Skip to content

chore(deps): bump the version-updates group across 1 directory with 12 updates - #28

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/version-updates-d9f2557e32
Open

chore(deps): bump the version-updates group across 1 directory with 12 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/version-updates-d9f2557e32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the version-updates group with 12 updates in the / directory:

Package From To
actions/checkout 6 7
release-drafter/release-drafter 7.3.1 7.7.0
docker/setup-buildx-action 3 4
docker/login-action 3 4
docker/build-push-action 6 7
anchore/sbom-action 0.22.0 0.24.2
anchore/scan-action 7.4.0 7.4.2
actions/attest-build-provenance 3 4
actions/setup-python 5 7
actions/download-artifact 4 8
softprops/action-gh-release 2.6.2 3.0.2
actions/github-script 7 9

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates release-drafter/release-drafter from 7.3.1 to 7.7.0

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.7.0

What's Changed

New

Dependency Updates

Bug Fixes

Maintenance

New Contributors

  • No new contributors

Full Changelog: release-drafter/release-drafter@v7.6.0...v7.7.0

v7.6.0

What's Changed

New

... (truncated)

Commits

Updates docker/setup-buildx-action from 3 to 4

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.0.0

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v3.12.0

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

v3.11.1

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

... (truncated)

Commits
  • 37fe631 Merge pull request #595 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • b5c4f91 [dependabot skip] chore: update generated content
  • 3e93b63 build(deps): bump @​docker/actions-toolkit from 0.92.0 to 0.95.0
  • e527031 Merge pull request #600 from docker/dependabot/npm_and_yarn/brace-expansion-1...
  • c68814b [dependabot skip] chore: update generated content
  • 3f891b0 build(deps): bump brace-expansion from 1.1.13 to 1.1.18
  • 787db26 Merge pull request #585 from docker/dependabot/npm_and_yarn/js-yaml-5.2.1
  • f779368 [dependabot skip] chore: update generated content
  • 7d5e604 build(deps): bump js-yaml from 5.2.0 to 5.3.0
  • 292c2fb Merge pull request #590 from docker/dependabot/github_actions/actions/setup-n...
  • Additional commits viewable in compare view

Updates docker/login-action from 3 to 4

Release notes

Sourced from docker/login-action's releases.

v4.0.0

Full Changelog: docker/login-action@v3.7.0...v4.0.0

v3.7.0

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Full Changelog: docker/login-action@v3.3.0...v3.4.0

... (truncated)

Commits
  • dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 5bcb015 [dependabot skip] chore: update generated content
  • b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
  • 0009830 [dependabot skip] chore: update generated content
  • 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
  • 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
  • 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
  • e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
  • a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
  • Additional commits viewable in compare view

Updates docker/build-push-action from 6 to 7

Release notes

Sourced from docker/build-push-action's releases.

v7.0.0

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v6.19.2

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

v6.18.0

[!NOTE] Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

[!NOTE] Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

... (truncated)

Commits
  • 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 154298c [dependabot skip] chore: update generated content
  • cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9c69730 [dependabot skip] chore: update generated content
  • bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
  • a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
  • 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
  • c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
  • d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • Additional commits viewable in compare view

Updates anchore/sbom-action from 0.22.0 to 0.24.2

Release notes

Sourced from anchore/sbom-action's releases.

v0.24.2

Added Features

Additional Changes

(Full Changelog)

v0.24.0

⬆️ Dependencies

v0.23.1

⬆️ Dependencies

v0.23.0

v0.22.2

⬆️ Dependencies

v0.22.1

⬆️ Dependencies

Commits
  • 3ad7283 ops: update write permissions for release (#723)
  • 31f5287 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#724)
  • aa80c8c chore(deps): update Syft to latest release (#722)
  • 74b54e9 chore(deps): bump lodash from 4.17.23 to 4.18.1 (#623)
  • 6b92ff5 chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 (#721)
  • 4f8983b chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.67.0 (#719)
  • 10f27f4 chore(deps-dev): bump eslint from 10.5.0 to 10.8.1 (#720)
  • 249403a chore(deps-dev): bump @​types/node from 26.1.0 to 26.2.0 (#718)
  • cbf8daa chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (#693)
  • 6afc793 fix: pin syft install.sh to the release tag being installed (#716)
  • Additional commits viewable in compare view

Updates anchore/scan-action from 7.4.0 to 7.4.2

Release notes

Sourced from anchore/scan-action's releases.

v7.4.2

Additional Changes

(Full Changelog)

Commits
  • 27805bf chore(deps): update Grype to latest release (#755) (#756)
  • 8964e60 chore(deps): update Grype to latest release (#755)
  • 6875336 chore: bump fast-xml-parser from 5.5.8 to 5.7.3 (#654)
  • 65b5fb1 chore: bump esbuild from 0.28.0 to 0.28.2 (#753)
  • b905e0e chore(deps): update Grype to latest release (#713)
  • e49c028 fix: pin grype install.sh to the release tag being installed (#750)
  • db8f0b6 chore: bump globals from 17.9.0 to 17.11.0 (#754)
  • 35bf076 chore: bump eslint from 10.8.0 to 10.8.1 (#752)
  • bd77fb5 chore: bump anchore/workflows/.github/workflows/check-gate.yaml (#720)
  • d04f6c4 chore: bump lint-staged from 17.2.0 to 17.3.0 (#748)
  • Additional commits viewable in compare view

Updates actions/attest-build-provenance from 3 to 4

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.0.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

  • Pr...

    Description has been truncated

@dependabot
chore(deps): bump the version-updates group across 1 directory with 1…
9b7a089 
…2 updates

Bumps the version-updates group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) | `7.3.1` | `7.7.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` |
| [docker/login-action](https://github.com/docker/login-action) | `3` | `4` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.22.0` | `0.24.2` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `7.4.0` | `7.4.2` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `3` | `4` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.6.2` | `3.0.2` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `9` |



Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `release-drafter/release-drafter` from 7.3.1 to 7.7.0
- [Release notes](https://github.com/release-drafter/release-drafter/releases)
- [Commits](release-drafter/release-drafter@693d20e...34d8067)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v3...v4)

Updates `docker/login-action` from 3 to 4
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v3...v4)

Updates `docker/build-push-action` from 6 to 7
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

Updates `anchore/sbom-action` from 0.22.0 to 0.24.2
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@62ad528...3ad7283)

Updates `anchore/scan-action` from 7.4.0 to 7.4.2
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@e116508...27805bf)

Updates `actions/attest-build-provenance` from 3 to 4
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v3...v4)

Updates `actions/setup-python` from 5 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v7)

Updates `actions/download-artifact` from 4 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

Updates `softprops/action-gh-release` from 2.6.2 to 3.0.2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@3bb1273...3d0d988)

Updates `actions/github-script` from 7 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: release-drafter/release-drafter
  dependency-version: 7.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: anchore/scan-action
  dependency-version: 7.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from botAGI as a code owner August 31, 2026 17:26
@github-actions

github-actions Bot commented Aug 31, 2026

Copy link
Copy Markdown

Rendered compose diff

0 added · 0 removed · 3 changed (of 14 profiles).

Changed (3)

agents-agno

--- base/agents-agno.yml
+++ head/agents-agno.yml
@@ -8,7 +8,7 @@
     container_name: agmind-agent-agno
     restart: unless-stopped
     build:
-      context: /home/runner/work/AGmind64/AGmind64/base
+      context: /home/runner/work/AGmind64/AGmind64/head
       dockerfile: docker/Dockerfile.agent-agno
     profiles:
     - agents-agno
@@ -95,7 +95,7 @@
     container_name: agmind-agent-ui
     restart: unless-stopped
     build:
-      context: /home/runner/work/AGmind64/AGmind64/base
+      context: /home/runner/work/AGmind64/AGmind64/head
       dockerfile: docker/Dockerfile.agent-ui
     profiles:
     - agents-agno

agents-pydantic

--- base/agents-pydantic.yml
+++ head/agents-pydantic.yml
@@ -48,7 +48,7 @@
     container_name: agmind-agent-pydanticai
     restart: unless-stopped
     build:
-      context: /home/runner/work/AGmind64/AGmind64/base
+      context: /home/runner/work/AGmind64/AGmind64/head
       dockerfile: docker/Dockerfile.agent-pydanticai
     profiles:
     - agents-pydantic

full

--- base/full.yml
+++ head/full.yml
@@ -8,7 +8,7 @@
     container_name: agmind-agent-agno
     restart: unless-stopped
     build:
-      context: /home/runner/work/AGmind64/AGmind64/base
+      context: /home/runner/work/AGmind64/AGmind64/head
       dockerfile: docker/Dockerfile.agent-agno
     profiles:
     - agents-agno
@@ -95,7 +95,7 @@
     container_name: agmind-agent-pydanticai
     restart: unless-stopped
     build:
-      context: /home/runner/work/AGmind64/AGmind64/base
+      context: /home/runner/work/AGmind64/AGmind64/head
       dockerfile: docker/Dockerfile.agent-pydanticai
     profiles:
     - agents-pydantic
@@ -142,7 +142,7 @@
     container_name: agmind-agent-ui
     restart: unless-stopped
     build:
-      context: /home/runner/work/AGmind64/AGmind64/base
+      context: /home/runner/work/AGmind64/AGmind64/head
       dockerfile: docker/Dockerfile.agent-ui
     profiles:
     - agents-agno

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@botAGI botAGI Awaiting requested review from botAGI botAGI is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants