Skip to content

Bump the ci group across 1 directory with 9 updates - #933

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-fd0162ffc4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-fd0162ffc4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the ci group with 9 updates in the / directory:

Package From To
fluxcd/gha-workflows/.github/workflows/backport.yaml 0.11.0 0.16.0
fluxcd/gha-workflows 0.11.0 0.16.0
aws-actions/configure-aws-credentials 6.2.0 6.3.0
Azure/login 3.0.0 3.1.0
docker/login-action 4.2.0 4.6.0
fluxcd/gha-workflows/.github/workflows/controller-release.yaml 0.11.0 0.16.0
fluxcd/gha-workflows/.github/workflows/code-scan.yaml 0.11.0 0.16.0
fluxcd/gha-workflows/.github/workflows/labels-sync.yaml 0.11.0 0.16.0
fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml 0.11.0 0.16.0

Updates fluxcd/gha-workflows/.github/workflows/backport.yaml from 0.11.0 to 0.16.0

Release notes

Sourced from fluxcd/gha-workflows/.github/workflows/backport.yaml's releases.

v0.16.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.14.0...v0.15.0

v0.14.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.13.0...v0.14.0

v0.13.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.12.0...v0.13.0

v0.12.0

What's Changed

New Contributors

Full Changelog: fluxcd/gha-workflows@v0.11.0...v0.12.0

Commits
  • 948f0ba Merge pull request #79 from fluxcd/dependabot/github_actions/dot-github/actio...
  • 215db4f Merge pull request #81 from matheuscscp/unpin-cosign
  • 934d75c Remove the Cosign v2.6.1 pin
  • c86e961 Bump the actions group across 1 directory with 4 updates
  • a84ffbc Merge pull request #80 from matheuscscp/cli-plugin-feature-branch-release
  • 6290d03 Support CLI plugin image releases from branches
  • 439ee95 Merge pull request #75 from fluxcd/dependabot/github_actions/actions-36898c3288
  • da94b51 Bump the actions group across 1 directory with 5 updates
  • 9a3dd2b Merge pull request #76 from fluxcd/allow-pr-checkout
  • 525f8c2 Allow PR checkout on backport workflow
  • Additional commits viewable in compare view

Updates fluxcd/gha-workflows from 0.11.0 to 0.16.0

Release notes

Sourced from fluxcd/gha-workflows's releases.

v0.16.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.14.0...v0.15.0

v0.14.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.13.0...v0.14.0

v0.13.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.12.0...v0.13.0

v0.12.0

What's Changed

New Contributors

Full Changelog: fluxcd/gha-workflows@v0.11.0...v0.12.0

Commits
  • 948f0ba Merge pull request #79 from fluxcd/dependabot/github_actions/dot-github/actio...
  • 215db4f Merge pull request #81 from matheuscscp/unpin-cosign
  • 934d75c Remove the Cosign v2.6.1 pin
  • c86e961 Bump the actions group across 1 directory with 4 updates
  • a84ffbc Merge pull request #80 from matheuscscp/cli-plugin-feature-branch-release
  • 6290d03 Support CLI plugin image releases from branches
  • 439ee95 Merge pull request #75 from fluxcd/dependabot/github_actions/actions-36898c3288
  • da94b51 Bump the actions group across 1 directory with 5 updates
  • 9a3dd2b Merge pull request #76 from fluxcd/allow-pr-checkout
  • 525f8c2 Allow PR checkout on backport workflow
  • Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.0 to 6.3.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.3.0

6.3.0 (2026-09-11)

Features

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

v6.2.3

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)
Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.3.0 (2026-09-11)

Features

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

  • add additional session tags by default (#1775) (e0ba768)
  • add more retry logic and better logging (#1764) (540d0c1)
  • add regex validation to role-session-name (#1765) (e354499)
  • Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
  • expose run id in STS client user-agent (#1774) (29d1be3)

... (truncated)

Commits
  • e125382 chore(main): release 6.3.0 (#1963)
  • 438100a chore: add link to GH security docs (#1962)
  • e92ebcc chore: Update dist
  • 57b8365 feat: add translate-env-variables option (#1961)
  • cc49fa7 chore(docs): README main branch guidance (#1960)
  • 866cb16 chore(deps-dev): bump smol-toml from 1.7.0 to 1.7.2 (#1958)
  • 6782cb1 chore(deps-dev): bump generate-license-file from 4.2.4 to 4.2.5 (#1951)
  • c20509a chore: Update dist
  • 7a41fc6 chore(deps): bump @​aws-sdk/client-sts from 3.1121.0 to 3.1127.0 (#1954)
  • 726b713 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#1957)
  • Additional commits viewable in compare view

Updates Azure/login from 3.0.0 to 3.1.0

Release notes

Sourced from Azure/login's releases.

Azure Login Action v3.1.0

What's Changed

New Contributors

Full Changelog: Azure/login@v3.0.2...v3.1.0

Azure Login Action v3.0.2

What's Changed

Security & hardening

  • Refactor PowerShell login to a static param()-bound script — eliminates string-interpolation in the AzPS login path so credential/config values can never be re-parsed as PowerShell (injection-safe by construction) by @​MaddyMicrosoft in Azure/login#607
  • Pin third-party GitHub Actions to commit SHAs — supply-chain hardening for the CI/release workflows by @​MaddyMicrosoft in Azure/login#615
  • Add admin-gated Release workflow — reproducible, approval-gated release + rollback pipeline by @​MaddyMicrosoft in Azure/login#610

Telemetry

  • Emit the real action ref in telemetry via GITHUB_ACTION_REF — corrects the previously stale hard-coded value so usage reports the version consumers actually pin by @​MaddyMicrosoft in Azure/login#614

Dependencies

Maintenance & docs

Full Changelog: Azure/login@v3.0.1...v3.1.0

Azure Login Action v3.0.1

What's Changed

Full Changelog: https://github.com/Azure/login/commits/v3.0.1

Commits
  • a641126 prepare release v3.1.0
  • 3c5b5ce Add max-context-population input to override Azure PowerShell MaxCont… (#642)
  • fcd0340 Bump browserslist from 4.21.4 to 4.28.8 (#637)
  • 5a8018f Bump js-yaml from 3.14.2 to 3.15.2 (#643)
  • a23dddf ci: reduce scheduled test frequency and clarify workflow names (#639)
  • 4c016e0 docs: document immutable release model and correct branch reference (#640)
  • 63f3c38 Automate release tagging via deploy key + self-pin bump (#638)
  • 92a0b67 Add the ability to prevent the masking of clientId (#634)
  • 5cb857d Pin GitHub Actions to full-length commit SHAs (#636)
  • d90bae5 Cap @​actions/exec and @​actions/core below the ESM-only 3.x majors (#628)
  • Additional commits viewable in compare view

Updates docker/login-action from 4.2.0 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits
  • dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 5bcb015 [dependabot skip] chore: update generated content
  • b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
  • 0009830 [dependabot skip] chore: update generated content
  • 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
  • 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
  • 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
  • e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
  • a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
  • Additional commits viewable in compare view

Updates fluxcd/gha-workflows/.github/workflows/controller-release.yaml from 0.11.0 to 0.16.0

Release notes

Sourced from fluxcd/gha-workflows/.github/workflows/controller-release.yaml's releases.

v0.16.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.14.0...v0.15.0

v0.14.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.13.0...v0.14.0

v0.13.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.12.0...v0.13.0

v0.12.0

What's Changed

New Contributors

Full Changelog: fluxcd/gha-workflows@v0.11.0...v0.12.0

Commits
  • 948f0ba Merge pull request #79 from fluxcd/dependabot/github_actions/dot-github/actio...
  • 215db4f Merge pull request #81 from matheuscscp/unpin-cosign
  • 934d75c Remove the Cosign v2.6.1 pin
  • c86e961 Bump the actions group across 1 directory with 4 updates
  • a84ffbc Merge pull request #80 from matheuscscp/cli-plugin-feature-branch-release
  • 6290d03 Support CLI plugin image releases from branches
  • 439ee95 Merge pull request #75 from fluxcd/dependabot/github_actions/actions-36898c3288
  • da94b51 Bump the actions group across 1 directory with 5 updates
  • 9a3dd2b Merge pull request #76 from fluxcd/allow-pr-checkout
  • 525f8c2 Allow PR checkout on backport workflow
  • Additional commits viewable in compare view

Updates fluxcd/gha-workflows/.github/workflows/code-scan.yaml from 0.11.0 to 0.16.0

Release notes

Sourced from fluxcd/gha-workflows/.github/workflows/code-scan.yaml's releases.

v0.16.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.14.0...v0.15.0

v0.14.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.13.0...v0.14.0

v0.13.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.12.0...v0.13.0

v0.12.0

What's Changed

New Contributors

Full Changelog: fluxcd/gha-workflows@v0.11.0...v0.12.0

Commits
  • 948f0ba Merge pull request #79 from fluxcd/dependabot/github_actions/dot-github/actio...
  • 215db4f Merge pull request #81 from matheuscscp/unpin-cosign
  • 934d75c Remove the Cosign v2.6.1 pin
  • c86e961 Bump the actions group across 1 directory with 4 updates
  • a84ffbc Merge pull request #80 from matheuscscp/cli-plugin-feature-branch-release
  • 6290d03 Support CLI plugin image releases from branches
  • 439ee95 Merge pull request #75 from fluxcd/dependabot/github_actions/actions-36898c3288
  • da94b51 Bump the actions group across 1 directory with 5 updates
  • 9a3dd2b Merge pull request #76 from fluxcd/allow-pr-checkout
  • 525f8c2 Allow PR checkout on backport workflow
  • Additional commits viewable in compare view

Updates fluxcd/gha-workflows/.github/workflows/labels-sync.yaml from 0.11.0 to 0.16.0

Release notes

Sourced from fluxcd/gha-workflows/.github/workflows/labels-sync.yaml's releases.

v0.16.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.14.0...v0.15.0

v0.14.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.13.0...v0.14.0

v0.13.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.12.0...v0.13.0

v0.12.0

What's Changed

New Contributors

Full Changelog: fluxcd/gha-workflows@v0.11.0...v0.12.0

Commits
  • 948f0ba Merge pull request #79 from fluxcd/dependabot/github_actions/dot-github/actio...
  • 215db4f Merge pull request #81 from matheuscscp/unpin-cosign
  • 934d75c Remove the Cosign v2.6.1 pin
  • c86e961 Bump the actions group across 1 directory with 4 updates
  • a84ffbc Merge pull request #80 from matheuscscp/cli-plugin-feature-branch-release
  • 6290d03 Support CLI plugin image releases from branches
  • 439ee95 Merge pull request #75 from fluxcd/dependabot/github_actions/actions-36898c3288
  • da94b51 Bump the actions group across 1 directory with 5 updates
  • 9a3dd2b Merge pull request #76 from fluxcd/allow-pr-checkout
  • 525f8c2 Allow PR checkout on backport workflow
  • Additional commits viewable in compare view

Updates fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml from 0.11.0 to 0.16.0

Release notes

Sourced from fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml's releases.

v0.16.0

What's Changed

Full Changelog: fluxcd/gha-workflows@v0.15.0...v0.16.0

v0.15.0

What's Changed

  • Support CLI plugin image releases from branches by

@dependabot dependabot Bot added area/ci CI related issues and pull requests dependencies Pull requests that update a dependency labels Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ci-fd0162ffc4 branch from 4dd8791 to 2ed882a Compare September 1, 2026 21:34
Bumps the ci group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fluxcd/gha-workflows/.github/workflows/backport.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.16.0` |
| [fluxcd/gha-workflows](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.16.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.2.0` | `6.3.0` |
| [Azure/login](https://github.com/azure/login) | `3.0.0` | `3.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.6.0` |
| [fluxcd/gha-workflows/.github/workflows/controller-release.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.16.0` |
| [fluxcd/gha-workflows/.github/workflows/code-scan.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.16.0` |
| [fluxcd/gha-workflows/.github/workflows/labels-sync.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.16.0` |
| [fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.16.0` |



Updates `fluxcd/gha-workflows/.github/workflows/backport.yaml` from 0.11.0 to 0.16.0
- [Release notes](https://github.com/fluxcd/gha-workflows/releases)
- [Commits](fluxcd/gha-workflows@v0.11.0...v0.16.0)

Updates `fluxcd/gha-workflows` from 0.11.0 to 0.16.0
- [Release notes](https://github.com/fluxcd/gha-workflows/releases)
- [Commits](fluxcd/gha-workflows@v0.11.0...v0.16.0)

Updates `aws-actions/configure-aws-credentials` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@e7f100c...e125382)

Updates `Azure/login` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@532459e...a641126)

Updates `docker/login-action` from 4.2.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@650006c...dbcb813)

Updates `fluxcd/gha-workflows/.github/workflows/controller-release.yaml` from 0.11.0 to 0.16.0
- [Release notes](https://github.com/fluxcd/gha-workflows/releases)
- [Commits](fluxcd/gha-workflows@v0.11.0...v0.16.0)

Updates `fluxcd/gha-workflows/.github/workflows/code-scan.yaml` from 0.11.0 to 0.16.0
- [Release notes](https://github.com/fluxcd/gha-workflows/releases)
- [Commits](fluxcd/gha-workflows@v0.11.0...v0.16.0)

Updates `fluxcd/gha-workflows/.github/workflows/labels-sync.yaml` from 0.11.0 to 0.16.0
- [Release notes](https://github.com/fluxcd/gha-workflows/releases)
- [Commits](fluxcd/gha-workflows@v0.11.0...v0.16.0)

Updates `fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml` from 0.11.0 to 0.16.0
- [Release notes](https://github.com/fluxcd/gha-workflows/releases)
- [Commits](fluxcd/gha-workflows@v0.11.0...v0.16.0)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: Azure/login
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fluxcd/gha-workflows
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fluxcd/gha-workflows/.github/workflows/backport.yaml
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fluxcd/gha-workflows/.github/workflows/code-scan.yaml
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fluxcd/gha-workflows/.github/workflows/controller-release.yaml
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fluxcd/gha-workflows/.github/workflows/labels-sync.yaml
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ci-fd0162ffc4 branch from 2ed882a to 0971c63 Compare October 1, 2026 21:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci CI related issues and pull requests dependencies Pull requests that update a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants