Skip to content

ci: bump the github_actions group across 1 directory with 3 updates - #3

Merged
stephenlclarke merged 1 commit into
mainfrom
dependabot/github_actions/github_actions-45fe079c8b
Jul 25, 2026
Merged

ci: bump the github_actions group across 1 directory with 3 updates#3
stephenlclarke merged 1 commit into
mainfrom
dependabot/github_actions/github_actions-45fe079c8b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the github_actions group with 3 updates in the / directory: actions/checkout, SonarSource/sonarqube-scan-action/install-build-wrapper and SonarSource/sonarqube-scan-action.

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates SonarSource/sonarqube-scan-action/install-build-wrapper from 7.2.1 to 8.2.1

Release notes

Sourced from SonarSource/sonarqube-scan-action/install-build-wrapper's releases.

v8.2.1

What's Changed

Bug fix

  • SQSCANGHA-156 GPG signature verification fails when temporary directory path is too long

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.0...v8.2.1

v8.2.0

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0

v8.1.0

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0

v8.0.0

What's Changed

Breaking change

Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0

Commits
  • 2291811 SQSCANGHA-156 GPG signature verification fails when temporary directory path ...
  • 7cdc154 SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (#255)
  • 45f2736 SQSCANGHA-151 Change Code Owners (#254)
  • 7138816 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows (#251)
  • 3581139 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4...
  • c9d327c SQSCANGHA-84 Remove outdated wget/curl references
  • b243e51 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support
  • 375c3f5 SQSCANGHA-149 Add scannerBinariesAuthHeader input for authenticated binary do...
  • 9c78323 SQSCANGHA-144 Add gate jobs to QA workflows for branch protection
  • 7006c44 Update SonarScanner CLI to 8.1.0.6389
  • Additional commits viewable in compare view

Updates SonarSource/sonarqube-scan-action from 7.2.1 to 8.2.1

Release notes

Sourced from SonarSource/sonarqube-scan-action's releases.

v8.2.1

What's Changed

Bug fix

  • SQSCANGHA-156 GPG signature verification fails when temporary directory path is too long

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.0...v8.2.1

v8.2.0

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0

v8.1.0

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0

v8.0.0

What's Changed

Breaking change

Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0

Commits
  • 2291811 SQSCANGHA-156 GPG signature verification fails when temporary directory path ...
  • 7cdc154 SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (#255)
  • 45f2736 SQSCANGHA-151 Change Code Owners (#254)
  • 7138816 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows (#251)
  • 3581139 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4...
  • c9d327c SQSCANGHA-84 Remove outdated wget/curl references
  • b243e51 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support
  • 375c3f5 SQSCANGHA-149 Add scannerBinariesAuthHeader input for authenticated binary do...
  • 9c78323 SQSCANGHA-144 Add gate jobs to QA workflows for branch protection
  • 7006c44 Update SonarScanner CLI to 8.1.0.6389
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 2, 2026
@dependabot
dependabot Bot requested a review from stephenlclarke as a code owner July 2, 2026 11:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github_actions-45fe079c8b branch 2 times, most recently from 796b204 to 9a2f726 Compare July 16, 2026 11:06
Bumps the github_actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [SonarSource/sonarqube-scan-action/install-build-wrapper](https://github.com/sonarsource/sonarqube-scan-action) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `SonarSource/sonarqube-scan-action/install-build-wrapper` from 7.2.1 to 8.2.1
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](SonarSource/sonarqube-scan-action@c7ee0f9...2291811)

Updates `SonarSource/sonarqube-scan-action` from 7.2.1 to 8.2.1
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](SonarSource/sonarqube-scan-action@c7ee0f9...2291811)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github_actions
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github_actions
- dependency-name: SonarSource/sonarqube-scan-action/install-build-wrapper
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github_actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github_actions-45fe079c8b branch from 9a2f726 to 0e69627 Compare July 23, 2026 11:06

@stephenlclarke stephenlclarke left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Validated: pinned action updates pass the required build and coverage check.

@stephenlclarke
stephenlclarke merged commit e8d0f33 into main Jul 25, 2026
1 check passed
@stephenlclarke
stephenlclarke deleted the dependabot/github_actions/github_actions-45fe079c8b branch July 25, 2026 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant