Skip to content

chore(deps): bump the actions group across 1 directory with 2 updates - #230

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-e8fb35aa55
Open

chore(deps): bump the actions group across 1 directory with 2 updates#230
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-e8fb35aa55

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown

Bumps the actions group with 2 updates in the / directory: voidzero-dev/setup-vp and actions/setup-java.

Updates voidzero-dev/setup-vp from 1.20.0 to 1.22.0

Release notes

Sourced from voidzero-dev/setup-vp's releases.

v1.22.0

This release adds optional toolchain caching in GitHub Actions. Set cache-toolchain: true with exact Vite+ and Node.js versions to cache the CLI, managed Node.js runtime, and selected package manager. Valid cache restores can use native setup to avoid a shell installer download. cache-save: false disables uploads for these caches.

All three integrations now report the resolved Node.js version, package manager name, and package manager version. Setup also selects the project Node.js version before installation. Compatible installers can reuse that runtime and avoid a second Node.js download.

This release also updates dependencies and adds GitHub Actions security checks and pull request code audits.

What's Changed

New Contributors

Full Changelog: voidzero-dev/setup-vp@v1.21.2...v1.22.0

v1.21.2

This patch release fixes command injection in GitLab inputs and Azure setupRef. GitLab and Azure now validate refs before downloading bootstrap scripts or runtimes.

The installer also prevents executable planting during sfw lookup. All integrations use Socket Firewall Free v1.15.4.

Registry authentication now requires an explicit registry-url input (registryUrl in Azure) or an existing auth entry in .npmrc. Jobs that previously relied on automatic token entries from registry URLs in repository files must update their configuration.

This release also isolates bundle rebuilds from the GitHub App token, expands native operating system test coverage, and updates dependencies.

What's Changed

... (truncated)

Commits
  • cab1ab9 chore: release v1.22.0 (#210)
  • 6eb3ef7 perf: cache package managers and use native toolchain setup (#209)
  • c025a93 chore(deps): update dependency zod to v4.6.7 (#206)
  • 03bf428 feat: cache the Vite+ toolchain in GitHub Actions (#207)
  • e2e70bd perf: select project Node before installation (#202)
  • d5055d9 ci: enable zizmor and replace privileged workflow triggers (#204)
  • 09d608a chore(lint): enable e18e rules (#205)
  • c7445d9 ci: add Fallow pull request audits (#203)
  • ad00cb8 chore(deps): update vite-plus to v1.3.0 (#201)
  • 6a60d12 chore(deps): update vite-plus to v1.2.0 (#200)
  • Additional commits viewable in compare view

Updates actions/setup-java from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-java's releases.

v6.2.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.1.0...v6.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the actions group across 1 directory with 2 updates
fa3a831 
Bumps the actions group with 2 updates in the / directory: [voidzero-dev/setup-vp](https://github.com/voidzero-dev/setup-vp) and [actions/setup-java](https://github.com/actions/setup-java).


Updates `voidzero-dev/setup-vp` from 1.20.0 to 1.22.0
- [Release notes](https://github.com/voidzero-dev/setup-vp/releases)
- [Commits](voidzero-dev/setup-vp@9fd26ff...cab1ab9)

Updates `actions/setup-java` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@b843ebf...77dd5b2)

---
updated-dependencies:
- dependency-name: voidzero-dev/setup-vp
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-java
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 12, 2026
@coderabbitai

coderabbitai Bot commented Nov 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: fe34cb83-2f9c-4323-b0c9-155d73ca0179

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants