chore(deps): bump the github-actions group across 1 directory with 5 updates by dependabot[bot] · Pull Request #381 · Azure-Samples/Copilot-Studio-with-Azure-AI-Search

dependabot · 2026-03-17T23:15:36Z

Bumps the github-actions group with 5 updates in the / directory:

Package	From	To
actions/setup-node	`6.2.0`	`6.3.0`
azure/login	`2.3.0`	`3.0.0`
terraform-linters/setup-tflint	`6.2.1`	`6.2.2`
bridgecrewio/checkov-action	`12.3086.0`	`12.3088.0`
dorny/test-reporter	`2.5.0`	`2.6.0`

Updates actions/setup-node from 6.2.0 to 6.3.0

Release notes

Sourced from actions/setup-node's releases.

v6.3.0

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in actions/setup-node#1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in actions/setup-node#1491

Replace uuid with crypto.randomUUID() by @trivikr in actions/setup-node#1378

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-node#1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in actions/setup-node#1467

Scope test lockfiles by package manager and update cache tests by @gowridurgad in actions/setup-node#1495

New Contributors

@susnux made their first contribution in actions/setup-node#1283

Full Changelog: actions/setup-node@v6...v6.3.0

Commits

53b8394 Bump minimatch from 3.1.2 to 3.1.5 (#1498)
54045ab Scope test lockfiles by package manager and update cache tests (#1495)
c882bff Replace uuid with crypto.randomUUID() (#1378)
774c1d6 feat(node-version-file): support parsing devEngines field (#1283)
efcb663 fix: remove hardcoded bearer (#1467)
d02c89d Fix npm audit issues (#1491)
See full diff in compare view

Updates azure/login from 2.3.0 to 3.0.0

Release notes

Sourced from azure/login's releases.

Azure Login Action v3.0.0

What's Changed

Upgrade nodejs from 20 to 24 and update dependencies by @YanaXu in Azure/login#578

Full Changelog: Azure/login@v2.3.0...v3.0.0

Commits

532459e prepare release v3.0.0
893aa84 upgrade Azure Login Action version in README (#579)
ce6a9ff upgrade nodejs from 20 to 24 and update dependencies (#578)
See full diff in compare view

Updates terraform-linters/setup-tflint from 6.2.1 to 6.2.2

Release notes

Sourced from terraform-linters/setup-tflint's releases.

v6.2.2

What's Changed

Dependencies

ci: group @actions/* Dependabot updates by @bendrucker in terraform-linters/setup-tflint#401

build(deps): Bump @actions/glob from 0.5.0 to 0.6.1 by @bendrucker in terraform-linters/setup-tflint#410

build(deps): Bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in terraform-linters/setup-tflint#358

build(deps-dev): Bump @eslint/compat from 1.4.0 to 1.4.1 by @dependabot[bot] in terraform-linters/setup-tflint#359

build(deps-dev): Bump @eslint/js from 9.36.0 to 9.39.0 by @dependabot[bot] in terraform-linters/setup-tflint#360

build(deps-dev): Bump eslint from 9.36.0 to 9.39.0 by @dependabot[bot] in terraform-linters/setup-tflint#362

build(deps-dev): Bump eslint-plugin-jsdoc from 60.6.0 to 61.1.11 by @dependabot[bot] in terraform-linters/setup-tflint#363

build(deps): Bump @octokit/rest from 22.0.0 to 22.0.1 by @dependabot[bot] in terraform-linters/setup-tflint#361

build(deps-dev): Bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in terraform-linters/setup-tflint#365

build(deps): Bump glob from 10.4.5 to 10.5.0 by @dependabot[bot] in terraform-linters/setup-tflint#366

build(deps): Bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in terraform-linters/setup-tflint#367

build(deps-dev): Bump @eslint/compat from 1.4.1 to 2.0.0 by @dependabot[bot] in terraform-linters/setup-tflint#368

build(deps-dev): Bump @eslint/js from 9.39.0 to 9.39.1 by @dependabot[bot] in terraform-linters/setup-tflint#369

build(deps-dev): Bump eslint from 9.39.0 to 9.39.1 by @dependabot[bot] in terraform-linters/setup-tflint#370

build(deps-dev): Bump prettier from 3.6.2 to 3.7.3 by @dependabot[bot] in terraform-linters/setup-tflint#372

build(deps-dev): Bump eslint-plugin-jsdoc from 61.1.11 to 61.4.1 by @dependabot[bot] in terraform-linters/setup-tflint#374

build(deps-dev): Bump eslint-plugin-jest from 29.0.1 to 29.2.1 by @dependabot[bot] in terraform-linters/setup-tflint#376

build(deps-dev): Bump @eslint/eslintrc from 3.3.1 to 3.3.3 by @dependabot[bot] in terraform-linters/setup-tflint#375

build(deps-dev): Bump @babel/eslint-parser from 7.28.4 to 7.28.5 by @dependabot[bot] in terraform-linters/setup-tflint#373

build(deps): Bump @actions/io from 1.1.3 to 2.0.0 by @dependabot[bot] in terraform-linters/setup-tflint#371

build(deps): Bump actions/cache from 4.3.0 to 5.0.1 by @dependabot[bot] in terraform-linters/setup-tflint#378

build(deps-dev): Bump eslint-plugin-jsdoc from 61.4.1 to 61.5.0 by @dependabot[bot] in terraform-linters/setup-tflint#381

build(deps-dev): Bump eslint from 9.39.1 to 9.39.2 by @dependabot[bot] in terraform-linters/setup-tflint#383

build(deps-dev): Bump prettier from 3.7.3 to 3.7.4 by @dependabot[bot] in terraform-linters/setup-tflint#386

build(deps): Bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in terraform-linters/setup-tflint#380

build(deps): Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in terraform-linters/setup-tflint#379

build(deps): Bump @actions/exec from 1.1.1 to 2.0.0 by @dependabot[bot] in terraform-linters/setup-tflint#382

build(deps): Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in terraform-linters/setup-tflint#388

build(deps-dev): Bump prettier from 3.7.4 to 3.8.1 by @dependabot[bot] in terraform-linters/setup-tflint#391

build(deps-dev): Bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by @dependabot[bot] in terraform-linters/setup-tflint#392

build(deps): Bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in terraform-linters/setup-tflint#389

build(deps): Bump actions/cache from 5.0.1 to 5.0.3 by @dependabot[bot] in terraform-linters/setup-tflint#395

build(deps): Bump minimatch by @dependabot[bot] in terraform-linters/setup-tflint#397

build(deps): Bump @actions/cache from 4.1.0 to 5.0.1 by @dependabot[bot] in terraform-linters/setup-tflint#385

build(deps): Bump @actions/tool-cache from 2.0.2 to 4.0.0 by @dependabot[bot] in terraform-linters/setup-tflint#390

build(deps): Bump @actions/core from 1.11.1 to 2.0.1 by @dependabot[bot] in terraform-linters/setup-tflint#384

build(deps): Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in terraform-linters/setup-tflint#402

build(deps-dev): Bump @eslint/eslintrc from 3.3.3 to 3.3.5 by @dependabot[bot] in terraform-linters/setup-tflint#404

build(deps-dev): Bump eslint-plugin-jest from 29.2.1 to 29.15.0 by @dependabot[bot] in terraform-linters/setup-tflint#405

build(deps-dev): Bump jest from 30.2.0 to 30.3.0 by @dependabot[bot] in terraform-linters/setup-tflint#407

build(deps-dev): Bump @babel/eslint-parser from 7.28.5 to 7.28.6 by @dependabot[bot] in terraform-linters/setup-tflint#406

build(deps-dev): Bump globals from 16.4.0 to 17.4.0 by @dependabot[bot] in terraform-linters/setup-tflint#408

build(deps-dev): Bump eslint-plugin-jsdoc from 61.5.0 to 62.8.0 by @dependabot[bot] in terraform-linters/setup-tflint#409

... (truncated)

Commits

b480b8f build(deps): Bump the actions group across 1 directory with 3 updates (#411)
d4e7bc7 build(deps-dev): Bump eslint-plugin-jsdoc from 61.5.0 to 62.8.0 (#409)
29adf10 build(deps-dev): Bump globals from 16.4.0 to 17.4.0 (#408)
5199340 build(deps): bump @actions/glob from 0.5.0 to 0.6.1 (#410)
6978713 build(deps-dev): Bump @babel/eslint-parser from 7.28.5 to 7.28.6 (#406)
4f44956 build(deps-dev): Bump jest from 30.2.0 to 30.3.0 (#407)
84b5812 build(deps-dev): Bump eslint-plugin-jest from 29.2.1 to 29.15.0 (#405)
fb123f3 build(deps-dev): Bump @eslint/eslintrc from 3.3.3 to 3.3.5 (#404)
da37435 build(deps): Bump actions/setup-node from 6.2.0 to 6.3.0 (#402)
382cd91 ci: group @actions/* Dependabot updates (#401)
Additional commits viewable in compare view

Updates bridgecrewio/checkov-action from 12.3086.0 to 12.3088.0

Commits

f9b0a22 Bump checkov container version to 3.2.508
4b38516 Bump checkov container version to 3.2.507
See full diff in compare view

Updates dorny/test-reporter from 2.5.0 to 2.6.0

Release notes

Sourced from dorny/test-reporter's releases.

v2.6.0

We updated all dependency packages to latest versions to fix reported security vulnerabilities.

What's Changed

Fix: For workflow_run events, resolve the commit of the check run from related pull request head commits first (matching workflow_run.head_branch, then first PR), and fall back to workflow_run.head_sha for non-PR runs dorny/test-reporter#673

Change: The test-reporter action will listed all artifacts associated with the build run dorny/test-reporter#693

Maintenance: Upgrade to ESLint v9 dorny/test-reporter#629

New Contributors

@azchohfi made their first contribution in dorny/test-reporter#673

Full Changelog: dorny/test-reporter@v2.5.0...v2.6.0

Changelog

Sourced from dorny/test-reporter's changelog.

Changelog

2.6.0

Fix: For workflow_run events, resolve the commit of the check run from related pull request head commits first (matching workflow_run.head_branch, then first PR), and fall back to workflow_run.head_sha for non-PR runs dorny/test-reporter#673

Change: The test-reporter action will listed all artifacts associated with the build run dorny/test-reporter#693

Maintenance: Upgrade to ESLint v9 dorny/test-reporter#629

2.5.0

Feature: Add Nette Tester support with tester-junit reporter dorny/test-reporter#707

Maintenance: Bump actions/upload-artifact from 5 to 6 dorny/test-reporter#695

2.4.0

Feature: Add PHPUnit support with JUnit XML dialect parser dorny/test-reporter#422

Feature: Add JUnit XML sample files and tests for validation dorny/test-reporter#701

Fix: Refactor deprecated String.substr() function to use String.substring() dorny/test-reporter#704

2.3.0

Feature: Add Python support with python-xunit reporter (pytest) dorny/test-reporter#643

Feature: Add pytest traceback parsing and directory-mapping option dorny/test-reporter#238

Performance: Update sax.js to fix large XML file parsing dorny/test-reporter#681

Documentation: Complete documentation for all supported reporters dorny/test-reporter#691

Security: Bump js-yaml and mocha in /reports/mocha (fixes prototype pollution) dorny/test-reporter#682

2.2.0

Feature: Add collapsed option to control report summary visibility dorny/test-reporter#664

Fix badge encoding for values including underscore and hyphens dorny/test-reporter#672

Fix missing report-title attribute in action definition dorny/test-reporter#637

Refactor variable names to fix shadowing issues dorny/test-reporter#630

2.1.1

Fix error when a TestMethod element does not have a className attribute in a trx file dorny/test-reporter#623

Add stack trace from trx to summary dorny/test-reporter#615

List only failed tests dorny/test-reporter#606

Add type definitions to github-utils.ts dorny/test-reporter#604

Avoid split on undefined dorny/test-reporter#258

Return links to summary report dorny/test-reporter#588

Add step summary short summary dorny/test-reporter#589

Fix for empty TRX TestDefinitions dorny/test-reporter#582

Increase step summary limit to 1MiB dorny/test-reporter#581

Fix input description for list options dorny/test-reporter#572

2.1.0

Feature: Add summary title dorny/test-reporter#568

Feature: Add Golang test parser dorny/test-reporter#571

Increase step summary limit to 1MiB dorny/test-reporter#581

Fix for empty TRX TestDefinitions dorny/test-reporter#582

Fix input description for list options dorny/test-reporter#572

Update npm packages dorny/test-reporter#583

2.0.0

... (truncated)

Commits

3d76b34 Merge pull request #730 from dorny/feature/166-list-all-artifacts
a71adbe Update changelog
34ed02c Merge pull request #728 from dorny/dependabot/npm_and_yarn/ts-jest-29.4.6
5204d85 Bump ts-jest from 29.4.5 to 29.4.6
6658c27 Merge pull request #727 from dorny/feature/fix_vulnerabilities
9b46772 Use npm audit fix to update sub dependencies
b3a9df8 Merge pull request #629 from dorny/feature/601_eslint_v9
deb1d02 Rebuild the dist/index.js file
69312b9 Update changelog
eed2d2d Modernize ESLint configuration
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `6.2.0` | `6.3.0` | | [azure/login](https://github.com/azure/login) | `2.3.0` | `3.0.0` | | [terraform-linters/setup-tflint](https://github.com/terraform-linters/setup-tflint) | `6.2.1` | `6.2.2` | | [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) | `12.3086.0` | `12.3088.0` | | [dorny/test-reporter](https://github.com/dorny/test-reporter) | `2.5.0` | `2.6.0` | Updates `actions/setup-node` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@6044e13...53b8394) Updates `azure/login` from 2.3.0 to 3.0.0 - [Release notes](https://github.com/azure/login/releases) - [Commits](Azure/login@a457da9...532459e) Updates `terraform-linters/setup-tflint` from 6.2.1 to 6.2.2 - [Release notes](https://github.com/terraform-linters/setup-tflint/releases) - [Commits](terraform-linters/setup-tflint@4cb9fee...b480b8f) Updates `bridgecrewio/checkov-action` from 12.3086.0 to 12.3088.0 - [Release notes](https://github.com/bridgecrewio/checkov-action/releases) - [Commits](bridgecrewio/checkov-action@f99709f...f9b0a22) Updates `dorny/test-reporter` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/dorny/test-reporter/releases) - [Changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md) - [Commits](dorny/test-reporter@b082adf...3d76b34) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: azure/login dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: terraform-linters/setup-tflint dependency-version: 6.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: bridgecrewio/checkov-action dependency-version: 12.3088.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dorny/test-reporter dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 17, 2026

dependabot bot requested a review from a team as a code owner March 17, 2026 23:15

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 17, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the github-actions group across 1 directory with 5 updates#381

chore(deps): bump the github-actions group across 1 directory with 5 updates#381
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/github-actions-a63c122ec8

dependabot bot commented on behalf of github Mar 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 17, 2026

v6.3.0

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

Azure Login Action v3.0.0

What's Changed

v6.2.2

What's Changed

Dependencies

v2.6.0

What's Changed

New Contributors

Changelog

2.6.0

2.5.0

2.4.0

2.3.0

2.2.0

2.1.1

2.1.0

2.0.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants