Skip to content

Weekly dependency updates: Bump the "maintenance" group with 2 updates across multiple ecosystems - #328

Merged
bertrama merged 1 commit into
mainfrom
dependabot/maintenance-232b9c3abc
Aug 10, 2026
Merged

Weekly dependency updates: Bump the "maintenance" group with 2 updates across multiple ecosystems#328
bertrama merged 1 commit into
mainfrom
dependabot/maintenance-232b9c3abc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the maintenance group with 1 update: ruby.

Updates ruby from 3.3 to 4.0

Bumps the maintenance group with 5 updates:

Package From To
actions/checkout 2.7.0 7.0.1
docker/login-action 1.14.1 4.6.0
docker/build-push-action 2.10.0 7.3.0
xom9ikk/dotenv 1.0.2 2.4.0
ruby/setup-ruby 1.306.0 1.321.0

Updates actions/checkout from 2.7.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates docker/login-action from 1.14.1 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

... (truncated)

Commits
  • dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 5bcb015 [dependabot skip] chore: update generated content
  • b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
  • 0009830 [dependabot skip] chore: update generated content
  • 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
  • 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
  • 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
  • e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
  • a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
  • Additional commits viewable in compare view

Updates docker/build-push-action from 2.10.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

v7.2.0

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

v7.1.0

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

v7.0.0

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v6.19.2

... (truncated)

Commits
  • 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 154298c [dependabot skip] chore: update generated content
  • cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9c69730 [dependabot skip] chore: update generated content
  • bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
  • a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
  • 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
  • c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
  • d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • Additional commits viewable in compare view

Updates xom9ikk/dotenv from 1.0.2 to 2.4.0

Release notes

Sourced from xom9ikk/dotenv's releases.

Bump node version to 24

What's Changed

New Contributors

Full Changelog: xom9ikk/dotenv@v2.3.0...v2.4.0

Bump node version to 20

What's Changed

New Contributors

Full Changelog: xom9ikk/dotenv@v2.2.0...v2.3.0

Add dotenv-expand

No release notes provided.

Add load-mode to action variables

No release notes provided.

Add load-mode (strict | skip)

Implemented a load-mode flag This flag currently only accepts skip and strict (all unknown options are interpreted as strict). When skip, an empty .env file is returned in case no file is found.

See xom9ikk/dotenv#10

Bump node version to 16

No release notes provided.

Commits

Updates ruby/setup-ruby from 1.306.0 to 1.321.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.321.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.320.0...v1.321.0

v1.320.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.319.0...v1.320.0

v1.319.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.318.0...v1.319.0

v1.318.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.317.0...v1.318.0

v1.317.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.316.0...v1.317.0

v1.316.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.315.0...v1.316.0

v1.315.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.314.0...v1.315.0

... (truncated)

Commits
  • 95ef2b0 Add jruby-10.1.1.0
  • a30dfa4 Update CRuby releases on Windows
  • 003a5c4 Add ruby-3.3.12
  • 8e41b36 Update CRuby releases on Windows
  • 6e5d382 Add ruby-4.0.6
  • d45b1a4 Update CRuby releases on Windows
  • 0dafeac Add ruby-3.4.10
  • bf35c27 Bump actions/checkout from 6 to 7
  • 9eb537c Add support for ubuntu-26.04 and ubuntu-26.04-arm
  • e1a3b10 Improve versions-strings-for-builder.rb
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maintenance group with 1 update: ruby.


Updates `ruby` from 3.3 to 4.0
Weekly dependency updates: Bump the maintenance group with 5 updates

Bumps the maintenance group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `2.7.0` | `7.0.1` |
| [docker/login-action](https://github.com/docker/login-action) | `1.14.1` | `4.6.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `2.10.0` | `7.3.0` |
| [xom9ikk/dotenv](https://github.com/xom9ikk/dotenv) | `1.0.2` | `2.4.0` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.306.0` | `1.321.0` |


Updates `actions/checkout` from 2.7.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@ee0669b...3d3c42e)

Updates `docker/login-action` from 1.14.1 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@dd4fa06...dbcb813)

Updates `docker/build-push-action` from 2.10.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@ac9327e...53b7df9)

Updates `xom9ikk/dotenv` from 1.0.2 to 2.4.0
- [Release notes](https://github.com/xom9ikk/dotenv/releases)
- [Commits](xom9ikk/dotenv@d3ff955...d0a56ed)

Updates `ruby/setup-ruby` from 1.306.0 to 1.321.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@c4e5b13...95ef2b0)

---
updated-dependencies:
- dependency-name: ruby
  dependency-version: '4.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maintenance
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maintenance
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maintenance
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maintenance
- dependency-name: xom9ikk/dotenv
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maintenance
- dependency-name: ruby/setup-ruby
  dependency-version: 1.321.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Jul 30, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@bertrama
bertrama merged commit fe05857 into main Aug 10, 2026
2 of 4 checks passed
@dependabot
dependabot Bot deleted the dependabot/maintenance-232b9c3abc branch August 10, 2026 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant