Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 30, 2025

Bumps the github-actions group with 6 updates in the / directory:

Package From To
actions/cache 4.2.4 4.3.0
hendrikmuhs/ccache-action 1.2.18 1.2.19
docker/login-action 3.5.0 3.6.0
reviewdog/action-suggester 1.21.0 1.24.0
actions/create-github-app-token 2.0.6 2.1.4
googleapis/release-please-action 4.2.0 4.3.0

Updates actions/cache from 4.2.4 to 4.3.0

Release notes

Sourced from actions/cache's releases.

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.3.0

Changelog

Sourced from actions/cache's changelog.

Releases

4.3.0

  • Bump @actions/cache to v4.1.0

4.2.4

  • Bump @actions/cache to v4.0.5

4.2.3

  • Bump @actions/cache to v4.0.3 (obfuscates SAS token in debug logs for cache entries)

4.2.2

  • Bump @actions/cache to v4.0.2

4.2.1

  • Bump @actions/cache to v4.0.1

4.2.0

TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

4.1.2

  • Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474
  • Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

  • Restore original behavior of cache-hit output - #1467

4.1.0

  • Ensure cache-hit output is set when a cache is missed - #1404
  • Deprecate save-always input - #1452

... (truncated)

Commits
  • 0057852 Merge pull request #1655 from actions/Link-/prepare-4.3.0
  • 4f5ea67 Update licensed cache
  • 9fcad95 Upgrade actions/cache to 4.1.0 and prepare 4.3.0 release
  • 638ed79 Merge pull request #1642 from actions/GhadimiR-patch-1
  • 3862dcc Add note on runner versions
  • See full diff in compare view

Updates hendrikmuhs/ccache-action from 1.2.18 to 1.2.19

Release notes

Sourced from hendrikmuhs/ccache-action's releases.

v1.2.19

What's Changed

New Contributors

Full Changelog: hendrikmuhs/ccache-action@v1...v1.2.19

Commits

Updates docker/login-action from 3.5.0 to 3.6.0

Release notes

Sourced from docker/login-action's releases.

v3.6.0

Full Changelog: docker/login-action@v3.5.0...v3.6.0

Commits
  • 5e57cd1 Merge pull request #890 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 97e3143 chore: update generated content
  • 3a0796b build(deps): bump the aws-sdk-dependencies group with 2 updates
  • 5b7b28b Merge pull request #882 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • abc9fb3 chore: update generated content
  • d468688 build(deps): bump the aws-sdk-dependencies group with 2 updates
  • a99b2f8 Merge pull request #883 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0d7fae8 chore: update generated content
  • 9832253 build(deps): bump @​docker/actions-toolkit from 0.62.1 to 0.63.0
  • 09e05bb Merge pull request #881 from docker/dependabot/npm_and_yarn/tmp-0.2.4
  • Additional commits viewable in compare view

Updates reviewdog/action-suggester from 1.21.0 to 1.24.0

Release notes

Sourced from reviewdog/action-suggester's releases.

Release v1.24.0

What's Changed

Full Changelog: reviewdog/action-suggester@v1.23.1...v1.24.0

Release v1.23.1

What's Changed

New Contributors

Full Changelog: reviewdog/action-suggester@v1.23.0...v1.23.1

Release v1.23.0

What's Changed

Full Changelog: reviewdog/action-suggester@v1.22.0...v1.23.0

Release v1.22.0

What's Changed

New Contributors

Full Changelog: reviewdog/action-suggester@v1.21.0...v1.22.0

Commits
  • aa38384 Merge pull request #100 from reviewdog/use-composite-action
  • 4ffed7b use reviewdog/action-setup instead of syncing scripts
  • 130e59f Merge pull request #98 from iokira/bugfix/install-script-not-found
  • 1b54ecf update reviewdog install script version with commit SHA
  • 51237dd Revert "Auto updates by the depup workflow"
  • 5c1296f Merge pull request #94 from reviewdog/depup/reviewdog/reviewdog
  • f531e5f Merge pull request #90 from reviewdog/renovate/reviewdog-action-actionlint-1.x
  • 22dfc2e Merge pull request #93 from reviewdog/actions-commit-and-create-pr/2025-09-03...
  • a34296b chore(deps): update reviewdog/reviewdog to 0.21.0
  • b2103ea Auto updates by the depup workflow
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 2.0.6 to 2.1.4

Release notes

Sourced from actions/create-github-app-token's releases.

v2.1.4

2.1.4 (2025-09-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

v2.1.3

2.1.3 (2025-09-13)

Bug Fixes

  • deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

v2.1.2

2.1.2 (2025-09-12)

Bug Fixes

  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

v2.1.1

2.1.1 (2025-08-11)

Bug Fixes

v2.1.0

2.1.0 (2025-08-08)

Features

Commits
  • 6701853 build(release): 2.1.4 [skip ci]
  • bef1eaf fix(deps): bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257)
  • 1526738 build(release): 2.1.3 [skip ci]
  • f3d5ec2 fix(deps): bump undici from 7.8.0 to 7.10.0 in the production-dependencies gr...
  • def152b build(release): 2.1.2 [skip ci]
  • 5d7307b fix(deps): bump @​octokit/request from 9.2.3 to 10.0.2 (#256)
  • 525760a build(deps): bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1 (#...
  • 8ab05a8 Add beta branch support for releases (#282)
  • d00315e build(deps): bump actions/checkout from 4 to 5 (#279)
  • fcc6c28 build(deps-dev): bump dotenv from 16.5.0 to 17.2.1 (#269)
  • Additional commits viewable in compare view

Updates googleapis/release-please-action from 4.2.0 to 4.3.0

Release notes

Sourced from googleapis/release-please-action's releases.

v4.3.0

4.3.0 (2025-08-20)

Features

  • deps: update release-please to 17.1.2 (f07192c)
Changelog

Sourced from googleapis/release-please-action's changelog.

Changelog

4.3.0 (2025-08-20)

Features

  • deps: update release-please to 17.1.2 (f07192c)

4.2.0 (2025-03-07)

Features

  • support for skip-labeling parameter for GitHub action (#1066) (fb7f385)

4.1.5 (2025-02-27)

Bug Fixes

4.1.4 (2024-10-02)

Bug Fixes

  • bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group (#1015) (5ec1cbd)
  • bump release-please from 16.12.0 to 16.13.0 (#1030) (caa0464)
  • bump release-please from 16.13.0 to 16.14.0 (#1032) (b2a986c)
  • deps: update release-please to 16.14.1 (#1036) (2942e51)

4.1.3 (2024-06-10)

Bug Fixes

  • correct log output when creating releases (#933) (2725132)

4.1.2 (2024-06-10)

Bug Fixes

  • bump release-please from 16.10.2 to 16.12.0 (#1005) (cb03961)

4.1.1 (2024-05-14)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 30, 2025
@dependabot dependabot bot requested a review from EkelmansPh as a code owner September 30, 2025 04:22
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 30, 2025
@github-actions
Copy link
Contributor

github-actions bot commented Sep 30, 2025

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.22s
✅ DOCKERFILE hadolint 1 0 0 0.31s
✅ JSON prettier 6 1 0 0 0.49s
✅ JSON v8r 6 0 0 3.46s
⚠️ MARKDOWN markdownlint 8 1 3 0 0.8s
⚠️ MARKDOWN markdown-link-check 8 7 0 4.37s
✅ MARKDOWN markdown-table-formatter 8 1 0 0 0.44s
⚠️ REPOSITORY checkov yes no 1 15.56s
✅ REPOSITORY git_diff yes no no 0.09s
✅ REPOSITORY grype yes no no 26.14s
✅ REPOSITORY secretlint yes no no 1.28s
✅ REPOSITORY syft yes no no 1.12s
✅ REPOSITORY trivy yes no no 6.78s
✅ REPOSITORY trivy-sbom yes no no 0.21s
✅ REPOSITORY trufflehog yes no no 2.23s
⚠️ SPELL lychee 38 10 0 1.44s
✅ YAML prettier 9 0 0 0 0.67s
✅ YAML v8r 9 0 0 4.79s
✅ YAML yamllint 9 0 0 0.39s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-02c0dc9439 branch from 1355d66 to b9cb560 Compare October 9, 2025 04:25
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-02c0dc9439 branch 2 times, most recently from 67ee092 to 305f64c Compare October 27, 2025 04:26
…updates

Bumps the github-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/cache](https://github.com/actions/cache) | `4.2.4` | `4.3.0` |
| [hendrikmuhs/ccache-action](https://github.com/hendrikmuhs/ccache-action) | `1.2.18` | `1.2.19` |
| [docker/login-action](https://github.com/docker/login-action) | `3.5.0` | `3.6.0` |
| [reviewdog/action-suggester](https://github.com/reviewdog/action-suggester) | `1.21.0` | `1.24.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.0.6` | `2.1.4` |
| [googleapis/release-please-action](https://github.com/googleapis/release-please-action) | `4.2.0` | `4.3.0` |



Updates `actions/cache` from 4.2.4 to 4.3.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0400d5f...0057852)

Updates `hendrikmuhs/ccache-action` from 1.2.18 to 1.2.19
- [Release notes](https://github.com/hendrikmuhs/ccache-action/releases)
- [Commits](hendrikmuhs/ccache-action@63069e3...bfa03e1)

Updates `docker/login-action` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@184bdaa...5e57cd1)

Updates `reviewdog/action-suggester` from 1.21.0 to 1.24.0
- [Release notes](https://github.com/reviewdog/action-suggester/releases)
- [Commits](reviewdog/action-suggester@4747dbc...aa38384)

Updates `actions/create-github-app-token` from 2.0.6 to 2.1.4
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@df432ce...6701853)

Updates `googleapis/release-please-action` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/googleapis/release-please-action/releases)
- [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md)
- [Commits](googleapis/release-please-action@a02a34c...c2a5a2b)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: hendrikmuhs/ccache-action
  dependency-version: 1.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: reviewdog/action-suggester
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/create-github-app-token
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: googleapis/release-please-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-02c0dc9439 branch from 305f64c to 751350d Compare October 28, 2025 04:17
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 5, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 5, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-02c0dc9439 branch November 5, 2025 04:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant