build(deps): Bump the github-actions group with 10 updates - #181
Merged
Merged
Conversation
Bumps the github-actions group with 10 updates: | Package | From | To | | --- | --- | --- | | [devops-actions/.github/.github/workflows/actionlint.yml](https://github.com/devops-actions/.github) | `e537f6767594e8d4cfff18edf24e5b4e899b0e51` | `d364c735203f99cf570835e235fc73e82cd170a5` | | [devops-actions/.github/.github/workflows/actions-dependencies.yml](https://github.com/devops-actions/.github) | `e537f6767594e8d4cfff18edf24e5b4e899b0e51` | `d364c735203f99cf570835e235fc73e82cd170a5` | | [devops-actions/.github/.github/workflows/actions-example-checker.yml](https://github.com/devops-actions/.github) | `e537f6767594e8d4cfff18edf24e5b4e899b0e51` | `d364c735203f99cf570835e235fc73e82cd170a5` | | [devops-actions/.github/.github/workflows/approve-dependabot-pr.yml](https://github.com/devops-actions/.github) | `e537f6767594e8d4cfff18edf24e5b4e899b0e51` | `d364c735203f99cf570835e235fc73e82cd170a5` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` | | [devops-actions/.github/.github/workflows/dependency-review.yml](https://github.com/devops-actions/.github) | `e537f6767594e8d4cfff18edf24e5b4e899b0e51` | `d364c735203f99cf570835e235fc73e82cd170a5` | | [devops-actions/.github/.github/workflows/issue-pr-tag.yml](https://github.com/devops-actions/.github) | `e537f6767594e8d4cfff18edf24e5b4e899b0e51` | `d364c735203f99cf570835e235fc73e82cd170a5` | | [devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml](https://github.com/devops-actions/.github) | `e537f6767594e8d4cfff18edf24e5b4e899b0e51` | `d364c735203f99cf570835e235fc73e82cd170a5` | Updates `devops-actions/.github/.github/workflows/actionlint.yml` from e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5 - [Release notes](https://github.com/devops-actions/.github/releases) - [Commits](devops-actions/.github@e537f67...d364c73) Updates `devops-actions/.github/.github/workflows/actions-dependencies.yml` from e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5 - [Release notes](https://github.com/devops-actions/.github/releases) - [Commits](devops-actions/.github@e537f67...d364c73) Updates `devops-actions/.github/.github/workflows/actions-example-checker.yml` from e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5 - [Release notes](https://github.com/devops-actions/.github/releases) - [Commits](devops-actions/.github@e537f67...d364c73) Updates `devops-actions/.github/.github/workflows/approve-dependabot-pr.yml` from e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5 - [Release notes](https://github.com/devops-actions/.github/releases) - [Commits](devops-actions/.github@e537f67...d364c73) Updates `github/codeql-action/init` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@db488dd...cdf488f) Updates `github/codeql-action/autobuild` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@db488dd...cdf488f) Updates `github/codeql-action/analyze` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@db488dd...cdf488f) Updates `devops-actions/.github/.github/workflows/dependency-review.yml` from e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5 - [Release notes](https://github.com/devops-actions/.github/releases) - [Commits](devops-actions/.github@e537f67...d364c73) Updates `devops-actions/.github/.github/workflows/issue-pr-tag.yml` from e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5 - [Release notes](https://github.com/devops-actions/.github/releases) - [Commits](devops-actions/.github@e537f67...d364c73) Updates `devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml` from e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5 - [Release notes](https://github.com/devops-actions/.github/releases) - [Commits](devops-actions/.github@e537f67...d364c73) --- updated-dependencies: - dependency-name: devops-actions/.github/.github/workflows/actionlint.yml dependency-version: d364c735203f99cf570835e235fc73e82cd170a5 dependency-type: direct:production dependency-group: github-actions - dependency-name: devops-actions/.github/.github/workflows/actions-dependencies.yml dependency-version: d364c735203f99cf570835e235fc73e82cd170a5 dependency-type: direct:production dependency-group: github-actions - dependency-name: devops-actions/.github/.github/workflows/actions-example-checker.yml dependency-version: d364c735203f99cf570835e235fc73e82cd170a5 dependency-type: direct:production dependency-group: github-actions - dependency-name: devops-actions/.github/.github/workflows/approve-dependabot-pr.yml dependency-version: d364c735203f99cf570835e235fc73e82cd170a5 dependency-type: direct:production dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: devops-actions/.github/.github/workflows/dependency-review.yml dependency-version: d364c735203f99cf570835e235fc73e82cd170a5 dependency-type: direct:production dependency-group: github-actions - dependency-name: devops-actions/.github/.github/workflows/issue-pr-tag.yml dependency-version: d364c735203f99cf570835e235fc73e82cd170a5 dependency-type: direct:production dependency-group: github-actions - dependency-name: devops-actions/.github/.github/workflows/rw-ossf-scorecard.yml dependency-version: d364c735203f99cf570835e235fc73e82cd170a5 dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Contributor
|
Tagging @rajbos for notifications |
Contributor
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Snapshot WarningsEnsure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice. OpenSSF Scorecard
Scanned Files
|
rajbos
deleted the
dependabot/github_actions/github-actions-49e5f3fc47
branch
September 1, 2026 07:06
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 10 updates:
e537f6767594e8d4cfff18edf24e5b4e899b0e51d364c735203f99cf570835e235fc73e82cd170a5e537f6767594e8d4cfff18edf24e5b4e899b0e51d364c735203f99cf570835e235fc73e82cd170a5e537f6767594e8d4cfff18edf24e5b4e899b0e51d364c735203f99cf570835e235fc73e82cd170a5e537f6767594e8d4cfff18edf24e5b4e899b0e51d364c735203f99cf570835e235fc73e82cd170a54.37.84.37.94.37.84.37.94.37.84.37.9e537f6767594e8d4cfff18edf24e5b4e899b0e51d364c735203f99cf570835e235fc73e82cd170a5e537f6767594e8d4cfff18edf24e5b4e899b0e51d364c735203f99cf570835e235fc73e82cd170a5e537f6767594e8d4cfff18edf24e5b4e899b0e51d364c735203f99cf570835e235fc73e82cd170a5Updates
devops-actions/.github/.github/workflows/actionlint.ymlfrom e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5Commits
d364c73Merge pull request #355 from devops-actions/dependabot/github_actions/github/...b5b10f3deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9aeb3ee1Merge pull request #354 from devops-actions/dependabot/github_actions/jesseho...ef98149deps: bump jessehouwing/actions-dependency-submission6dfca98Merge pull request #356 from devops-actions/rajbos-fix-dependabot-check-false...6a827f4Fix dependabot-check: only verify author, not committer616cf9fMerge pull request #352 from devops-actions/rajbos-add-copilot-instructions9ffb7f7Add .github/copilot-instructions.md referenced by AGENTS.md09bed07Verify all commits on a Dependabot PR are created by dependabot[bot]2f42b3echore: bump load-available-actions to v3.1.1 in update-scope workflowUpdates
devops-actions/.github/.github/workflows/actions-dependencies.ymlfrom e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5Commits
d364c73Merge pull request #355 from devops-actions/dependabot/github_actions/github/...b5b10f3deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9aeb3ee1Merge pull request #354 from devops-actions/dependabot/github_actions/jesseho...ef98149deps: bump jessehouwing/actions-dependency-submission6dfca98Merge pull request #356 from devops-actions/rajbos-fix-dependabot-check-false...6a827f4Fix dependabot-check: only verify author, not committer616cf9fMerge pull request #352 from devops-actions/rajbos-add-copilot-instructions9ffb7f7Add .github/copilot-instructions.md referenced by AGENTS.md09bed07Verify all commits on a Dependabot PR are created by dependabot[bot]2f42b3echore: bump load-available-actions to v3.1.1 in update-scope workflowUpdates
devops-actions/.github/.github/workflows/actions-example-checker.ymlfrom e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5Commits
d364c73Merge pull request #355 from devops-actions/dependabot/github_actions/github/...b5b10f3deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9aeb3ee1Merge pull request #354 from devops-actions/dependabot/github_actions/jesseho...ef98149deps: bump jessehouwing/actions-dependency-submission6dfca98Merge pull request #356 from devops-actions/rajbos-fix-dependabot-check-false...6a827f4Fix dependabot-check: only verify author, not committer616cf9fMerge pull request #352 from devops-actions/rajbos-add-copilot-instructions9ffb7f7Add .github/copilot-instructions.md referenced by AGENTS.md09bed07Verify all commits on a Dependabot PR are created by dependabot[bot]2f42b3echore: bump load-available-actions to v3.1.1 in update-scope workflowUpdates
devops-actions/.github/.github/workflows/approve-dependabot-pr.ymlfrom e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5Commits
d364c73Merge pull request #355 from devops-actions/dependabot/github_actions/github/...b5b10f3deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9aeb3ee1Merge pull request #354 from devops-actions/dependabot/github_actions/jesseho...ef98149deps: bump jessehouwing/actions-dependency-submission6dfca98Merge pull request #356 from devops-actions/rajbos-fix-dependabot-check-false...6a827f4Fix dependabot-check: only verify author, not committer616cf9fMerge pull request #352 from devops-actions/rajbos-add-copilot-instructions9ffb7f7Add .github/copilot-instructions.md referenced by AGENTS.md09bed07Verify all commits on a Dependabot PR are created by dependabot[bot]2f42b3echore: bump load-available-actions to v3.1.1 in update-scope workflowUpdates
github/codeql-action/initfrom 4.37.8 to 4.37.9Release notes
Sourced from github/codeql-action/init's releases.
Changelog
Sourced from github/codeql-action/init's changelog.
... (truncated)
Commits
cdf488fMerge pull request #4107 from github/update-v4.37.9-920ba7cd17243f38Update changelog for v4.37.9920ba7cMerge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4ecfa6e1Add changelog noteadcdf4aUpdate default bundle to codeql-bundle-v2.26.4486fec2Merge pull request #4099 from github/update-supported-enterprise-server-versions134624cMerge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...ff43db8Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde4605e03Rebuild099c869Update changelog and version after v4.37.8Updates
github/codeql-action/autobuildfrom 4.37.8 to 4.37.9Release notes
Sourced from github/codeql-action/autobuild's releases.
Changelog
Sourced from github/codeql-action/autobuild's changelog.
... (truncated)
Commits
cdf488fMerge pull request #4107 from github/update-v4.37.9-920ba7cd17243f38Update changelog for v4.37.9920ba7cMerge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4ecfa6e1Add changelog noteadcdf4aUpdate default bundle to codeql-bundle-v2.26.4486fec2Merge pull request #4099 from github/update-supported-enterprise-server-versions134624cMerge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...ff43db8Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde4605e03Rebuild099c869Update changelog and version after v4.37.8Updates
github/codeql-action/analyzefrom 4.37.8 to 4.37.9Release notes
Sourced from github/codeql-action/analyze's releases.
Changelog
Sourced from github/codeql-action/analyze's changelog.
... (truncated)
Commits
cdf488fMerge pull request #4107 from github/update-v4.37.9-920ba7cd17243f38Update changelog for v4.37.9920ba7cMerge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4ecfa6e1Add changelog noteadcdf4aUpdate default bundle to codeql-bundle-v2.26.4486fec2Merge pull request #4099 from github/update-supported-enterprise-server-versions134624cMerge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...ff43db8Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde4605e03Rebuild099c869Update changelog and version after v4.37.8Updates
devops-actions/.github/.github/workflows/dependency-review.ymlfrom e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5Commits
d364c73Merge pull request #355 from devops-actions/dependabot/github_actions/github/...b5b10f3deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9aeb3ee1Merge pull request #354 from devops-actions/dependabot/github_actions/jesseho...ef98149deps: bump jessehouwing/actions-dependency-submission6dfca98Merge pull request #356 from devops-actions/rajbos-fix-dependabot-check-false...6a827f4Fix dependabot-check: only verify author, not committer616cf9fMerge pull request #352 from devops-actions/rajbos-add-copilot-instructions9ffb7f7Add .github/copilot-instructions.md referenced by AGENTS.md09bed07Verify all commits on a Dependabot PR are created by dependabot[bot]2f42b3echore: bump load-available-actions to v3.1.1 in update-scope workflowUpdates
devops-actions/.github/.github/workflows/issue-pr-tag.ymlfrom e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5Commits
d364c73Merge pull request #355 from devops-actions/dependabot/github_actions/github/...b5b10f3deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9aeb3ee1Merge pull request #354 from devops-actions/dependabot/github_actions/jesseho...ef98149deps: bump jessehouwing/actions-dependency-submission6dfca98Merge pull request #356 from devops-actions/rajbos-fix-dependabot-check-false...6a827f4Fix dependabot-check: only verify author, not committer616cf9fMerge pull request #352 from devops-actions/rajbos-add-copilot-instructions9ffb7f7Add .github/copilot-instructions.md referenced by AGENTS.md09bed07Verify all commits on a Dependabot PR are created by dependabot[bot]2f42b3echore: bump load-available-actions to v3.1.1 in update-scope workflowUpdates
devops-actions/.github/.github/workflows/rw-ossf-scorecard.ymlfrom e537f6767594e8d4cfff18edf24e5b4e899b0e51 to d364c735203f99cf570835e235fc73e82cd170a5Commits
d364c73Merge pull request #355 from devops-actions/dependabot/github_actions/github/...b5b10f3deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9aeb3ee1Merge pull request #354 from devops-actions/dependabot/github_actions/jesseho...ef98149deps: bump jessehouwing/actions-dependency-submission6dfca98Merge pull request #356 from devops-actions/rajbos-fix-dependabot-check-false...6a827f4Fix dependabot-check: only verify author, not committer616cf9fMerge pull request #352 from devops-actions/rajbos-add-copilot-instructions9ffb7f7Add .github/copilot-instructions.md referenced by AGENTS.md09bed07Verify all commits on a Dependabot PR are created by dependabot[bot]2f42b3echore: bump load-available-actions to v3.1.1 in update-scope workflowDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions