Skip to content

ci: Bump the github-actions group across 1 directory with 4 updates - #16

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-ec3ee0ebaf
Open

ci: Bump the github-actions group across 1 directory with 4 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-ec3ee0ebaf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown

Bumps the github-actions group with 4 updates in the / directory: actions/checkout, withastro/action, actions/deploy-pages and actions/setup-node.

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Commits

Updates withastro/action from 2 to 6

Release notes

Sourced from withastro/action's releases.

v6.0.0

Changelog

  • chore(action): update dependencies for Node, PNPM, Bun, and cache actions @​ollecoffee (#96)

See details of all code changes since previous release.

v5.2.0

Changelog

See details of all code changes since previous release.

v5.1.0

Changelog

See details of all code changes since previous release.

v5.0.2

Changelog

See details of all code changes since previous release.

v5.0.1

Changelog

See details of all code changes since previous release.

v5.0.0

Changelog

  • Update GitHub action versions @​delucis (#85)
  • This release ensures all dependencies are now using pinned versions for improved security and compatibility with GitHub’s “Require actions to be pinned to a full-length commit SHA” setting
  • This release updates the version of upload-pages-artifact used to v4.0.0. See https://github.com/actions/upload-pages-artifact/releases/tag/v4.0.0 for breaking changes.

See details of all code changes since previous release.

v4.2.1

Changelog

... (truncated)

Commits
  • e84f40b chore: update action versions for PNPM, Node, Deno, and cache (#105)
  • b7d5362 Pin upload-pages-artifact to v5 SHA (#102)
  • 4470635 Use upload-pages-artifact action again (#101)
  • 1e076ba Update action version in README (#97)
  • 74d664f chore(action): update dependencies for Node, PNPM, Bun, and cache actions (#96)
  • 15aa0a5 feat(action): add astro build output directory (#94)
  • fc88a70 feat(action): add astro build cache support (#92)
  • fd83e9d Bump versions of GitHub workflow actions (#90)
  • 9811f92 Fix support for .well-known and other routes with a leading . (#88)
  • 3457608 Bring README.md up to date (#86)
  • Additional commits viewable in compare view

Updates actions/deploy-pages from 4 to 5

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.0

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.5

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.4

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.3

Changelog

... (truncated)

Commits
  • cd2ce8f Merge pull request #404 from salmanmkc/node24
  • bbe2a95 Update Node.js version to 24.x
  • 854d7aa Merge pull request #374 from actions/Jcambass-patch-1
  • 306bb81 Add workflow file for publishing releases to immutable action package
  • b742728 Merge pull request #360 from actions/dependabot/npm_and_yarn/npm_and_yarn-513...
  • 7273294 Bump braces in the npm_and_yarn group across 1 directory
  • 963791f Merge pull request #361 from actions/dependabot-friendly
  • 51bb29d Make the rebuild dist workflow safer for Dependabot
  • 89f3d10 Merge pull request #358 from actions/dependabot/npm_and_yarn/non-breaking-cha...
  • bce7355 Merge branch 'main' into dependabot/npm_and_yarn/non-breaking-changes-99c12deb21
  • Additional commits viewable in compare view

Updates actions/setup-node from 4.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@dependabot
dependabot Bot requested a review from jongio as a code owner June 29, 2026 02:41
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-ec3ee0ebaf branch from e001d60 to 4e75203 Compare July 5, 2026 01:03
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-ec3ee0ebaf branch 2 times, most recently from 02a6902 to 429842c Compare July 19, 2026 01:03
Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [withastro/action](https://github.com/withastro/action), [actions/deploy-pages](https://github.com/actions/deploy-pages) and [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v7)

Updates `withastro/action` from 2 to 6
- [Release notes](https://github.com/withastro/action/releases)
- [Commits](withastro/action@v2...v6)

Updates `actions/deploy-pages` from 4 to 5
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@v4...v5)

Updates `actions/setup-node` from 4.4.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@49933ea...8207627)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/deploy-pages
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: withastro/action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-ec3ee0ebaf branch from 429842c to d9658d5 Compare July 26, 2026 01:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants