Skip to content

ci(deps): bump the github-actions group across 1 directory with 23 updates#84

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/github-actions-0ebeb5377d
Closed

ci(deps): bump the github-actions group across 1 directory with 23 updates#84
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/github-actions-0ebeb5377d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the github-actions group with 23 updates in the /.github/workflows directory:

Package From To
step-security/harden-runner 2.13.3 2.19.0
actions/checkout 4.2.2 6.0.2
step-security/mise-action 3.4.1 3.6.2
step-security/rust-cache 2.8.2 2.8.4
benchmark-action/github-action-benchmark 1.20.7 1.22.0
step-security/action-gh-release 2.5.0 2.6.1
step-security/setup-buildx-action 3.11.1 4.0.0
step-security/docker-login-action 3.6.0 4.1.0
docker/metadata-action 5.7.0 6.0.0
step-security/docker-build-push-action 6.18.0 7.1.0
actions/upload-artifact 4.6.2 7.0.1
actions/download-artifact 4.3.0 8.0.1
anchore/sbom-action 0.20.0 0.24.0
step-security/action-semantic-pull-request 6.1.1 6.1.2
step-security/paths-filter 3.0.5 4.0.1
taiki-e/install-action 2.67.18 2.75.18
actions/cache 4.2.2 5.0.5
step-security/publish-unit-test-result-action 2.21.1 2.22.0
codecov/codecov-action 5.5.2 6.0.0
github/codeql-action 3.28.18 4.35.2
aquasecurity/trivy-action 0.31.0 0.35.0
googleapis/release-please-action 4.4.0 4.4.1
actions/dependency-review-action 4.8.2 4.9.0

Updates step-security/harden-runner from 2.13.3 to 2.19.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.19.0

What's Changed

New Runner Support

Harden-Runner now supports Depot, Blacksmith, Namespace, and WarpBuild runners with the same egress monitoring, runtime monitoring, and policy enforcement available on GitHub-hosted runners.

Automated Incident Response for Supply Chain Attacks

  • Global block list: Outbound connections to known malicious domains and IPs are now blocked even in audit mode.
  • System-defined detection rules: Harden-Runner will trigger lockdown mode when a high risk event is detected during an active supply chain attack (for example, a process reading the memory of the runner worker process, a common technique for stealing GitHub Actions secrets).

Bug Fixes

Windows and macOS: stability and reliability fixes

Full Changelog: step-security/harden-runner@v2.18.0...v2.19.0

v2.18.0

What's Changed

Global Block List: During supply chain incidents like the recent axios and trivy compromises, StepSecurity will add known malicious domains and IP addresses (IOCs) to a global block list. These will be automatically blocked, even in audit mode, providing immediate protection without requiring any workflow changes.

Deploy on Self-Hosted VM: Added deploy-on-self-hosted-vm input that allows the Harden Runner agent to be installed directly on ephemeral self-hosted Linux runner VMs at workflow runtime. This is intended as an alternative when baking the agent into the VM image is not possible.

Full Changelog: step-security/harden-runner@v2.17.0...v2.18.0

v2.17.0

What's Changed

Policy Store Support

Added use-policy-store and api-key inputs to fetch security policies directly from the StepSecurity Policy Store. Policies can be defined and attached at the workflow, repo, org, or cluster (ARC) level, with the most granular policy taking precedence. This is the preferred method over the existing policy input which requires id-token: write permission. If no policy is found in the store, the action defaults to audit mode.

Full Changelog: step-security/harden-runner@v2.16.1...v2.17.0

v2.16.1

What's Changed

Enterprise tier: Added support for direct IP addresses in the allow list Community tier: Migrated Harden Runner telemetry to a new endpoint

Full Changelog: step-security/harden-runner@v2.16.0...v2.16.1

v2.16.0

What's Changed

  • Updated action.yml to use node24
  • Security fix: Fixed a medium severity vulnerability where the egress block policy could be bypassed via DNS over HTTPS (DoH) by proxying DNS queries through a permitted resolver, allowing data exfiltration even with a restrictive allowed-endpoints list. This issue only affects the Community Tier; the Enterprise Tier is not affected. See GHSA-46g3-37rh-v698 for details.
  • Security fix: Fixed a medium severity vulnerability where the egress block policy could be bypassed via DNS queries over TCP to external resolvers, allowing outbound network communication that evades configured network restrictions. This issue only affects the Community Tier; the Enterprise Tier is not affected. See GHSA-g699-3x6g-wm3g for details.

Full Changelog: step-security/harden-runner@v2.15.1...v2.16.0

v2.15.1

What's Changed

... (truncated)

Commits

Updates actions/checkout from 4.2.2 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates step-security/mise-action from 3.4.1 to 3.6.2

Release notes

Sourced from step-security/mise-action's releases.

v3.6.2

What's Changed

Full Changelog: step-security/mise-action@v3...v3.6.2

v3.6.1

What's Changed

Full Changelog: step-security/mise-action@v3...v3.6.1

v3.5.1

What's Changed

Full Changelog: step-security/mise-action@v3...v3.5.1

Commits
  • 0cfc136 Merge pull request #204 from step-security/auto-cherry-pick
  • 62b63f2 chore: Cherry-picked changes from upstream
  • 1a59a11 fix: apply code build script
  • e58f376 fix: apply code build script
  • f6a2bf3 fix: pass cwd to all exec calls in exportMiseEnv() (#390)
  • d0f9396 Merge pull request #203 from step-security/auto-cherry-pick
  • 4a36d24 chore: Cherry-picked changes from upstream
  • 5cb2ebe fix: apply code build script
  • 9c64721 fix: apply code build script
  • 17bdf40 fix: move file_hash to end of cache key template to prevent prefix matching (...
  • Additional commits viewable in compare view

Updates step-security/rust-cache from 2.8.2 to 2.8.4

Release notes

Sourced from step-security/rust-cache's releases.

v2.8.4

What's Changed

New Contributors

Full Changelog: step-security/rust-cache@v2...v2.8.4

v2.8.3

What's Changed

Full Changelog: step-security/rust-cache@v2...v2.8.3

Commits
  • 2b38572 Merge pull request #278 from step-security/npm-audit-fix
  • 0fa91e4 fix: apply audit fixes
  • 9d0a3d1 fix: apply audit fixes
  • 6cdd89a fix: apply audit fixes
  • b5314ff Merge pull request #277 from step-security/feat/update-subscription-check
  • d43c6e1 Merge branch 'main' into feat/update-subscription-check
  • d18edce Merge pull request #276 from step-security/npm-audit-fix
  • 372d4b9 Update LICENSE
  • 2f4a197 feat: added banner and update subscription check to make maintained actions f...
  • 2d721b7 fix: apply audit fixes
  • Additional commits viewable in compare view

Updates benchmark-action/github-action-benchmark from 1.20.7 to 1.22.0

Release notes

Sourced from benchmark-action/github-action-benchmark's releases.

v1.22.0

  • chore bump node to 24 (#339)

Full Changelog: benchmark-action/github-action-benchmark@v1.21.0...v1.22.0

v1.21.0

  • fix include package name for duplicate bench names (#330)
  • fix avoid duplicate package suffix in Go benchmarks (#337)

Full Changelog: benchmark-action/github-action-benchmark@v1.20.7...v1.21.0

Changelog

Sourced from benchmark-action/github-action-benchmark's changelog.

Unreleased

v1.22.0 - 31 Mar 2026

  • chore bump node to 24 (#339)

v1.21.0 - 02 Mar 2026

  • fix include package name for duplicate bench names (#330)
  • fix avoid duplicate package suffix in Go benchmarks (#337)

v1.20.7 - 06 Sep 2025

  • fix improve parsing for custom benchmarks (#323)

v1.20.5 - 02 Sep 2025

  • feat allow to parse generic cargo bench/criterion units (#280)
  • fix add summary even when failure threshold is surpassed (#285)
  • fix time units are not normalized (#318)

v1.20.4 - 23 Oct 2024

  • feat add typings and validation workflow (#257)

v1.20.3 - 19 May 2024

  • fix Catch2 v.3.5.0 changed output format (#247)

v1.20.2 - 19 May 2024

  • fix Support sub-nanosecond precision on Cargo benchmarks (#246)

v1.20.1 - 02 Apr 2024

  • fix release script

v1.20.0 - 02 Apr 2024

  • fix Rust benchmarks not comparing to baseline (#235)
  • feat Comment on PR and auto update comment (#223)

v1.19.3 - 02 Feb 2024

  • fix ratio is NaN when previous value is 0. Now, print 1 when both values are 0 and +-∞ when divisor is 0 (#222)
  • fix action hangs in some cases for go fiber benchmarks (#225)

v1.19.2 - 26 Jan 2024

  • fix markdown rendering for summary is broken (#218)

... (truncated)

Commits

Updates step-security/action-gh-release from 2.5.0 to 2.6.1

Release notes

Sourced from step-security/action-gh-release's releases.

v2.6.1

What's Changed

Full Changelog: step-security/action-gh-release@v2...v2.6.1

Commits
  • dc29ef0 Merge pull request #79 from step-security/feat/update-subscription-check
  • 2d33635 code formatted
  • 41654ba feat: added banner and update subscription check to make maintained actions f...
  • 22d0246 Merge pull request #78 from step-security/npm-audit-fix
  • 2863adf fix: apply audit fixes
  • 46527ac Merge pull request #77 from step-security/auto-cherry-pick
  • 6b538bc package version upgraded
  • 238aea5 fix: apply code build script
  • 2d13517 fix: preserve discussion category when publishing releases (#765)
  • eb2ecd2 fix: preserve discussion category when publishing releases (#765)
  • Additional commits viewable in compare view

Updates step-security/setup-buildx-action from 3.11.1 to 4.0.0

Release notes

Sourced from step-security/setup-buildx-action's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: step-security/setup-buildx-action@v3...v4.0.0

v3.12.0

What's Changed

New Contributors

Full Changelog: step-security/setup-buildx-action@v3...v3.12.0

Commits
  • f931205 Merge pull request #31 from step-security/fix/banner
  • 863ecf2 fix: added new subscription check code and banner
  • aa38f26 Merge pull request #30 from step-security/auto-cherry-pick
  • 5ede296 chore: updated dist
  • 5e7a8f6 chore: cherry-picked conflicting changes
  • c1d26c0 remove deprecated inputs/outputs
  • b7b9367 remove deprecated inputs/outputs
  • b5a0e7a remove deprecated inputs/outputs
  • 46f6f46 remove deprecated inputs/outputs
  • ab54f58 remove deprecated inputs/outputs
  • Additional commits viewable in compare view

Updates step-security/docker-login-action from 3.6.0 to 4.1.0

Release notes

Sourced from step-security/docker-login-action's releases.

v4.1.0

What's Changed

New Contributors

Full Changelog: step-security/docker-login-action@v3...v4.1.0

v3.7.0

What's Changed

New Contributors

Full Changelog: step-security/docker-login-action@v3...v3.7.0

Commits
  • 870af64 Merge pull request #36 from step-security/fix/subscription_code
  • 31c9f9d fix: unused dependency removed
  • ad9fbe6 fix: dist updated
  • 1bb40b7 Merge branch 'main' into fix/subscription_code
  • d0c3707 fix: fixed subscription check code
  • f047736 Merge pull request #35 from step-security/auto-cherry-pick
  • f3dad61 chore: cherry-picked conflicting changes
  • ae453c3 fix: apply code build script
  • 750d643 fix: apply code build script
  • 243626a fix scoped Docker Hub cleanup path when registry is omitted
  • Additional commits viewable in compare view

Updates docker/metadata-action from 5.7.0 to 6.0.0

Release notes

Sourced from docker/metadata-action's releases.

v6.0.0

@dependabot
ci(deps): bump the github-actions group across 1 directory with 23 up…
7c755b2 
…dates

Bumps the github-actions group with 23 updates in the /.github/workflows directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.3` | `2.19.0` |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `6.0.2` |
| [step-security/mise-action](https://github.com/step-security/mise-action) | `3.4.1` | `3.6.2` |
| [step-security/rust-cache](https://github.com/step-security/rust-cache) | `2.8.2` | `2.8.4` |
| [benchmark-action/github-action-benchmark](https://github.com/benchmark-action/github-action-benchmark) | `1.20.7` | `1.22.0` |
| [step-security/action-gh-release](https://github.com/step-security/action-gh-release) | `2.5.0` | `2.6.1` |
| [step-security/setup-buildx-action](https://github.com/step-security/setup-buildx-action) | `3.11.1` | `4.0.0` |
| [step-security/docker-login-action](https://github.com/step-security/docker-login-action) | `3.6.0` | `4.1.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.7.0` | `6.0.0` |
| [step-security/docker-build-push-action](https://github.com/step-security/docker-build-push-action) | `6.18.0` | `7.1.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `8.0.1` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.0` | `0.24.0` |
| [step-security/action-semantic-pull-request](https://github.com/step-security/action-semantic-pull-request) | `6.1.1` | `6.1.2` |
| [step-security/paths-filter](https://github.com/step-security/paths-filter) | `3.0.5` | `4.0.1` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.67.18` | `2.75.18` |
| [actions/cache](https://github.com/actions/cache) | `4.2.2` | `5.0.5` |
| [step-security/publish-unit-test-result-action](https://github.com/step-security/publish-unit-test-result-action) | `2.21.1` | `2.22.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.2` | `6.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.28.18` | `4.35.2` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.31.0` | `0.35.0` |
| [googleapis/release-please-action](https://github.com/googleapis/release-please-action) | `4.4.0` | `4.4.1` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.8.2` | `4.9.0` |



Updates `step-security/harden-runner` from 2.13.3 to 2.19.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@v2.13.3...8d3c67d)

Updates `actions/checkout` from 4.2.2 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.2.2...de0fac2)

Updates `step-security/mise-action` from 3.4.1 to 3.6.2
- [Release notes](https://github.com/step-security/mise-action/releases)
- [Commits](step-security/mise-action@2fa1b2b...0cfc136)

Updates `step-security/rust-cache` from 2.8.2 to 2.8.4
- [Release notes](https://github.com/step-security/rust-cache/releases)
- [Commits](step-security/rust-cache@v2.8.2...2b38572)

Updates `benchmark-action/github-action-benchmark` from 1.20.7 to 1.22.0
- [Release notes](https://github.com/benchmark-action/github-action-benchmark/releases)
- [Changelog](https://github.com/benchmark-action/github-action-benchmark/blob/master/CHANGELOG.md)
- [Commits](benchmark-action/github-action-benchmark@4bdcce3...a60cea5)

Updates `step-security/action-gh-release` from 2.5.0 to 2.6.1
- [Release notes](https://github.com/step-security/action-gh-release/releases)
- [Commits](step-security/action-gh-release@d45511d...dc29ef0)

Updates `step-security/setup-buildx-action` from 3.11.1 to 4.0.0
- [Release notes](https://github.com/step-security/setup-buildx-action/releases)
- [Commits](step-security/setup-buildx-action@8c8aef2...f931205)

Updates `step-security/docker-login-action` from 3.6.0 to 4.1.0
- [Release notes](https://github.com/step-security/docker-login-action/releases)
- [Commits](step-security/docker-login-action@c3e677a...870af64)

Updates `docker/metadata-action` from 5.7.0 to 6.0.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@v5.7.0...030e881)

Updates `step-security/docker-build-push-action` from 6.18.0 to 7.1.0
- [Release notes](https://github.com/step-security/docker-build-push-action/releases)
- [Commits](step-security/docker-build-push-action@a8c3d08...846549b)

Updates `actions/upload-artifact` from 4.6.2 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.6.2...043fb46)

Updates `actions/download-artifact` from 4.3.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4.3.0...3e5f45b)

Updates `anchore/sbom-action` from 0.20.0 to 0.24.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@v0.20.0...e22c389)

Updates `step-security/action-semantic-pull-request` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/step-security/action-semantic-pull-request/releases)
- [Commits](step-security/action-semantic-pull-request@bc0cf74...75d2dd5)

Updates `step-security/paths-filter` from 3.0.5 to 4.0.1
- [Release notes](https://github.com/step-security/paths-filter/releases)
- [Commits](step-security/paths-filter@6eee183...5c5241b)

Updates `taiki-e/install-action` from 2.67.18 to 2.75.18
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@650c5ca...055f5df)

Updates `actions/cache` from 4.2.2 to 5.0.5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@d4323d4...27d5ce7)

Updates `step-security/publish-unit-test-result-action` from 2.21.1 to 2.22.0
- [Release notes](https://github.com/step-security/publish-unit-test-result-action/releases)
- [Commits](step-security/publish-unit-test-result-action@914f0f6...7dff603)

Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@671740a...57e3a13)

Updates `github/codeql-action` from 3.28.18 to 4.35.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3.28.18...95e58e9)

Updates `aquasecurity/trivy-action` from 0.31.0 to 0.35.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@76071ef...57a97c7)

Updates `googleapis/release-please-action` from 4.4.0 to 4.4.1
- [Release notes](https://github.com/googleapis/release-please-action/releases)
- [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md)
- [Commits](googleapis/release-please-action@16a9c90...5c625bf)

Updates `actions/dependency-review-action` from 4.8.2 to 4.9.0
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@3c4e3dc...2031cfc)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: step-security/mise-action
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: step-security/rust-cache
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: benchmark-action/github-action-benchmark
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: step-security/action-gh-release
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: step-security/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: step-security/docker-login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: step-security/docker-build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: step-security/action-semantic-pull-request
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: step-security/paths-filter
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.75.18
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: step-security/publish-unit-test-result-action
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: googleapis/release-please-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/dependency-review-action
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area/ci CI/CD area/deps Dependencies labels Apr 20, 2026
@github-actions github-actions Bot added area/config Configuration and removed area/deps Dependencies labels Apr 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 27, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 27, 2026
@dependabot dependabot Bot deleted the dependabot/github_actions/dot-github/workflows/github-actions-0ebeb5377d branch April 27, 2026 10:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/ci CI/CD area/config Configuration

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants