Skip to content

Bump the actions group across 4 directories with 11 updates#3906

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-845645b5b3
Open

Bump the actions group across 4 directories with 11 updates#3906
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-845645b5b3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 8 updates in the / directory:

Package From To
actions/checkout 2.7.0 7.0.0
tj-actions/changed-files b1ba699b304f2083b602164e06a89b868c84f076 934b2d2c7e653bb8c968afed5a0428617f09aa24
actions/github-script 3.2.0 9.0.0
mshick/add-pr-comment 2.8.2 3.12.0
actions/setup-node 2.5.2 6.4.0
rtCamp/action-slack-notify 2.3.3 2.4.0
actions/stale 4.1.1 10.3.0
codecov/codecov-action 1.5.2 7.0.0

Bumps the actions group with 1 update in the /.github/actions/setup-mise directory: jdx/mise-action.
Bumps the actions group with 2 updates in the /.github/internal-actions/notify-slack-on-fail-or-recover directory: actions/github-script and rtCamp/action-slack-notify.
Bumps the actions group with 2 updates in the /.github/internal-actions/setup-gcloud directory: google-github-actions/auth and google-github-actions/setup-gcloud.

Updates actions/checkout from 2.7.0 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates tj-actions/changed-files from b1ba699b304f2083b602164e06a89b868c84f076 to 934b2d2c7e653bb8c968afed5a0428617f09aa24

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

47.0.6 - (2026-04-18)

🔄 Update

  • Updated README.md (#2817)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (c23d52b) - (github-actions[bot])

⚙️ Miscellaneous Tasks

  • deps: Bump lodash from 4.17.23 to 4.18.1 (#2837) (9426d40) - (dependabot[bot])
  • deps: Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#2843) (32de080) - (dependabot[bot])
  • deps: Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2844) (2487d12) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 25.5.0 to 25.6.0 (#2846) (cef85a3) - (dependabot[bot])
  • deps-dev: Bump prettier from 3.8.1 to 3.8.3 (#2848) (7b082de) - (dependabot[bot])
  • deps: Bump github/codeql-action from 4.35.1 to 4.35.2 (#2849) (07224ca) - (dependabot[bot])
  • deps-dev: Bump jest from 30.2.0 to 30.3.0 (#2822) (2bb1357) - (dependabot[bot])
  • deps: Bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 (#2829) (cc98117) - (dependabot[bot])
  • deps: Bump yaml from 2.8.2 to 2.8.3 (#2830) (786e421) - (dependabot[bot])
  • deps-dev: Bump eslint-plugin-jest from 29.15.0 to 29.15.1 (#2831) (726b41b) - (dependabot[bot])
  • deps: Bump github/codeql-action from 4.32.6 to 4.35.1 (#2834) (2c3585e) - (dependabot[bot])
  • deps: Bump actions/download-artifact from 8.0.0 to 8.0.1 (#2824) (3d37a7f) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 25.3.5 to 25.5.0 (#2825) (445b0eb) - (dependabot[bot])
  • deps: Bump github/codeql-action from 4.32.5 to 4.32.6 (#2819) (4f892cd) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 25.3.3 to 25.3.5 (#2820) (6118651) - (dependabot[bot])
  • deps: Bump actions/setup-node from 6.2.0 to 6.3.0 (#2818) (e517d7a) - (dependabot[bot])

⬆️ Upgrades

  • Upgraded to v47.0.5 (#2816)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (4750530) - (github-actions[bot])

47.0.5 - (2026-03-03)

🔄 Update

  • Updated README.md (#2805)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (35dace0) - (github-actions[bot])

  • Updated README.md (#2803)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (9ee99eb) - (github-actions[bot])

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • 934b2d2 chore(deps): bump uuid from 13.0.0 to 14.0.0 in the npm_and_yarn group across...
  • 0146bf4 chore(deps-dev): bump @​types/node from 25.7.0 to 25.8.0 (#2868)
  • 6b924b1 chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 (#2862)
  • c0f1c88 chore(deps-dev): bump jest from 30.3.0 to 30.4.2 (#2865)
  • 179874a chore(deps-dev): bump @​types/node from 25.6.0 to 25.7.0 (#2866)
  • 70b968a chore(deps): bump yaml from 2.8.4 to 2.9.0 (#2867)
  • 7dc4d75 chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 (#2860)
  • 37901fa chore(deps): bump yaml from 2.8.3 to 2.8.4 (#2861)
  • 9d0c65d test: push and merge group support (#2856)
  • 778ca51 chore(deps): bump flatted in the npm_and_yarn group across 1 directory
  • Additional commits viewable in compare view

Updates actions/github-script from 3.2.0 to 9.0.0

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

... (truncated)

Commits
  • 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
  • ca10bbd fix: use @​octokit/core/types import for v7 compatibility
  • 86e48e2 merge: incorporate main branch changes
  • c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
  • afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
  • ff8117e ci: fix user-agent test to handle orchestration ID
  • 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
  • 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
  • c17d55b ci: add getOctokit integration test job
  • a047196 test: add getOctokit integration tests via callAsyncFunction
  • Additional commits viewable in compare view

Updates mshick/add-pr-comment from 2.8.2 to 3.12.0

Release notes

Sourced from mshick/add-pr-comment's releases.

v3.12.0

3.12.0 (2026-06-19)

Features

  • support minimizing (hiding) comments (#201) (6a876db)

Bug Fixes

  • handle delete-on-status in proxy comment path (#199) (4361959)

v3.11.0

3.11.0 (2026-04-23)

Features

  • add NOW template variable with configurable date format (#193) (87fe9ef)

v3.10.1

3.10.1 (2026-04-23)

Bug Fixes

  • skip comment creation when deleteOnStatus matches status (#187) (f160eba)

v3.10.0

3.10.0 (2026-04-02)

Features

  • add truncate-separator input and markdown termination (#184) (6bd445f)

v3.9.1

3.9.1 (2026-03-31)

Bug Fixes

v3.9.0

3.9.0 (2026-03-14)

Features

... (truncated)

Changelog

Sourced from mshick/add-pr-comment's changelog.

Changelog

3.12.0 (2026-06-19)

Features

  • support minimizing (hiding) comments (#201) (6a876db)

Bug Fixes

  • handle delete-on-status in proxy comment path (#199) (4361959)

3.11.0 (2026-04-23)

Features

  • add NOW template variable with configurable date format (#193) (87fe9ef)

3.10.1 (2026-04-23)

Bug Fixes

  • skip comment creation when deleteOnStatus matches status (#187) (f160eba)

3.10.0 (2026-04-02)

Features

  • add truncate-separator input and markdown termination (#184) (6bd445f)

3.9.1 (2026-03-31)

Bug Fixes

3.9.0 (2026-03-14)

Features

  • add library exports for programmatic usage (#169) (277cebd)

3.8.0 (2026-03-14)

... (truncated)

Commits
  • ec328af chore(main): release 3.12.0 (#200)
  • 6a876db feat: support minimizing (hiding) comments (#201)
  • 4361959 fix: handle delete-on-status in proxy comment path (#199)
  • dbaea9f chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#...
  • 3f6e586 chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 in the npm_and_yarn gr...
  • 8e49278 chore(main): release 3.11.0 (#194)
  • 87fe9ef feat: add NOW template variable with configurable date format (#193)
  • be5d48d chore(main): release 3.10.1 (#191)
  • 14d916e chore(deps): bump fast-xml-parser from 5.5.9 to 5.7.1 in the npm_and_yarn gro...
  • f160eba fix: skip comment creation when deleteOnStatus matches status (#187)
  • Additional commits viewable in compare view

Updates actions/setup-node from 2.5.2 to 6.4.0

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

v6.2.0

What's Changed

Documentation

Dependency updates:

New Contributors

... (truncated)

Commits

Updates rtCamp/action-slack-notify from 2.3.3 to 2.4.0

Release notes

Sourced from rtCamp/action-slack-notify's releases.

v2.4.0

What's Changed

Changelog:

What's Changed

New Contributors

Full Changelog: rtCamp/action-slack-notify@v2.3.0...v2.4.0

Commits
  • 33ca3be build: update action image to v2.4.0
  • 14ec709 Merge pull request #248 from rtCamp/dependabot/github_actions/softprops/actio...
  • 73602e5 Merge pull request #246 from rtCamp/dependabot/github_actions/docker/setup-bu...
  • 0a2fd06 Merge pull request #249 from rtCamp/dependabot/docker/alpine-5b10f432ef3da1b8...
  • 584ccdf Merge pull request #244 from nktanwar/fix-msg-minimal-heading
  • d1fbafe Bump alpine from 865b95f to 5b10f43
  • ad0d047 Bump softprops/action-gh-release from 2 to 3
  • daf8b1e Bump docker/setup-buildx-action from 3 to 4
  • c58b60e Merge pull request #243 from rtCamp/dependabot/docker/alpine-865b95f46d98cf86...
  • 882c24e Remove message title when MSG_MINIMAL is true Done
  • Additional commits viewable in compare view

Updates actions/stale from 4.1.1 to 10.3.0

Release notes

Sourced from actions/stale's releases.

v10.3.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.3.0

v10.2.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.2.0

v10.1.1

What's Changed

Bug Fix

Improvement

Dependency Upgrades

Bumps the actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `2.7.0` | `7.0.0` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `b1ba699b304f2083b602164e06a89b868c84f076` | `934b2d2c7e653bb8c968afed5a0428617f09aa24` |
| [actions/github-script](https://github.com/actions/github-script) | `3.2.0` | `9.0.0` |
| [mshick/add-pr-comment](https://github.com/mshick/add-pr-comment) | `2.8.2` | `3.12.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `2.5.2` | `6.4.0` |
| [rtCamp/action-slack-notify](https://github.com/rtcamp/action-slack-notify) | `2.3.3` | `2.4.0` |
| [actions/stale](https://github.com/actions/stale) | `4.1.1` | `10.3.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `1.5.2` | `7.0.0` |

Bumps the actions group with 1 update in the /.github/actions/setup-mise directory: [jdx/mise-action](https://github.com/jdx/mise-action).
Bumps the actions group with 2 updates in the /.github/internal-actions/notify-slack-on-fail-or-recover directory: [actions/github-script](https://github.com/actions/github-script) and [rtCamp/action-slack-notify](https://github.com/rtcamp/action-slack-notify).
Bumps the actions group with 2 updates in the /.github/internal-actions/setup-gcloud directory: [google-github-actions/auth](https://github.com/google-github-actions/auth) and [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud).


Updates `actions/checkout` from 2.7.0 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2.7.0...9c091bb)

Updates `tj-actions/changed-files` from b1ba699b304f2083b602164e06a89b868c84f076 to 934b2d2c7e653bb8c968afed5a0428617f09aa24
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@b1ba699...934b2d2)

Updates `actions/github-script` from 3.2.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v3.2.0...3a2844b)

Updates `mshick/add-pr-comment` from 2.8.2 to 3.12.0
- [Release notes](https://github.com/mshick/add-pr-comment/releases)
- [Changelog](https://github.com/mshick/add-pr-comment/blob/main/CHANGELOG.md)
- [Commits](mshick/add-pr-comment@b8f338c...ec328af)

Updates `actions/setup-node` from 2.5.2 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@7c12f80...48b55a0)

Updates `rtCamp/action-slack-notify` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/rtcamp/action-slack-notify/releases)
- [Commits](rtCamp/action-slack-notify@e31e87e...33ca3be)

Updates `actions/stale` from 4.1.1 to 10.3.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@a20b814...eb5cf3a)

Updates `codecov/codecov-action` from 1.5.2 to 7.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@29386c7...fb8b358)

Updates `actions/github-script` from 3.2.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v3.2.0...3a2844b)

Updates `rtCamp/action-slack-notify` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/rtcamp/action-slack-notify/releases)
- [Commits](rtCamp/action-slack-notify@e31e87e...33ca3be)

Updates `jdx/mise-action` from 3.5.1 to 4.2.0
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@146a281...e6a8b39)

Updates `actions/github-script` from 6.4.1 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v3.2.0...3a2844b)

Updates `rtCamp/action-slack-notify` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/rtcamp/action-slack-notify/releases)
- [Commits](rtCamp/action-slack-notify@e31e87e...33ca3be)

Updates `actions/github-script` from 6.4.1 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v3.2.0...3a2844b)

Updates `rtCamp/action-slack-notify` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/rtcamp/action-slack-notify/releases)
- [Commits](rtCamp/action-slack-notify@e31e87e...33ca3be)

Updates `google-github-actions/auth` from 2.1.13 to 3.0.0
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/auth@c200f36...7c6bc77)

Updates `google-github-actions/setup-gcloud` from 2.2.1 to 3.0.1
- [Release notes](https://github.com/google-github-actions/setup-gcloud/releases)
- [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/setup-gcloud@e427ad8...aa5489c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: tj-actions/changed-files
  dependency-version: 934b2d2c7e653bb8c968afed5a0428617f09aa24
  dependency-type: direct:production
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: mshick/add-pr-comment
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: rtCamp/action-slack-notify
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/stale
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: rtCamp/action-slack-notify
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: jdx/mise-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: rtCamp/action-slack-notify
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: rtCamp/action-slack-notify
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: google-github-actions/auth
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: google-github-actions/setup-gcloud
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 26, 2026
@github-actions

Copy link
Copy Markdown

Subscribed to pull request

File Patterns Mentions
**/* @douglowder

Generated by CodeMention

Warning: The preamble and epilogue options in commentConfiguration are deprecated. Use template instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants