Skip to content

Bump the actions group with 16 updates - #1

Merged
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-48ff24449a
Mar 11, 2026
Merged

Bump the actions group with 16 updates#1
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-48ff24449a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 16 updates:

Package From To
actions/checkout 4.1.1 6.0.2
julia-actions/setup-julia 2.6.1 2.7.0
julia-actions/cache e8472695fb3c2028b1118dc399c8440ff497d409 e33b4bfa0ea7cd9caedd7cb82b0e36956ef40285
actions/upload-artifact 4.6.2 7.0.0
actions/cache 4.3.0 5.0.3
actions/download-artifact 4.3.0 8.0.0
haskell-actions/setup 2.7.5 2.10.3
codecov/codecov-action 4.6.0 5.5.2
trufflesecurity/trufflehog 3.93.3 3.93.8
github/codeql-action 3.27.0 4.32.6
slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml 1.4.0 2.1.0
erlef/setup-beam 1.20.4 1.22.0
actions/github-script 7.0.1 8.0.0
webfactory/ssh-agent 0.9.0 0.9.1
editorconfig-checker/action-editorconfig-checker 9f8f6065f4db902c0c56cafa67cea18b3ebbb680 068409e1d614c857c80a2204ee86239af98f5f22
softprops/action-gh-release 2.2.2 2.5.0

Updates actions/checkout from 4.1.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates julia-actions/setup-julia from 2.6.1 to 2.7.0

Release notes

Sourced from julia-actions/setup-julia's releases.

v2.7.0

Documentation

Dependencies

CI in this repo

New Contributors

... (truncated)

Commits
  • 4c0cb0f Bump actions/checkout from 6.0.1 to 6.0.2 in the all-github-actions group (#370)
  • 7fe7427 Bump minimatch (#368)
  • b0504de Update some packages (#366)
  • 7242f2d Bump js-yaml from 3.14.1 to 3.14.2 (#356)
  • 1ade3ab Bump actions/checkout from 5.0.1 to 6.0.1 in the all-github-actions group (#362)
  • 67e9ca1 Bump glob from 10.4.5 to 10.5.0 (#357)
  • a29b9e4 macos-13 -> macos-15-intel (#365)
  • 7449f78 Bump the all-github-actions group with 2 updates (#360)
  • 8dccd20 CI: Switch from 1.10-nightly to 1.13-nightly (#361)
  • 96b12c5 Bump the all-github-actions group across 1 directory with 3 updates (#354)
  • Additional commits viewable in compare view

Updates julia-actions/cache from e8472695fb3c2028b1118dc399c8440ff497d409 to e33b4bfa0ea7cd9caedd7cb82b0e36956ef40285

Commits
  • e33b4bf Javascript version of existing action which also saves if job fails (#198)
  • d256f7f Bump pyTooling/Actions from 7.4.2 to 7.5.0 (#197)
  • 227b376 Bump pyTooling/Actions from 7.2.0 to 7.4.2 (#196)
  • 9a3120a Bump actions/cache from 5.0.1 to 5.0.3 (#195)
  • 43522e3 Bump actions/checkout from 6.0.1 to 6.0.2 (#194)
  • See full diff in compare view

Updates actions/upload-artifact from 4.6.2 to 7.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • Additional commits viewable in compare view

Updates actions/cache from 4.3.0 to 5.0.3

Release notes

Sourced from actions/cache's releases.

v5.0.3

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

v5.0.1

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

v5.0.1

What's Changed

v5.0.0

What's Changed

Full Changelog: actions/cache@v5...v5.0.1

v5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.3

5.0.2

  • Bump @actions/cache to v5.0.3 #1692

5.0.1

  • Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

  • Bump @actions/cache to v4.1.0

... (truncated)

Commits

Updates actions/download-artifact from 4.3.0 to 8.0.0

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v7.0.0

v7 - What's new

[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • 96bf374 One more test fix
  • b8c4819 Fix skip decompress test
  • Additional commits viewable in compare view

Updates haskell-actions/setup from 2.7.5 to 2.10.3

Release notes

Sourced from haskell-actions/setup's releases.

v2.10.3

Add Stack 3.9.1

What's Changed

Full Changelog: haskell-actions/setup@v2.10.2...v2.10.3

v2.10.2

Remove GHCup vanilla channel from defaults

What's Changed

Full Changelog: haskell-actions/setup@v2.10.1...v2.10.2

v2.10.1

Move all ghcup-add-channel commands into same group

What's Changed

Full Changelog: haskell-actions/setup@v2.10.0...v2.10.1

v2.10.0

Use GHCup vanilla and prereleases channels by default

What's Changed

Full Changelog: haskell-actions/setup@v2.9.0...v2.10.0

... (truncated)

Commits
  • f9150cb Add Stack 3.9.1
  • dc63c94 Remove GHCup vanilla channel from defaults
  • 7786314 await addGhcupReleaseChannel
  • 5757174 Move all ghcup-add-channel commands into same group
  • ca45ec3 Remove broken GHC 9.12.3
  • eb29c23 Use GHCup vanilla and prereleases channels by default
  • 243ff44 Add GHCs 9.14.1 and 9.12.3 and Cabal 3.16.1.0
  • 0512451 Fix #130: support GHCup on 32bit architecture (#131)
  • 45e5652 Bump actions/checkout from 5 to 6
  • 0a703b5 Test: drop macos-13 (deprecated, does not support node 24)
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 4.6.0 to 5.5.2

Release notes

Sourced from codecov/codecov-action's releases.

v5.5.2

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.1...v5.5.2

v5.5.1

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.0...v5.5.1

v5.5.0

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.4.3...v5.5.0

v5.4.3

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

@dependabot
Bump the actions group with 16 updates
ab8f339 
Bumps the actions group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `6.0.2` |
| [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia) | `2.6.1` | `2.7.0` |
| [julia-actions/cache](https://github.com/julia-actions/cache) | `e8472695fb3c2028b1118dc399c8440ff497d409` | `e33b4bfa0ea7cd9caedd7cb82b0e36956ef40285` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.0` |
| [actions/cache](https://github.com/actions/cache) | `4.3.0` | `5.0.3` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `8.0.0` |
| [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.7.5` | `2.10.3` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `4.6.0` | `5.5.2` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.93.3` | `3.93.8` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.27.0` | `4.32.6` |
| [slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml](https://github.com/slsa-framework/slsa-github-generator) | `1.4.0` | `2.1.0` |
| [erlef/setup-beam](https://github.com/erlef/setup-beam) | `1.20.4` | `1.22.0` |
| [actions/github-script](https://github.com/actions/github-script) | `7.0.1` | `8.0.0` |
| [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) | `0.9.0` | `0.9.1` |
| [editorconfig-checker/action-editorconfig-checker](https://github.com/editorconfig-checker/action-editorconfig-checker) | `9f8f6065f4db902c0c56cafa67cea18b3ebbb680` | `068409e1d614c857c80a2204ee86239af98f5f22` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.2.2` | `2.5.0` |


Updates `actions/checkout` from 4.1.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.1.1...de0fac2)

Updates `julia-actions/setup-julia` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/julia-actions/setup-julia/releases)
- [Commits](julia-actions/setup-julia@5c9647d...4c0cb0f)

Updates `julia-actions/cache` from e8472695fb3c2028b1118dc399c8440ff497d409 to e33b4bfa0ea7cd9caedd7cb82b0e36956ef40285
- [Release notes](https://github.com/julia-actions/cache/releases)
- [Commits](julia-actions/cache@e847269...e33b4bf)

Updates `actions/upload-artifact` from 4.6.2 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...bbbca2d)

Updates `actions/cache` from 4.3.0 to 5.0.3
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0057852...cdf6c1f)

Updates `actions/download-artifact` from 4.3.0 to 8.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@d3f86a1...70fc10c)

Updates `haskell-actions/setup` from 2.7.5 to 2.10.3
- [Release notes](https://github.com/haskell-actions/setup/releases)
- [Commits](haskell-actions/setup@ec49483...f9150cb)

Updates `codecov/codecov-action` from 4.6.0 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@b9fd7d1...671740a)

Updates `trufflesecurity/trufflehog` from 3.93.3 to 3.93.8
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@6961f2b...6c05c4a)

Updates `github/codeql-action` from 3.27.0 to 4.32.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3.27.0...0d579ff)

Updates `slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml` from 1.4.0 to 2.1.0
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](slsa-framework/slsa-github-generator@v1.4.0...f7dd8c5)

Updates `erlef/setup-beam` from 1.20.4 to 1.22.0
- [Release notes](https://github.com/erlef/setup-beam/releases)
- [Commits](erlef/setup-beam@e6d7c94...9d5b75d)

Updates `actions/github-script` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@60a0d83...ed59741)

Updates `webfactory/ssh-agent` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/webfactory/ssh-agent/releases)
- [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md)
- [Commits](webfactory/ssh-agent@dc588b6...a6f90b1)

Updates `editorconfig-checker/action-editorconfig-checker` from 9f8f6065f4db902c0c56cafa67cea18b3ebbb680 to 068409e1d614c857c80a2204ee86239af98f5f22
- [Release notes](https://github.com/editorconfig-checker/action-editorconfig-checker/releases)
- [Commits](editorconfig-checker/action-editorconfig-checker@9f8f606...068409e)

Updates `softprops/action-gh-release` from 2.2.2 to 2.5.0
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@da05d55...a06a81a)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: julia-actions/setup-julia
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: julia-actions/cache
  dependency-version: e33b4bfa0ea7cd9caedd7cb82b0e36956ef40285
  dependency-type: direct:production
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: haskell-actions/setup
  dependency-version: 2.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.93.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: 4.32.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: erlef/setup-beam
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: webfactory/ssh-agent
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: editorconfig-checker/action-editorconfig-checker
  dependency-version: '068409e1d614c857c80a2204ee86239af98f5f22'
  dependency-type: direct:production
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 11, 2026
@dependabot
dependabot Bot requested a review from hyperpolymath as a code owner March 11, 2026 01:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 11, 2026
@hyperpolymath
hyperpolymath merged commit 0662ac2 into main Mar 11, 2026
15 of 21 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-48ff24449a branch March 11, 2026 01:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hyperpolymath hyperpolymath hyperpolymath approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath