Skip to content

ci(deps): bump the actions group across 1 directory with 10 updates#4955

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-21b8fa7738
Open

ci(deps): bump the actions group across 1 directory with 10 updates#4955
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-21b8fa7738

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026 •
edited
Loading

Bumps the actions group with 10 updates in the / directory:

Package From To
actions/checkout 4 6
Swatinem/rust-cache 2.8.2 2.9.1
msys2/setup-msys2 2.27.0 2.31.1
actions/upload-artifact 4 7
actions/cache 4 5
taiki-e/install-action 2.77.5 2.79.7
docker/setup-buildx-action 4.0.0 4.1.0
docker/login-action 4.1.0 4.2.0
docker/build-push-action 7.1.0 7.2.0
EmbarkStudios/cargo-deny-action 2.0.17 2.0.19

Updates actions/checkout from 4 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Commits

Updates Swatinem/rust-cache from 2.8.2 to 2.9.1

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.1

Fix regression in hash calculation

Full Changelog: Swatinem/rust-cache@v2.9.0...v2.9.1

v2.9.0

What's Changed

New Contributors

Full Changelog: Swatinem/rust-cache@v2.8.2...v2.9.0

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.1

  • Fix regression in hash calculation

2.9.0

  • Update to node24
  • Support running from within a nix shell
  • Consider all installed toolchains for cache key
  • Use case-insensitive comparison to determine exact cache hit

2.8.2

  • Don't overwrite env for cargo-metadata call

2.8.1

  • Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
  • Various dependency updates

2.8.0

  • Add support for warpbuild cache provider
  • Add new cache-workspace-crates feature

2.7.8

  • Include CPU arch in the cache key

2.7.7

  • Also cache cargo install metadata

2.7.6

  • Allow opting out of caching $CARGO_HOME/bin
  • Add runner OS in cache key
  • Adds an option to do lookup-only of the cache

2.7.5

  • Support Cargo.lock format cargo-lock v4
  • Only run macOsWorkaround() on macOS

2.7.3

  • Work around upstream problem that causes cache saving to hang for minutes.

... (truncated)

Commits

Updates msys2/setup-msys2 from 2.27.0 to 2.31.1

Release notes

Sourced from msys2/setup-msys2's releases.

v2.31.1

  • input: allow empty input for "install" and "pacboy", meaning not packages will be installed [#589]
  • input: deprecate the special "RUNNER_TEMP" value for "location" in favor of an empty string
  • Update dependencies

v2.31.0

  • Update base distribution to 20260322. [#597]
  • Update dependencies
  • Move to node24 from node20

v2.30.0

  • Update base distribution to 20251213. [#565]
  • Remove folder-hash dependency [#555]
  • Update dependencies

v2.29.0

  • Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#542]
  • Update base distribution to 20250830. [#548]
  • Update dependencies

v2.28.0

  • Update base distribution to 20250622. [#518]
  • Update dependencies
Changelog

Sourced from msys2/setup-msys2's changelog.

Changelog

2.31.1

  • input: allow empty input for "install" and "pacboy", meaning not packages will be installed [#589]
  • input: deprecate the special "RUNNER_TEMP" value for "location" in favor of an empty string
  • Update dependencies

2.31.0

  • Update base distribution to 20260322. [#597]
  • Update dependencies
  • Move to node24 from node20

2.30.0

  • Update base distribution to 20251213. [#565]
  • Remove folder-hash dependency [#555]
  • Update dependencies

2.29.0

  • Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#542]
  • Update base distribution to 20250830. [#548]
  • Update dependencies

2.28.0

  • Update base distribution to 20250622. [#518]
  • Update dependencies

2.27.0

  • Update base distribution to 20250221. [#480]
  • Update dependencies
  • Drop support for CLANG32

2.26.0

2.25.0

... (truncated)

Commits
  • e989830 v2.31.1 9b1b97754d6b29a1930613de078be3eb976807fc
  • cafece8 v2.31.0 1bb07685f08feb242756e4f3fe3cfd9bb7490cf0
  • 4f806de v2.30.0 d6aa6b43aba0a6cb7ef79d11b4653af679d58d9d
  • fb197b7 v2.29.0 ee87529e22c13ef957bcd5ef65c3ca2d61025d19
  • 40677d3 v2.28.0 8808d186603421ac8e3e5b5f489b4629d5e9fe2d
  • See full diff in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Updates actions/cache from 4 to 5

Release notes

Sourced from actions/cache's releases.

v5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Full Changelog: actions/cache@v4.3.0...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

What's Changed

  • Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in actions/cache#1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

... (truncated)

Commits
  • 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
  • f280785 licensed changes
  • 619aeb1 npm run build generated dist files
  • bcf16c2 Update ts-http-runtime to 0.3.5
  • 6682284 Merge pull request #1738 from actions/prepare-v5.0.4
  • e340396 Update RELEASES
  • 8a67110 Add licenses
  • 1865903 Update dependencies & patch security vulnerabilities
  • 5656298 Merge pull request #1722 from RyPeck/patch-1
  • 4e380d1 Fix cache key in examples.md for bun.lock
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.77.5 to 2.79.7

Release notes

Sourced from taiki-e/install-action's releases.

2.79.7

  • Update typos@latest to 1.46.3.

  • Update rclone@latest to 1.74.2.

  • Update mise@latest to 2026.5.15.

  • Update tombi@latest to 0.11.7.

2.79.6

  • Update wasm-bindgen@latest to 0.2.122.

  • Update mise@latest to 2026.5.14.

  • Update cargo-deny@latest to 0.19.7.

  • Update vacuum@latest to 0.26.6.

2.79.5

  • Update jaq@latest to 3.0.0. (#1861, thanks @​MusicalNinjaDad)

  • Update wasmtime@latest to 45.0.0.

  • Update wasm-tools@latest to 1.250.0.

  • Update tombi@latest to 0.11.6.

  • Update mise@latest to 2026.5.13.

2.79.4

  • Update martin@latest to 1.10.1.

  • Update prek@latest to 0.4.1.

  • Update protoc@latest to 3.35.0.

  • Update mdbook@latest to 0.5.3.

2.79.3

  • Update mise@latest to 2026.5.12.

  • Update martin@latest to 1.10.0.

  • Update uv@latest to 0.11.15.

2.79.2

  • Update mise@latest to 2026.5.11.

  • Update vacuum@latest to 0.26.5.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.79.7] - 2026-05-24

  • Update typos@latest to 1.46.3.

  • Update rclone@latest to 1.74.2.

  • Update mise@latest to 2026.5.15.

  • Update tombi@latest to 0.11.7.

[2.79.6] - 2026-05-23

  • Update wasm-bindgen@latest to 0.2.122.

  • Update mise@latest to 2026.5.14.

  • Update cargo-deny@latest to 0.19.7.

  • Update vacuum@latest to 0.26.6.

[2.79.5] - 2026-05-22

  • Update jaq@latest to 3.0.0. (#1861, thanks @​MusicalNinjaDad)

  • Update wasmtime@latest to 45.0.0.

  • Update wasm-tools@latest to 1.250.0.

  • Update tombi@latest to 0.11.6.

  • Update mise@latest to 2026.5.13.

[2.79.4] - 2026-05-22

  • Update martin@latest to 1.10.1.

  • Update prek@latest to 0.4.1.

... (truncated)

Commits

Updates docker/setup-buildx-action from 4.0.0 to 4.1.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.1.0

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

Commits
  • d7f5e7f Merge pull request #489 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 92bc5c9 chore: update generated content
  • da11e35 build(deps): bump @​docker/actions-toolkit from 0.79.0 to 0.90.0
  • f021e16 Merge pull request #492 from docker/dependabot/npm_and_yarn/undici-6.24.1
  • b5af94f chore: update generated content
  • 16ad977 build(deps): bump undici from 6.23.0 to 6.25.0
  • d7a12d7 Merge pull request #495 from docker/dependabot/npm_and_yarn/glob-10.5.0
  • 28ff27d build(deps): bump glob from 10.3.12 to 13.0.6
  • daf436b Merge pull request #496 from docker/dependabot/npm_and_yarn/fast-xml-parser-5...
  • 9725348 chore: update generated content
  • Additional commits viewable in compare view

Updates docker/login-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/login-action's releases.

v4.2.0

Full Changelog: docker/login-action@v4.1.0...v4.2.0

Commits
  • 650006c Merge pull request #960 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 99df1a3 chore: update generated content
  • 3ab375f build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 39d8580 Merge pull request #970 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 4eefcd3 chore: update generated content
  • 56d092c build(deps): bump @​docker/actions-toolkit from 0.86.0 to 0.90.0
  • e2e31ca Merge pull request #976 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
  • 0bced94 chore: update generated content
  • 3e75a0f build(deps): bump @​actions/core from 3.0.0 to 3.0.1
  • 365bebd Merge pull request #984 from docker/dependabot/github_actions/aws-actions/con...
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.1.0 to 7.2.0

Release notes

Sourced from docker/build-push-action's releases.

v7.2.0

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

Commits
  • f9f3042 Merge pull request #1517 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 812d5fd chore: update generated content
  • b6f6693 chore(deps): Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0
  • c1c626e Merge pull request #1525 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
  • 51bb284 chore: update generated content
  • 5f7884d chore(deps): Bump @​actions/core from 3.0.0 to 3.0.1
  • e01deff Merge pull request #1521 from docker/dependabot/npm_and_yarn/fast-xml-parser-...
  • 3804d49 chore: update generated content
  • 71e8947 chore(deps): Bump fast-xml-parser from 5.5.7 to 5.8.0
  • 4925ad2 Merge pull request #1526 from docker/dependabot/npm_and_yarn/postcss-8.5.10
  • Additional commits viewable in compare view

Updates EmbarkStudios/cargo-deny-action from 2.0.17 to 2.0.19

Commits

@dependabot dependabot Bot added the ci label May 25, 2026
@dependabot dependabot Bot requested a review from oferchen as a code owner May 25, 2026 08:25
@dependabot dependabot Bot added the ci label May 25, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-21b8fa7738 branch from fb2a289 to 64ffc17 Compare May 25, 2026 09:26
@dependabot
ci(deps): bump the actions group across 1 directory with 10 updates
56de6b7 
Bumps the actions group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.8.2` | `2.9.1` |
| [msys2/setup-msys2](https://github.com/msys2/setup-msys2) | `2.27.0` | `2.31.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [actions/cache](https://github.com/actions/cache) | `4` | `5` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.77.5` | `2.79.7` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.2.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.2.0` |
| [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) | `2.0.17` | `2.0.19` |



Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v6)

Updates `Swatinem/rust-cache` from 2.8.2 to 2.9.1
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](Swatinem/rust-cache@779680d...c193711)

Updates `msys2/setup-msys2` from 2.27.0 to 2.31.1
- [Release notes](https://github.com/msys2/setup-msys2/releases)
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md)
- [Commits](msys2/setup-msys2@61f9e5e...e989830)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](actions/cache@v4...v5)

Updates `taiki-e/install-action` from 2.77.5 to 2.79.7
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@fa0dd4c...d9be7d8)

Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@4d04d5d...d7f5e7f)

Updates `docker/login-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@4907a6d...650006c)

Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@bcafcac...f9f3042)

Updates `EmbarkStudios/cargo-deny-action` from 2.0.17 to 2.0.19
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](EmbarkStudios/cargo-deny-action@91bf2b6...a531616)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: msys2/setup-msys2
  dependency-version: 2.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: Swatinem/rust-cache
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-21b8fa7738 branch from 64ffc17 to 56de6b7 Compare May 25, 2026 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@oferchen oferchen Awaiting requested review from oferchen oferchen is a code owner

Assignees

No one assigned

Labels

ci

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants