Skip to content

chore(deps): bump the actions-version-updates group across 1 directory with 12 updates#37509

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/dot-github/workflows/actions-version-updates-b7f60477f4
Open

chore(deps): bump the actions-version-updates group across 1 directory with 12 updates#37509
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/dot-github/workflows/actions-version-updates-b7f60477f4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps the actions-version-updates group with 12 updates in the /.github/workflows directory:

Package From To
reviewdog/action-actionlint 1.71.0 1.72.0
actions/create-github-app-token 2.2.1 3.0.0
actions/download-artifact 8.0.0 8.0.1
marocchino/sticky-pull-request-comment 2.9.4 3.0.2
leanprover-community/privilege-escalation-bridge 1.1.0 1.2.0
styfle/cancel-workflow-action 0.13.0 0.13.1
corentinmusard/otel-cicd-action 4.0.0 4.0.1
dawidd6/action-download-artifact 16 19
actions-cool/check-user-permission 2.3.0 2.4.0
octokit/request-action 2.4.0 3.0.0
softprops/action-gh-release 2.5.0 2.6.1
actions/cache 4.3.0 5.0.4

Updates reviewdog/action-actionlint from 1.71.0 to 1.72.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.72.0

v1.72.0: PR #196 - chore(deps): update actionlint to 1.7.12

Commits
  • 6fb7acc bump v1.72.0
  • b2a904a Merge branch 'main' into releases/v1
  • 5eaffa1 Merge pull request #196 from reviewdog/depup/actionlint
  • 39a6754 chore(deps): update actionlint to 1.7.12
  • d39025c Merge pull request #195 from reviewdog/renovate/docker-setup-buildx-action-4.x
  • 2e8272d Merge pull request #194 from reviewdog/renovate/docker-setup-qemu-action-4.x
  • 128d9b7 Merge pull request #190 from reviewdog/renovate/shogo82148-actions-create-rel...
  • 1674e4f chore(deps): update docker/setup-buildx-action action to v4
  • 8fdb9d2 Merge pull request #189 from reviewdog/renovate/docker-setup-buildx-action-3.x
  • a518ce8 Merge pull request #188 from reviewdog/renovate/peter-evans-create-pull-reque...
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 2.2.1 to 3.0.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.0.0

3.0.0 (2026-03-14)

Bug Fixes

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
  • Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

v3.0.0-beta.6

3.0.0-beta.6 (2026-03-13)

Bug Fixes

  • deps: bump @​actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
  • deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
  • deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
  • deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

v3.0.0-beta.5

3.0.0-beta.5 (2026-03-13)

  • fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (d53a1cd)

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.

v3.0.0-beta.4

3.0.0-beta.4 (2026-03-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)
  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)
  • deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
  • deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)

... (truncated)

Commits
  • f8d387b build(release): 3.0.0 [skip ci]
  • d2129bd style: remove extra blank line in release workflow
  • 77b94ef build: refresh generated artifacts
  • 3ab4c66 chore: move undici to devDependencies
  • 739cf66 docs: update README action versions
  • db40289 build(deps): bump actions versions in test.yml
  • 496a7ac test: migrate from AVA to Node.js native test runner (#346)
  • 3870dc3 Rename end-to-end proxy job in test workflow
  • 4451bcb fix!: require NODE_USE_ENV_PROXY for proxy support (#342)
  • dce0ab0 fix: remove custom proxy handling (#143)
  • Additional commits viewable in compare view

Updates actions/download-artifact from 8.0.0 to 8.0.1

Release notes

Sourced from actions/download-artifact's releases.

v8.0.1

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

Commits

Updates marocchino/sticky-pull-request-comment from 2.9.4 to 3.0.2

Release notes

Sourced from marocchino/sticky-pull-request-comment's releases.

v3.0.2

What's Changed

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.1...v3.0.2

v3.0.1

What's Changed

  • Update deps
  • Change build system from ncc to rollup
  • Use pull_request trigger in github action

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.0...v3.0.1

v3.0.0

What's Changed

  • Update node to 24
  • Update deps

New Contributors

Full Changelog: marocchino/sticky-pull-request-comment@v2.9.4...v3.0.0

Commits

Updates leanprover-community/privilege-escalation-bridge from 1.1.0 to 1.2.0

Release notes

Sourced from leanprover-community/privilege-escalation-bridge's releases.

v1.2.0

What's Changed

Full Changelog: leanprover-community/privilege-escalation-bridge@v1.1.0...v1.2.0

Commits
  • f5dfe31 chore: add release docs+scripts
  • 45a92a4 ci: add step to check that dist/ is up to date
  • 032c80e feat: override_json input
  • 8bea422 fix: fail when extract mapping does not resolve
  • 456add4 ci: add actionlint and act tests (#1)
  • a19dae8 doc: note that token has no implicit default
  • See full diff in compare view

Updates styfle/cancel-workflow-action from 0.13.0 to 0.13.1

Release notes

Sourced from styfle/cancel-workflow-action's releases.

0.13.1

Patches

  • Fix: update Node.js runtime from 20 to 24: #217
Commits

Updates corentinmusard/otel-cicd-action from 4.0.0 to 4.0.1

Release notes

Sourced from corentinmusard/otel-cicd-action's releases.

v4.0.1

Fixed

  • Updated dependencies
Changelog

Sourced from corentinmusard/otel-cicd-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[4.0.1] - 2026-03-18

Fixed

  • Updated dependencies

[4.0.0] - 2026-02-07

⚠ BREAKING CHANGES

Upgraded action from node20 to node24.

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

[3.0.0] - 2026-01-30

⚠ BREAKING CHANGES

  • Upgraded OpenTelemetry JS SDK to v2
  • The parentSpanId field on the Span and ReadableSpan interfaces was replaced by parentSpanContext, to adhere to the OTel spec: span.parentSpanId -> span.parentSpanContext?.spanId

Added

Added missing semconv attributes:

  • cicd.pipeline.action.name
  • cicd.pipeline.task.run.url.full
  • cicd.pipeline.result
  • cicd.pipeline.run.state
  • cicd.pipeline.task.run.result
  • cicd.worker.id
  • cicd.worker.name

Fixed

  • Updated dependencies

[2.2.4] - 2025-08-07

Fixed

... (truncated)

Commits

Updates dawidd6/action-download-artifact from 16 to 19

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v19

What's Changed

Full Changelog: dawidd6/action-download-artifact@v18...v19

v18

What's Changed

Full Changelog: dawidd6/action-download-artifact@v17...v18

v17

What's Changed

Full Changelog: dawidd6/action-download-artifact@v16...v17

Commits
  • 8a33849 node_modules: update (#386)
  • 720df5c build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 (#385)
  • 1f8785f node_modules: update (#383)
  • 6f25e15 build(deps): bump undici from 6.23.0 to 6.24.0 (#382)
  • f8c75c6 build(deps): bump @​actions/artifact from 6.2.0 to 6.2.1 (#381)
  • 09b07ec Update Node.js version from 20 to 24
  • 980d668 node_modules: update (#379)
  • 5061fdb build(deps): bump fast-xml-parser from 5.3.6 to 5.4.1 (#378)
  • ea19757 build(deps): bump actions/upload-artifact from 6 to 7 (#377)
  • 3fe16e8 build(deps): bump @​actions/artifact from 6.1.0 to 6.2.0 (#376)
  • See full diff in compare view

Updates actions-cool/check-user-permission from 2.3.0 to 2.4.0

Changelog

Sourced from actions-cool/check-user-permission's changelog.

Changelog

v2.4.0

2026.3.30

  • chore: bump node to 24 #15

v2.3.0

2025.01.07

v2.2.1

2024.02.18

v2.2.0

2022.10.19

v2.0.1

2022.02.08

  • 🐞 fix: remove console.log.

v2.0.0

2022.02.07

  • 🛠 refactor: change result to require-result. #5
  • 🚀 feat: add check-result for check-contributor. #5

v1.2.2

... (truncated)

Commits

Updates octokit/request-action from 2.4.0 to 3.0.0

Release notes

Sourced from octokit/request-action's releases.

v3.0.0

3.0.0 (2026-03-20)

Bug Fixes

  • deps: update dependency @​octokit/action to v8, update runner to v24, switch build from NCC to ESBuild (#324) (b91aaba)

BREAKING CHANGES

  • deps: Update runner to Node 24

Co-authored-by: uzlopak aras.abbasi@googlemail.com Co-authored-by: wolfy1339 webmaster@wolfy1339.com Co-authored-by: wolfy1339 4595477+wolfy1339@users.noreply.github.com Co-authored-by: Audrey Romanet 7204715+aromanet42@users.noreply.github.com Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

Commits
  • b91aaba fix(deps): update dependency @​octokit/action to v8, update runner to v24, swi...
  • 02f5e7c ci(action): update peter-evans/create-or-update-comment action to v5 (#331)
  • f103041 ci(action): update github/codeql-action action to v4 (#332)
  • 937f551 ci(action): update actions/checkout action to v6 (#340)
  • c861151 ci(action): update actions/setup-node action to v6 (#333)
  • 05a2312 build(deps): bump @​octokit/request from 9.1.1 to 9.2.2 (#322)
  • 22cf731 build(deps): bump @​octokit/plugin-paginate-rest from 11.3.0 to 11.4.2 (#319)
  • 786351d ci(action): update actions/publish-immutable-action action to v0.0.4 (#314)
  • See full diff in compare view

Updates softprops/action-gh-release from 2.5.0 to 2.6.1

Release notes

Sourced from softprops/action-gh-release's releases.

v2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

v2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

v2.5.3

2.5.3 is a patch release focused on the remaining path-handling and release-selection bugs uncovered after 2.5.2. It fixes [#639](https://github.com/softprops/action-gh-release/issues/639), [#571](https://github.com/softprops/action-gh-release/issues/571), [#280](https://github.com/softprops/action-gh-release/issues/280), [#614](https://github.com/softprops/action-gh-release/issues/614), [#311](https://github.com/softprops/action-gh-release/issues/311), [#403](https://github.com/softprops/action-gh-release/issues/403), and [#368](https://github.com/softprops/action-gh-release/issues/368). It also adds documentation clarifications for [#541](https://github.com/softprops/action-gh-release/issues/541), [#645](https://github.com/softprops/action-gh-release/issues/645), [#542](https://github.com/softprops/action-gh-release/issues/542), [#393](https://github.com/softprops/action-gh-release/issues/393), and [#411](https://github.com/softprops/action-gh-release/issues/411), where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

... (truncated)

Changelog

Sourced from softprops/action-gh-release's changelog.

2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

2.5.3

2.5.3 is a patch release focused on the remaining path-handling and release-selection bugs uncovered after 2.5.2. It fixes [#639](https://github.com/softprops/action-gh-release/issues/639), [#571](https://github.com/softprops/action-gh-release/issues/571), [#280](https://github.com/softprops/action-gh-release/issues/280), [#614](https://github.com/softprops/action-gh-release/issues/614), [#311](https://github.com/softprops/action-gh-release/issues/311), [#403](https://github.com/softprops/action-gh-release/issues/403), and [#368](https://github.com/softprops/action-gh-release/issues/368). It also adds documentation clarifications for [#541](https://github.com/softprops/action-gh-release/issues/541), [#645](https://github.com/softprops/action-gh-release/issues/645), [#542](https://github.com/softprops/action-gh-release/issues/542), [#393](https://github.com/softprops/action-gh-release/issues/393), and [#411](https://github.com/softprops/action-gh-release/issues/411), where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

... (truncated)

Commits

Updates actions/cache from 4.3.0 to 5.0.4

Release notes

Sourced from actions/cache's releases.

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

v5.0.1

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.


v5.0.1

What's Changed

v5.0.0

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

  • Bump @actions/cache to v5.0.3 #1692

5.0.1

  • Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 12 updates

Bumps the actions-version-updates group with 12 updates in the /.github/workflows directory:

| Package | From | To |
| --- | --- | --- |
| [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.71.0` | `1.72.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.2.1` | `3.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.0` | `8.0.1` |
| [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `2.9.4` | `3.0.2` |
| [leanprover-community/privilege-escalation-bridge](https://github.com/leanprover-community/privilege-escalation-bridge) | `1.1.0` | `1.2.0` |
| [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) | `0.13.0` | `0.13.1` |
| [corentinmusard/otel-cicd-action](https://github.com/corentinmusard/otel-cicd-action) | `4.0.0` | `4.0.1` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `16` | `19` |
| [actions-cool/check-user-permission](https://github.com/actions-cool/check-user-permission) | `2.3.0` | `2.4.0` |
| [octokit/request-action](https://github.com/octokit/request-action) | `2.4.0` | `3.0.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.5.0` | `2.6.1` |
| [actions/cache](https://github.com/actions/cache) | `4.3.0` | `5.0.4` |



Updates `reviewdog/action-actionlint` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/reviewdog/action-actionlint/releases)
- [Commits](reviewdog/action-actionlint@0d952c5...6fb7acc)

Updates `actions/create-github-app-token` from 2.2.1 to 3.0.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@29824e6...f8d387b)

Updates `actions/download-artifact` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@70fc10c...3e5f45b)

Updates `marocchino/sticky-pull-request-comment` from 2.9.4 to 3.0.2
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@7737449...70d2764)

Updates `leanprover-community/privilege-escalation-bridge` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/leanprover-community/privilege-escalation-bridge/releases)
- [Commits](leanprover-community/privilege-escalation-bridge@d3bd99c...f5dfe31)

Updates `styfle/cancel-workflow-action` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)
- [Commits](styfle/cancel-workflow-action@3155a14...d07a454)

Updates `corentinmusard/otel-cicd-action` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/corentinmusard/otel-cicd-action/releases)
- [Changelog](https://github.com/corentinmusard/otel-cicd-action/blob/main/CHANGELOG.md)
- [Commits](corentinmusard/otel-cicd-action@0f9f16f...f2d88ec)

Updates `dawidd6/action-download-artifact` from 16 to 19
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@2536c51...8a33849)

Updates `actions-cool/check-user-permission` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/actions-cool/check-user-permission/releases)
- [Changelog](https://github.com/actions-cool/check-user-permission/blob/main/CHANGELOG.md)
- [Commits](actions-cool/check-user-permission@7b90a27...c21884f)

Updates `octokit/request-action` from 2.4.0 to 3.0.0
- [Release notes](https://github.com/octokit/request-action/releases)
- [Commits](octokit/request-action@dad4362...b91aaba)

Updates `softprops/action-gh-release` from 2.5.0 to 2.6.1
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@a06a81a...153bb8e)

Updates `actions/cache` from 4.3.0 to 5.0.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0057852...6682284)

---
updated-dependencies:
- dependency-name: reviewdog/action-actionlint
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: actions/create-github-app-token
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-version-updates
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-version-updates
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-version-updates
- dependency-name: leanprover-community/privilege-escalation-bridge
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: styfle/cancel-workflow-action
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-version-updates
- dependency-name: corentinmusard/otel-cicd-action
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-version-updates
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '19'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-version-updates
- dependency-name: actions-cool/check-user-permission
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: octokit/request-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-version-updates
- dependency-name: softprops/action-gh-release
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 1, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 1, 2026

PR summary d194281a48

Import changes for modified files

No significant changes to the import graph

Import changes for all files
Files Import difference

Declarations diff

No declarations were harmed in the making of this PR! 🐙

You can run this locally as follows
## summary with just the declaration names:
./scripts/pr_summary/declarations_diff.sh <optional_commit>

## more verbose report:
./scripts/pr_summary/declarations_diff.sh long <optional_commit>

The doc-module for scripts/pr_summary/declarations_diff.sh contains some details about this script.


No changes to technical debt.

You can run this locally as

./scripts/reporting/technical-debt-metrics.sh pr_summary
  • The relative value is the weighted sum of the differences with weight given by the inverse of the current value of the statistic.
  • The absolute value is the relative value divided by the total sum of the inverses of the current values (i.e. the weighted average of the differences).

⚠️ Workflow documentation reminder

This PR modifies files under .github/workflows/.
Please update docs/workflows.md if the workflow inventory, triggers, or behavior changed.

Modified workflow files:

  • .github/workflows/actionlint.yml
  • .github/workflows/build_template.yml
  • .github/workflows/check_pr_titles.yaml
  • .github/workflows/commit_verification.yml
  • .github/workflows/commit_verification_wf_run.yml
  • .github/workflows/dependent-issues.yml
  • .github/workflows/export_telemetry.yaml
  • .github/workflows/label_new_contributor.yml
  • .github/workflows/maintainer_bors.yml
  • .github/workflows/maintainer_bors_wf_run.yml
  • .github/workflows/maintainer_merge.yml
  • .github/workflows/maintainer_merge_wf_run.yml
  • .github/workflows/nightly_detect_failure.yml
  • .github/workflows/release.yml
  • .github/workflows/rm_set_option.yml
  • .github/workflows/splice_bot_wf_run.yaml

@github-actions github-actions bot added the CI Modifies the continuous integration setup or other automation label Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI Modifies the continuous integration setup or other automation dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants