chore(deps): bump the github-actions group across 1 directory with 40 updates - #656
Open
dependabot[bot] wants to merge 3 commits into
Open
chore(deps): bump the github-actions group across 1 directory with 40 updates#656dependabot[bot] wants to merge 3 commits into
dependabot[bot] wants to merge 3 commits into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
… updates Bumps the github-actions group with 40 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.3.1` | `6.2.2` | | [aws-actions/aws-secretsmanager-get-secrets](https://github.com/aws-actions/aws-secretsmanager-get-secrets) | `2.0.10` | `3.0.1` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.2.2` | `3.2.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.2.0` | `5.6.0` | | [liquibase/build-logic/.github/actions/setup-maven-settings](https://github.com/liquibase/build-logic) | `2660ba32055efd3301bcf624a3d60ca8b11cc482` | `fef562bec397dcb4a352540cd0136407a7d1f368` | | [actions/checkout](https://github.com/actions/checkout) | `4.3.1` | `7.0.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.66` | `1.0.176` | | [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact) | `b54d29a59e55046d1f7fc8226cdda507e6b9cf62` | `f275313e70c08f6120db482d7a6b98377786765b` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.35.1` | `4.37.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.35.1` | `4.37.1` | | [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) | `7.1.1` | `7.5.1` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.5.0` | `3.1.0` | | [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `4.0.0` | `4.0.1` | | [spacelift-io/setup-spacectl](https://github.com/spacelift-io/setup-spacectl) | `2.0.0` | `2.3.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [rtCamp/action-slack-notify](https://github.com/rtcamp/action-slack-notify) | `2.3.3` | `2.4.0` | | [liquibase/build-logic/.github/actions/normalize-os](https://github.com/liquibase/build-logic) | `2660ba32055efd3301bcf624a3d60ca8b11cc482` | `fef562bec397dcb4a352540cd0136407a7d1f368` | | [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) | `6.3.0` | `7.0.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.6.1` | `3.0.2` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.8` | `8.1.1` | | [robinraju/release-downloader](https://github.com/robinraju/release-downloader) | `1.12` | `1.13` | | [actions/github-script](https://github.com/actions/github-script) | `8.0.0` | `9.0.0` | | [dorny/test-reporter](https://github.com/dorny/test-reporter) | `1.9.1` | `3.0.0` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.299.0` | `1.319.0` | | [mislav/bump-homebrew-formula-action](https://github.com/mislav/bump-homebrew-formula-action) | `3.0` | `4.2` | | [liquibase/liquibase-secure-ansible/.github/workflows/deploy-role.yml](https://github.com/liquibase/liquibase-secure-ansible) | `5.2.0` | `5.2.1` | | [hashicorp/vault-action](https://github.com/hashicorp/vault-action) | `3.4.0` | `4.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `6.3.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.2.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.0.0` | `4.4.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.0.0` | `7.3.0` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `4.1.1` | `4.1.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.33.0` | `4.37.1` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.11` | `0.24.0` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.35.0` | `0.36.0` | | [anchore/scan-action](https://github.com/anchore/scan-action) | `7.3.2` | `7.4.0` | | [actions/cache](https://github.com/actions/cache) | `5.0.4` | `6.1.0` | | [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `18` | `21` | | [Codex-/await-remote-run](https://github.com/codex-/await-remote-run) | `1fd400f3e2033480390bd521e6626b24365c9c20` | `a56c556e6434d2d7ec9438dc656143b39532324e` | Updates `aws-actions/configure-aws-credentials` from 4.3.1 to 6.2.2 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@v4.3.1...517a711) Updates `aws-actions/aws-secretsmanager-get-secrets` from 2.0.10 to 3.0.1 - [Release notes](https://github.com/aws-actions/aws-secretsmanager-get-secrets/releases) - [Commits](aws-actions/aws-secretsmanager-get-secrets@a9a7eb4...2cb1a46) Updates `actions/create-github-app-token` from 2.2.2 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@v2.2.2...bcd2ba4) Updates `actions/setup-java` from 5.2.0 to 5.6.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@be666c2...03ad4de) Updates `liquibase/build-logic/.github/actions/setup-maven-settings` from 2660ba3 to fef562b - [Release notes](https://github.com/liquibase/build-logic/releases) - [Commits](2660ba3...fef562b) Updates `actions/checkout` from 4.3.1 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.3.1...9c091bb) Updates `anthropics/claude-code-action` from 1.0.66 to 1.0.176 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@64c7a0e...700e7f8) Updates `geekyeggo/delete-artifact` from b54d29a59e55046d1f7fc8226cdda507e6b9cf62 to f275313e70c08f6120db482d7a6b98377786765b - [Release notes](https://github.com/geekyeggo/delete-artifact/releases) - [Changelog](https://github.com/GeekyEggo/delete-artifact/blob/main/CHANGELOG.md) - [Commits](GeekyEggo/delete-artifact@b54d29a...f275313) Updates `github/codeql-action/init` from 4.35.1 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c10b806...7188fc3) Updates `github/codeql-action/analyze` from 4.35.1 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c10b806...7188fc3) Updates `release-drafter/release-drafter` from 7.1.1 to 7.5.1 - [Release notes](https://github.com/release-drafter/release-drafter/releases) - [Commits](release-drafter/release-drafter@139054a...4d75298) Updates `dependabot/fetch-metadata` from 2.5.0 to 3.1.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](dependabot/fetch-metadata@21025c7...25dd0e3) Updates `hashicorp/setup-terraform` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/hashicorp/setup-terraform/releases) - [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md) - [Commits](hashicorp/setup-terraform@5e8dbf3...dfe3c3f) Updates `spacelift-io/setup-spacectl` from 2.0.0 to 2.3.0 - [Release notes](https://github.com/spacelift-io/setup-spacectl/releases) - [Commits](spacelift-io/setup-spacectl@d0e2c81...7ca28b2) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4.6.2...043fb46) Updates `rtCamp/action-slack-notify` from 2.3.3 to 2.4.0 - [Release notes](https://github.com/rtcamp/action-slack-notify/releases) - [Commits](rtCamp/action-slack-notify@e31e87e...33ca3be) Updates `liquibase/build-logic/.github/actions/normalize-os` from 2660ba3 to fef562b - [Release notes](https://github.com/liquibase/build-logic/releases) - [Commits](2660ba3...fef562b) Updates `crazy-max/ghaction-import-gpg` from 6.3.0 to 7.0.0 - [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases) - [Commits](crazy-max/ghaction-import-gpg@e89d409...2dc316d) Updates `softprops/action-gh-release` from 2.6.1 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@153bb8e...3d0d988) Updates `peter-evans/create-pull-request` from 7.0.8 to 8.1.1 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@v7.0.8...5f6978f) Updates `robinraju/release-downloader` from 1.12 to 1.13 - [Release notes](https://github.com/robinraju/release-downloader/releases) - [Commits](robinraju/release-downloader@daf26c5...28fc21f) Updates `actions/github-script` from 8.0.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@ed59741...3a2844b) Updates `dorny/test-reporter` from 1.9.1 to 3.0.0 - [Release notes](https://github.com/dorny/test-reporter/releases) - [Changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md) - [Commits](dorny/test-reporter@31a54ee...a43b3a5) Updates `ruby/setup-ruby` from 1.299.0 to 1.319.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@3ff19f5...003a5c4) Updates `mislav/bump-homebrew-formula-action` from 3.0 to 4.2 - [Release notes](https://github.com/mislav/bump-homebrew-formula-action/releases) - [Commits](mislav/bump-homebrew-formula-action@581d1a9...f865c8b) Updates `liquibase/liquibase-secure-ansible/.github/workflows/deploy-role.yml` from 5.2.0 to 5.2.1 - [Release notes](https://github.com/liquibase/liquibase-secure-ansible/releases) - [Commits](liquibase/liquibase-secure-ansible@21cb490...065c5a0) Updates `hashicorp/vault-action` from 3.4.0 to 4.0.0 - [Release notes](https://github.com/hashicorp/vault-action/releases) - [Changelog](https://github.com/hashicorp/vault-action/blob/main/CHANGELOG.md) - [Commits](hashicorp/vault-action@4c06c5c...892a268) Updates `actions/setup-python` from 5.6.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a26af69...ece7cb0) Updates `docker/setup-buildx-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@4d04d5d...bb05f3f) Updates `docker/setup-qemu-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@ce36039...96fe6ef) Updates `docker/login-action` from 4.0.0 to 4.4.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@b45d80f...af1e73f) Updates `docker/build-push-action` from 7.0.0 to 7.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@d08e5c3...53b7df9) Updates `sigstore/cosign-installer` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@cad07c2...6f9f177) Updates `github/codeql-action/upload-sarif` from 4.33.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.33.0...7188fc3) Updates `anchore/sbom-action` from 0.20.11 to 0.24.0 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@43a17d6...e22c389) Updates `aquasecurity/trivy-action` from 0.35.0 to 0.36.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@57a97c7...ed142fd) Updates `anchore/scan-action` from 7.3.2 to 7.4.0 - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md) - [Commits](anchore/scan-action@7037fa0...e116508) Updates `actions/cache` from 5.0.4 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@6682284...55cc834) Updates `dawidd6/action-download-artifact` from 18 to 21 - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](dawidd6/action-download-artifact@1f8785f...b6e2e70) Updates `Codex-/await-remote-run` from 1fd400f3e2033480390bd521e6626b24365c9c20 to a56c556e6434d2d7ec9438dc656143b39532324e - [Release notes](https://github.com/codex-/await-remote-run/releases) - [Commits](Codex-/await-remote-run@1fd400f...a56c556) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/scan-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.176 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: aws-actions/aws-secretsmanager-get-secrets dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: Codex-/await-remote-run dependency-version: a56c556e6434d2d7ec9438dc656143b39532324e dependency-type: direct:production dependency-group: github-actions - dependency-name: crazy-max/ghaction-import-gpg dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dawidd6/action-download-artifact dependency-version: '21' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dependabot/fetch-metadata dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dorny/test-reporter dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: geekyeggo/delete-artifact dependency-version: f275313e70c08f6120db482d7a6b98377786765b dependency-type: direct:production dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: hashicorp/setup-terraform dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: hashicorp/vault-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: liquibase/build-logic/.github/actions/normalize-os dependency-version: fae61e6 dependency-type: direct:production dependency-group: github-actions - dependency-name: liquibase/build-logic/.github/actions/setup-maven-settings dependency-version: fae61e6 dependency-type: direct:production dependency-group: github-actions - dependency-name: liquibase/liquibase-secure-ansible/.github/workflows/deploy-role.yml dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: mislav/bump-homebrew-formula-action dependency-version: '4.2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: release-drafter/release-drafter dependency-version: 7.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: robinraju/release-downloader dependency-version: '1.13' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: rtCamp/action-slack-notify dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ruby/setup-ruby dependency-version: 1.319.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: sigstore/cosign-installer dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: spacelift-io/setup-spacectl dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-d160427e1b
branch
from
July 17, 2026 12:35
b3142de to
b335dd2
Compare
v7 refuses to check out fork pr code from pull_request_target unless allow-unsafe-pr-checkout is set, so the bump alone would break CI for every external contributor PR in the repos that call these workflows.
Contributor
|
Pushed a commit here so the bump and the fix land together. actions/checkout v7 refuses to check out fork pull request code from a Same fix we already did in core: liquibase/liquibase#7833, and in liquibase/liquibase-cassandra#481. The commit adds the input to the 7 fork-head checkouts: 2 in os-extension-test.yml, 4 in pro-extension-test.yml, 1 in sonar-coverage-merge.yml. The pwn-request risk it guards against is already covered by the Note that pushing here takes the branch out of dependabot's hands, so this one needs a manual merge. |
…ions/github-actions-d160427e1b # Conflicts: # .github/workflows/reusable-docker-scan.yml
filipelautert
approved these changes
Aug 7, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 40 updates in the / directory:
4.3.16.2.22.0.103.0.12.2.23.2.05.2.05.6.02660ba32055efd3301bcf624a3d60ca8b11cc482fef562bec397dcb4a352540cd0136407a7d1f3684.3.17.0.01.0.661.0.176b54d29a59e55046d1f7fc8226cdda507e6b9cf62f275313e70c08f6120db482d7a6b98377786765b4.35.14.37.14.35.14.37.17.1.17.5.12.5.03.1.04.0.04.0.12.0.02.3.04.6.27.0.12.3.32.4.02660ba32055efd3301bcf624a3d60ca8b11cc482fef562bec397dcb4a352540cd0136407a7d1f3686.3.07.0.02.6.13.0.27.0.88.1.11.121.138.0.09.0.01.9.13.0.01.299.01.319.03.04.25.2.05.2.13.4.04.0.05.6.06.3.04.0.04.2.04.0.04.2.04.0.04.4.07.0.07.3.04.1.14.1.24.33.04.37.10.20.110.24.00.35.00.36.07.3.27.4.05.0.46.1.018211fd400f3e2033480390bd521e6626b24365c9c20a56c556e6434d2d7ec9438dc656143b39532324eUpdates
aws-actions/configure-aws-credentialsfrom 4.3.1 to 6.2.2Release notes
Sourced from aws-actions/configure-aws-credentials's releases.
... (truncated)
Changelog
Sourced from aws-actions/configure-aws-credentials's changelog.
... (truncated)
Commits
517a711chore(main): release 6.2.2 (#1876)d01d678chore: release 6.2.28efa52bchore(deps-dev): bump vitest dependencies (#1874)8e1eed5chore(deps-dev): bump@smithy/property-providerfrom 4.4.4 to 4.4.6 (#1869)112421achore(deps-dev): bump@biomejs/biomefrom 2.5.1 to 2.5.2 (#1868)fbc01c6chore(deps-dev): bump@types/nodefrom 26.0.1 to 26.1.0 (#1871)b12ca87chore(deps-dev): bump memfs from 4.57.8 to 4.58.0 (#1873)d314f7fchore: Update dista53b65bchore(deps): bump@aws-sdk/client-stsfrom 3.1076.0 to 3.1080.0 (#1867)338d2c1chore(deps-dev): bump sigstore from 4.1.0 to 4.1.1 (#1864)Updates
aws-actions/aws-secretsmanager-get-secretsfrom 2.0.10 to 3.0.1Release notes
Sourced from aws-actions/aws-secretsmanager-get-secrets's releases.
Commits
2cb1a46Bump handlebars from 4.7.8 to 4.7.9 (#301)ebbee5cGrant write permissions to the release workflow (#300)3a411b6Bump version from 2.0.11 to 3.0.0 (#297)07435e3Remove actions/github, update actions/core (#299)bed0d09Update dependencies (#298)ca8dc62chore: Bump flatted from 3.3.3 to 3.4.2 (#295)9c2003cUpdate dependencies (#292)8d2df8dAdd versioned user-agent to AWS API calls (#272)aa511bffix: use OIDC for Codecov (#266)3f3c975Replace push dist/ with check dist/ (#256)Updates
actions/create-github-app-tokenfrom 2.2.2 to 3.2.0Release notes
Sourced from actions/create-github-app-token's releases.
... (truncated)
Changelog
Sourced from actions/create-github-app-token's changelog.
Commits
bcd2ba4chore(main): release 3.2.0 (#370)f24bbd8fix: validate private-key input (#376)363531bdocs: capitalize Git as a proper noun in README (#374)fd28011docs: update procedure to configure Git (#287)85eb8ddfeat: support full repository names inrepositoriesinput (#372)c9aabb8build(deps-dev): bump yaml from 2.8.3 to 2.8.4 in the development-dependencie...e02e816build(deps-dev): bump undici from 7.24.6 to 8.2.0 (#366)8d835bfbuild(deps-dev): bump esbuild from 0.27.4 to 0.28.0 in the development-depend...952a2a7feat: add support for enterprise-level GitHub Apps (#263)43e5c34fix(deps): bump@actions/corefrom 3.0.0 to 3.0.1 in the production-dependenc...Updates
actions/setup-javafrom 5.2.0 to 5.6.0Release notes
Sourced from actions/setup-java's releases.
... (truncated)
Commits
03ad4deBackport #1097/#1098: cache Maven and Gradle wrapper distributions separately...d229d2eBackport #1111: Preserve Maven toolchains across repeated setup-java runs (#1...bbf0f69dist: Cover Tencent Kona JDK 25 (#1110)513edc4feat: expose cache-primary-key output (#597) [v5 backport] (#1089)62df799Add Maven compiler problem matcher for javac diagnostics (#1087)176156achore: bump version to 5.6.0 for v5 release linebf7b8debuild: rebuild dist for backported changes (#1079, #1083, #1084)0173e6dInfer distribution from asdf .tool-versions vendor prefix (#1084)f45cd82Rename jdkFile input to jdk-file with deprecated alias (#1083)e2863adMap Zulu x86 architecture to i686 for Azul Metadata API (#1079)Updates
liquibase/build-logic/.github/actions/setup-maven-settingsfrom 2660ba3 to fef562bCommits
fef562bci(TECHOPS-818): read Cloudflare R2 creds from /vault/devops, not /vault/liqu...fae61e6feat(ci): retarget repo.liquibase.com S3→R2 — package writer + readers (TECHO...d563fadMerge pull request #655 from liquibase/simplify-os-extension-test-verifyf2cdd36ci: pass skipITs via env var to satisfy code-scanning (no ${{ }} in run script)07724fbci: run extension tests viamvn verifyso integration-test failures fail th...d2575c2ci: label version-bump-after-release PRs with sdou (#654)c0a432ffix(vuln-scan): make Trivy VEX suppression deterministic via local merged Ope...5e72097Merge pull request #639 from liquibase/collapse-stale-claude-reviews018079cfeat(vuln-scan): emit VEX-suppressed findings in Trivy JSON reports [TECHOPS-...bff1cdbTECHOPS-630: bump Docker Scout CLI pin to v1.23.1 to fix VEX panic (#647)Updates
actions/checkoutfrom 4.3.1 to 7.0.0Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)df4cb1cUpdate changelog for v6.0.3 (#2446)Updates
anthropics/claude-code-actionfrom 1.0.66 to 1.0.176Release notes
Sourced from anthropics/claude-code-action's releases.