Skip to content

Bump the github-actions-all group across 1 directory with 13 updates#464

Merged
felddy merged 5 commits intodevelopfrom
dependabot/github_actions/github-actions-all-e487a0a50c
Dec 10, 2025
Merged

Bump the github-actions-all group across 1 directory with 13 updates#464
felddy merged 5 commits intodevelopfrom
dependabot/github_actions/github-actions-all-e487a0a50c

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 10, 2025

Bumps the github-actions-all group with 13 updates in the / directory:

Package From To
felddy/reusable-workflows/.github/workflows/csv-to-json.yml 2 3
felddy/reusable-workflows/.github/workflows/diagnostics.yml 2 3
felddy/reusable-workflows/.github/workflows/docker-metadata.yml 2 3
felddy/reusable-workflows/.github/workflows/common-lint.yml 2 3
felddy/reusable-workflows/.github/workflows/docker-build-image.yml 2 3
felddy/reusable-workflows/.github/workflows/docker-pytest-image.yml 2 3
felddy/reusable-workflows/.github/workflows/sbom-artifact.yml 2 3
felddy/reusable-workflows/.github/workflows/docker-multi-arch-push.yml 2 3
felddy/reusable-workflows/.github/workflows/docker-publish-description.yml 2 3
step-security/harden-runner 2.13.3 2.14.0
actions/checkout 6.0.0 6.0.1
github/codeql-action 4.31.6 4.31.7
actions/stale 10.1.0 10.1.1

Updates felddy/reusable-workflows/.github/workflows/csv-to-json.yml from 2 to 3

Release notes

Sourced from felddy/reusable-workflows/.github/workflows/csv-to-json.yml's releases.

v3.0.0

This release focuses on moving away from the Docker ecosystem. There are many breaking changes. Most of these are related to workflow, input, and output name changes.

  • It renames many of the workflows to be agnostic. Using container instead of docker in the workflow names.
  • It no longer uses DockerHub as the primary container registry due to aggressive API throttling.
  • GitHub Container Registry is now the primary registry using base images from the AWS ECR Public.
  • Two new workflows have been added to mirror images and documentation to DockerHub for final releases.
  • This release incorporates the latest changes from the upstream CISA generic skeleton.

What's Changed

Full Changelog: felddy/reusable-workflows@v2...v3.0.0

v3.0.0-beta.6

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.5...v3.0.0-beta.6

v3.0.0-beta.5

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.4...v3.0.0-beta.5

... (truncated)

Commits
  • 64c533d Merge pull request #438 from felddy/dependabot/github_actions/github-actions-...
  • 4e60d1b Bump github/codeql-action
  • 2961892 Merge pull request #437 from felddy/dependabot/github_actions/github-actions-...
  • 9dabf2b Add pinned versions in workflows for improved security
  • a6ca24b Bump the github-actions-all group across 1 directory with 2 updates
  • 2545526 Merge pull request #436 from felddy/improvement/aws-endpoint
  • f05eaac Add public ECR endpoint to allowed endpoints in scorecards workflow
  • cb1d013 Merge pull request #435 from felddy/issue/427
  • 07e1322 Pin action versions with sha
  • 89f78ac Fix typos in setup-env documentation
  • Additional commits viewable in compare view

Updates felddy/reusable-workflows/.github/workflows/diagnostics.yml from 2 to 3

Release notes

Sourced from felddy/reusable-workflows/.github/workflows/diagnostics.yml's releases.

v3.0.0

This release focuses on moving away from the Docker ecosystem. There are many breaking changes. Most of these are related to workflow, input, and output name changes.

  • It renames many of the workflows to be agnostic. Using container instead of docker in the workflow names.
  • It no longer uses DockerHub as the primary container registry due to aggressive API throttling.
  • GitHub Container Registry is now the primary registry using base images from the AWS ECR Public.
  • Two new workflows have been added to mirror images and documentation to DockerHub for final releases.
  • This release incorporates the latest changes from the upstream CISA generic skeleton.

What's Changed

Full Changelog: felddy/reusable-workflows@v2...v3.0.0

v3.0.0-beta.6

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.5...v3.0.0-beta.6

v3.0.0-beta.5

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.4...v3.0.0-beta.5

... (truncated)

Commits
  • 64c533d Merge pull request #438 from felddy/dependabot/github_actions/github-actions-...
  • 4e60d1b Bump github/codeql-action
  • 2961892 Merge pull request #437 from felddy/dependabot/github_actions/github-actions-...
  • 9dabf2b Add pinned versions in workflows for improved security
  • a6ca24b Bump the github-actions-all group across 1 directory with 2 updates
  • 2545526 Merge pull request #436 from felddy/improvement/aws-endpoint
  • f05eaac Add public ECR endpoint to allowed endpoints in scorecards workflow
  • cb1d013 Merge pull request #435 from felddy/issue/427
  • 07e1322 Pin action versions with sha
  • 89f78ac Fix typos in setup-env documentation
  • Additional commits viewable in compare view

Updates felddy/reusable-workflows/.github/workflows/docker-metadata.yml from 2 to 3

Release notes

Sourced from felddy/reusable-workflows/.github/workflows/docker-metadata.yml's releases.

v3.0.0

This release focuses on moving away from the Docker ecosystem. There are many breaking changes. Most of these are related to workflow, input, and output name changes.

  • It renames many of the workflows to be agnostic. Using container instead of docker in the workflow names.
  • It no longer uses DockerHub as the primary container registry due to aggressive API throttling.
  • GitHub Container Registry is now the primary registry using base images from the AWS ECR Public.
  • Two new workflows have been added to mirror images and documentation to DockerHub for final releases.
  • This release incorporates the latest changes from the upstream CISA generic skeleton.

What's Changed

Full Changelog: felddy/reusable-workflows@v2...v3.0.0

v3.0.0-beta.6

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.5...v3.0.0-beta.6

v3.0.0-beta.5

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.4...v3.0.0-beta.5

... (truncated)

Commits
  • 64c533d Merge pull request #438 from felddy/dependabot/github_actions/github-actions-...
  • 4e60d1b Bump github/codeql-action
  • 2961892 Merge pull request #437 from felddy/dependabot/github_actions/github-actions-...
  • 9dabf2b Add pinned versions in workflows for improved security
  • a6ca24b Bump the github-actions-all group across 1 directory with 2 updates
  • 2545526 Merge pull request #436 from felddy/improvement/aws-endpoint
  • f05eaac Add public ECR endpoint to allowed endpoints in scorecards workflow
  • cb1d013 Merge pull request #435 from felddy/issue/427
  • 07e1322 Pin action versions with sha
  • 89f78ac Fix typos in setup-env documentation
  • Additional commits viewable in compare view

Updates felddy/reusable-workflows/.github/workflows/common-lint.yml from 2 to 3

Release notes

Sourced from felddy/reusable-workflows/.github/workflows/common-lint.yml's releases.

v3.0.0

This release focuses on moving away from the Docker ecosystem. There are many breaking changes. Most of these are related to workflow, input, and output name changes.

  • It renames many of the workflows to be agnostic. Using container instead of docker in the workflow names.
  • It no longer uses DockerHub as the primary container registry due to aggressive API throttling.
  • GitHub Container Registry is now the primary registry using base images from the AWS ECR Public.
  • Two new workflows have been added to mirror images and documentation to DockerHub for final releases.
  • This release incorporates the latest changes from the upstream CISA generic skeleton.

What's Changed

Full Changelog: felddy/reusable-workflows@v2...v3.0.0

v3.0.0-beta.6

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.5...v3.0.0-beta.6

v3.0.0-beta.5

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.4...v3.0.0-beta.5

... (truncated)

Commits
  • 64c533d Merge pull request #438 from felddy/dependabot/github_actions/github-actions-...
  • 4e60d1b Bump github/codeql-action
  • 2961892 Merge pull request #437 from felddy/dependabot/github_actions/github-actions-...
  • 9dabf2b Add pinned versions in workflows for improved security
  • a6ca24b Bump the github-actions-all group across 1 directory with 2 updates
  • 2545526 Merge pull request #436 from felddy/improvement/aws-endpoint
  • f05eaac Add public ECR endpoint to allowed endpoints in scorecards workflow
  • cb1d013 Merge pull request #435 from felddy/issue/427
  • 07e1322 Pin action versions with sha
  • 89f78ac Fix typos in setup-env documentation
  • Additional commits viewable in compare view

Updates felddy/reusable-workflows/.github/workflows/docker-build-image.yml from 2 to 3

Release notes

Sourced from felddy/reusable-workflows/.github/workflows/docker-build-image.yml's releases.

v3.0.0

This release focuses on moving away from the Docker ecosystem. There are many breaking changes. Most of these are related to workflow, input, and output name changes.

  • It renames many of the workflows to be agnostic. Using container instead of docker in the workflow names.
  • It no longer uses DockerHub as the primary container registry due to aggressive API throttling.
  • GitHub Container Registry is now the primary registry using base images from the AWS ECR Public.
  • Two new workflows have been added to mirror images and documentation to DockerHub for final releases.
  • This release incorporates the latest changes from the upstream CISA generic skeleton.

What's Changed

Full Changelog: felddy/reusable-workflows@v2...v3.0.0

v3.0.0-beta.6

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.5...v3.0.0-beta.6

v3.0.0-beta.5

Full Changelog: felddy/reusable-workflows@v3.0.0-beta.4...v3.0.0-beta.5

... (truncated)

Commits
  • 64c533d Merge pull request #438 from felddy/dependabot/github_actions/github-actions-...
  • 4e60d1b Bump github/codeql-action
  • 2961892 Merge pull request #437 from felddy/dependabot/github_actions/github-actions-...
  • 9dabf2b Add pinned versions in workflows for improved security
  • a6ca24b Bump the github-actions-all group across 1 directory with 2 updates
  • 2545526 Merge pull request #436 from felddy/improvement/aws-endpoint
  • f05eaac Add public ECR endpoint to allowed endpoints in scorecards workflow
  • cb1d013 Merge pull request #435 from felddy/issue/427
  • 07e1322 Pin action versions with sha
  • 89f78ac Fix typos in setup-env documentation
  • Additional commits viewable in compare view

Updates felddy/reusable-workflows/.github/workflows/docker-pytest-image.yml from 2 to 3

Release notes

Sourced from felddy/reusable-workflows/.github/workflows/docker-pytest-image.yml's releases.

v3.0.0

This release focuses on moving away from the Docker ecosystem. There are many breaking changes. Most of these are related to workflow, input, and output name changes.

  • It renames many of the workflows to be agnostic. Using container instead of docker in the workflow names.
  • It no longer uses DockerHub as the primary container registry due to aggressive API throttling.

@dependabot
Bump the github-actions-all group across 1 directory with 13 updates
a0b9d19 
Bumps the github-actions-all group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [felddy/reusable-workflows/.github/workflows/csv-to-json.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/diagnostics.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/docker-metadata.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/common-lint.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/docker-build-image.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/docker-pytest-image.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/sbom-artifact.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/docker-multi-arch-push.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [felddy/reusable-workflows/.github/workflows/docker-publish-description.yml](https://github.com/felddy/reusable-workflows) | `2` | `3` |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.3` | `2.14.0` |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `6.0.1` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.6` | `4.31.7` |
| [actions/stale](https://github.com/actions/stale) | `10.1.0` | `10.1.1` |



Updates `felddy/reusable-workflows/.github/workflows/csv-to-json.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/diagnostics.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/docker-metadata.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/common-lint.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/docker-build-image.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/docker-pytest-image.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/sbom-artifact.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/docker-multi-arch-push.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `felddy/reusable-workflows/.github/workflows/docker-publish-description.yml` from 2 to 3
- [Release notes](https://github.com/felddy/reusable-workflows/releases)
- [Commits](felddy/reusable-workflows@v2...v3)

Updates `step-security/harden-runner` from 2.13.3 to 2.14.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@df199fb...20cf305)

Updates `actions/checkout` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@1af3b93...8e8c483)

Updates `github/codeql-action` from 4.31.6 to 4.31.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@fe4161a...cf1bb45)

Updates `actions/stale` from 10.1.0 to 10.1.1
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@5f858e3...9971854)

---
updated-dependencies:
- dependency-name: felddy/reusable-workflows/.github/workflows/csv-to-json.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/diagnostics.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/docker-metadata.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/common-lint.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/docker-build-image.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/docker-pytest-image.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/sbom-artifact.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/docker-multi-arch-push.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: felddy/reusable-workflows/.github/workflows/docker-publish-description.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-all
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-all
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-all
- dependency-name: github/codeql-action
  dependency-version: 4.31.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-all
- dependency-name: actions/stale
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from felddy as a code owner December 10, 2025 14:02
@felddy felddy merged commit 94e8de6 into develop Dec 10, 2025
36 checks passed
@felddy felddy deleted the dependabot/github_actions/github-actions-all-e487a0a50c branch December 10, 2025 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@felddy felddy felddy approved these changes

Assignees

No one assigned

Labels

bot 🤖 dependencies 🎲 github-actions :octocat:

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@felddy