From 3f25587002d0ef47d7d0de5d5b7d1e6f59dbc317 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 22:23:34 +0000 Subject: [PATCH] Bump the github-actions group with 7 updates Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [dotnet/arcade/.github/workflows/backport-base.yml](https://github.com/dotnet/arcade) | `042024f31f9f89422bc172362a04b5a51ac17df9` | `25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9` | | [dotnet/arcade/.github/workflows/inter-branch-merge-base.yml](https://github.com/dotnet/arcade) | `042024f31f9f89422bc172362a04b5a51ac17df9` | `25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9` | | [actions/checkout](https://github.com/actions/checkout) | `4.4.0` | `7.0.1` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `7.1.0` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `4.2.4` | `8.1.1` | | [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `4.3.1` | `6.0.0` | | [actions/github-script](https://github.com/actions/github-script) | `7.1.0` | `9.0.0` | Updates `dotnet/arcade/.github/workflows/backport-base.yml` from 042024f31f9f89422bc172362a04b5a51ac17df9 to 25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 - [Commits](https://github.com/dotnet/arcade/compare/042024f31f9f89422bc172362a04b5a51ac17df9...25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9) Updates `dotnet/arcade/.github/workflows/inter-branch-merge-base.yml` from 042024f31f9f89422bc172362a04b5a51ac17df9 to 25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 - [Commits](https://github.com/dotnet/arcade/compare/042024f31f9f89422bc172362a04b5a51ac17df9...25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9) Updates `actions/checkout` from 4.4.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4.4.0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `actions/setup-node` from 4.4.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `peter-evans/create-pull-request` from 4.2.4 to 8.1.1 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/38e0b6e68b4c852a5500a94740f0e535e0d7ba54...5f6978faf089d4d20b00c7766989d076bb2fc7f1) Updates `actions/setup-dotnet` from 4.3.1 to 6.0.0 - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](https://github.com/actions/setup-dotnet/compare/67a3573c9a986a3f9c594539f4ab511d57bb3ce9...a98b56852c35b8e3190ac28c8c2271da59106c68) Updates `actions/github-script` from 7.1.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/f28e40c7f34bde8b3046d885e986cb6290c5673b...3a2844b7e9c422d3c10d287c895573f7108da1b3) --- updated-dependencies: - dependency-name: dotnet/arcade/.github/workflows/backport-base.yml dependency-version: 25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 dependency-type: direct:production dependency-group: github-actions - dependency-name: dotnet/arcade/.github/workflows/inter-branch-merge-base.yml dependency-version: 25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-dotnet dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/backport.yml | 2 +- .github/workflows/branch-snap.yml | 12 ++++++------ .github/workflows/copilot-setup-steps.yml | 6 +++--- .github/workflows/release-comment-handler.yml | 4 ++-- .github/workflows/release-reusable.yml | 4 ++-- 5 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index aa85cabad..3dfec7576 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -15,7 +15,7 @@ permissions: jobs: backport: if: ${{ contains(github.event.comment.body, '/backport to') || github.event_name == 'schedule' }} - uses: dotnet/arcade/.github/workflows/backport-base.yml@042024f31f9f89422bc172362a04b5a51ac17df9 # main + uses: dotnet/arcade/.github/workflows/backport-base.yml@25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 # main with: pr_description_template: | Backport of #%source_pr_number% to %target_branch% diff --git a/.github/workflows/branch-snap.yml b/.github/workflows/branch-snap.yml index 0f19f3d8d..e43009067 100644 --- a/.github/workflows/branch-snap.yml +++ b/.github/workflows/branch-snap.yml @@ -8,7 +8,7 @@ permissions: jobs: check-script: - uses: dotnet/arcade/.github/workflows/inter-branch-merge-base.yml@042024f31f9f89422bc172362a04b5a51ac17df9 # main + uses: dotnet/arcade/.github/workflows/inter-branch-merge-base.yml@25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 # main with: configuration_file_path: '.config/snap-flow.json' script_version: '042024f31f9f89422bc172362a04b5a51ac17df9' @@ -19,9 +19,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install NodeJS - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24.x' - name: Install dependencies @@ -29,7 +29,7 @@ jobs: - name: Update version.json run: npm run incrementVersion - name: Create version update PR - uses: peter-evans/create-pull-request@38e0b6e68b4c852a5500a94740f0e535e0d7ba54 # v4 + uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 with: token: ${{ secrets.GITHUB_TOKEN }} commit-message: Update main version @@ -42,12 +42,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out merge branch - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: merge/prerelease-to-release fetch-depth: 0 - name: Install NodeJS - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24.x' - name: Install dependencies diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 66bf734c1..097ecaff9 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -23,16 +23,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Install Node.js (required for TypeScript compilation and npm packages) - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' cache: 'npm' # Install .NET SDK (required for some build components and MSBuild tasks) - - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 + - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 with: dotnet-version: '10.0.x' diff --git a/.github/workflows/release-comment-handler.yml b/.github/workflows/release-comment-handler.yml index 0b1ce458c..5fde86350 100644 --- a/.github/workflows/release-comment-handler.yml +++ b/.github/workflows/release-comment-handler.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Gather participants id: participants - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | console.log("=== WORKFLOW START ==="); @@ -125,7 +125,7 @@ jobs: result-encoding: string - name: Add label comment - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | console.log("=== STEP 2: ADD COMMENT ==="); diff --git a/.github/workflows/release-reusable.yml b/.github/workflows/release-reusable.yml index aeb7118a0..f501f2921 100644 --- a/.github/workflows/release-reusable.yml +++ b/.github/workflows/release-reusable.yml @@ -16,12 +16,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout tag - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: refs/tags/${{ inputs.tag }} - name: Create release from CHANGELOG - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 env: TAG: ${{ inputs.tag }} with: