Skip to content

Bump the workflows group across 1 directory with 3 updates - #6087

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/workflows-a02a60c2e1
Open

Bump the workflows group across 1 directory with 3 updates#6087
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/workflows-a02a60c2e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the workflows group with 3 updates in the /.github/workflows directory: actions/checkout, actions/stale and CodSpeedHQ/action.

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/stale from 10.4.0 to 11.0.0

Release notes

Sourced from actions/stale's releases.

v11.0.0

What's Changed

Enhancement

Dependency Update

Full Changelog: actions/stale@v10...v11.0.0

Commits
  • 4391f3d Fix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...
  • eaf9131 refactor: update imports to use ES module syntax and improve test structure (...
  • See full diff in compare view

Updates CodSpeedHQ/action from 4.18.5 to 5.0.2

Release notes

Sourced from CodSpeedHQ/action's releases.

v5.0.2

What's Changed

Full Changelog: CodSpeedHQ/action@v5.0.1...v5.0.2

v5.0.1

🚀 Highlights

More precise measurements by default

cycle-estimation is now enabled by default, giving more precise benchmark cycle estimation in Simulation mode. See docs.

New: allocation exclusion

Opt in to exclude-allocations to remove allocator time from benchmarks in Simulation mode and reduce variance. See docs.

samply-based profiler by default on Linux

The walltime profiler now uses samply on all OSes. Set CODSPEED_WALLTIME_PROFILER=perf to restore the previous behavior.

⚠️ Breaking changes

  • cycle-estimation is now enabled by default (see above)
  • The samply-based profiler is now the default on Linux; set CODSPEED_WALLTIME_PROFILER=perf to revert

Details

🚀 Features

🐛 Bug Fixes

💼 Other

🏗️ Refactor

🧪 Testing

⚙️ Internals

... (truncated)

Commits
  • 0ca9cbb Release v5.0.2 🚀
  • 551137a ci: restrict GITHUB_TOKEN to contents: read
  • fc63264 feat: add cycle-estimation and exclude-allocations inputs
  • 8847237 Release v5.0.1 🚀
  • 81795c3 fix: remove yanked 5.0.0 version hash
  • eaace14 docs: bump documented action version to v5
  • a3e4fe0 chore: bump runner version to 5.0.1
  • f87ba88 Release v5.0.0 🚀
  • 7ab72f2 chore: bump runner version to 5.0.0
  • f22792b Release v4.19.1 🚀
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the workflows group with 3 updates in the /.github/workflows directory: [actions/checkout](https://github.com/actions/checkout), [actions/stale](https://github.com/actions/stale) and [CodSpeedHQ/action](https://github.com/codspeedhq/action).


Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v7...3d3c42e)

Updates `actions/stale` from 10.4.0 to 11.0.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@1e223db...4391f3d)

Updates `CodSpeedHQ/action` from 4.18.5 to 5.0.2
- [Release notes](https://github.com/codspeedhq/action/releases)
- [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md)
- [Commits](CodSpeedHQ/action@f99becd...0ca9cbb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workflows
- dependency-name: actions/stale
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: workflows
- dependency-name: CodSpeedHQ/action
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: workflows
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies [bot] PRs that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 11, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 11, 2026 16:26
@dependabot dependabot Bot added dependencies [bot] PRs that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 11, 2026
@conda-bot conda-bot added the cla-signed [bot] added once the contributor has signed the CLA label Aug 11, 2026
@github-project-automation github-project-automation Bot moved this to 🆕 New in 🔎 Review Aug 11, 2026
@codspeed-hq

codspeed-hq Bot commented Aug 11, 2026

Copy link
Copy Markdown

Hooray! CodSpeed harness just leveled up!

The base and head of this comparison were measured with different runner settings, so their benchmark values are not directly comparable.

What changed between base and head:

Re-run the base with the same settings to get a valid performance comparison.


Comparing dependabot/github_actions/dot-github/workflows/workflows-a02a60c2e1 (a332500) with main (3b6a390)1

Open in CodSpeed

Footnotes

  1. No successful run was found on main (9d3af25) during the generation of this report, so 3b6a390 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed [bot] added once the contributor has signed the CLA dependencies [bot] PRs that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

Status: 🆕 New

Development

Successfully merging this pull request may close these issues.

1 participant