Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jun 17, 2025

Bumps the actions-deps group with 9 updates in the / directory:

Package From To
actions/checkout 3 4
dawidd6/action-download-artifact 9 11
EnricoMi/publish-unit-test-result-action 2.19.0 2.20.0
aws-actions/configure-aws-credentials 4.1.0 4.2.1
codecov/codecov-action 5.4.2 5.4.3
github/codeql-action 3.28.17 3.29.0
zephyrproject-rtos/action-zephyr-setup 1.0.6 1.0.7
zgosalvez/github-actions-ensure-sha-pinned-actions 3.0.24 3.0.25
ossf/scorecard-action 2.4.1 2.4.2

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Commits

Updates dawidd6/action-download-artifact from 9 to 11

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v11

Full Changelog: dawidd6/action-download-artifact@v10...v11

v10

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v9...v10

Commits

Updates EnricoMi/publish-unit-test-result-action from 2.19.0 to 2.20.0

Release notes

Sourced from EnricoMi/publish-unit-test-result-action's releases.

v2.20.0

Adds the following improvements:

  • Add action typing #653
  • Isolate PIP cache used by composite actions #668
  • Fix for empty <system-out> and <system-err> #667
  • Deprecate github_token_actor option, auto-detect actor #661
  • Use and recommend !cancelled() instead of always() #659
  • Add deprecationMessage to action.yml for deprecated inputs (#654)
  • Resolve regex library warnings #660

Full Changelog: EnricoMi/publish-unit-test-result-action@v2.19.0...v2.20.0

Commits

Updates aws-actions/configure-aws-credentials from 4.1.0 to 4.2.1

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v4.2.1

4.2.1 (2025-05-14)

Bug Fixes

  • ensure explicit inputs take precedence over environment variables (e56e6c4)
  • prioritize explicit inputs over environment variables (df9c8fe)

v4.2.0

4.2.0 (2025-05-06)

Features

  • add Expiration field to Outputs (a4f3267)
  • Document role-duration-seconds range (5a0cf01)
  • support action inputs as environment variables (#1338) (2c168ad)

Bug Fixes

  • make sure action builds, also fix dependabot autoapprove (c401b8a)
  • role chaning on mulitple runs (#1340) (9e38641)
Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.2.1 (2025-05-14)

Bug Fixes

  • ensure explicit inputs take precedence over environment variables (e56e6c4)
  • prioritize explicit inputs over environment variables (df9c8fe)

4.2.0 (2025-05-06)

Features

  • add Expiration field to Outputs (a4f3267)
  • Document role-duration-seconds range (5a0cf01)
  • support action inputs as environment variables (#1338) (2c168ad)

Bug Fixes

  • make sure action builds, also fix dependabot autoapprove (c401b8a)
  • role chaning on mulitple runs (#1340) (9e38641)

4.1.0 (2025-02-08)

Features

Bug Fixes

4.0.3 (2025-01-27)

Features

  • added release-please action config (0f88004)

... (truncated)

Commits
  • b475783 chore(main): release 4.2.1 (#1356)
  • e56e6c4 Merge pull request #1355 from hozzer/main
  • c0573b2 update dist
  • df9c8fe fix: prioritize explicit inputs over environment variables
  • e7aeb52 chore: Update dist
  • 5188626 chore(deps): bump @​aws-sdk/client-sts from 3.803.0 to 3.808.0 (#1353)
  • a7d7b78 chore: Update dist
  • e10de4c chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1352)
  • 85f7c4c chore(deps-dev): bump @​types/node from 22.15.11 to 22.15.17 (#1351)
  • f24d719 Merge pull request #1331 from aws-actions/release-please--branches--main--com...
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 5.4.2 to 5.4.3

Release notes

Sourced from codecov/codecov-action's releases.

v5.4.3

What's Changed

Full Changelog: codecov/codecov-action@v5.4.2...v5.4.3

Changelog

Sourced from codecov/codecov-action's changelog.

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

v5.4.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

... (truncated)

Commits

Updates github/codeql-action from 3.28.17 to 3.29.0

Release notes

Sourced from github/codeql-action's releases.

v3.29.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.0 - 11 Jun 2025

  • Update default CodeQL bundle version to 2.22.0. #2925
  • Bump minimum CodeQL bundle version to 2.16.6. #2912

See the full CHANGELOG.md for more information.

v3.28.19

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025

  • The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview. The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable actions analysis.
  • Update default CodeQL bundle version to 2.21.4. #2910

See the full CHANGELOG.md for more information.

v3.28.18

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

  • Update default CodeQL bundle version to 2.21.3. #2893
  • Skip validating SARIF produced by CodeQL for improved performance. #2894
  • The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #2891

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.29.0 - 11 Jun 2025

  • Update default CodeQL bundle version to 2.22.0. #2925
  • Bump minimum CodeQL bundle version to 2.16.6. #2912

3.28.19 - 03 Jun 2025

  • The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview. The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable actions analysis.
  • Update default CodeQL bundle version to 2.21.4. #2910

3.28.18 - 16 May 2025

  • Update default CodeQL bundle version to 2.21.3. #2893
  • Skip validating SARIF produced by CodeQL for improved performance. #2894
  • The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #2891

3.28.17 - 02 May 2025

  • Update default CodeQL bundle version to 2.21.2. #2872

3.28.16 - 23 Apr 2025

  • Update default CodeQL bundle version to 2.21.1. #2863

3.28.15 - 07 Apr 2025

  • Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

3.28.14 - 07 Apr 2025

  • Update default CodeQL bundle version to 2.21.0. #2838

3.28.13 - 24 Mar 2025

No user facing changes.

3.28.12 - 19 Mar 2025

  • Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.

... (truncated)

Commits
  • ce28f5b Merge pull request #2926 from github/update-v3.29.0-e8799281c
  • bc251b7 Update changelog for v3.29.0
  • e879928 Merge pull request #2925 from github/update-bundle/codeql-bundle-v2.22.0
  • efd43b3 Merge branch 'main' into update-bundle/codeql-bundle-v2.22.0
  • 7cb9b16 Merge pull request #2912 from github/henrymercer/bump-minimum-codeql-2.16.6
  • 3855117 Add changelog note
  • f5d4e2a Update default bundle to codeql-bundle-v2.22.0
  • 22deae8 Update package-lock.json
  • df2a830 Merge branch 'main' into henrymercer/bump-minimum-codeql-2.16.6
  • b1e4dc3 Merge pull request #2916 from github/dependabot/npm_and_yarn/npm-5cdccdc43f
  • Additional commits viewable in compare view

Updates zephyrproject-rtos/action-zephyr-setup from 1.0.6 to 1.0.7

Commits
  • b2453c7 action: Optional west version input
  • 223f44d west: call init before calling config
  • 5922adc workflow: support west filtering
  • db1412e packages: install gperf, needed for userspace
  • See full diff in compare view

Updates zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.24 to 3.0.25

Release notes

Sourced from zgosalvez/github-actions-ensure-sha-pinned-actions's releases.

v3.0.25

What's Changed

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v3...v3.0.25

Commits

Updates ossf/scorecard-action from 2.4.1 to 2.4.2

Release notes

Sourced from ossf/scorecard-action's releases.

v2.4.2

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

Commits
  • 05b42c6 🌱 bump docker to ghcr v2.4.2 (#1548)
  • b225da6 Bump github.com/ossf/scorecard/v5 from v5.2.0 to v5.2.1 (#1550)
  • 9399f6f 🌱 Bump the docker-images group across 1 directory with 2 updates (#1...
  • e1daa8c 🌱 Bump the github-actions group across 1 directory with 5 updates (#...
  • 9fe6511 🌱 Bump golang.org/x/net from 0.39.0 to 0.40.0 (#1542)
  • 25b9cd9 🌱 Bump github.com/ossf/scorecard/v5 from v5.1.1 to v5.2.0 (#1547)
  • 18cc9b8 🌱 Bump golang.org/x/net from 0.38.0 to 0.39.0 (#1536)
  • db78142 🌱 Bump the github-actions group with 2 updates (#1538)
  • de386ed 🌱 Bump golang from 1.24.1 to 1.24.2 in the docker-images group (#1534)
  • 5b7cedb 🌱 Bump github.com/sigstore/cosign/v2 from 2.4.3 to 2.5.0 (#1537)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 17, 2025
@NordicBuilder
Copy link
Contributor

none

Note: This comment is automatically posted and updated by the Contribs GitHub Action.

@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-deps-2a1a1cdcab branch from 7e8b20f to 28e533b Compare June 23, 2025 10:52
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-deps-2a1a1cdcab branch from 28e533b to 333cdab Compare June 30, 2025 13:41
Copy link

@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-deps-2a1a1cdcab branch from 333cdab to 7ef1d55 Compare July 7, 2025 13:08
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-deps-2a1a1cdcab branch 2 times, most recently from fac733c to 62147f3 Compare July 21, 2025 12:11
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-deps-2a1a1cdcab branch from 62147f3 to 4f4ab1d Compare July 28, 2025 17:26
…ates

Dependabot couldn't find the original pull request head commit, 4f4ab1d.
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-deps-2a1a1cdcab branch from 4f4ab1d to c06e30f Compare August 4, 2025 14:02
Copy link
Author

dependabot bot commented on behalf of github Aug 11, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 11, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/actions-deps-2a1a1cdcab branch August 11, 2025 11:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file external github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant