chore(deps): bump the actions group across 1 directory with 5 updates by dependabot[bot] · Pull Request #293 · VorpalBlade/paketkoll

dependabot · 2026-01-24T12:13:11Z

Bumps the actions group with 5 updates in the / directory:

Package	From	To
actions/checkout	`6.0.1`	`6.0.2`
taiki-e/install-action	`2.65.13`	`2.67.7`
actions/cache	`5.0.1`	`5.0.2`
github/codeql-action	`4.31.9`	`4.31.11`
release-plz/action	`0.5.120`	`0.5.124`

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

... (truncated)

Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
See full diff in compare view

Updates taiki-e/install-action from 2.65.13 to 2.67.7

Release notes

Sourced from taiki-e/install-action's releases.

2.67.7

Update cargo-llvm-cov@latest to 0.7.0.

Update release-plz@latest to 0.3.152.

2.67.6

Update cargo-nextest@latest to 0.9.123.

2.67.5

Update cargo-semver-checks@latest to 0.46.0.

Update tombi@latest to 0.7.23.

2.67.4

Support installing native binary for cargo-llvm-cov on AArch64 Windows. (Previously x86_64 Windows binary is used as fallback.)

Update cargo-llvm-cov@latest to 0.6.24.

2.67.3

Update zola@latest to 0.22.1.

Update prek@latest to 0.3.0.

Update mise@latest to 2026.1.6.

Update tombi@latest to 0.7.22.

Update cargo-neat@latest to 0.2.4.

2.67.2

Update wasmtime@latest to 41.0.0.

Update git-cliff@latest to 2.12.0.

2.67.1

Update wasm-pack@latest to 0.14.0.

2.67.0

Support cargo-neat. (#1404, thanks @killzoner)

Update tombi@latest to 0.7.20.

Update knope@latest to 0.22.1.

Update mise@latest to 2026.1.5.

Update vacuum@latest to 0.23.4.

Update typos@latest to 1.42.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.67.7] - 2026-01-24

Update cargo-llvm-cov@latest to 0.7.0.

Update release-plz@latest to 0.3.152.

[2.67.6] - 2026-01-23

Update cargo-nextest@latest to 0.9.123.

[2.67.5] - 2026-01-23

Update cargo-semver-checks@latest to 0.46.0.

Update tombi@latest to 0.7.23.

[2.67.4] - 2026-01-22

Support installing native binary for cargo-llvm-cov on AArch64 Windows. (Previously x86_64 Windows binary is used as fallback.)

Update cargo-llvm-cov@latest to 0.6.24.

[2.67.3] - 2026-01-22

Update zola@latest to 0.22.1.

Update prek@latest to 0.3.0.

Update mise@latest to 2026.1.6.

Update tombi@latest to 0.7.22.

Update cargo-neat@latest to 0.2.4.

[2.67.2] - 2026-01-21

Update wasmtime@latest to 41.0.0.

... (truncated)

Commits

90b4038 Release 2.67.7
d713755 Update cargo-llvm-cov@latest to 0.7.0
d8afede Update release-plz@latest to 0.3.152
8444b4f Release 2.67.6
8b448e7 Update cargo-nextest@latest to 0.9.123
a632d43 Release 2.67.5
939a8d3 Update cargo-semver-checks@latest to 0.46.0
962f42e Update tombi@latest to 0.7.23
02b0f6e Release 2.67.4
01dbe8c Update changelog
Additional commits viewable in compare view

Updates actions/cache from 5.0.1 to 5.0.2

Release notes

Sourced from actions/cache's releases.

v.5.0.2

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

Changelog

Sourced from actions/cache's changelog.

Releases

Changelog

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

Bump @actions/cache to v4.1.0

4.2.4

Bump @actions/cache to v4.0.5

4.2.3

Bump @actions/cache to v4.0.3 (obfuscates SAS token in debug logs for cache entries)

4.2.2

Bump @actions/cache to v4.0.2

4.2.1

Bump @actions/cache to v4.0.1

4.2.0

TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

... (truncated)

Commits

8b402f5 Merge pull request #1692 from GhadimiR/main
304ab5a license for httpclient
609fc19 Update licensed record for cache
b22231e Build
93150cd Add PR link to releases
9b8ca9f Bump actions/cache to 5.0.3
See full diff in compare view

Updates github/codeql-action from 4.31.9 to 4.31.11

Release notes

Sourced from github/codeql-action's releases.

v4.31.11

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409

Improved error handling throughout the CodeQL Action. #3415

Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318

The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

v4.31.10

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.11 - 23 Jan 2026

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409

Improved error handling throughout the CodeQL Action. #3415

Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318

The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

... (truncated)

Commits

19b2f06 Merge pull request #3417 from github/update-v4.31.11-1601acf88
03afde0 Add noteworthy changes to changelog
9469107 Update changelog for v4.31.11
1601acf Merge pull request #3415 from github/henrymercer/address-telemetry-gap
fba7872 Address review comments
a8dd5ab Merge pull request #3414 from github/dependabot/npm_and_yarn/lodash-4.17.23
28bfb7b Omit error from start-proxy Action
91f3460 Throw if in test mode
edebb78 Differentiate unhandled errors in telemetry
529c266 Use getErrorMessage in more places
Additional commits viewable in compare view

Updates release-plz/action from 0.5.120 to 0.5.124

Release notes

Sourced from release-plz/action's releases.

v0.5.124

What's Changed

install cargo-semver-checks with install-action by @marcoieni in release-plz/action#251

Update to 0.3.153 by @marcoieni in release-plz/action#252

Full Changelog: release-plz/action@v0.5...v0.5.124

v0.5.123

What's Changed

pin binstall version by @marcoieni in release-plz/action#249

Full Changelog: release-plz/action@v0.5...v0.5.123

v0.5.122

What's Changed

Bump cargo-semver-checks to v0.46 by @marcoieni in release-plz/action#238

use cargo-binstall to install binaries by @marcoieni in release-plz/action#239

chore: add renovatebot with helpers:pinGitHubActionDigests by @Boshen in release-plz/action#223

chore(deps): pin actions/checkout action to 8e8c483 by @renovate[bot] in release-plz/action#240

chore(deps): update rust crate semver to v1.0.27 by @renovate[bot] in release-plz/action#241

add more rules to renovate by @marcoieni in release-plz/action#242

Update to 0.3.152 by @marcoieni in release-plz/action#244

New Contributors

@Boshen made their first contribution in release-plz/action#223

@renovate[bot] made their first contribution in release-plz/action#240

Full Changelog: release-plz/action@v0.5...v0.5.122

v0.5.121

What's Changed

Update to 0.3.151 by @marcoieni in release-plz/action#235

Full Changelog: release-plz/action@v0.5...v0.5.121

Commits

e592230 Update to 0.3.153 (#252)
20a6fc9 install cargo-semver-checks with install-action (#251)
a8c9cdc pin binstall version (#249)
adcc790 Update to 0.3.152 (#244)
40801ef add more rules to renovate (#242)
f662c89 chore(deps): update rust crate semver to v1.0.27 (#241)
eff0703 chore(deps): pin actions/checkout action to 8e8c483 (#240)
6890bc9 chore: add renovatebot with helpers:pinGitHubActionDigests (#223)
72f2aed use cargo-binstall to install binaries (#239)
08e4697 Bump cargo-semver-checks to v0.46 (#238)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.65.13` | `2.67.7` | | [actions/cache](https://github.com/actions/cache) | `5.0.1` | `5.0.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.31.9` | `4.31.11` | | [release-plz/action](https://github.com/release-plz/action) | `0.5.120` | `0.5.124` | Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `taiki-e/install-action` from 2.65.13 to 2.67.7 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@0e76c5c...90b4038) Updates `actions/cache` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@9255dc7...8b402f5) Updates `github/codeql-action` from 4.31.9 to 4.31.11 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@5d4e8d1...19b2f06) Updates `release-plz/action` from 0.5.120 to 0.5.124 - [Release notes](https://github.com/release-plz/action/releases) - [Commits](release-plz/action@487eb7b...e592230) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.67.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.31.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: release-plz/action dependency-version: 0.5.124 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added A-dependencies Area: Pull requests that update a dependency file D-github_actions Dependabot: Pull requests that update GitHub Actions code labels Jan 24, 2026

VorpalBlade merged commit 543c19a into main Jan 24, 2026
30 checks passed

dependabot bot deleted the dependabot/github_actions/actions-d78026b067 branch January 24, 2026 12:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the actions group across 1 directory with 5 updates#293

chore(deps): bump the actions group across 1 directory with 5 updates#293
VorpalBlade merged 1 commit intomainfrom
dependabot/github_actions/actions-d78026b067

dependabot bot commented on behalf of github Jan 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Jan 24, 2026

v6.0.2

What's Changed

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

2.67.7

2.67.6

2.67.5

2.67.4

2.67.3

2.67.2

2.67.1

2.67.0

Changelog

[Unreleased]

[2.67.7] - 2026-01-24

[2.67.6] - 2026-01-23

[2.67.5] - 2026-01-23

[2.67.4] - 2026-01-22

[2.67.3] - 2026-01-22

[2.67.2] - 2026-01-21

v.5.0.2

v5.0.2

What's Changed

Releases

Changelog

5.0.2

5.0.1

5.0.0

4.3.0

4.2.4

4.2.3

4.2.2

4.2.1

4.2.0

v4.31.11

v4.31.10

CodeQL Action Changelog

4.31.10 - 12 Jan 2026

CodeQL Action Changelog

[UNRELEASED]

4.31.11 - 23 Jan 2026

4.31.10 - 12 Jan 2026

4.31.9 - 16 Dec 2025

4.31.8 - 11 Dec 2025

4.31.7 - 05 Dec 2025

4.31.6 - 01 Dec 2025

4.31.5 - 24 Nov 2025

4.31.4 - 18 Nov 2025

4.31.3 - 13 Nov 2025

4.31.2 - 30 Oct 2025

v0.5.124

What's Changed

v0.5.123

What's Changed

v0.5.122

What's Changed

New Contributors

v0.5.121

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development