Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the github-actions group in /.github/workflows with 3 updates: taiki-e/install-action, github/codeql-action and step-security/action-gh-release.

Updates taiki-e/install-action from 2.66.1 to 2.66.7

Release notes

Sourced from taiki-e/install-action's releases.

2.66.7

  • Update prek@latest to 0.2.30.

  • Update release-plz@latest to 0.3.151.

  • Update mise@latest to 2026.1.4.

  • Update vacuum@latest to 0.23.3.

  • Update zizmor@latest to 1.22.0.

  • Update cargo-tarpaulin@latest to 0.35.1.

2.66.6

  • Update prek@latest to 0.2.29.

  • Update zizmor@latest to 1.21.0.

  • Update syft@latest to 1.40.1.

  • Update uv@latest to 0.9.26.

  • Update cargo-insta@latest to 1.46.1.

2.66.5

  • Update wasm-bindgen@latest to 0.2.108.

  • Update osv-scanner@latest to 2.3.2.

2.66.4

  • Update cargo-nextest@latest to 0.9.122.

  • Update wasmtime@latest to 40.0.2.

  • Update uv@latest to 0.9.25.

  • Update mise@latest to 2026.1.2.

  • Update sccache@latest to 0.13.0.

2.66.3

  • Update prek@latest to 0.2.28.

  • Update tombi@latest to 0.7.19.

2.66.2

  • Update cargo-nextest@latest to 0.9.121.

  • Update protoc@latest to 3.33.4.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.66.7] - 2026-01-19

  • Update prek@latest to 0.2.30.

  • Update release-plz@latest to 0.3.151.

  • Update mise@latest to 2026.1.4.

  • Update vacuum@latest to 0.23.3.

  • Update zizmor@latest to 1.22.0.

  • Update cargo-tarpaulin@latest to 0.35.1.

[2.66.6] - 2026-01-16

  • Update prek@latest to 0.2.29.

  • Update zizmor@latest to 1.21.0.

  • Update syft@latest to 1.40.1.

  • Update uv@latest to 0.9.26.

  • Update cargo-insta@latest to 1.46.1.

[2.66.5] - 2026-01-15

  • Update wasm-bindgen@latest to 0.2.108.

  • Update osv-scanner@latest to 2.3.2.

[2.66.4] - 2026-01-14

  • Update cargo-nextest@latest to 0.9.122.

  • Update wasmtime@latest to 40.0.2.

... (truncated)

Commits
  • 542ceba Release 2.66.7
  • 784e3a8 Update changelog
  • cf11c1c Update prek@latest to 0.2.30
  • 3e7bc0c Update release-plz@latest to 0.3.151
  • 6c6cda9 Update mise@latest to 2026.1.4
  • a16894c Update vacuum@latest to 0.23.3
  • ddff92b Update zizmor@latest to 1.22.0
  • e05537c Update mise@latest to 2026.1.3
  • e6d3e93 Update cargo-tarpaulin@latest to 0.35.1
  • 5033209 Address zizmor lint change
  • Additional commits viewable in compare view

Updates github/codeql-action from 4.31.9 to 4.31.10

Release notes

Sourced from github/codeql-action's releases.

v4.31.10

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

  • Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

  • Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

  • Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

  • The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

... (truncated)

Commits
  • cdefb33 Merge pull request #3394 from github/update-v4.31.10-0fa411efd
  • cfa77c6 Update changelog for v4.31.10
  • 0fa411e Merge pull request #3393 from github/update-bundle/codeql-bundle-v2.23.9
  • c284324 Add changelog note
  • 83e7d00 Update default bundle to codeql-bundle-v2.23.9
  • f6a16be Merge pull request #3391 from github/dependabot/npm_and_yarn/npm-minor-f1cdf5...
  • c1f5f1a Rebuild
  • 1805d8d Bump the npm-minor group with 2 updates
  • b2951d2 Merge pull request #3353 from github/kaspersv/bump-min-cli-v-for-overlay
  • 41448d9 Merge pull request #3287 from github/henrymercer/generate-mergeback-last
  • Additional commits viewable in compare view

Updates step-security/action-gh-release from 2.4.2 to 2.5.0

Release notes

Sourced from step-security/action-gh-release's releases.

v2.5.0

What's Changed

Full Changelog: step-security/action-gh-release@v2...v2.5.0

Commits
  • d45511d Merge pull request #64 from step-security/auto-cherry-pick
  • b3d4efb version upgraded
  • 421a408 fix: apply code build script
  • 8ed2fbe feat: mark release as draft until all artifacts are uploaded (#692)
  • 984b481 feat: mark release as draft until all artifacts are uploaded (#692)
  • b268e8e feat: mark release as draft until all artifacts are uploaded (#692)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added area/ci CI/CD area/deps Dependencies labels Jan 19, 2026
@github-actions github-actions bot added the area/config Configuration label Jan 19, 2026
Bumps the github-actions group in /.github/workflows with 3 updates: [taiki-e/install-action](https://github.com/taiki-e/install-action), [github/codeql-action](https://github.com/github/codeql-action) and [step-security/action-gh-release](https://github.com/step-security/action-gh-release).


Updates `taiki-e/install-action` from 2.66.1 to 2.66.7
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@3522286...542ceba)

Updates `github/codeql-action` from 4.31.9 to 4.31.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5d4e8d1...cdefb33)

Updates `step-security/action-gh-release` from 2.4.2 to 2.5.0
- [Release notes](https://github.com/step-security/action-gh-release/releases)
- [Commits](step-security/action-gh-release@5f6a6ab...d45511d)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.66.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: step-security/action-gh-release
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/dot-github/workflows/github-actions-189ebf1232 branch from e37fff3 to 0a16563 Compare January 20, 2026 04:43
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 26, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 26, 2026
@dependabot dependabot bot deleted the dependabot/github_actions/dot-github/workflows/github-actions-189ebf1232 branch January 26, 2026 10:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci CI/CD area/config Configuration area/deps Dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants