chore(deps): bump the github-actions-dependencies group across 9 directories with 19 updates by dependabot[bot] · Pull Request #850 · hoverkraft-tech/ci-github-container

dependabot · 2026-06-26T04:16:36Z

Bumps the github-actions-dependencies group with 11 updates in the / directory:

Package	From	To
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml	`0.37.1`	`0.37.2`
actions/checkout	`6.0.3`	`7.0.0`
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml	`0.26.3`	`0.26.4`
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml	`0.37.1`	`0.37.2`
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml	`0.37.1`	`0.37.2`
hoverkraft-tech/ci-github-common/.github/workflows/linter.yml	`0.37.1`	`0.37.2`
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml	`0.37.1`	`0.37.2`
hoverkraft-tech/ci-github-common/actions/checkout	`0.37.1`	`0.37.2`
hoverkraft-tech/ci-github-common/actions/local-workflow-actions	`0.37.1`	`0.37.2`
hoverkraft-tech/ci-github-common/actions/set-matrix-output	`0.37.1`	`0.37.2`
hoverkraft-tech/ci-github-common/actions/get-matrix-outputs	`0.37.1`	`0.37.2`

Bumps the github-actions-dependencies group with 3 updates in the /actions/docker/build-image directory: hoverkraft-tech/ci-github-common/actions/local-actions, hoverkraft-tech/ci-github-common/actions/slugify and int128/docker-build-cache-config-action.
Bumps the github-actions-dependencies group with 1 update in the /actions/docker/create-images-manifests directory: hoverkraft-tech/ci-github-common/actions/local-actions.
Bumps the github-actions-dependencies group with 2 updates in the /actions/docker/get-image-metadata directory: hoverkraft-tech/ci-github-common/actions/local-actions and hoverkraft-tech/ci-github-common/actions/get-issue-number.
Bumps the github-actions-dependencies group with 2 updates in the /actions/docker/prune-pull-requests-image-tags directory: hoverkraft-tech/ci-github-common/actions/local-actions and hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization.
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/generate-docs directory: hoverkraft-tech/ci-github-common/actions/checkout, losisin/helm-values-schema-json-action and hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request.
Bumps the github-actions-dependencies group with 2 updates in the /actions/helm/release-chart directory: hoverkraft-tech/ci-github-common/actions/checkout and hoverkraft-tech/ci-github-common/actions/local-actions.
Bumps the github-actions-dependencies group with 2 updates in the /actions/helm/test-chart directory: hoverkraft-tech/ci-github-common/actions/checkout and hoverkraft-tech/ci-github-common/actions/local-actions.
Bumps the github-actions-dependencies group with 1 update in the /actions/helm/update-chart-values directory: mikefarah/yq.

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates actions/checkout from 6.0.3 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

Changelog

Sourced from actions/checkout's changelog.

... (truncated)

Commits

9c091bb update error wording (#2467)
1044a6d getting ready for checkout v7 release (#2464)
f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
d914b26 upgrade module to esm and update dependencies (#2463)
537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459)
130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
0f9f3aa Bump actions/publish-immutable-action (#2458)
f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
See full diff in compare view

Updates hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml from 0.26.3 to 0.26.4

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml's releases.

Commits

5ecd2fc docs: update actions and workflows documentation
06ca00d build(deps): Bump the github-actions-dependencies group across 8 directories ...
83646fa docs: update actions and workflows documentation
63184f4 fix(actions/argocd/get-manifest-files): unexpected value assignment on const
5bd10dc docs: update actions and workflows documentation
c751cb6 docs: tell required permissions for token
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/linter.yml from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/linter.yml's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/actions/checkout from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/checkout's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/actions/local-workflow-actions from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/local-workflow-actions's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/actions/set-matrix-output from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/set-matrix-output's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/actions/get-matrix-outputs from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/get-matrix-outputs's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/actions/local-actions from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/local-actions's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates hoverkraft-tech/ci-github-common/actions/slugify from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/slugify's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76 docs: update actions and workflows documentation
See full diff in compare view

Updates int128/docker-build-cache-config-action from 1.58.0 to 1.60.0

Release notes

Sourced from int128/docker-build-cache-config-action's releases.

Commits

e7428bc Release v1.60.0
3ce6590 chore(deps): lock file maintenance (#1495)
a445694 chore(deps): update pnpm to v11.6.0 (#1494)
0c9f8df chore(deps): update node to v24.13.2 (#1491)
a92d952 chore(deps): update int128/wait-for-workflows-action action to v1.80.0 (#1493)
6efde31 chore(deps): update dependency @vercel/ncc to v0.44.0 (#1492)
18bd613 chore(deps): update node to v24.13.1 (#1490)
f1c4040 chore(deps): update int128/release-typescript-action action to v1.71.0 (#1489)
b451e3f chore(deps): update vitest monorepo to v4.1.8 (#1487)
9349910 chore(deps): update int128/wait-for-workflows-action action to v1.79.0 (#1488)
Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/actions/local-actions from 0.37.1 to 0.37.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/local-actions's releases.

Commits

7034f6a fix(actions/parse-ci-reports): improve LCOV supported formats
fb50508 chore: bump the github-actions-dependencies group across 2 directories with 3...
0ca7ebe chore: bump the github-actions-dependencies group across 2 directories with 3...
e259f76Description has been truncated

…ctories with 19 updates Bumps the github-actions-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml](https://github.com/hoverkraft-tech/ci-github-publish) | `0.26.3` | `0.26.4` | | [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [hoverkraft-tech/ci-github-common/.github/workflows/linter.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [hoverkraft-tech/ci-github-common/actions/local-workflow-actions](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [hoverkraft-tech/ci-github-common/actions/set-matrix-output](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | | [hoverkraft-tech/ci-github-common/actions/get-matrix-outputs](https://github.com/hoverkraft-tech/ci-github-common) | `0.37.1` | `0.37.2` | Bumps the github-actions-dependencies group with 3 updates in the /actions/docker/build-image directory: [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-common/actions/slugify](https://github.com/hoverkraft-tech/ci-github-common) and [int128/docker-build-cache-config-action](https://github.com/int128/docker-build-cache-config-action). Bumps the github-actions-dependencies group with 1 update in the /actions/docker/create-images-manifests directory: [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 2 updates in the /actions/docker/get-image-metadata directory: [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common) and [hoverkraft-tech/ci-github-common/actions/get-issue-number](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 2 updates in the /actions/docker/prune-pull-requests-image-tags directory: [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common) and [hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/generate-docs directory: [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common), [losisin/helm-values-schema-json-action](https://github.com/losisin/helm-values-schema-json-action) and [hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 2 updates in the /actions/helm/release-chart directory: [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) and [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 2 updates in the /actions/helm/test-chart directory: [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) and [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 1 update in the /actions/helm/update-chart-values directory: [mikefarah/yq](https://github.com/mikefarah/yq). Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...9c091bb) Updates `hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml` from 0.26.3 to 0.26.4 - [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases) - [Commits](hoverkraft-tech/ci-github-publish@b2562b4...5ecd2fc) Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/.github/workflows/linter.yml` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/local-workflow-actions` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/set-matrix-output` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/get-matrix-outputs` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/slugify` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `int128/docker-build-cache-config-action` from 1.58.0 to 1.60.0 - [Release notes](https://github.com/int128/docker-build-cache-config-action/releases) - [Commits](int128/docker-build-cache-config-action@3674b5d...e7428bc) Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/get-issue-number` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `losisin/helm-values-schema-json-action` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/losisin/helm-values-schema-json-action/releases) - [Commits](losisin/helm-values-schema-json-action@39cdf80...cfefdf4) Updates `hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.37.1 to 0.37.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@624be17...7034f6a) Updates `mikefarah/yq` from 4.53.2 to 4.53.3 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@751d8ad...1b9b4ac) --- updated-dependencies: - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml dependency-version: 0.26.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/checkout dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/local-workflow-actions dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/set-matrix-output dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/get-matrix-outputs dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/slugify dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: int128/docker-build-cache-config-action dependency-version: 1.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/get-issue-number dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/checkout dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: losisin/helm-values-schema-json-action dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/checkout dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/checkout dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: mikefarah/yq dependency-version: 4.53.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-26T04:17:27Z

Hi, thank you for creating your PR, we will check it out very soon

github-actions · 2026-06-26T04:18:39Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        2        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 0, CRITICAL: 0)

┌─────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│   Library   │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├─────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ js-yaml     │ CVE-2026-53550 │ MEDIUM   │ fixed  │ 4.1.1             │ 4.2.0         │ js-yaml is a JavaScript YAML parser and dumper. Prior to    │
│             │                │          │        │                   │               │ 4.2.0, a...                                                 │
│             │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-53550                  │
├─────────────┼────────────────┤          │        ├───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ markdown-it │ CVE-2026-48988 │          │        │ 14.1.1            │ 14.2.0        │ markdown-it is a Markdown parser. Versions 14.1.1 and below │
│             │                │          │        │                   │               │ contain a ...                                               │
│             │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-48988                  │
└─────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 26, 2026

dependabot Bot mentioned this pull request Jun 26, 2026

chore(deps): bump mikefarah/yq from 4.53.2 to 4.53.3 in /actions/helm/update-chart-values in the github-actions-dependencies group across 1 directory #848

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the github-actions-dependencies group across 9 directories with 19 updates#850

chore(deps): bump the github-actions-dependencies group across 9 directories with 19 updates#850
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-2e78aa6f05

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

github-actions Bot commented Jun 26, 2026

Uh oh!

github-actions Bot commented Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 26, 2026

0.37.2

Release Summary

Breaking change(s)

What's Changed

v7.0.0

What's Changed

New Contributors

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

0.26.4

Release Summary

Breaking changes

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

v1.60.0

What's Changed

v1.59.0

What's Changed

0.37.2

Release Summary

Breaking change(s)

What's Changed

Uh oh!

github-actions Bot commented Jun 26, 2026

Uh oh!

github-actions Bot commented Jun 26, 2026

Super-linter summary

Uh oh!