Skip to content

chore(deps): bump the actions-minor-and-patch group across 1 directory with 4 updates - #59

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-minor-and-patch-b0fe669ced
Open

chore(deps): bump the actions-minor-and-patch group across 1 directory with 4 updates#59
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-minor-and-patch-b0fe669ced

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the actions-minor-and-patch group with 4 updates in the / directory: actions/setup-node, foundry-rs/foundry-toolchain, actions/setup-python and astral-sh/setup-uv.

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates foundry-rs/foundry-toolchain from 1.9.1 to 1.9.2

Release notes

Sourced from foundry-rs/foundry-toolchain's releases.

v1.9.2

Security

Update the development and CI Node.js version to 24.22.1 (#193), incorporating fixes for Brotli decoder remote code execution (CVE-2026-111497), TLS hostname verification bypasses, and other vulnerabilities disclosed on October 21, 2026.

These fixes are documented in the Node.js security advisory https://nodejs.org/en/blog/vulnerability/october-2026-security-releases.

What's Changed

Full Changelog: foundry-rs/foundry-toolchain@v1.9.1...v1.9.2

Commits
  • dba66c2 fix: upgrade Node.js to patch CVE-2026-111497 (#193)
  • 2226fa3 chore(deps): bump prettier from 3.9.9 to 3.9.10 in the npm-weekly group (#192)
  • be69c4d chore(deps): bump the ci-weekly group with 4 updates (#191)
  • 3545907 chore(deps): bump @​types/node from 26.6.4 to 26.6.5 in the npm-weekly group (...
  • 2e54994 fix(ci): buffer the action update cooldown (#189)
  • 9100cd3 chore(deps): bump @​types/node from 26.6.3 to 26.6.4 in the npm-weekly group (...
  • 25c634d chore(deps): bump the ci-weekly group with 2 updates (#186)
  • 7840435 chore(deps): bump the npm-weekly group with 2 updates (#187)
  • efe890f chore: bump gh-actions to d5402286 (#185)
  • e8d3beb chore(deps): bump the npm-weekly group with 2 updates (#184)
  • Additional commits viewable in compare view

Updates actions/setup-python from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits
  • 6d4fd22 Cache upgrade to 6.3.0 (#1370)
  • ec52d0a Bump @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
  • ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
  • 0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
  • 3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
  • 6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
  • e1be392 Bump @​types/semver from 7.7.1 to 7.8.0 (#1359)
  • 06da627 Bump @​vercel/ncc from 0.44.0 to 0.45.0 (#1357)
  • af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
  • 7aeabeb Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 10.0.1 to 10.3.3

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

🧰 Maintenance

... (truncated)

Commits
  • 68559e9 Use Astral mirror for version manifests with GitHub fallback (#1119)
  • 0192b69 chore: update known checksums for 0.13.6 (#1117)
  • 2f29784 docs: use JSDoc for compatible release specifier comment (#1113)
  • 9c73321 fix: allow whitespace in uv requirement specifiers (#1112)
  • 80fbe01 fix: resolve ~= specifiers with PEP 440 semantics (#1111)
  • 36b7b57 fix: only report a saved cache when saving succeeded (#1110)
  • 56618ca docs: update version references to v10.3.2 (#1104)
  • 07a047e chore: update known checksums for 0.13.5 (#1103)
  • e1b8536 docs: update version references to v10.3.1 (#1102)
  • 18d369b chore(deps): roll up Dependabot updates (#1101)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 26, 2026
@vercel

vercel Bot commented Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
roque Error Error Nov 10, 2026 4:55pm UTC

@dependabot dependabot Bot changed the title Bump the actions-minor-and-patch group across 1 directory with 4 updates chore(deps): bump the actions-minor-and-patch group across 1 directory with 4 updates Nov 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-minor-and-patch-b0fe669ced branch from f72c2e9 to b08ddf5 Compare November 4, 2026 12:20
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-minor-and-patch-b0fe669ced branch from b08ddf5 to f653cc1 Compare November 9, 2026 06:52
@dependabot
chore(deps): bump the actions-minor-and-patch group across 1 director…
0f4e863 
…y with 4 updates

Bumps the actions-minor-and-patch group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [foundry-rs/foundry-toolchain](https://github.com/foundry-rs/foundry-toolchain), [actions/setup-python](https://github.com/actions/setup-python) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `foundry-rs/foundry-toolchain` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/foundry-rs/foundry-toolchain/releases)
- [Changelog](https://github.com/foundry-rs/foundry-toolchain/blob/master/RELEASE.md)
- [Commits](foundry-rs/foundry-toolchain@908c540...dba66c2)

Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@5fda3b9...6d4fd22)

Updates `astral-sh/setup-uv` from 10.0.1 to 10.3.3
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...68559e9)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor-and-patch
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor-and-patch
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor-and-patch
- dependency-name: foundry-rs/foundry-toolchain
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-minor-and-patch-b0fe669ced branch from f653cc1 to 0f4e863 Compare November 10, 2026 16:54

This branch had an error being deployed

1 failed deployment
Preview — 0f4e8633 Deployed Nov 10, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants