Skip to content

ci(deps): bump the actions group across 1 directory with 8 updates#357

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-6a2ec41355
Closed

ci(deps): bump the actions group across 1 directory with 8 updates#357
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-6a2ec41355

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 8 updates in the / directory:

Package From To
jaywcjlove/coverage-badges-cli 2.2.0 2.3.0
actions/upload-pages-artifact 4.0.0 5.0.0
actions/deploy-pages 4.0.5 5.0.0
anthropics/claude-code-action 1.0.34 1.0.93
dependabot/fetch-metadata 2.5.0 3.0.0
lewagon/wait-on-check-action 1.5.0 1.6.1
peter-evans/create-pull-request 8.1.0 8.1.1
actions/setup-node 6.2.0 6.3.0

Updates jaywcjlove/coverage-badges-cli from 2.2.0 to 2.3.0

Release notes

Sourced from jaywcjlove/coverage-badges-cli's releases.

v2.3.0

Buy me a coffee

Documentation v2.3.0: https://raw.githack.com/jaywcjlove/coverage-badges-cli/0031c7f/index.html
Comparing Changes: jaywcjlove/coverage-badges-cli@v2.3.0...v2.3.0

Commits

Updates actions/upload-pages-artifact from 4.0.0 to 5.0.0

Release notes

Sourced from actions/upload-pages-artifact's releases.

v5.0.0

Changelog

See details of all code changes since previous release.

Commits

Updates actions/deploy-pages from 4.0.5 to 5.0.0

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.0

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • cd2ce8f Merge pull request #404 from salmanmkc/node24
  • bbe2a95 Update Node.js version to 24.x
  • 854d7aa Merge pull request #374 from actions/Jcambass-patch-1
  • 306bb81 Add workflow file for publishing releases to immutable action package
  • b742728 Merge pull request #360 from actions/dependabot/npm_and_yarn/npm_and_yarn-513...
  • 7273294 Bump braces in the npm_and_yarn group across 1 directory
  • 963791f Merge pull request #361 from actions/dependabot-friendly
  • 51bb29d Make the rebuild dist workflow safer for Dependabot
  • 89f3d10 Merge pull request #358 from actions/dependabot/npm_and_yarn/non-breaking-cha...
  • bce7355 Merge branch 'main' into dependabot/npm_and_yarn/non-breaking-changes-99c12deb21
  • Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.34 to 1.0.93

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.93

Full Changelog: anthropics/claude-code-action@v1...v1.0.93

v1.0.92

Full Changelog: anthropics/claude-code-action@v1...v1.0.92

v1.0.91

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.91

v1.0.90

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.90

v1.0.89

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1...v1.0.89

v1.0.88

Full Changelog: anthropics/claude-code-action@v1...v1.0.88

... (truncated)

Commits
  • b47fd72 chore: bump Claude Code to 2.1.101 and Agent SDK to 0.2.101
  • c26cb64 chore: bump Claude Code to 2.1.100 and Agent SDK to 0.2.98
  • 657fb7c chore: bump Claude Code to 2.1.98 and Agent SDK to 0.2.98
  • 2ff1acb chore: bump Claude Code to 2.1.97 and Agent SDK to 0.2.97
  • b2fdd80 Use pinned bun binary for post-steps when allowed_non_write_users is set (#1190)
  • 26ddc35 chore: bump Claude Code to 2.1.96 and Agent SDK to 0.2.96
  • 3983706 chore: bump Claude Code to 2.1.94 and Agent SDK to 0.2.94
  • 6cad158 security: reject PATH_TO_CLAUDE_CODE_EXECUTABLE with control characters (#1185)
  • 0f1fe5e fix: forward MCP_TIMEOUT, MCP_TOOL_TIMEOUT, MAX_MCP_OUTPUT_TOKENS to action s...
  • 6e2bd52 fix: pin bun runtime config and improve log hygiene (#1174)
  • Additional commits viewable in compare view

Updates dependabot/fetch-metadata from 2.5.0 to 3.0.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v3.0.0

The breaking change is requiring Node.js version v24 as the Actions runtime.

What's Changed

New Contributors

Full Changelog: dependabot/fetch-metadata@v2...v3.0.0

Commits
  • ffa630c v3.0.0 (#686)
  • ec8fff2 Merge pull request #674 from dependabot/dependabot/npm_and_yarn/picomatch-2.3.2
  • caf48bd build(deps-dev): bump picomatch from 2.3.1 to 2.3.2
  • 13d8274 Upgrade @​actions/github to ^9.0.0 and @​octokit/request-error to ^7.1.0 (#678)
  • b603099 Upgrade @​actions/core from ^1.11.1 to ^3.0.0 (#677)
  • c5dc5b1 Enable noImplicitAny in tsconfig.json (#684)
  • a183f3c Add typecheck step to CI (#685)
  • 5e17564 Remove skipLibCheck from tsconfig.json (#683)
  • bb56eeb Switch tsconfig module resolution to bundler (#682)
  • 3632e3d Remove vestigial outDir from tsconfig.json (#681)
  • Additional commits viewable in compare view

Updates lewagon/wait-on-check-action from 1.5.0 to 1.6.1

Release notes

Sourced from lewagon/wait-on-check-action's releases.

v1.6.1

Added

  • Pin the ruby/setup-ruby version (#143)

v1.6.0

Added

  • Add checks-discovery-timeout option (#139)
Changelog

Sourced from lewagon/wait-on-check-action's changelog.

Changelog

Unreleased

v1.6.1 - 2026-04-06

Added

  • Pin the ruby/setup-ruby version

v1.6.0 - 2026-03-29

Added

  • Add checks-discovery-timeout option

v1.5.0 - 2026-01-25

Added

  • Add fail-on-no-checks option

Fixed

  • Bump rexml to 3.4.2

v1.4.1 - 2025-09-21

Fixed

  • Linux ARM64 support

v1.4.0 - 2025-06-27

Added

  • Add class docs
  • Add frozen_string_literal comments

Removed

  • Remove OpenStruct instances
  • Remove Double quotes
  • Remove Double assertions
  • Remove allow_any uses

Fixed

  • Fix spelling mistakes
  • Fix CI gem caching

... (truncated)

Commits

Updates peter-evans/create-pull-request from 8.1.0 to 8.1.1

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.1

What's Changed

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

Commits
  • 5f6978f fix: retry post-creation API calls on 422 eventual consistency errors (#4356)
  • d32e88d build(deps-dev): bump the npm group with 3 updates (#4349)
  • 8170bcc build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#4344)
  • 0041819 build(deps): bump picomatch (#4339)
  • b993918 build(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#4334)
  • 36d7c84 build(deps-dev): bump undici from 6.23.0 to 6.24.0 (#4328)
  • a45d1fb build(deps): bump @​tootallnate/once and jest-environment-jsdom (#4323)
  • 3499eb6 build(deps): bump the github-actions group with 2 updates (#4316)
  • 3f3b473 build(deps): bump minimatch (#4311)
  • 6699836 build(deps-dev): bump the npm group with 2 updates (#4305)
  • See full diff in compare view

Updates actions/setup-node from 6.2.0 to 6.3.0

Release notes

Sourced from actions/setup-node's releases.

v6.3.0

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update and pin GitHub Actions across workflows for Pages deploys, PR automation, and tooling to improve reliability and align with upstream changes. Major upgrades include actions/deploy-pages and actions/upload-pages-artifact to v5 and dependabot/fetch-metadata to v3.

  • Dependencies

    • Pages: actions/upload-pages-artifact 4.0.0 → 5.0.0, actions/deploy-pages 4.0.5 → 5.0.0
    • Automation: dependabot/fetch-metadata 2.5.0 → 3.0.0, lewagon/wait-on-check-action 1.5.0 → 1.6.1, peter-evans/create-pull-request 8.1.0 → 8.1.1
    • Tooling: anthropics/claude-code-action 1.0.34 → 1.0.93, jaywcjlove/coverage-badges-cli 2.2.0 → 2.3.0, actions/setup-node 6.2.0 → 6.3.0
  • Migration

    • actions/deploy-pages and dependabot/fetch-metadata now target a Node.js 24 runtime; GitHub.com is supported. Verify GHES compatibility if applicable.

Written for commit f16d0ac. Summary will update on new commits.

Bumps the actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [jaywcjlove/coverage-badges-cli](https://github.com/jaywcjlove/coverage-badges-cli) | `2.2.0` | `2.3.0` |
| [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `4.0.0` | `5.0.0` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.34` | `1.0.93` |
| [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.5.0` | `3.0.0` |
| [lewagon/wait-on-check-action](https://github.com/lewagon/wait-on-check-action) | `1.5.0` | `1.6.1` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.1.0` | `8.1.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.2.0` | `6.3.0` |



Updates `jaywcjlove/coverage-badges-cli` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/jaywcjlove/coverage-badges-cli/releases)
- [Commits](jaywcjlove/coverage-badges-cli@4e8975a...998665f)

Updates `actions/upload-pages-artifact` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](actions/upload-pages-artifact@7b1f4a7...fc324d3)

Updates `actions/deploy-pages` from 4.0.5 to 5.0.0
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@d6db901...cd2ce8f)

Updates `anthropics/claude-code-action` from 1.0.34 to 1.0.93
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@f642197...b47fd72)

Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

Updates `lewagon/wait-on-check-action` from 1.5.0 to 1.6.1
- [Release notes](https://github.com/lewagon/wait-on-check-action/releases)
- [Changelog](https://github.com/lewagon/wait-on-check-action/blob/master/CHANGELOG.md)
- [Commits](lewagon/wait-on-check-action@7404930...78dd4dd)

Updates `peter-evans/create-pull-request` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c0f553f...5f6978f)

Updates `actions/setup-node` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@6044e13...53b8394)

---
updated-dependencies:
- dependency-name: jaywcjlove/coverage-badges-cli
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/upload-pages-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.93
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: lewagon/wait-on-check-action
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Apr 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from a team as a code owner April 13, 2026 08:22
Copilot AI review requested due to automatic review settings April 13, 2026 08:22
@dependabot dependabot Bot removed the request for review from Copilot April 13, 2026 08:22
@pkg-pr-new

pkg-pr-new Bot commented Apr 13, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@stackone/ai@357

commit: f16d0ac

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 5 files

Requires human review: This PR contains multiple major version bumps (v4 to v5, v2 to v3) for CI/CD and deployment actions which may require environment updates (e.g., Node.js 24) or introduce breaking changes.

@dependabot @github

dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 20, 2026
@dependabot dependabot Bot deleted the dependabot/github_actions/actions-6a2ec41355 branch April 20, 2026 08:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants