Skip to content

Bump the all group across 1 directory with 12 updates - #160

Merged
stevebeattie merged 1 commit into
mainfrom
dependabot/github_actions/all-2bec15744a
Jun 30, 2026
Merged

Bump the all group across 1 directory with 12 updates#160
stevebeattie merged 1 commit into
mainfrom
dependabot/github_actions/all-2bec15744a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 12 updates in the / directory:

Package From To
step-security/harden-runner 2.19.0 2.19.4
chainguard-dev/actions/boilerplate 1.6.14 1.6.25
chainguard-dev/actions/donotsubmit 1.6.14 1.6.25
actions/setup-go 6.4.0 6.5.0
chainguard-dev/actions/gofmt 1.6.14 1.6.25
chainguard-dev/actions/goimports 1.6.14 1.6.25
golangci/golangci-lint-action 9.2.0 9.2.1
chainguard-dev/actions/trailing-space 1.6.14 1.6.25
chainguard-dev/actions/eof-newline 1.6.14 1.6.25
step-security/action-tflint 1.24.2 1.25.0
step-security/woke-action-reviewdog 0.1.1 0.1.2
zizmorcore/zizmor-action 0.5.2 0.5.7

Updates step-security/harden-runner from 2.19.0 to 2.19.4

Release notes

Sourced from step-security/harden-runner's releases.

v2.19.4

What's Changed

  • Improvements for HTTPS Monitoring for the Enterprise tier of Harden Runner

Full Changelog: step-security/harden-runner@v2.19.3...v2.19.4

v2.19.3

What's Changed

Full Changelog: step-security/harden-runner@v2.19.2...v2.19.3

v2.19.2

What's Changed

  • Update the Harden Runner agent for enterprise tier to use go 1.26 and fix minor bugs.

Full Changelog: step-security/harden-runner@v2.19.1...v2.19.2

v2.19.1

What's Changed

What the fix changes

  • Harden-Runner will detect ubuntu-slim runners and exit cleanly with an informational log message, instead of post harden runner step failing on chown: invalid user: 'undefined'.

What the fix does not do

  • Jobs running on ubuntu-slim will not be monitored by Harden-Runner. The agent relies on kernel-level features (that require elevated capabilities).
  • Per GitHub's docs on single-CPU runners: "The container for ubuntu-slim runners runs in unprivileged mode. This means that some operations requiring elevated privileges such as mounting file systems, using Docker-in-Docker, or accessing low-level kernel features are not supported." Those low-level kernel features are what the agent needs, so monitoring inside the unprivileged container is not feasible today.

For StepSecurity enterprise customers If your security posture requires that workflows are always monitored, you can block the use of ubuntu-slim via workflow run policies see the Runner Label Policy docs. This lets you enforce that jobs only run on monitored runner types.

New Contributors

Full Changelog: step-security/harden-runner@v2.19.0...v2.19.1

Commits
  • 9af89fc Merge pull request #667 from step-security/update-agent-v1.8.6
  • 485dce8 Update agent to v1.8.6
  • ab7a940 Merge pull request #665 from step-security/fix/use-policy-store-default-audit
  • ec41b78 Default to audit mode when api-key missing with use-policy-store
  • 9ca718d Merge pull request #664 from step-security/update-agent-v1.8.5
  • 1dee3df Update agent to v1.8.5
  • a5ad31d Merge pull request #657 from devantler/fix/ubuntu-slim-user-env
  • 6e92856 build dist and trim ubuntu-slim message
  • 4e0504e Merge branch 'main' into fix/ubuntu-slim-user-env
  • 376d25a fix: detect ubuntu-slim runners early and bail out
  • See full diff in compare view

Updates chainguard-dev/actions/boilerplate from 1.6.14 to 1.6.25

Release notes

Sourced from chainguard-dev/actions/boilerplate's releases.

v1.6.25

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.24...v1.6.25

v1.6.24

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.23...v1.6.24

v1.6.23

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.22...v1.6.23

v1.6.22

... (truncated)

Commits
  • e1c4977 build(deps): bump github.com/sethvargo/go-envconfig in /hugo2confluence (#965)
  • 08507ab build(deps-dev): bump @​types/node in /otel-export (#966)
  • 392b80d Bump major tool defaults (helm, argo, istio, knative, k8s) + add CI coverage ...
  • e9e8319 build(deps): bump chainguard-dev/actions in /git-tag (#958)
  • 57c4c2b build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /gofmt (#959)
  • b5d23ad build(deps): bump chainguard-dev/actions in /goimports (#960)
  • 36c1a66 build(deps): bump chainguard-dev/actions in /inky-build-pkg (#961)
  • 0b05232 build(deps): bump chainguard-dev/actions in /melange-build (#962)
  • b4d1959 build(deps): bump chainguard-dev/actions in /wolfi-build-pkg (#964)
  • ed93655 build(deps): bump chainguard-dev/actions in /release-notes (#963)
  • Additional commits viewable in compare view

Updates chainguard-dev/actions/donotsubmit from 1.6.14 to 1.6.25

Release notes

Sourced from chainguard-dev/actions/donotsubmit's releases.

v1.6.25

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.24...v1.6.25

v1.6.24

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.23...v1.6.24

v1.6.23

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.22...v1.6.23

v1.6.22

... (truncated)

Commits
  • e1c4977 build(deps): bump github.com/sethvargo/go-envconfig in /hugo2confluence (#965)
  • 08507ab build(deps-dev): bump @​types/node in /otel-export (#966)
  • 392b80d Bump major tool defaults (helm, argo, istio, knative, k8s) + add CI coverage ...
  • e9e8319 build(deps): bump chainguard-dev/actions in /git-tag (#958)
  • 57c4c2b build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /gofmt (#959)
  • b5d23ad build(deps): bump chainguard-dev/actions in /goimports (#960)
  • 36c1a66 build(deps): bump chainguard-dev/actions in /inky-build-pkg (#961)
  • 0b05232 build(deps): bump chainguard-dev/actions in /melange-build (#962)
  • b4d1959 build(deps): bump chainguard-dev/actions in /wolfi-build-pkg (#964)
  • ed93655 build(deps): bump chainguard-dev/actions in /release-notes (#963)
  • Additional commits viewable in compare view

Updates actions/setup-go from 6.4.0 to 6.5.0

Release notes

Sourced from actions/setup-go's releases.

v6.5.0

What's Changed

Dependency update

New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

Commits

Updates chainguard-dev/actions/gofmt from 1.6.14 to 1.6.25

Release notes

Sourced from chainguard-dev/actions/gofmt's releases.

v1.6.25

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.24...v1.6.25

v1.6.24

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.23...v1.6.24

v1.6.23

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.22...v1.6.23

v1.6.22

... (truncated)

Commits
  • e1c4977 build(deps): bump github.com/sethvargo/go-envconfig in /hugo2confluence (#965)
  • 08507ab build(deps-dev): bump @​types/node in /otel-export (#966)
  • 392b80d Bump major tool defaults (helm, argo, istio, knative, k8s) + add CI coverage ...
  • e9e8319 build(deps): bump chainguard-dev/actions in /git-tag (#958)
  • 57c4c2b build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /gofmt (#959)
  • b5d23ad build(deps): bump chainguard-dev/actions in /goimports (#960)
  • 36c1a66 build(deps): bump chainguard-dev/actions in /inky-build-pkg (#961)
  • 0b05232 build(deps): bump chainguard-dev/actions in /melange-build (#962)
  • b4d1959 build(deps): bump chainguard-dev/actions in /wolfi-build-pkg (#964)
  • ed93655 build(deps): bump chainguard-dev/actions in /release-notes (#963)
  • Additional commits viewable in compare view

Updates chainguard-dev/actions/goimports from 1.6.14 to 1.6.25

Release notes

Sourced from chainguard-dev/actions/goimports's releases.

v1.6.25

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.24...v1.6.25

v1.6.24

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.23...v1.6.24

v1.6.23

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.22...v1.6.23

v1.6.22

... (truncated)

Commits
  • e1c4977 build(deps): bump github.com/sethvargo/go-envconfig in /hugo2confluence (#965)
  • 08507ab build(deps-dev): bump @​types/node in /otel-export (#966)
  • 392b80d Bump major tool defaults (helm, argo, istio, knative, k8s) + add CI coverage ...
  • e9e8319 build(deps): bump chainguard-dev/actions in /git-tag (#958)
  • 57c4c2b build(deps): bump chainguard-dev/actions from 1.6.23 to 1.6.24 in /gofmt (#959)
  • b5d23ad build(deps): bump chainguard-dev/actions in /goimports (#960)
  • 36c1a66 build(deps): bump chainguard-dev/actions in /inky-build-pkg (#961)
  • 0b05232 build(deps): bump chainguard-dev/actions in /melange-build (#962)
  • b4d1959 build(deps): bump chainguard-dev/actions in /wolfi-build-pkg (#964)
  • ed93655 build(deps): bump chainguard-dev/actions in /release-notes (#963)
  • Additional commits viewable in compare view

Updates golangci/golangci-lint-action from 9.2.0 to 9.2.1

Release notes

Sourced from golangci/golangci-lint-action's releases.

v9.2.1

What's Changed

IMPORTANT: this is the first immutable release.

Changes

Dependencies

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 26, 2026
@dependabot
Bump the all group across 1 directory with 12 updates
0f161ed 
Bumps the all group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.19.0` | `2.19.4` |
| [chainguard-dev/actions/boilerplate](https://github.com/chainguard-dev/actions) | `1.6.14` | `1.6.25` |
| [chainguard-dev/actions/donotsubmit](https://github.com/chainguard-dev/actions) | `1.6.14` | `1.6.25` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.4.0` | `6.5.0` |
| [chainguard-dev/actions/gofmt](https://github.com/chainguard-dev/actions) | `1.6.14` | `1.6.25` |
| [chainguard-dev/actions/goimports](https://github.com/chainguard-dev/actions) | `1.6.14` | `1.6.25` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `9.2.0` | `9.2.1` |
| [chainguard-dev/actions/trailing-space](https://github.com/chainguard-dev/actions) | `1.6.14` | `1.6.25` |
| [chainguard-dev/actions/eof-newline](https://github.com/chainguard-dev/actions) | `1.6.14` | `1.6.25` |
| [step-security/action-tflint](https://github.com/step-security/action-tflint) | `1.24.2` | `1.25.0` |
| [step-security/woke-action-reviewdog](https://github.com/step-security/woke-action-reviewdog) | `0.1.1` | `0.1.2` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.2` | `0.5.7` |



Updates `step-security/harden-runner` from 2.19.0 to 2.19.4
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@8d3c67d...9af89fc)

Updates `chainguard-dev/actions/boilerplate` from 1.6.14 to 1.6.25
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@de68b87...e1c4977)

Updates `chainguard-dev/actions/donotsubmit` from 1.6.14 to 1.6.25
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@de68b87...e1c4977)

Updates `actions/setup-go` from 6.4.0 to 6.5.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4a36011...924ae3a)

Updates `chainguard-dev/actions/gofmt` from 1.6.14 to 1.6.25
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@de68b87...e1c4977)

Updates `chainguard-dev/actions/goimports` from 1.6.14 to 1.6.25
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@de68b87...e1c4977)

Updates `golangci/golangci-lint-action` from 9.2.0 to 9.2.1
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@1e7e51e...82606bf)

Updates `chainguard-dev/actions/trailing-space` from 1.6.14 to 1.6.25
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@de68b87...e1c4977)

Updates `chainguard-dev/actions/eof-newline` from 1.6.14 to 1.6.25
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@de68b87...e1c4977)

Updates `step-security/action-tflint` from 1.24.2 to 1.25.0
- [Release notes](https://github.com/step-security/action-tflint/releases)
- [Commits](step-security/action-tflint@15c8d1f...285fe25)

Updates `step-security/woke-action-reviewdog` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/step-security/woke-action-reviewdog/releases)
- [Commits](step-security/woke-action-reviewdog@950b04a...5db6c18)

Updates `zizmorcore/zizmor-action` from 0.5.2 to 0.5.7
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@71321a2...192e21d)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: chainguard-dev/actions/boilerplate
  dependency-version: 1.6.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chainguard-dev/actions/donotsubmit
  dependency-version: 1.6.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chainguard-dev/actions/eof-newline
  dependency-version: 1.6.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chainguard-dev/actions/gofmt
  dependency-version: 1.6.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chainguard-dev/actions/goimports
  dependency-version: 1.6.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chainguard-dev/actions/trailing-space
  dependency-version: 1.6.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: golangci/golangci-lint-action
  dependency-version: 9.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: step-security/action-tflint
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: step-security/woke-action-reviewdog
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/all-2bec15744a branch from dd40539 to 0f161ed Compare June 30, 2026 08:08
@stevebeattie
stevebeattie merged commit c5dd4a8 into main Jun 30, 2026
16 of 17 checks passed
@stevebeattie
stevebeattie deleted the dependabot/github_actions/all-2bec15744a branch June 30, 2026 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@stevebeattie