Skip to content

chore(deps): bump the github-actions group across 1 directory with 4 updates - #193

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-109d368f8b
Open

chore(deps): bump the github-actions group across 1 directory with 4 updates#193
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-109d368f8b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 4 updates in the / directory: prefix-dev/setup-pixi, anchore/sbom-action, anchore/scan-action and dawidd6/action-download-artifact.

Updates prefix-dev/setup-pixi from 0.10.1 to 0.10.2

Release notes

Sourced from prefix-dev/setup-pixi's releases.

v0.10.2

What's Changed

✨ New features

Full Changelog: prefix-dev/setup-pixi@v0.10.1...v0.10.2

Commits

Updates anchore/sbom-action from 0.24.0 to 0.24.2

Release notes

Sourced from anchore/sbom-action's releases.

v0.24.2

Added Features

Additional Changes

(Full Changelog)

Commits
  • 3ad7283 ops: update write permissions for release (#723)
  • 31f5287 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#724)
  • aa80c8c chore(deps): update Syft to latest release (#722)
  • 74b54e9 chore(deps): bump lodash from 4.17.23 to 4.18.1 (#623)
  • 6b92ff5 chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 (#721)
  • 4f8983b chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.67.0 (#719)
  • 10f27f4 chore(deps-dev): bump eslint from 10.5.0 to 10.8.1 (#720)
  • 249403a chore(deps-dev): bump @​types/node from 26.1.0 to 26.2.0 (#718)
  • cbf8daa chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (#693)
  • 6afc793 fix: pin syft install.sh to the release tag being installed (#716)
  • Additional commits viewable in compare view

Updates anchore/scan-action from 7.4.0 to 7.4.2

Release notes

Sourced from anchore/scan-action's releases.

v7.4.2

Additional Changes

(Full Changelog)

Commits
  • 27805bf chore(deps): update Grype to latest release (#755) (#756)
  • 8964e60 chore(deps): update Grype to latest release (#755)
  • 6875336 chore: bump fast-xml-parser from 5.5.8 to 5.7.3 (#654)
  • 65b5fb1 chore: bump esbuild from 0.28.0 to 0.28.2 (#753)
  • b905e0e chore(deps): update Grype to latest release (#713)
  • e49c028 fix: pin grype install.sh to the release tag being installed (#750)
  • db8f0b6 chore: bump globals from 17.9.0 to 17.11.0 (#754)
  • 35bf076 chore: bump eslint from 10.8.0 to 10.8.1 (#752)
  • bd77fb5 chore: bump anchore/workflows/.github/workflows/check-gate.yaml (#720)
  • d04f6c4 chore: bump lint-staged from 17.2.0 to 17.3.0 (#748)
  • Additional commits viewable in compare view

Updates dawidd6/action-download-artifact from 23 to 24

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v24

What's Changed

Full Changelog: dawidd6/action-download-artifact@v23...v24

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 8, 2026
…updates

Bumps the github-actions group with 4 updates in the / directory: [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi), [anchore/sbom-action](https://github.com/anchore/sbom-action), [anchore/scan-action](https://github.com/anchore/scan-action) and [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact).


Updates `prefix-dev/setup-pixi` from 0.10.1 to 0.10.2
- [Release notes](https://github.com/prefix-dev/setup-pixi/releases)
- [Commits](prefix-dev/setup-pixi@v0.10.1...v0.10.2)

Updates `anchore/sbom-action` from 0.24.0 to 0.24.2
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@v0.24.0...v0.24.2)

Updates `anchore/scan-action` from 7.4.0 to 7.4.2
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@v7.4.0...v7.4.2)

Updates `dawidd6/action-download-artifact` from 23 to 24
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@v23...v24)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-version: 7.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '24'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: prefix-dev/setup-pixi
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-109d368f8b branch from bc5c443 to 6c9a737 Compare September 10, 2026 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants