Bump the all-actions group across 1 directory with 5 updates #1308

dependabot · 2025-12-07T02:07:27Z

Bumps the all-actions group with 5 updates in the / directory:

Package	From	To
actions/checkout	`4`	`6`
actions/setup-node	`4`	`6`
preactjs/compressed-size-action	`2`	`3`
github/codeql-action	`3`	`4`
stellar/stellar-cli	`23.1.4`	`23.3.0`

Updates actions/checkout from 4 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

Persist creds to a separate file by @ericsciple in actions/checkout#2286

v6-beta by @ericsciple in actions/checkout#2298

update readme/changelog for v6 by @ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

Prepare v5.0.0 release by @salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

... (truncated)

Commits

8e8c483 Clarify v6 README (#2328)
033fa0d Add worktree support for persist-credentials includeIf (#2327)
c2d88d3 Update all references from v5 and v4 to v6 (#2314)
1af3b93 update readme/changelog for v6 (#2311)
71cf226 v6-beta (#2298)
069c695 Persist creds to a separate file (#2286)
ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
08c6903 Prepare v5.0.0 release (#2238)
9f26565 Update actions checkout to use node 24 (#2226)
See full diff in compare view

Updates actions/setup-node from 4 to 6

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in actions/setup-node#1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336

Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334

Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false
Upgrade action to use node24 by @salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in actions/setup-node#1227

Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in actions/setup-node#1273

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-node#1295

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-node#1332

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-node#1345

New Contributors

@priya-kinthali made their first contribution in actions/setup-node#1348

@salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

... (truncated)

Commits

395ad32 Bump js-yaml from 3.14.1 to 3.14.2 (#1435)
a4d2e2b Bump actions/checkout from 5 to 6 (#1439)
b9b25d4 Remove always-auth configuration handling from action (#1436)
633bb92 Bump @actions/cache from 4.0.3 to 4.1.0 (#1384)
dda4788 Add example for restore-only cache in documentation (#1419)
2028fbc Limit automatic caching to npm, update workflows and documentation (#1374)
1342781 Bump actions/publish-action from 0.3.0 to 0.4.0 (#1362)
89d709d Bump prettier from 2.8.8 to 3.6.2 (#1334)
cd2651c Bump ts-jest from 29.1.2 to 29.4.1 (#1336)
a0853c2 Bump actions/checkout from 4 to 5 (#1345)
Additional commits viewable in compare view

Updates preactjs/compressed-size-action from 2 to 3

Release notes

Sourced from preactjs/compressed-size-action's releases.

2.8.0

What's Changed

fix: Filter defaults not working as intended by @rschristian in preactjs/compressed-size-action#114

Full Changelog: preactjs/compressed-size-action@2.7.0...2.8.0

2.7.0

What's Changed

Remove bot check for existing comments by @flugg in preactjs/compressed-size-action#80

Add comment-key input by @sarayourfriend in preactjs/compressed-size-action#82

fix: Incorrect fetch for baseRef by @rschristian in preactjs/compressed-size-action#109

New Contributors

@flugg made their first contribution in preactjs/compressed-size-action#80

@sarayourfriend made their first contribution in preactjs/compressed-size-action#82

Full Changelog: preactjs/compressed-size-action@2.6.0...2.7.0

2.6.0

New Features / Improvements

[feature] Add install script inputs by @jeffreys-cat in preactjs/compressed-size-action#85

feat: Add support for more precise percentage changes by @mister-ben in preactjs/compressed-size-action#97

Add support for Bun by @jack-weilage in preactjs/compressed-size-action#104

Action Maintenance

Update action.yml to use node16 by @estherkim in preactjs/compressed-size-action#87

Move to node20, release v3 by @jonny-puma in preactjs/compressed-size-action#103

Repo Maintenance

Fix typo by @denniskigen in preactjs/compressed-size-action#86

chore: Update Github actions to latest versions by @mmckenziedev in preactjs/compressed-size-action#90

chore: Bump package-lock.json by @rschristian in preactjs/compressed-size-action#105

New Contributors

@denniskigen made their first contribution in preactjs/compressed-size-action#86

@estherkim made their first contribution in preactjs/compressed-size-action#87

@mmckenziedev made their first contribution in preactjs/compressed-size-action#90

@jack-weilage made their first contribution in preactjs/compressed-size-action#104

@jonny-puma made their first contribution in preactjs/compressed-size-action#103

@mister-ben made their first contribution in preactjs/compressed-size-action#97

@jeffreys-cat made their first contribution in preactjs/compressed-size-action#85

@rschristian made their first contribution in preactjs/compressed-size-action#105

Full Changelog: preactjs/compressed-size-action@2.5.0...2.6.0

2.5.0

What's Changed

Improve pnpm support by @einSelbst in preactjs/compressed-size-action#76

New Contributors

... (truncated)

Commits

49c7ff0 feat!: allow to run any script for clean/install/build (#126)
98b0edc feat: Add 'sort-by' option (#124)
f3b74b7 refactor: Extract package manager utility (#117)
2a937a1 feat: support text-based Bun bun.lock file (#116)
See full diff in compare view

Updates github/codeql-action from 3 to 4

Release notes

Sourced from github/codeql-action's releases.

v3.31.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.31.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

v3.31.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.31.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

v3.31.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

Commits

cf1bb45 Merge pull request #3344 from github/update-v4.31.7-f5c63fadd
f4ebe95 Update changelog for v4.31.7
f5c63fa Merge pull request #3343 from github/update-bundle/codeql-bundle-v2.23.7
a2c01e7 Add changelog note
ac34c13 Update default bundle to codeql-bundle-v2.23.7
267c467 Merge pull request #3339 from github/dependabot/npm_and_yarn/npm-minor-77d264...
aeabef7 Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-77d26487b0
78357d3 Merge pull request #3341 from github/mbg/ci/update-cs-config-cli-tests
d61a6fa Update CLI config test to account for overlay db changes on PRs
ce27e95 Rebuild
Additional commits viewable in compare view

Updates stellar/stellar-cli from 23.1.4 to 23.3.0

Release notes

Sourced from stellar/stellar-cli's releases.

23.3.0

✨ New Features

Add stellar snapshot merge to merge several snapshots into one file

Print all env vars prefixed with STELLAR

🐛 Bug Fixes

Fix help generation for recursive custom types

Revert ts-binding option type change

Properly handle $STELLAR_CONFIG_HOME and $STELLAR_DATA_HOME

Pass 'quiet' value through to config.sign

Do not show warning if local dir is pointing to global dir

⚡ Improvements

Add bulk memory feature for wasm optimization

Link to Stellar Lab after deploying contract, so users can interact with it

Move upgrade check file to data directory

Full Changelog: stellar/stellar-cli@v23.2.1...v23.3.0

23.2.1

🐛 Bug Fixes

🔧 Fix argument parsing for some types: Fixed invalid hash argument parsing for bytes, bytesn, timepoint, and duration types when invoking contracts. This resolves issues where certain data types weren't being parsed correctly from command-line arguments. (#2295) by @mootz12

🔐 Fix Soroban auth signing for secure store keys: Resolved authentication signing issues when using secure store keys, improving the reliability of contract invocations with stored credentials. (#2230) by @elizabethengelman

📝 Fix TypeScript bindings transaction option type: Corrected the transaction option type in generated TypeScript client bindings, ensuring proper type safety in JavaScript/TypeScript projects. (#2283) by @chadoh

✨ Features & Enhancements

📦 Add contract instance to ledger entry fetch: Introduced new --instance flag for the ledger entry fetch contract-data command, making it easier to retrieve a contract's WASM hash based on its contract ID or alias. This simplifies contract inspection workflows. (#2269) by @elizabethengelman

Full Changelog: stellar/stellar-cli@v23.2.0...v23.2.1

23.2.0

🆕 New Features

New Commands & Capabilities

📡 stellar tx fetch events — Fetch and inspect events from transactions with ease

🔑 ledger entry fetch — Retrieve ledger entries directly from the network

📚 Improved Help Documentation — CLI options are now organized into logical sections for better discoverability

🛠️ Enhanced Developer Experience

Contract Building & Optimization

... (truncated)

Commits

08473ac Bump version to 23.3.0 (#2317)
3d09254 Do not show warning if local dir is pointing to global dir. (#2315)
3fba9af Move upgrade check check file to data dir. (#2316)
f90f573 Integration testing updates (#2302)
c49acab Pass 'quiet' value through to config.sign (#2300)
b0bc2bd Properly handle $STELLAR_CONFIG_HOME and $STELLAR_DATA_HOME. (#2311)
82212a0 Print all env vars prefixed with STELLAR. (#2310)
0125540 Link to lab after deploying contract, so users can interact with it. (#2309)
fc2cc45 Add bulk memory feature for wasm optimization. (#2308)
ccd211c Add stellar snapshot merge to merge several snapshots into one file. (#2304)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` | | [preactjs/compressed-size-action](https://github.com/preactjs/compressed-size-action) | `2` | `3` | | [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` | | [stellar/stellar-cli](https://github.com/stellar/stellar-cli) | `23.1.4` | `23.3.0` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) Updates `actions/setup-node` from 4 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) Updates `preactjs/compressed-size-action` from 2 to 3 - [Release notes](https://github.com/preactjs/compressed-size-action/releases) - [Commits](preactjs/compressed-size-action@v2...v3) Updates `github/codeql-action` from 3 to 4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3...v4) Updates `stellar/stellar-cli` from 23.1.4 to 23.3.0 - [Release notes](https://github.com/stellar/stellar-cli/releases) - [Commits](stellar/stellar-cli@v23.1.4...v23.3.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: preactjs/compressed-size-action dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: stellar/stellar-cli dependency-version: 23.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 7, 2025

github-project-automation bot added this to DevX Dec 7, 2025

github-project-automation bot moved this to Backlog (Not Ready) in DevX Dec 7, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-actions group across 1 directory with 5 updates #1308

Bump the all-actions group across 1 directory with 5 updates #1308

Uh oh!

dependabot bot commented on behalf of github Dec 7, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the all-actions group across 1 directory with 5 updates #1308

Are you sure you want to change the base?

Bump the all-actions group across 1 directory with 5 updates #1308

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 7, 2025

v6.0.0

What's Changed

v6-beta

What's Changed

v5.0.1

What's Changed

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.1

What's Changed

v4.3.0

What's Changed

Changelog

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v6.0.0

What's Changed

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v4.4.0

2.8.0

What's Changed

2.7.0

What's Changed

New Contributors

2.6.0

New Features / Improvements

Action Maintenance

Repo Maintenance

New Contributors

2.5.0

What's Changed

New Contributors

v3.31.6

CodeQL Action Changelog

3.31.6 - 01 Dec 2025

v3.31.5

CodeQL Action Changelog

3.31.5 - 24 Nov 2025

v3.31.4

CodeQL Action Changelog

3.31.4 - 18 Nov 2025

v3.31.3

CodeQL Action Changelog

3.31.3 - 13 Nov 2025

v3.31.2

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

4.31.4 - 18 Nov 2025

23.3.0

✨ New Features

🐛 Bug Fixes

⚡ Improvements

23.2.1

🐛 Bug Fixes

✨ Features & Enhancements

23.2.0

🆕 New Features

🛠️ Enhanced Developer Experience

Uh oh!

Reviewers