Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 5, 2025

Bumps the all group with 7 updates in the / directory:

Package From To
actions/checkout 4 5
actions/github-script 7 8
dependabot/fetch-metadata 2.3.0 2.4.0
actions/download-artifact 4 5
docker/build-push-action 5 6
crate-ci/typos 1.32.0 1.36.2
DeterminateSystems/update-flake-lock 24 27

Updates actions/checkout from 4 to 5

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates actions/github-script from 7 to 8

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

... (truncated)

Commits
  • ed59741 Merge pull request #653 from actions/sneha-krip/readme-for-v8
  • 2dc352e Bold minimum Actions Runner version in README
  • 01e118c Update README for Node 24 runtime requirements
  • 8b222ac Apply suggestion from @​salmanmkc
  • adc0eea README for updating actions/github-script from v7 to v8
  • 20fe497 Merge pull request #637 from actions/node24
  • e7b7f22 update licenses
  • 2c81ba0 Update Node.js version support to 24.x
  • f28e40c Merge pull request #610 from actions/nebuk89-patch-1
  • 1ae9958 Update README.md
  • Additional commits viewable in compare view

Updates dependabot/fetch-metadata from 2.3.0 to 2.4.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.4.0

What's Changed

Full Changelog: dependabot/fetch-metadata@v2...v2.4.0

Commits
  • 08eff52 v2.4.0 (#594)
  • 821b654 Merge pull request #621 from dependabot/dependabot/github_actions/actions/cre...
  • 2c22a37 Bump actions/create-github-app-token from 2.0.2 to 2.0.6
  • 6ad01a0 Add workflow to publish new version of immutable action on every release (#623)
  • 8ca800c Enable caching of npm install/npm ci for setup-node action (#618)
  • 6787635 Merge pull request #616 from dependabot/dependabot/github_actions/actions/cre...
  • a09d4af Bump actions/create-github-app-token from 1.11.3 to 2.0.2
  • 3a5ce46 Remove unnecessary hardcoding of ref (#617)
  • 798f45c Fixup some anchor tags that weren't deeplinking (#614)
  • 6c031ac Tidy up examples slightly (#611)
  • Additional commits viewable in compare view

Updates actions/download-artifact from 4 to 5

Release notes

Sourced from actions/download-artifact's releases.

v5.0.0

What's Changed

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

  • By name: name: my-artifact → extracted to path/ (direct)
  • By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

  • By name: name: my-artifact → extracted to path/ (unchanged)
  • By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:
  • You download artifacts by name
  • You download multiple artifacts by ID
  • You already use merge-multiple: true as a workaround
⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist
# Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

</tr></table> 

... (truncated)

Commits
  • 634f93c Merge pull request #416 from actions/single-artifact-id-download-path
  • b19ff43 refactor: resolve download path correctly in artifact download tests (mainly ...
  • e262cbe bundle dist
  • bff23f9 update docs
  • fff8c14 fix download path logic when downloading a single artifact by id
  • 448e3f8 Merge pull request #407 from actions/nebuk89-patch-1
  • 47225c4 Update README.md
  • See full diff in compare view

Updates docker/build-push-action from 5 to 6

Release notes

Sourced from docker/build-push-action's releases.

v6.0.0

[!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_SUMMARY: false environment variable in your workflow.

Full Changelog: docker/build-push-action@v5.4.0...v6.0.0

v5.4.0

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

v5.3.0

Full Changelog: docker/build-push-action@v5.2.0...v5.3.0

v5.2.0

Full Changelog: docker/build-push-action@v5.1.0...v5.2.0

v5.1.0

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

Commits
  • 2634353 Merge pull request #1381 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • c0432d2 chore: update generated content
  • 0bb1f27 set builder driver and endpoint attributes for dbc summary support
  • 5f9dbf9 chore(deps): Bump @​docker/actions-toolkit from 0.61.0 to 0.62.1
  • 0788c44 Merge pull request #1375 from crazy-max/remove-gcr
  • aa179ca e2e: remove GCR
  • 1dc7386 Merge pull request #1364 from crazy-max/history-export-cmd
  • 9c9803f chore: update generated content
  • db1f6c4 DOCKER_BUILD_EXPORT_LEGACY env var to opt-in for legacy export
  • 721e8c7 Bump @​docker/actions-toolkit from 0.59.0 to 0.61.0
  • Additional commits viewable in compare view

Updates crate-ci/typos from 1.32.0 to 1.36.2

Release notes

Sourced from crate-ci/typos's releases.

v1.36.2

[1.36.2] - 2025-09-04

Fixes

  • Fix regression from 1.36.1 when rendering an error for a line with invalid UTF-8

v1.36.1

[1.36.1] - 2025-09-03

Fixes

  • Replaced the error rendering for various quality of life improvements

v1.36.0

[1.36.0] - 2025-09-02

Features

v1.35.8

[1.35.8] - 2025-09-02

v1.35.7

[1.35.7] - 2025-08-29

Documentation

  • Expand PyPI metadata

v1.35.6

[1.35.6] - 2025-08-28

Fixes

  • Track go.mod as a golang file (regression from 1.13.21)

v1.35.5

[1.35.5] - 2025-08-18

Fixes

  • Fix typo in correction to accidently
  • Fix typo in correction to dynamincally
  • Fix typo in correction to interruptability
  • Fix typo in correction to interruptability
  • Fix typo in correction to messager
  • Fix typo in correction to preferables
  • Fix typo in correction to producibles

... (truncated)

Changelog

Sourced from crate-ci/typos's changelog.

[1.36.2] - 2025-09-04

Fixes

  • Fix regression from 1.36.1 when rendering an error for a line with invalid UTF-8

[1.36.1] - 2025-09-03

Fixes

  • Replaced the error rendering for various quality of life improvements

[1.36.0] - 2025-09-02

Features

[1.35.8] - 2025-09-02

[1.35.7] - 2025-08-29

Documentation

  • Expand PyPI metadata

[1.35.6] - 2025-08-28

Fixes

  • Track go.mod as a golang file (regression from 1.13.21)

[1.35.5] - 2025-08-18

Fixes

  • Fix typo in correction to accidently
  • Fix typo in correction to dynamincally
  • Fix typo in correction to interruptability
  • Fix typo in correction to interruptability
  • Fix typo in correction to messager
  • Fix typo in correction to preferables
  • Fix typo in correction to producibles
  • Fix typo in correction to restauranteur
  • Fix typo in correction to restauranteurs
  • Fix typo in correction to searialize
  • Fix typo in correction to somethin
  • Fix typo in correction to unaccessible
  • Fix typo in correction to unnesessarily

... (truncated)

Commits

Updates DeterminateSystems/update-flake-lock from 24 to 27

Release notes

Sourced from DeterminateSystems/update-flake-lock's releases.

v27

What's Changed

Full Changelog: DeterminateSystems/update-flake-lock@v26...v27

v26

What's Changed

Full Changelog: DeterminateSystems/update-flake-lock@v25...v26

v25

What's Changed

... (truncated)

Commits
  • c5930b3 Merge pull request #202 from detsys-pr-bot/detsys-ts-update-20c4962e328c1eba8...
  • 4f2c07b Update detsys-ts for: `Await the request promise so we can cover it with th...
  • 9070c89 Merge pull request #197 from detsys-pr-bot/detsys-ts-update-0095c476e55f64d04...
  • 32851b9 Update detsys-ts for: Skip complicated rewrites, record groups. ([#104](https://github.com/determinatesystems/update-flake-lock/issues/104)) (`...
  • 3ce5967 Merge pull request #195 from detsys-pr-bot/detsys-ts-update-5084fa8e3263a0bed...
  • 509c5b6 Merge pull request #193 from DeterminateSystems/update_flake_lock_action
  • 5a1baf2 Merge branch 'main' into update_flake_lock_action
  • adae970 Update detsys-ts for: Remove FHC action since it's composite ([#103](https://github.com/determinatesystems/update-flake-lock/issues/103)) (`508...
  • aaa6c5f Merge pull request #194 from detsys-pr-bot/detsys-ts-update-e252a66f00e041869...
  • 9e234f2 Update detsys-ts for: `Merge pull request #101 from DeterminateSystems/gust...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this ...

Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 5, 2025
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 5, 2025
@dependabot dependabot bot added the github_actions Pull requests that update GitHub Actions code label Sep 5, 2025
@github-actions github-actions bot enabled auto-merge (squash) September 5, 2025 03:10
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-7d67d408d3 branch 5 times, most recently from 9fcd894 to f0633b3 Compare September 12, 2025 03:09
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 16, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot dependabot bot force-pushed the dependabot/github_actions/all-7d67d408d3 branch from f0633b3 to 3ee141f Compare September 17, 2025 03:09
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-7d67d408d3 branch 4 times, most recently from 72ed830 to 7492520 Compare October 1, 2025 03:12
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-7d67d408d3 branch 4 times, most recently from 82e83ac to e9664c3 Compare October 8, 2025 03:09
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-7d67d408d3 branch 2 times, most recently from 7e827ef to 8cd222e Compare October 13, 2025 03:15
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-7d67d408d3 branch 3 times, most recently from 6885552 to d2ec99d Compare October 16, 2025 03:09
Bumps the all group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `5` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `8` |
| [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.3.0` | `2.4.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `5` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `5` | `6` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.32.0` | `1.36.2` |
| [DeterminateSystems/update-flake-lock](https://github.com/determinatesystems/update-flake-lock) | `24` | `27` |



Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

Updates `dependabot/fetch-metadata` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v2.3.0...v2.4.0)

Updates `actions/download-artifact` from 4 to 5
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v5)

Updates `docker/build-push-action` from 5 to 6
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v5...v6)

Updates `crate-ci/typos` from 1.32.0 to 1.36.2
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@v1.32.0...v1.36.2)

Updates `DeterminateSystems/update-flake-lock` from 24 to 27
- [Release notes](https://github.com/determinatesystems/update-flake-lock/releases)
- [Commits](DeterminateSystems/update-flake-lock@v24...v27)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/build-push-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: crate-ci/typos
  dependency-version: 1.36.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: DeterminateSystems/update-flake-lock
  dependency-version: '27'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-7d67d408d3 branch from d2ec99d to 97291c7 Compare October 17, 2025 03:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants