Skip to content

Bump the actions-deps group across 1 directory with 8 updates - #498

Merged
awoimbee merged 1 commit into
mainfrom
dependabot/github_actions/actions-deps-ee3bfef2d7
Sep 1, 2026
Merged

awoimbee merged 1 commit into
mainfrom
dependabot/github_actions/actions-deps-ee3bfef2d7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 8 updates in the / directory:

Package From To
actions/checkout 7.0.0 7.0.1
j178/prek-action 2.0.5 3.0.0
wild-linker/action 0.9.0 0.10.0
mozilla-actions/sccache-action 0.0.10 0.0.11
docker/setup-buildx-action 4.1.0 4.3.0
docker/build-push-action 7.2.0 7.3.0
docker/login-action 4.2.0 4.6.0
redhat-actions/podman-login 1 2

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates j178/prek-action from 2.0.5 to 3.0.0

Release notes

Sourced from j178/prek-action's releases.

v3.0.0

prek-action releases are now immutable

Starting with v3, prek-action will no longer publish moving major or minor tags. References such as j178/prek-action@v3 and j178/prek-action@v3.0 will not be available.

Moving tags can be retargeted after users adopt them, creating unnecessary supply-chain risk. Use an exact release tag or, for stronger protection, pin the action to a full commit SHA.

[!TIP] Use an exact release tag:

- uses: j178/prek-action@v3.0.0

Or, even better, pin the full commit SHA:

- uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0

What's Changed

Full Changelog: j178/prek-action@v2...v3.0.0

v2.0.6

What's Changed

New Contributors

Full Changelog: j178/prek-action@v2...v2.0.6

Commits

Updates wild-linker/action from 0.9.0 to 0.10.0

Commits

Updates mozilla-actions/sccache-action from 0.0.10 to 0.0.11

Release notes

Sourced from mozilla-actions/sccache-action's releases.

v0.0.11

What's Changed

New Contributors

Full Changelog: Mozilla-Actions/sccache-action@v0.0.10...v0.0.11

Commits
  • fc920bf Merge pull request #262 from sylvestre/0.0.11
  • c5764fd udpate dist files
  • ce939d5 update prettier
  • fc24157 prepare 0.0.11
  • 439ab27 README.md prepare the version 0.0.11
  • a2fac7a Merge pull request #252 from potiuk/ci-verify-dist
  • 4c2e5f0 Merge pull request #253 from Mozilla-Actions/dependabot/npm_and_yarn/actions/...
  • 772f27d ci: verify committed dist/ matches a clean rebuild
  • d270be5 Merge pull request #256 from Mozilla-Actions/dependabot/npm_and_yarn/jest-cir...
  • 52752ae Merge pull request #259 from Mozilla-Actions/dependabot/github_actions/github...
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.1.0 to 4.3.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.3.0

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

v4.2.0

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

Commits
  • 37fe631 Merge pull request #595 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • b5c4f91 [dependabot skip] chore: update generated content
  • 3e93b63 build(deps): bump @​docker/actions-toolkit from 0.92.0 to 0.95.0
  • e527031 Merge pull request #600 from docker/dependabot/npm_and_yarn/brace-expansion-1...
  • c68814b [dependabot skip] chore: update generated content
  • 3f891b0 build(deps): bump brace-expansion from 1.1.13 to 1.1.18
  • 787db26 Merge pull request #585 from docker/dependabot/npm_and_yarn/js-yaml-5.2.1
  • f779368 [dependabot skip] chore: update generated content
  • 7d5e604 build(deps): bump js-yaml from 5.2.0 to 5.3.0
  • 292c2fb Merge pull request #590 from docker/dependabot/github_actions/actions/setup-n...
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.2.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

Commits
  • 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 154298c [dependabot skip] chore: update generated content
  • cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9c69730 [dependabot skip] chore: update generated content
  • bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
  • a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
  • 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
  • c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
  • d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • Additional commits viewable in compare view

Updates docker/login-action from 4.2.0 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits
  • dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 5bcb015 [dependabot skip] chore: update generated content
  • b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
  • 0009830 [dependabot skip] chore: update generated content
  • 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
  • 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
  • 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
  • e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
  • a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
  • Additional commits viewable in compare view

Updates redhat-actions/podman-login from 1 to 2

Release notes

Sourced from redhat-actions/podman-login's releases.

v2.0

Breaking Changes

  • Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
  • Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
  • Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

  • Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
  • Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
  • Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

  • Add tls_verify input to skip TLS certificate verification for self-signed registries
  • Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
  • Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

  • TypeScript 5.x to 6.0.3
  • ESLint 8 (EOL) to 10 with flat config
  • @aws-sdk/client-ecr 3.535 to 3.1094
  • @vercel/ncc 0.38 to 0.44
  • Remove unused @aws-sdk/util-base64
  • Resolve all npm audit vulnerabilities

CI & Infrastructure

  • Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
  • Add workflow-level permissions: contents: read
  • Add concurrency groups to cancel redundant CI runs
  • Pin runs-on to ubuntu-24.04
  • Add Dependabot for npm and GitHub Actions updates
  • Add SECURITY.md
  • Enable secret scanning and push protection
  • Remove deprecated CRDA vulnerability scan workflow

Full Changelog: redhat-actions/podman-login@v1.7...v2.0

Update action to run on Node20.https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

v1.6

Update action/core dependency to 1.10.0

Update action to run on Node16

v1.5

v1.4

No release notes provided.

v1.3

No release notes provided.

... (truncated)

Changelog

Sourced from redhat-actions/podman-login's changelog.

podman-login Changelog

v2.0

Breaking Changes

  • Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
  • Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
  • Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

  • Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
  • Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
  • Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

  • Add tls_verify input to skip TLS certificate verification for self-signed registries
  • Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
  • Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

  • TypeScript 5.x to 6.0.3
  • ESLint 8 (EOL) to 10 with flat config
  • @aws-sdk/client-ecr 3.535 to 3.1094
  • @vercel/ncc 0.38 to 0.44
  • Remove unused @aws-sdk/util-base64
  • Resolve all npm audit vulnerabilities

CI & Infrastructure

  • Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
  • Add workflow-level permissions: contents: read
  • Add concurrency groups to cancel redundant CI runs
  • Pin runs-on to ubuntu-24.04
  • Add Dependabot for npm and GitHub Actions updates
  • Add SECURITY.md
  • Enable secret scanning and push protection
  • Remove deprecated CRDA vulnerability scan workflow

v1.8

v1.7

v1.6

  • Update action/core dependency to 1.10.0

v1.5

v1.4

... (truncated)

Commits
  • 50c2d9a Update CHANGELOG.md for v2.0 release
  • 8b1d074 Merge pull request #64 from redhat-actions/fix/remaining-issues
  • 6be3c81 Fix auth file path detection, lowercase registry, and ECR OIDC support
  • b1530e7 Merge pull request #63 from redhat-actions/feature/tls-verify
  • b0eba47 Add tls_verify input to skip TLS certificate verification
  • dff696f Remove CRDA vulnerability scan workflow
  • 20eef96 Merge pull request #62 from redhat-actions/update/types-node-and-dependabot-c...
  • b9e7b01 Update @​types/node to 26.1.1 and exclude TypeScript 7 from Dependabot
  • 07532ea Fix ENOENT error when ~/.docker directory does not exist
  • 36756be Merge pull request #59 from redhat-actions/dependabot/github_actions/redhat-a...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [j178/prek-action](https://github.com/j178/prek-action) | `2.0.5` | `3.0.0` |
| [wild-linker/action](https://github.com/wild-linker/action) | `0.9.0` | `0.10.0` |
| [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) | `0.0.10` | `0.0.11` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.3.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.6.0` |
| [redhat-actions/podman-login](https://github.com/redhat-actions/podman-login) | `1` | `2` |



Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

Updates `j178/prek-action` from 2.0.5 to 3.0.0
- [Release notes](https://github.com/j178/prek-action/releases)
- [Commits](j178/prek-action@e98a699...4e14d07)

Updates `wild-linker/action` from 0.9.0 to 0.10.0
- [Commits](wild-linker/action@0.9.0...v0.10.0)

Updates `mozilla-actions/sccache-action` from 0.0.10 to 0.0.11
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](Mozilla-Actions/sccache-action@v0.0.10...v0.0.11)

Updates `docker/setup-buildx-action` from 4.1.0 to 4.3.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@d7f5e7f...37fe631)

Updates `docker/build-push-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@f9f3042...53b7df9)

Updates `docker/login-action` from 4.2.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@650006c...dbcb813)

Updates `redhat-actions/podman-login` from 1 to 2
- [Release notes](https://github.com/redhat-actions/podman-login/releases)
- [Changelog](https://github.com/redhat-actions/podman-login/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/podman-login@v1...v2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: j178/prek-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: wild-linker/action
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: redhat-actions/podman-login
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from awoimbee as a code owner September 1, 2026 05:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026
@awoimbee
awoimbee merged commit c0f66b5 into main Sep 1, 2026
5 checks passed
@awoimbee
awoimbee deleted the dependabot/github_actions/actions-deps-ee3bfef2d7 branch September 1, 2026 07:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant