build(deps): bump the minor-and-patch-actions-weekly group across 1 directory with 14 updates#4898
Closed
dependabot[bot] wants to merge 1 commit intomainfrom
Closed
Conversation
…irectory with 14 updates Bumps the minor-and-patch-actions-weekly group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.1` | `2.14.2` | | [step-security/publish-unit-test-result-action](https://github.com/step-security/publish-unit-test-result-action) | `2.21.1` | `2.22.0` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.0.0` | `6.2.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.1.0` | `6.2.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.11.1` | `3.12.0` | | [mikepenz/action-junit-report](https://github.com/mikepenz/action-junit-report) | `6.0.1` | `6.2.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.1.0` | `6.2.0` | | [step-security/conventional-pr-title-action](https://github.com/step-security/conventional-pr-title-action) | `3.2.5` | `3.2.6` | | [step-security/foundry-toolchain](https://github.com/step-security/foundry-toolchain) | `1.5.0` | `1.6.0` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.0.0` | `8.1.0` | | [step-security/release-notes-generator-action](https://github.com/step-security/release-notes-generator-action) | `3.2.0` | `3.2.2` | | [docker/login-action](https://github.com/docker/login-action) | `3.6.0` | `3.7.0` | | [step-security/helm-gh-pages](https://github.com/step-security/helm-gh-pages) | `1.7.5` | `1.7.7` | Updates `step-security/harden-runner` from 2.13.1 to 2.14.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@v2.13.1...5ef0c07) Updates `step-security/publish-unit-test-result-action` from 2.21.1 to 2.22.0 - [Release notes](https://github.com/step-security/publish-unit-test-result-action/releases) - [Commits](step-security/publish-unit-test-result-action@914f0f6...7dff603) Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `actions/setup-node` from 6.0.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v6...6044e13) Updates `actions/setup-python` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@83679a8...a309ff8) Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@e468171...8d2750c) Updates `mikepenz/action-junit-report` from 6.0.1 to 6.2.0 - [Release notes](https://github.com/mikepenz/action-junit-report/releases) - [Commits](mikepenz/action-junit-report@e08919a...74626db) Updates `actions/setup-go` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@4dc6199...7a3fe6c) Updates `step-security/conventional-pr-title-action` from 3.2.5 to 3.2.6 - [Release notes](https://github.com/step-security/conventional-pr-title-action/releases) - [Changelog](https://github.com/step-security/conventional-pr-title-action/blob/main/release.config.js) - [Commits](step-security/conventional-pr-title-action@cb1c565...bb2263e) Updates `step-security/foundry-toolchain` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/step-security/foundry-toolchain/releases) - [Changelog](https://github.com/step-security/foundry-toolchain/blob/main/RELEASE.md) - [Commits](step-security/foundry-toolchain@b3c15ce...f478247) Updates `peter-evans/create-pull-request` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@98357b1...c0f553f) Updates `step-security/release-notes-generator-action` from 3.2.0 to 3.2.2 - [Release notes](https://github.com/step-security/release-notes-generator-action/releases) - [Commits](step-security/release-notes-generator-action@e516c85...796ee9c) Updates `docker/login-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@5e57cd1...c94ce9f) Updates `step-security/helm-gh-pages` from 1.7.5 to 1.7.7 - [Release notes](https://github.com/step-security/helm-gh-pages/releases) - [Commits](step-security/helm-gh-pages@6161801...2826baf) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: step-security/publish-unit-test-result-action dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch-actions-weekly - dependency-name: actions/setup-node dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: docker/setup-buildx-action dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: mikepenz/action-junit-report dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: actions/setup-go dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: step-security/conventional-pr-title-action dependency-version: 3.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch-actions-weekly - dependency-name: step-security/foundry-toolchain dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: step-security/release-notes-generator-action dependency-version: 3.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch-actions-weekly - dependency-name: docker/login-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch-actions-weekly - dependency-name: step-security/helm-gh-pages dependency-version: 1.7.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch-actions-weekly ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
dependabot
bot
added
the
github_actions
jasuwienas
approved these changes
Feb 12, 2026
simzzz
approved these changes
Feb 16, 2026
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/github_actions/minor-and-patch-actions-weekly-7731627bf5
branch
Codecov Report✅ All modified and coverable lines are covered by tests.
@@ Coverage Diff @@
## main #4898 +/- ##
===========================================
- Coverage 96.02% 69.22% -26.80%
===========================================
Files 143 143
Lines 23342 23342
Branches 1853 597 -1256
===========================================
- Hits 22413 16158 -6255
- Misses 905 7163 +6258
+ Partials 24 21 -3
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch-actions-weekly group with 14 updates in the / directory:
2.13.12.14.22.21.12.22.06.0.16.0.26.0.06.2.06.1.06.2.03.11.13.12.06.0.16.2.06.1.06.2.03.2.53.2.61.5.01.6.08.0.08.1.03.2.03.2.23.6.03.7.01.7.51.7.7Updates
step-security/harden-runnerfrom 2.13.1 to 2.14.2Release notes
Sourced from step-security/harden-runner's releases.
Commits
5ef0c07Merge pull request #635 from step-security/rc-34eb43c7bupdate agente3f713fMerge pull request #631 from step-security/rc-31423acddchore: fix npm audit vulnerabilities0ddb86cupdate agent20cf305Merge pull request #622 from step-security/feature/custom-property-skipc51e8eefeat: skip agent install and post step on subsequent runs for GitHub-hosted r...e152b90feat: skip harden-runner based on repository custom propertyee1faecfeat: replace skip-harden-runner with skip-on-custom-property input1dc7c17feat: add skip-harden-runner input to conditionally skip executionUpdates
step-security/publish-unit-test-result-actionfrom 2.21.1 to 2.22.0Release notes
Sourced from step-security/publish-unit-test-result-action's releases.
Commits
7dff603Merge pull request #165 from step-security/Raj-StepSecurity-patch-32d6f65e3feat: Update action.ymle49ad33Merge pull request #163 from step-security/Raj-StepSecurity-patch-3023cb766Merge branch 'main' into Raj-StepSecurity-patch-307c7e809Merge pull request #164 from step-security/Raj-StepSecurity-patch-31b13fa6fUpdate ci-cd.yml7e056fbUpdate action.yml6910725Merge pull request #161 from step-security/auto-cherry-pick53b8f70workflow files cherry-picked manuallyadc22c4Releasing v2.22.0Updates
actions/checkoutfrom 6.0.1 to 6.0.2Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
de0fac2Fix tag handling: preserve annotations and explicit fetch-tags (#2356)064fe7fAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...Updates
actions/setup-nodefrom 6.0.0 to 6.2.0Release notes
Sourced from actions/setup-node's releases.
Commits
Updates
actions/setup-pythonfrom 6.1.0 to 6.2.0Release notes
Sourced from actions/setup-python's releases.
Commits
a309ff8Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)bfe8cc5Upgrade@actionsdependencies to Node 24 compatible versions (#1259)4f41a90Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)Updates
docker/setup-buildx-actionfrom 3.11.1 to 3.12.0Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
8d2750cMerge pull request #455 from crazy-max/install-deprecatede81846bdeprecate install input65d18f8Merge pull request #454 from docker/dependabot/github_actions/actions/checkout-6000d75dbuild(deps): bump actions/checkout from 5 to 61583c0fMerge pull request #443 from nicolasleger/patch-1ed158e7doc: bump actions/checkout from 4 to 54cc794fMerge pull request #441 from docker/dependabot/github_actions/actions/checkout-54dfc3d6build(deps): bump actions/checkout from 4 to 5af1b253Merge pull request #440 from crazy-max/k3s-build3c6ab92ci: k3s test with latest buildxUpdates
mikepenz/action-junit-reportfrom 6.0.1 to 6.2.0Release notes
Sourced from mikepenz/action-junit-report's releases.
... (truncated)
Commits
74626dbMerge pull request #1495 from mikepenz/chore/remove-globals-dependency2673d50chore: remove globals from devDependenciesf348fc4Merge pull request #1494 from mikepenz/fix/692-file-name-transformer08027dbFix: Apply transformers to FILE_NAME in check_title_template117a5e4Merge pull request #1493 from mikepenz/feature/pr-changeseed6a8bFix imports for@actions/githubv9 compatibility72b5229Update dependencies and code changes32f173cMerge pull request #1492 from mikepenz/fix/148912b0171Add space before test time in annotation output - FIX #148904c39b3Merge pull request #1491 from pajlada/patch-1Updates
actions/setup-gofrom 6.1.0 to 6.2.0Release notes
Sourced from actions/setup-go's releases.
Commits
7a3fe6cBump qs from 6.14.0 to 6.14.1 (#703)b9adafdBump actions/checkout from 5 to 6 (#686)d73f6bcREADME.md: correct to actions/checkout@v6 (#683)ae252eeBump@actions/cacheto v5 (#695)bf7446aBump js-yaml from 3.14.1 to 3.14.2 (#682)02aadfeFix Node.js version in action.yml (#691)4aaadf4Example for restore-only cache in documentation (#696)Updates
step-security/conventional-pr-title-actionfrom 3.2.5 to 3.2.6Release notes
Sourced from step-security/conventional-pr-title-action's releases.
Commits
bb2263eMerge pull request #135 from step-security/amanstep-patch-2ba9a699Update action.yml1b88c49feat: updated the docker image8920bacMerge pull request #134 from step-security/fix/vulnerability36dc6949Merge branch 'main' into fix/vulnerability3ca6f7effix: fixed vulnerabilitiesa1de813Merge pull request #124 from step-security/dependabot/github_actions/docker/l...b469a43Bump docker/login-action from 2.1.0 to 3.6.01b20391Merge pull request #133 from step-security/npm-audit-fixbb29186fix: apply audit fixesUpdates
step-security/foundry-toolchainfrom 1.5.0 to 1.6.0Release notes
Sourced from step-security/foundry-toolchain's releases.
Commits
f478247Merge pull request #137 from step-security/npm-audit-fix6be0941fix: apply audit fixesa07a2aefix: apply audit fixesc5c4621fix: apply audit fixes690f3fafix: apply audit fixes3185f49fix: apply audit fixesc7f4c6achore: Cherry-picked changes from upstream (#134)d5d5124fix: code build script8f55357workflow file validated201a00dconflicted commits cherry-pickedUpdates
peter-evans/create-pull-requestfrom 8.0.0 to 8.1.0Release notes
Sourced from peter-evans/create-pull-request's releases.
Commits
c0f553ffeat: add@octokit/plugin-retryto handle retriable server errors (#4298)7000124fix: Handle remote prune failures gracefully (#4295)34aa40ebuild: update distribution (#4289)641099dbuild(deps-dev): bump undici from 6.22.0 to 6.23.0 (#4284)2271f1dbuild(deps-dev): bump the npm group with 2 updates (#4274)437c31abuild(deps): bump the github-actions group with 2 updates (#4273)0979079docs: update readme5b751cdREADME.md: bump given GitHub actions to their latest versions (#4265)Updates
step-security/release-notes-generator-actionfrom 3.2.0 to 3.2.2Release notes
Sourced from step-security/release-notes-generator-action's releases.
Commits
796ee9cMerge pull request #58 from step-security/amanstep-patch-22622c34feat: updated the docker imagef526854Merge pull request #57 from step-security/fix/vulnerability22432ca9fix: fixed vulnerabilities386be8cMerge pull request #56 from step-security/amanstep-patch-179aa923feat: updated docker image80f1a5aMerge pull request #55 from step-security/fix/vulnerabilityd53f484Merge branch 'main' into fix/vulnerability93c0efffix: fixed docker vulnerabilitiesUpdates
docker/login-actionfrom 3.6.0 to 3.7.0Release notes
Sourced from docker/login-action's releases.
Commits
c94ce9fMerge pull request #915 from docker/dependabot/npm_and_yarn/lodash-4.17.238339c95Merge pull request #912 from docker/scopec83e932build(deps): bump lodash from 4.17.21 to 4.17.23b268aa5chore: update generated contenta603229documentation for scope input7567f92Add scope input to set scopes for the authentication token0567fa5Merge pull request #914 from dphi/add-support-for-amazonaws.euf6ef577feat: add support for AWS European Sovereign Cloud ECR registries916386bMerge pull request #911 from crazy-max/ensure-redact5b3f94achore: update generated contentUpdates
step-security/helm-gh-pagesfrom 1.7.5 to 1.7.7Release notes
Sourced from step-security/helm-gh-pages's releases.
Commits
2826bafMerge pull request #111 from step-security/amanstep-patch-389ce65cUpdate action.ymlb657747Merge pull request #110 from step-security/fix/vulnerability1c787332fix: fixed docker vulnerabilities1dd0d0dMerge pull request #109 from step-security/amanstep-patch-2b6ee10bfeat: updated the docker image