chore(deps): bump the actions group across 1 directory with 8 updates by dependabot[bot] · Pull Request #57 · iranpsc/Metaverse-Rang-Microservice

dependabot · 2026-07-18T16:55:55Z

Bumps the actions group with 8 updates in the / directory:

Package	From	To
actions/checkout	`4.3.1`	`7.0.0`
actions/setup-go	`5.6.0`	`7.0.0`
actions/upload-artifact	`4.6.2`	`7.0.1`
azure/k8s-set-context	`4.0.2`	`5.0.1`
golangci/golangci-lint-action	`d583c34f0599d37dbac4a198b9c83201be380893`	`ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a`
codecov/codecov-action	`5975040f7f7d40edaff8d784b576fd65ae95c073`	`0fb7174895f61a3b6b78fc075e0cd60383518dac`
aquasecurity/trivy-action	`0.9.2`	`0.36.0`
dorny/paths-filter	`3.0.3`	`4.0.2`

Updates actions/checkout from 4.3.1 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464

update error wording by @aiqiaoy in actions/checkout#2467

New Contributors

@aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

Update changelog by @ericsciple in actions/checkout#2357

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

Update changelog for v6.0.3 by @yaananth in actions/checkout#2446

New Contributors

@yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

Clarify v6 README by @ericsciple in actions/checkout#2328

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

Persist creds to a separate file by @ericsciple in actions/checkout#2286

v6-beta by @ericsciple in actions/checkout#2298

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in actions/checkout#2475

Bump actions/setup-node from 4 to 6 by @dependabot[bot] in actions/checkout#2477

Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in actions/checkout#2478

Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2479

Bump actions/checkout from 6 to 7 by @dependabot[bot] in actions/checkout#2488

Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in actions/checkout#2476

eslint 9 by @dependabot[bot] in actions/checkout#2474

Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in actions/checkout#2499

skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518

trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521

escape values passed to --unset by @aiqiaoy in actions/checkout#2530

v7.0.0

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

v6.0.3

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

... (truncated)

Commits

9c091bb update error wording (#2467)
1044a6d getting ready for checkout v7 release (#2464)
f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
d914b26 upgrade module to esm and update dependencies (#2463)
537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459)
130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
0f9f3aa Bump actions/publish-immutable-action (#2458)
f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
df4cb1c Update changelog for v6.0.3 (#2446)
Additional commits viewable in compare view

Updates actions/setup-go from 5.6.0 to 7.0.0

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-go#763

chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in actions/setup-go#771

New Contributors

@philip-gai made their first contribution in actions/setup-go#771

Full Changelog: actions/setup-go@v6...v7.0.0

v6.5.0

What's Changed

Dependency update

Upgrade actions dependencies by @priyagupta108 with @Copilot in actions/setup-go#744

Upgrade @types/node and typescript-eslint dependencies to resolve npm audit findings by @HarithaVattikuti in actions/setup-go#755

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-go#758

Upgrade version to 6.5.0 in package.json and package-lock.json by @HarithaVattikuti in actions/setup-go#762

New Contributors

@priyagupta108 with @Copilot made their first contribution in actions/setup-go#744

@jasongin made their first contribution in actions/setup-go#758

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in actions/setup-go#721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-go#727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in actions/setup-go#724

Fix Microsoft build of Go link by @gdams in actions/setup-go#734

New Contributors

@gdams made their first contribution in actions/setup-go#721

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in actions/setup-go#705

Fix golang download url to go.dev by @178inaba in actions/setup-go#469

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

What's Changed

... (truncated)

Commits

b7ad1da chore(deps): bump @actions/cache to 6.2.0 (#771)
0778a10 Migrate to ESM and upgrade dependencies (#763)
924ae3a chore: bump version to 6.5.0 in package.json and package-lock.json (#762)
e91cc3b Bump @actions/cache to 5.1.0, log cache write denied (#758)
4a2405e chore: update @types/node and @typescript-eslint dependencies to latest versi...
78961f6 chore: update @actions dependencies and refresh license cache (#744)
4a36011 docs: fix Microsoft build of Go link (#734)
8f19afc feat: add go-download-base-url input for custom Go distributions (#721)
27fdb26 Bump minimatch from 3.1.2 to 3.1.5 (#727)
def8c39 Rearrange README.md, add advanced-usage.md (#724)
Additional commits viewable in compare view

Updates actions/upload-artifact from 4.6.2 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795

Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796

Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in actions/upload-artifact#754

Upgrade the module to ESM and bump dependencies by @danwkennedy in actions/upload-artifact#762

Support direct file uploads by @danwkennedy in actions/upload-artifact#764

New Contributors

@Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in actions/upload-artifact#719

fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in actions/upload-artifact#744

prepare release v6.0.0 for Node.js 24 support by @salmanmkc in actions/upload-artifact#745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

... (truncated)

Commits

043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
634250c Include changes in typespec/ts-http-runtime 0.3.5
e454baa Readme: bump all the example versions to v7 (#796)
74fad66 Update the readme with direct upload details (#795)
bbbca2d Support direct file uploads (#764)
589182c Upgrade the module to ESM and bump dependencies (#762)
47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
02a8460 Add proxy integration test
b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
e516bc8 docs: correct description of Node.js 24 support in README
Additional commits viewable in compare view

Updates azure/k8s-set-context from 4.0.2 to 5.0.1

Release notes

Sourced from azure/k8s-set-context's releases.

v5.0.1

Fixes

#252 Set kubeconfig file permissions to 600 after creation

#250 Remove deprecated OliverMKing release workflow, pin to SHA

Dependabot updates

#260 Bump undici from 6.24.1 to 6.27.0

#259 Bump the actions group with 3 updates

#258 Bump actions/checkout from 6.0.3 to 7.0.0 in /.github/workflows in the actions group

#257 Bump form-data from 4.0.5 to 4.0.6

#256 Bump the actions group with 2 updates

#255 Bump esbuild from 0.28.0 to 0.28.1

#254 Bump the actions group in /.github/workflows with 2 updates

#253 Bump the actions group with 2 updates

#251 Bump js-yaml from 4.1.1 to 4.2.0 in the actions group

#249 Bump ws from 8.20.0 to 8.21.0

#248 Bump the actions group in /.github/workflows with 2 updates

#247 Bump the actions group with 2 updates

#246 Bump github/codeql-action from 4.35.4 to 4.35.5 in /.github/workflows in the actions group

#245 Bump the actions group with 2 updates

#244 Bump github/codeql-action from 4.35.3 to 4.35.4 in /.github/workflows in the actions group

#243 Bump @types/node from 25.6.0 to 25.6.2 in the actions group

#242 Bump ip-address from 10.1.0 to 10.2.0

#240 Bump the actions group across 1 directory with 2 updates

#238 Bump the actions group with 2 updates

#237 Bump github/codeql-action from 4.35.1 to 4.35.2 in /.github/workflows in the actions group

#236 Bump the actions group with 2 updates

#235 Bump the actions group with 3 updates

#233 Bump the actions group across 1 directory with 2 updates

v5.0.0

Features

#227 Migrate to ESM with esbuild, vitest

Runtime and platform

#222 Update Node version from 20 to 24

Dependabot updates

#231 Bump github/codeql-action in /.github/workflows in the actions group

#230 Bump typescript in the actions group across 1 directory

#228 Bump picomatch

#226 Bump github/codeql-action in /.github/workflows in the actions group

#223 Bump undici from 6.23.0 to 6.24.0

#221 Bump the actions group in /.github/workflows with 2 updates

#218 Bump the actions group in /.github/workflows with 2 updates

... (truncated)

Changelog

Sourced from azure/k8s-set-context's changelog.

Change Log

[5.0.1] 2026-06-23

Fixes

#252 Set kubeconfig file permissions to 600 after creation

#250 Remove deprecated OliverMKing release workflow, pin to SHA

Dependabot updates

#260 Bump undici from 6.24.1 to 6.27.0

#259 Bump the actions group with 3 updates

#258 Bump actions/checkout from 6.0.3 to 7.0.0 in /.github/workflows in the actions group

#257 Bump form-data from 4.0.5 to 4.0.6

#256 Bump the actions group with 2 updates

#255 Bump esbuild from 0.28.0 to 0.28.1

#254 Bump the actions group in /.github/workflows with 2 updates

#253 Bump the actions group with 2 updates

#251 Bump js-yaml from 4.1.1 to 4.2.0 in the actions group

#249 Bump ws from 8.20.0 to 8.21.0

#248 Bump the actions group in /.github/workflows with 2 updates

#247 Bump the actions group with 2 updates

#246 Bump github/codeql-action from 4.35.4 to 4.35.5 in /.github/workflows in the actions group

#245 Bump the actions group with 2 updates

#244 Bump github/codeql-action from 4.35.3 to 4.35.4 in /.github/workflows in the actions group

#243 Bump @types/node from 25.6.0 to 25.6.2 in the actions group

#242 Bump ip-address from 10.1.0 to 10.2.0

#240 Bump the actions group across 1 directory with 2 updates

#238 Bump the actions group with 2 updates

#237 Bump github/codeql-action from 4.35.1 to 4.35.2 in /.github/workflows in the actions group

#236 Bump the actions group with 2 updates

#235 Bump the actions group with 3 updates

#233 Bump the actions group across 1 directory with 2 updates

[5.0.0] - 2026-04-07

Features

#227 Migrate to ESM with esbuild, vitest

Runtime and platform

#222 Update Node version from 20 to 24

Dependabot updates

#231 Bump github/codeql-action in /.github/workflows in the actions group

#230 Bump typescript in the actions group across 1 directory

#228 Bump picomatch

... (truncated)

Commits

8698eba build
42a5ae8 chore: update CHANGELOG for v5.0.1 release (#261)
a8fd2ba Bump form-data from 4.0.5 to 4.0.6 (#257)
1f68d8c Bump actions/checkout in /.github/workflows in the actions group (#258)
3763155 Bump the actions group with 3 updates (#259)
7988cfd Bump undici from 6.24.1 to 6.27.0 (#260)
70120f4 Bump the actions group with 2 updates (#256)
8d86de0 Bump esbuild from 0.28.0 to 0.28.1 (#255)
07f3b07 Bump the actions group in /.github/workflows with 2 updates (#254)
5182cdb Bump the actions group with 2 updates (#253)
Additional commits viewable in compare view

Updates golangci/golangci-lint-action from d583c34f0599d37dbac4a198b9c83201be380893 to ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a

Commits

See full diff in compare view

Updates codecov/codecov-action from 5975040f7f7d40edaff8d784b576fd65ae95c073 to 0fb7174895f61a3b6b78fc075e0cd60383518dac

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in codecov/codecov-action#1871

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in codecov/codecov-action#1868

build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in codecov/codecov-action#1867

fix: update to use local app/ dir by @thomasrockhu-codecov in codecov/codecov-action#1872

docs: fix typo in README by @datalater in codecov/codecov-action#1866

Document a codecov-cli version reference example by @webknjaz in codecov/codecov-action#1774

build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in codecov/codecov-action#1861

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in codecov/codecov-action#1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in codecov/codecov-action#1864

Pin actions/github-script by Git SHA by @martincostello in codecov/codecov-action#1859

fix: check reqs exist by @joseph-sentry in codecov/codecov-action#1835

fix: Typo in README by @spalmurray in codecov/codecov-action#1838

docs: Refine OIDC docs by @spalmurray in codecov/codecov-action#1837

build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in codecov/codecov-action#1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in codecov/codecov-action#1822

fix: OIDC on forks by @joseph-sentry in codecov/codecov-action#1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

See full diff in compare view

Updates aquasecurity/trivy-action from 0.9.2 to 0.36.0

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.36.0

What's Changed

chore(ci): update bump-trivy workflow by @DmitriyLewen in aquasecurity/trivy-action#546

ci: use action.yaml as single source of truth for Trivy version by @nikpivkin in aquasecurity/trivy-action#552

ci: replace peter-evans/create-pull-request with gh CLI by @nikpivkin in aquasecurity/trivy-action#550

test: use pinned digests for trivy-db, trivy-java-db and trivy-checks by @nikpivkin in aquasecurity/trivy-action#555

ci: add dependabot config by @nikpivkin in aquasecurity/trivy-action#556

chore: add zizmor config by @nikpivkin in aquasecurity/trivy-action#557

chore(deps): bump the actions group with 5 updates by @dependabot[bot] in aquasecurity/trivy-action#558

fix: use portable shebang in entrypoint.sh by @Hayao0819 in aquasecurity/trivy-action#545

Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name by @patrik-csak in aquasecurity/trivy-action#547

Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes #549 by @Aditya09-cse in aquasecurity/trivy-action#548

chore: use GitHub Actions as git commit author in bump-trivy workflow by @nikpivkin in aquasecurity/trivy-action#561

chore(deps): Update trivy to v0.70.0 by @Argon-DevOps-Mgt in aquasecurity/trivy-action#559

chore: update action version to v0.36.0 in examples by @nikpivkin in aquasecurity/trivy-action#563

New Contributors

@dependabot[bot] made their first contribution in aquasecurity/trivy-action#558

@Hayao0819 made their first contribution in aquasecurity/trivy-action#545

@patrik-csak made their first contribution in aquasecurity/trivy-action#547

@Aditya09-cse made their first contribution in aquasecurity/trivy-action#548

@Argon-DevOps-Mgt made their first contribution in aquasecurity/trivy-action#559

Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0

Release: 0.35.0

What's Changed

chore(deps): Update trivy to v0.69.3 by @aqua-bot in aquasecurity/trivy-action#519

Full Changelog: aquasecurity/trivy-action@0.34.2...0.35.0

Release: v0.35.0

This release is a duplicate of 0.35.0 which was not compromised.

As part of our response to the recent supply chain attack, we have migrated all tags to use the v prefix (e.g., v0.35.0 instead of 0.35.0). Going forward, all new releases will use the v prefix convention.

We have intentionally kept the 0.35.0 tag intact to avoid breaking existing workflows that depend on it.

If you are currently using 0.35.0, your workflows are safe — no action is required.

Release: v0.34.0

Full Changelog: aquasecurity/trivy-action@v0.33.1...v0.34.0

Release: v0.33.1

What's Changed

Update setup-trivy action to version v0.2.4 by @martincostello in aquasecurity/trivy-action#486

Full Changelog: aquasecurity/trivy-action@v0.33.0...v0.33.1

... (truncated)

Commits

ed142fd chore: update action version to v0.36.0 in examples (#563)
dea62cf chore(deps): Update trivy to v0.70.0 (#559)
128d9a8 chore: use GitHub Actions as git commit author in bump-trivy workflow (#561)
876cf04 Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes #549 (#548)
dada784 Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name (#547)
4a2deec fix: use portable shebang in entrypoint.sh (#545)
1994662 chore(deps): bump the actions group with 5 updates (#558)
6b36659 chore: add zizmor config (#557)
316aa5a ci: add dependabot config (#556)
264c9c5 test: use pinned digests for trivy-db, trivy-java-db and trivy-checks (#555)
Additional commits viewable in compare view

Updates dorny/paths-filter from 3.0.3 to 4.0.2

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.2

What's Changed

fix warning message by @cgundy in dorny/paths-filter#282

chore: fix GitHub spelling in logs by @squat in dorny/paths-filter#278

fix: use rev-parse instead of branch --show-current for older git compat by @saschabratton in dorny/paths-filter#303

fix: work around git dubious ownership errors in container jobs by @saschabratton in dorny/paths-filter#317

docs: update changelog for v4.0.2 by @saschabratton in dorny/paths-filter#318

New Contributors

@cgundy made their first contribution in dorny/paths-filter#282

@squat made their first contribution in dorny/paths-filter#278

Full Changelog: dorny/paths-filter@v4.0.1...v4.0.2

v4.0.1

What's Changed

Support merge queue by @masaru-iritani in dorny/paths-filter#255

New Contributors

@masaru-iritani made their first contribution in dorny/paths-filter#255

Full Changelog: dorny/paths-filter@v4.0.0...v4.0.1

v4.0.0

What's Changed

feat: update action runtime to node24 by @saschabratton in dorny/paths-filter#294

New Contributors

@saschabratton made their first contribution in dorny/paths-filter#294

Full Changelog: dorny/paths-filter@v3.0.3...v4.0.0

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.2

Work around git dubious ownership errors in container jobs

Use rev-parse instead of branch --show-current for older git compat

Fix warning message

v4.0.1

Support merge queue

v4.0.0

Update action runtime to node24

v3.0.3

Add missing predicate-quantifier

v3.0.2

Add config parameter for predicate quantifier

v3.0.1

Compare base and ref when token is empty

v3.0.0

Update to Node.js 20

Update all dependenciesDescription has been truncated

Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.3.1` | `7.0.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.6.0` | `7.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [azure/k8s-set-context](https://github.com/azure/k8s-set-context) | `4.0.2` | `5.0.1` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `d583c34f0599d37dbac4a198b9c83201be380893` | `ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5975040f7f7d40edaff8d784b576fd65ae95c073` | `0fb7174895f61a3b6b78fc075e0cd60383518dac` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.9.2` | `0.36.0` | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `3.0.3` | `4.0.2` | Updates `actions/checkout` from 4.3.1 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@34e1148...9c091bb) Updates `actions/setup-go` from 5.6.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@40f1582...b7ad1da) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) Updates `azure/k8s-set-context` from 4.0.2 to 5.0.1 - [Release notes](https://github.com/azure/k8s-set-context/releases) - [Changelog](https://github.com/Azure/k8s-set-context/blob/main/CHANGELOG.md) - [Commits](Azure/k8s-set-context@ae59a72...8698eba) Updates `golangci/golangci-lint-action` from d583c34f0599d37dbac4a198b9c83201be380893 to ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@d583c34...ba0d7d2) Updates `codecov/codecov-action` from 5975040f7f7d40edaff8d784b576fd65ae95c073 to 0fb7174895f61a3b6b78fc075e0cd60383518dac - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@5975040...0fb7174) Updates `aquasecurity/trivy-action` from 0.9.2 to 0.36.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@1f0aa58...ed142fd) Updates `dorny/paths-filter` from 3.0.3 to 4.0.2 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@d1c1ffe...7b450ff) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: azure/k8s-set-context dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: 0fb7174895f61a3b6b78fc075e0cd60383518dac dependency-type: direct:production dependency-group: actions - dependency-name: dorny/paths-filter dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: golangci/golangci-lint-action dependency-version: ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-23T07:09:11Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 18, 2026

dependabot Bot force-pushed the dependabot/github_actions/actions-eabbb9fbcd branch 2 times, most recently from 36750e0 to 550666f Compare July 19, 2026 08:44

dependabot Bot force-pushed the dependabot/github_actions/actions-eabbb9fbcd branch from 550666f to ea297ea Compare July 20, 2026 08:19

hosseinqadiri closed this Jul 23, 2026

hosseinqadiri deleted the dependabot/github_actions/actions-eabbb9fbcd branch July 23, 2026 07:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the actions group across 1 directory with 8 updates - #57

chore(deps): bump the actions group across 1 directory with 8 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-eabbb9fbcd

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.0

What's Changed

New Contributors

v6.0.3

What's Changed

New Contributors

v6.0.2

What's Changed

v6.0.1

What's Changed

v6.0.0

What's Changed

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v7.0.0

What's Changed

New Contributors

v6.5.0

What's Changed

Dependency update

New Contributors

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

v6.3.0

What's Changed

v6.2.0

What's Changed

v7.0.1

What's Changed

v7.0.0

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v6.0.0

v6 - What's new

Node.js 24

What's Changed

v5.0.0

What's Changed

v5.0.1

Fixes

Dependabot updates

v5.0.0

Features

Runtime and platform

Dependabot updates

Change Log

[5.0.1] 2026-06-23

Fixes

Dependabot updates

[5.0.0] - 2026-04-07

Features

Runtime and platform

Dependabot updates

v5.5.2

What's Changed

v5.5.1

What's Changed

v5.5.0

What's Changed

v5.4.3

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading