Skip to content

chore(deps): bump the github-actions group with 6 updates - #218

Merged
rajbos merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-5db84f1aa7
Sep 29, 2026
Merged

rajbos merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-5db84f1aa7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 6 updates:

Package From To
devops-actions/.github/.github/workflows/actions-dependencies.yml 3abe9f6710c33ede76f8a506b2889ee46a2c9646 672aa7567d97943087954938e9fdce6658f36917
devops-actions/.github/.github/workflows/actions-example-checker.yml 3abe9f6710c33ede76f8a506b2889ee46a2c9646 672aa7567d97943087954938e9fdce6658f36917
devops-actions/.github/.github/workflows/approve-dependabot-pr.yml 3abe9f6710c33ede76f8a506b2889ee46a2c9646 672aa7567d97943087954938e9fdce6658f36917
devops-actions/.github/.github/workflows/dependency-review.yml 3abe9f6710c33ede76f8a506b2889ee46a2c9646 672aa7567d97943087954938e9fdce6658f36917
devops-actions/.github/.github/workflows/issue-pr-tag.yml 3abe9f6710c33ede76f8a506b2889ee46a2c9646 672aa7567d97943087954938e9fdce6658f36917
devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml 3abe9f6710c33ede76f8a506b2889ee46a2c9646 672aa7567d97943087954938e9fdce6658f36917

Updates devops-actions/.github/.github/workflows/actions-dependencies.yml from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917

Commits
  • 672aa75 Merge pull request #362 from devops-actions/dependabot/github_actions/github/...
  • 58fff9a deps: bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2
  • See full diff in compare view

Updates devops-actions/.github/.github/workflows/actions-example-checker.yml from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917

Commits
  • 672aa75 Merge pull request #362 from devops-actions/dependabot/github_actions/github/...
  • 58fff9a deps: bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2
  • See full diff in compare view

Updates devops-actions/.github/.github/workflows/approve-dependabot-pr.yml from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917

Commits
  • 672aa75 Merge pull request #362 from devops-actions/dependabot/github_actions/github/...
  • 58fff9a deps: bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2
  • See full diff in compare view

Updates devops-actions/.github/.github/workflows/dependency-review.yml from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917

Commits
  • 672aa75 Merge pull request #362 from devops-actions/dependabot/github_actions/github/...
  • 58fff9a deps: bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2
  • See full diff in compare view

Updates devops-actions/.github/.github/workflows/issue-pr-tag.yml from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917

Commits
  • 672aa75 Merge pull request #362 from devops-actions/dependabot/github_actions/github/...
  • 58fff9a deps: bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2
  • See full diff in compare view

Updates devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917

Commits
  • 672aa75 Merge pull request #362 from devops-actions/dependabot/github_actions/github/...
  • 58fff9a deps: bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [devops-actions/.github/.github/workflows/actions-dependencies.yml](https://github.com/devops-actions/.github) | `3abe9f6710c33ede76f8a506b2889ee46a2c9646` | `672aa7567d97943087954938e9fdce6658f36917` |
| [devops-actions/.github/.github/workflows/actions-example-checker.yml](https://github.com/devops-actions/.github) | `3abe9f6710c33ede76f8a506b2889ee46a2c9646` | `672aa7567d97943087954938e9fdce6658f36917` |
| [devops-actions/.github/.github/workflows/approve-dependabot-pr.yml](https://github.com/devops-actions/.github) | `3abe9f6710c33ede76f8a506b2889ee46a2c9646` | `672aa7567d97943087954938e9fdce6658f36917` |
| [devops-actions/.github/.github/workflows/dependency-review.yml](https://github.com/devops-actions/.github) | `3abe9f6710c33ede76f8a506b2889ee46a2c9646` | `672aa7567d97943087954938e9fdce6658f36917` |
| [devops-actions/.github/.github/workflows/issue-pr-tag.yml](https://github.com/devops-actions/.github) | `3abe9f6710c33ede76f8a506b2889ee46a2c9646` | `672aa7567d97943087954938e9fdce6658f36917` |
| [devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml](https://github.com/devops-actions/.github) | `3abe9f6710c33ede76f8a506b2889ee46a2c9646` | `672aa7567d97943087954938e9fdce6658f36917` |


Updates `devops-actions/.github/.github/workflows/actions-dependencies.yml` from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917
- [Release notes](https://github.com/devops-actions/.github/releases)
- [Commits](devops-actions/.github@3abe9f6...672aa75)

Updates `devops-actions/.github/.github/workflows/actions-example-checker.yml` from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917
- [Release notes](https://github.com/devops-actions/.github/releases)
- [Commits](devops-actions/.github@3abe9f6...672aa75)

Updates `devops-actions/.github/.github/workflows/approve-dependabot-pr.yml` from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917
- [Release notes](https://github.com/devops-actions/.github/releases)
- [Commits](devops-actions/.github@3abe9f6...672aa75)

Updates `devops-actions/.github/.github/workflows/dependency-review.yml` from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917
- [Release notes](https://github.com/devops-actions/.github/releases)
- [Commits](devops-actions/.github@3abe9f6...672aa75)

Updates `devops-actions/.github/.github/workflows/issue-pr-tag.yml` from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917
- [Release notes](https://github.com/devops-actions/.github/releases)
- [Commits](devops-actions/.github@3abe9f6...672aa75)

Updates `devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml` from 3abe9f6710c33ede76f8a506b2889ee46a2c9646 to 672aa7567d97943087954938e9fdce6658f36917
- [Release notes](https://github.com/devops-actions/.github/releases)
- [Commits](devops-actions/.github@3abe9f6...672aa75)

---
updated-dependencies:
- dependency-name: devops-actions/.github/.github/workflows/actions-dependencies.yml
  dependency-version: 672aa7567d97943087954938e9fdce6658f36917
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: devops-actions/.github/.github/workflows/actions-example-checker.yml
  dependency-version: 672aa7567d97943087954938e9fdce6658f36917
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: devops-actions/.github/.github/workflows/approve-dependabot-pr.yml
  dependency-version: 672aa7567d97943087954938e9fdce6658f36917
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: devops-actions/.github/.github/workflows/dependency-review.yml
  dependency-version: 672aa7567d97943087954938e9fdce6658f36917
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: devops-actions/.github/.github/workflows/issue-pr-tag.yml
  dependency-version: 672aa7567d97943087954938e9fdce6658f36917
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml
  dependency-version: 672aa7567d97943087954938e9fdce6658f36917
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from rajbos as a code owner September 28, 2026 09:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 28, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Tagging @rajbos for notifications

@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA eeb4902.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

.github/workflows/issue-pr-tag.yml

PackageVersionLicenseIssue Type
devops-actions/.github/.github/workflows/issue-pr-tag.yml672aa7567d97943087954938e9fdce6658f36917NullUnknown License

.github/workflows/ossf-analysis.yml

PackageVersionLicenseIssue Type
devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml672aa7567d97943087954938e9fdce6658f36917NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
actions/devops-actions/.github/.github/workflows/issue-pr-tag.yml 672aa7567d97943087954938e9fdce6658f36917 UnknownUnknown
actions/devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml 672aa7567d97943087954938e9fdce6658f36917 UnknownUnknown

Scanned Files

  • .github/workflows/issue-pr-tag.yml
  • .github/workflows/ossf-analysis.yml

@rajbos
rajbos merged commit 153ab99 into main Sep 29, 2026
18 of 19 checks passed
@rajbos
rajbos deleted the dependabot/github_actions/github-actions-5db84f1aa7 branch September 29, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant