae3f023d57 57a33fa65e329db7edc81ece661f1a2e1d39868f
astral-sh/setup-uv 8.3.2 9.0.0
actions/cache 4.3.0 6.1.0
leynos/shared-actions/.github/actions/generate-coverage 18bed1ca49a6de3d8882bd72635a32ae3f023d57 57a33fa65e329db7edc81ece661f1a2e1d39868f
leynos/shared-actions/.github/actions/upload-codescene-coverage 18bed1ca49a6de3d8882bd72635a32ae3f023d57 57a33fa65e329db7edc81ece661f1a2e1d39868f
leynos/shared-actions/.github/workflows/dependabot-automerge.yml e0d9b652b137eb15314fff188f09e1ba18d3cc5b 57a33fa65e329db7edc81ece661f1a2e1d39868f
leynos/shared-actions/.github/workflows/mutation-cargo.yml e0d9b652b137eb15314fff188f09e1ba18d3cc5b 57a33fa65e329db7edc81ece661f1a2e1d39868f
actions/upload-artifact 4 7
softprops/action-gh-release 3.0.1 3.0.2

Updates leynos/shared-actions/.github/actions/setup-rust from 18bed1ca49a6de3d8882bd72635a32ae3f023d57 to 57a33fa65e329db7edc81ece661f1a2e1d39868f

Commits
  • 57a33fa Build(deps): bump the github-actions group with 3 updates (#410)
  • 7576833 chore: ignore agent tool and editor artefacts
  • 1014f0c Build(deps): bump the github-actions group across 1 directory with 7 updates ...
  • 8add2d9 Strip semver pre-release metadata when resolving MSI versions (#405) (#406)
  • 2f90d10 Skip inapplicable CodeScene coverage checks and surface diagnostics (#395) (#...
  • 47b337e Add rustflags passthrough to setup-rust and rust-build-release (#391)
  • 19a7f5d Group github-actions Dependabot updates into a single PR
  • 36eb051 Document Python docstring conventions (#392)
  • dca6131 Teach PEP 735 development dependency groups
  • 6b9dc1b Format Markdown sources
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 8.3.2 to 9.0.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v9.0.0 🌈 Change prune-cache default to false

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes

🐛 Bug fixes

  • fix: fall back to distribution ID when os-release has no version field @​cxzhong (#961)

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Commits
  • c771a70 chore(deps): roll up Dependabot updates (#970)
  • 2f537ca chore: update known checksums for 0.11.30 (#968)
  • 2269552 Speed up version client by partial response reads (#807)
  • 47a7f4f Change prune-cache default to false (#967)
  • 71966ef chore(deps): roll up Dependabot updates (#962)
  • f12b1f0 fix: fall back to distribution ID when os-release has no version field (#961)
  • ecd24dd chore: update known checksums for 0.11.29 (#960)
  • 6a19136 docs: update version references to v8.3.2 (#949)
  • See full diff in compare view

Updates actions/cache from 4.3.0 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Updates leynos/shared-actions/.github/actions/generate-coverage from 18bed1ca49a6de3d8882bd72635a32ae3f023d57 to 57a33fa65e329db7edc81ece661f1a2e1d39868f

Commits
  • 57a33fa Build(deps): bump the github-actions group with 3 updates (#410)
  • 7576833 chore: ignore agent tool and editor artefacts
  • 1014f0c Build(deps): bump the github-actions group across 1 directory with 7 updates ...
  • 8add2d9 Strip semver pre-release metadata when resolving MSI versions (#405) (#406)
  • 2f90d10 Skip inapplicable CodeScene coverage checks and surface diagnostics (#395) (#...
  • 47b337e Add rustflags passthrough to setup-rust and rust-build-release (#391)
  • 19a7f5d Group github-actions Dependabot updates into a single PR
  • 36eb051 Document Python docstring conventions (#392)
  • dca6131 Teach PEP 735 development dependency groups
  • 6b9dc1b Format Markdown sources
  • Additional commits viewable in compare view

Updates leynos/shared-actions/.github/actions/upload-codescene-coverage from 18bed1ca49a6de3d8882bd72635a32ae3f023d57 to 57a33fa65e329db7edc81ece661f1a2e1d39868f

Commits
  • 57a33fa Build(deps): bump the github-actions group with 3 updates (#410)
  • 7576833 chore: ignore agent tool and editor artefacts
  • 1014f0c Build(deps): bump the github-actions group across 1 directory with 7 updates ...
  • 8add2d9 Strip semver pre-release metadata when resolving MSI versions (#405) (#406)
  • 2f90d10 Skip inapplicable CodeScene coverage checks and surface diagnostics (#395) (#...
  • 47b337e Add rustflags passthrough to setup-rust and rust-build-release (#391)
  • 19a7f5d Group github-actions Dependabot updates into a single PR
  • 36eb051 Document Python docstring conventions (#392)
  • dca6131 Teach PEP 735 development dependency groups
  • 6b9dc1b Format Markdown sources
  • Additional commits viewable in compare view

Updates leynos/shared-actions/.github/workflows/dependabot-automerge.yml from e0d9b652b137eb15314fff188f09e1ba18d3cc5b to 57a33fa65e329db7edc81ece661f1a2e1d39868f

Commits
  • 57a33fa Build(deps): bump the github-actions group with 3 updates (#410)
  • 7576833 chore: ignore agent tool and editor artefacts
  • 1014f0c Build(deps): bump the github-actions group across 1 directory with 7 updates ...
  • 8add2d9 Strip semver pre-release metadata when resolving MSI versions (#405) (#406)
  • 2f90d10 Skip inapplicable CodeScene coverage checks and surface diagnostics (#395) (#...
  • 47b337e Add rustflags passthrough to setup-rust and rust-build-release (#391)
  • 19a7f5d Group github-actions Dependabot updates into a single PR
  • 36eb051 Document Python docstring conventions (#392)
  • dca6131 Teach PEP 735 development dependency groups
  • 6b9dc1b Format Markdown sources
  • Additional commits viewable in compare view

Updates leynos/shared-actions/.github/workflows/mutation-cargo.yml from e0d9b652b137eb15314fff188f09e1ba18d3cc5b to 57a33fa65e329db7edc81ece661f1a2e1d39868f

Commits
  • 57a33fa Build(deps): bump the github-actions group with 3 updates (#410)
  • 7576833 chore: ignore agent tool and editor artefacts
  • 1014f0c Build(deps): bump the github-actions group across 1 directory with 7 updates ...
  • 8add2d9 Strip semver pre-release metadata when resolving MSI versions (#405) (#406)
  • 2f90d10 Skip inapplicable CodeScene coverage checks and surface diagnostics (#395) (#...
  • 47b337e Add rustflags passthrough to setup-rust and rust-build-release (#391)
  • 19a7f5d Group github-actions Dependabot updates into a single PR
  • 36eb051 Document Python docstring conventions (#392)
  • dca6131 Teach PEP 735 development dependency groups
  • 6b9dc1b Format Markdown sources
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Updates softprops/action-gh-release from 3.0.1 to 3.0.2

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

Commits
  • 3d0d988 release 3.0.2 (#818)
  • 7e13ed4 fix: clarify release creation 404 errors (#817)
  • e6c70a5 fix: replace existing release assets on Gitea (#816)
  • f345337 fix: publish existing draft releases as prereleases (#801)
  • d8a89a2 fix: upload small checksum assets reliably (#815)
  • 45ece40 chore(deps): remove unused TypeScript tooling (#814)
  • f6b913c feat: improve release error reporting and test coverage (#813)
  • 15f193d chore(deps): upgrade TypeScript to 7 (#812)
  • cc8268d chore(deps): bump actions/checkout in the github-actions group (#810)
  • fd0ed1e chore(deps): bump the npm group with 3 updates (#811)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Dependency updates, applied to every Dependabot pull request. github-actions Dependabot channel for GitHub Actions updates, batched into one pull request per run. labels Jul 30, 2026
This was referenced Jul 30, 2026
Closed
Closed
sourcery-ai[bot]
sourcery-ai Bot reviewed Jul 30, 2026
View reviewed changes

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @dependabot[bot], you have reached your weekly rate limit of 500000 diff characters.

Please try again later or upgrade to continue using Sourcery

This was referenced Jul 30, 2026
Closed
Closed
Closed
codescene-access[bot]

This comment was marked as outdated.

Sign in to view

@github-actions
github-actions Bot enabled auto-merge (squash) July 30, 2026 01:53
@dependabot
Build(deps): bump the github-actions group across 1 directory with 9 …
9417f42 
…updates

Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [leynos/shared-actions/.github/actions/setup-rust](https://github.com/leynos/shared-actions) | `18bed1ca49a6de3d8882bd72635a32ae3f023d57` | `57a33fa65e329db7edc81ece661f1a2e1d39868f` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.3.2` | `9.0.0` |
| [actions/cache](https://github.com/actions/cache) | `4.3.0` | `6.1.0` |
| [leynos/shared-actions/.github/actions/generate-coverage](https://github.com/leynos/shared-actions) | `18bed1ca49a6de3d8882bd72635a32ae3f023d57` | `57a33fa65e329db7edc81ece661f1a2e1d39868f` |
| [leynos/shared-actions/.github/actions/upload-codescene-coverage](https://github.com/leynos/shared-actions) | `18bed1ca49a6de3d8882bd72635a32ae3f023d57` | `57a33fa65e329db7edc81ece661f1a2e1d39868f` |
| [leynos/shared-actions/.github/workflows/dependabot-automerge.yml](https://github.com/leynos/shared-actions) | `e0d9b652b137eb15314fff188f09e1ba18d3cc5b` | `57a33fa65e329db7edc81ece661f1a2e1d39868f` |
| [leynos/shared-actions/.github/workflows/mutation-cargo.yml](https://github.com/leynos/shared-actions) | `e0d9b652b137eb15314fff188f09e1ba18d3cc5b` | `57a33fa65e329db7edc81ece661f1a2e1d39868f` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.1` | `3.0.2` |



Updates `leynos/shared-actions/.github/actions/setup-rust` from 18bed1ca49a6de3d8882bd72635a32ae3f023d57 to 57a33fa65e329db7edc81ece661f1a2e1d39868f
- [Release notes](https://github.com/leynos/shared-actions/releases)
- [Commits](leynos/shared-actions@18bed1c...57a33fa)

Updates `astral-sh/setup-uv` from 8.3.2 to 9.0.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@11f9893...c771a70)

Updates `actions/cache` from 4.3.0 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](actions/cache@v4.3.0...v6.1.0)

Updates `leynos/shared-actions/.github/actions/generate-coverage` from 18bed1ca49a6de3d8882bd72635a32ae3f023d57 to 57a33fa65e329db7edc81ece661f1a2e1d39868f
- [Release notes](https://github.com/leynos/shared-actions/releases)
- [Commits](leynos/shared-actions@18bed1c...57a33fa)

Updates `leynos/shared-actions/.github/actions/upload-codescene-coverage` from 18bed1ca49a6de3d8882bd72635a32ae3f023d57 to 57a33fa65e329db7edc81ece661f1a2e1d39868f
- [Release notes](https://github.com/leynos/shared-actions/releases)
- [Commits](leynos/shared-actions@18bed1c...57a33fa)

Updates `leynos/shared-actions/.github/workflows/dependabot-automerge.yml` from e0d9b652b137eb15314fff188f09e1ba18d3cc5b to 57a33fa65e329db7edc81ece661f1a2e1d39868f
- [Release notes](https://github.com/leynos/shared-actions/releases)
- [Commits](leynos/shared-actions@e0d9b65...57a33fa)

Updates `leynos/shared-actions/.github/workflows/mutation-cargo.yml` from e0d9b652b137eb15314fff188f09e1ba18d3cc5b to 57a33fa65e329db7edc81ece661f1a2e1d39868f
- [Release notes](https://github.com/leynos/shared-actions/releases)
- [Commits](leynos/shared-actions@e0d9b65...57a33fa)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: leynos/shared-actions/.github/actions/generate-coverage
  dependency-version: 19a7f5d1b8d5c1b2236c39720a5744492b3fc129
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: leynos/shared-actions/.github/actions/setup-rust
  dependency-version: 19a7f5d1b8d5c1b2236c39720a5744492b3fc129
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: leynos/shared-actions/.github/actions/upload-codescene-coverage
  dependency-version: 19a7f5d1b8d5c1b2236c39720a5744492b3fc129
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: leynos/shared-actions/.github/workflows/dependabot-automerge.yml
  dependency-version: 19a7f5d1b8d5c1b2236c39720a5744492b3fc129
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: leynos/shared-actions/.github/workflows/mutation-cargo.yml
  dependency-version: 19a7f5d1b8d5c1b2236c39720a5744492b3fc129
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Build(deps): bump the github-actions group with 9 updates Build(deps): bump the github-actions group across 1 directory with 9 updates Aug 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-2d91a55f17 branch from b1f947f to 9417f42 Compare August 15, 2026 18:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sourcery-ai sourcery-ai[bot] sourcery-ai[bot] left review comments
+1 more reviewer
@codescene-access codescene-access[bot] codescene-access[bot] approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Dependency updates, applied to every Dependabot pull request. github-actions Dependabot channel for GitHub Actions updates, batched into one pull request per run.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants