build(deps): bump the all group across 1 directory with 5 updates - #676
Merged
kubernetes-prow[bot] merged 2 commits intoAug 22, 2026
Merged
Conversation
dependabot
Bot
added
area/dependency
kubernetes-prow
Bot
added
the
sig/release
kubernetes-prow
Bot
added
the
cncf-cla: yes
Contributor
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
kubernetes-prow
Bot
added
the
size/S
dependabot
Bot
force-pushed
the
dependabot/github_actions/all-0d0e0a5dc8
branch
from
August 21, 2026 20:32
6963227 to
1fe737c
Compare
Member
|
@dependabot recreate |
dependabot
Bot
force-pushed
the
dependabot/github_actions/all-0d0e0a5dc8
branch
from
August 21, 2026 20:36
1fe737c to
7c6e572
Compare
Member
|
@dependabot rebase |
Bumps the all group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [JamesIves/github-pages-deploy-action](https://github.com/jamesives/github-pages-deploy-action) | `4.8.0` | `4.9.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.2` | `7.2.3` | | [kubernetes-sigs/release-actions/setup-tejolote](https://github.com/kubernetes-sigs/release-actions) | `0.4.3` | `0.4.5` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.0` | `3.0.2` | | [chainguard-dev/actions/setup-spdx](https://github.com/chainguard-dev/actions) | `1.6.19` | `1.6.32` | Updates `JamesIves/github-pages-deploy-action` from 4.8.0 to 4.9.0 - [Release notes](https://github.com/jamesives/github-pages-deploy-action/releases) - [Commits](JamesIves/github-pages-deploy-action@d92aa23...fa24774) Updates `goreleaser/goreleaser-action` from 7.2.2 to 7.2.3 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@5daf1e9...f06c13b) Updates `kubernetes-sigs/release-actions/setup-tejolote` from 0.4.3 to 0.4.5 - [Release notes](https://github.com/kubernetes-sigs/release-actions/releases) - [Changelog](https://github.com/kubernetes-sigs/release-actions/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/release-actions@8753ea6...b5b8280) Updates `softprops/action-gh-release` from 3.0.0 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@b430933...3d0d988) Updates `chainguard-dev/actions/setup-spdx` from 1.6.19 to 1.6.32 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](chainguard-dev/actions@c69a264...7bd1e94) --- updated-dependencies: - dependency-name: chainguard-dev/actions/setup-spdx dependency-version: 1.6.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: goreleaser/goreleaser-action dependency-version: 7.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: JamesIves/github-pages-deploy-action dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: kubernetes-sigs/release-actions/setup-tejolote dependency-version: 0.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/all-0d0e0a5dc8
branch
from
August 21, 2026 20:53
7c6e572 to
46939ba
Compare
Member
|
Mmh I think there is a bug somewhere in the chainguard SPDX action. I tested the generated SBOM from the action run artifacts and it checks out: |
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@carabiner.dev>
Member
|
OK, i figured out the bug and sent a patch upstream chainguard-dev/actions#1028 |
puerco
approved these changes
Aug 22, 2026
kubernetes-prow
Bot
added
the
lgtm
Contributor
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: dependabot[bot], puerco The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
kubernetes-prow
Bot
added
the
approved
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all group with 5 updates in the / directory:
4.8.04.9.07.2.27.2.30.4.30.4.53.0.03.0.21.6.191.6.32Updates
JamesIves/github-pages-deploy-actionfrom 4.8.0 to 4.9.0Release notes
Sourced from JamesIves/github-pages-deploy-action's releases.
Commits
fa24774Merge remote-tracking branch 'origin/dev' into releases/v41e0489ffix: use a dedicated RELEASE_PAT for release creation737d5afci: run sponsors README update twice a week instead of daily5d78d7bci: run integration tests weekly instead of daily36c7ef9Deploy Production Code for Commit b09969f18cbaf8fd7f336068c0c4d9abfdcbf68a 🚀74a589dMerge remote-tracking branch 'origin/dev' into releases/v4b09969fstyle: fix prettier formatting in LFS changes87729a6feat: add Git LFS support for deployment branchcc13712fix: add missing checkout step to integration-rebase-conflicts-cleanupd866689Merge branch 'dev' of https://github.com/JamesIves/github-pages-deploy-action...Updates
goreleaser/goreleaser-actionfrom 7.2.2 to 7.2.3Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
f06c13bchore: update distd393459ci: fix jobee731b1chore: workflow dispatch55de448chore(deps): bump js-yaml from 4.1.1 to 4.2.0a4f614eci: use a GitHub App token to rebuild dist on dependabot PRs (#569)d2d17a6ci: auto-rebuild dist on dependabot PRs (#568)d13def3build: regenerate dist after undici 6.27.0 bump (#567)21549b6chore(deps): bump undici from 6.24.1 to 6.27.0 (#565)47c416dci(deps): bump the actions group with 3 updates (#563)Updates
kubernetes-sigs/release-actions/setup-tejolotefrom 0.4.3 to 0.4.5Release notes
Sourced from kubernetes-sigs/release-actions/setup-tejolote's releases.
Commits
b5b8280Merge pull request #176 from kubernetes-sigs/dependabot/github_actions/ghacti...723e76fBump dorny/paths-filter from 4.0.2 to 4.0.3 in the ghactions groupdf06cf8Merge pull request #175 from binerbot/update-setup-zeitgeist-v0.8.019890c5Update setup-zeitgeist default version to v0.8.07482627Merge pull request #174 from kubernetes-sigs/dependabot/github_actions/publis...840a54dBump the actions group across 5 directories with 1 updatea904e1aMerge pull request #173 from kubernetes-sigs/dependabot/github_actions/ghacti...aad1f04Bump actions/checkout from 7.0.0 to 7.0.1 in the ghactions groupc130b44Merge pull request #171 from binerbot/update-setup-release-notes-v0.21.16b5a664Merge pull request #172 from binerbot/update-publish-release-v0.21.1Updates
softprops/action-gh-releasefrom 3.0.0 to 3.0.2Release notes
Sourced from softprops/action-gh-release's releases.
Changelog
Sourced from softprops/action-gh-release's changelog.
... (truncated)
Commits
3d0d988release 3.0.2 (#818)7e13ed4fix: clarify release creation 404 errors (#817)e6c70a5fix: replace existing release assets on Gitea (#816)f345337fix: publish existing draft releases as prereleases (#801)d8a89a2fix: upload small checksum assets reliably (#815)45ece40chore(deps): remove unused TypeScript tooling (#814)f6b913cfeat: improve release error reporting and test coverage (#813)15f193dchore(deps): upgrade TypeScript to 7 (#812)cc8268dchore(deps): bump actions/checkout in the github-actions group (#810)fd0ed1echore(deps): bump the npm group with 3 updates (#811)Updates
chainguard-dev/actions/setup-spdxfrom 1.6.19 to 1.6.32Release notes
Sourced from chainguard-dev/actions/setup-spdx's releases.
... (truncated)
Commits
7bd1e94build(deps-dev): bump eslint from 9.39.4 to 10.8.0 in /otel-export (#1015)70ea519build(deps): bump the actions group across 8 directories with 6 updates (#1024)bed8050build(deps): bump the actions group across 1 directory with 5 updates (#1023)9d63165build(deps): bump the actions group across 8 directories with 8 updates (#1018)06277e4build(deps): bump reviewdog/action-actionlint from 1.72.0 to 1.73.0 (#1019)fed81b5build(deps): bump otel-export dependencies and rebuild dist (#1012)050eb20build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 (#993)f49ff9cfix(ci): allowlist CA revocation endpoints for Windows egress policy (#1011)43c7ed6build(deps): bump github.com/sethvargo/go-envconfig in /hugo2confluence (#1007)4388e57build(deps): bump the actions group across 8 directories with 10 updates (#1009)