Skip to content

chore(deps): bump the github-actions-deps group across 1 directory with 2 updates#2918

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/github_actions/develop/github-actions-deps-75f1615555
Open

chore(deps): bump the github-actions-deps group across 1 directory with 2 updates#2918
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/github_actions/develop/github-actions-deps-75f1615555

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps the github-actions-deps group with 2 updates in the / directory: step-security/harden-runner and codecov/codecov-action.

Updates step-security/harden-runner from 2.16.0 to 2.16.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.16.1

What's Changed

Enterprise tier: Added support for direct IP addresses in the allow list Community tier: Migrated Harden Runner telemetry to a new endpoint

Full Changelog: step-security/harden-runner@v2.16.0...v2.16.1

Commits

Updates codecov/codecov-action from 5.5.3 to 6.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github-actions labels Apr 1, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 1, 2026 00:25
Bumps the github-actions-deps group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `step-security/harden-runner` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@fa2e9d6...fe10465)

Updates `codecov/codecov-action` from 5.5.3 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@1af5884...57e3a13)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-deps
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot changed the title chore(deps): bump the github-actions-deps group with 2 updates chore(deps): bump the github-actions-deps group across 1 directory with 2 updates Apr 1, 2026
@dependabot dependabot bot force-pushed the dependabot/github_actions/develop/github-actions-deps-75f1615555 branch from e41ae8e to 069bb4c Compare April 1, 2026 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github-actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants