ci: bump the github-actions group across 1 directory with 30 updates #463

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

dependabot wants to merge 1 commit into main

from dependabot/github_actions/github-actions-1ed3350a66

Open

ci: bump the github-actions group across 1 directory with 30 updates #463

dependabot wants to merge 1 commit into main from dependabot/github_actions/github-actions-1ed3350a66

Conversation

@dependabot

Copy link

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the github-actions group with 30 updates in the / directory:

Package	From	To
step-security/harden-runner	`2.12.2`	`2.13.1`
actions/checkout	`4.2.2`	`5.0.0`
actions/cache	`4.2.3`	`4.3.0`
crate-ci/typos	`1.34.0`	`1.38.1`
azure/setup-helm	`4.3.0`	`4.3.1`
actions/upload-artifact	`4.6.2`	`5.0.0`
chromaui/action	`13.1.2`	`13.3.2`
docker/login-action	`3.4.0`	`3.6.0`
actions/setup-java	`4.7.1`	`5.0.0`
google-github-actions/auth	`2.1.10`	`3.0.0`
google-github-actions/setup-gcloud	`2.1.4`	`3.0.1`
actions/download-artifact	`4.3.0`	`6.0.0`
actions/attest	`2.4.0`	`3.0.0`
fluxcd/flux2	`2.6.3`	`2.7.2`
google-github-actions/get-gke-credentials	`2.3.3`	`3.0.0`
actions/github-script	`7.0.1`	`8.0.0`
depot/build-push-action	`1.15.0`	`1.16.2`
tj-actions/changed-files	`cf79a64fed8a943fb1073260883d08fe0dfb4e56`	`dbf178ceecb9304128c8e0648591d71208c6e2c9`
nixbuild/nix-quick-install-action	`32`	`34`
tj-actions/branch-names	`8.2.1`	`9.0.2`
peter-evans/find-comment	`3.1.0`	`4.0.0`
peter-evans/create-or-update-comment	`4.0.0`	`5.0.0`
peter-evans/repository-dispatch	`3.0.0`	`4.0.0`
ossf/scorecard-action	`2.4.2`	`2.4.3`
github/codeql-action	`3.29.2`	`4.31.0`
aquasecurity/trivy-action	`0.32.0`	`0.33.1`
actions/stale	`9.1.0`	`10.1.0`
Mattraks/delete-workflow-runs	`2.0.6`	`2.1.0`
coder/start-workspace-action	`35a4608cefc7e8cc56573cae7c3b85304575cb72`	`f97a681b4cc7985c9eef9963750c7cc6ebc93a19`
umbrelladocs/action-linkspector	`1.3.6`	`1.4.0`

Updates step-security/harden-runner from 2.12.2 to 2.13.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.13.1

What's Changed

Graceful handling of HTTP errors: Improved error handling when fetching Harden Runner policies from the StepSecurity Policy Store API, ensuring more reliable execution even in case of temporary network/API issues.

Security updates for npm dependencies: Updated vulnerable npm package dependencies to the latest secure versions.

Faster enterprise agent downloads: The enterprise agent is now downloaded from GitHub Releases instead of packages.stepsecurity.io, improving download speed and reliability.

Full Changelog: step-security/harden-runner@v2.13.0...v2.13.1

v2.13.0

What's Changed

Improved job markdown summary

Https monitoring for all domains (included with the enterprise tier)

Full Changelog: step-security/harden-runner@v2...v2.13.0

Commits

f4a75cf Merge pull request #588 from step-security/rc-26
95503d0 ci: remove code-review workflow
4b250a0 ci: add job to confirm dist is as expected
5b0ab6a update dependencies
d11f2c1 fix bug where status code was not being preserved
b3fc98e improve error handling for policy store sceanrio
92fc5d4 update error message
b61b0a4 policy store improvements
e3d3f2b use GitHub release instead of packages
646ac01 update agent
Additional commits viewable in compare view

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

Prepare v5.0.0 release by @salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

Prepare release v4.3.0 by @salmanmkc in actions/checkout#2237

New Contributors

@motss made their first contribution in actions/checkout#1971

@mouismail made their first contribution in actions/checkout#1977

@benwells made their first contribution in actions/checkout#2043

@nebuk89 made their first contribution in actions/checkout#2194

@salmanmkc made their first contribution in actions/checkout#2236

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

V4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707

v4.1.4

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692

Add dependabot config by @cory-miller in actions/checkout#1688

Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693

Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643

v4.1.3

... (truncated)

Commits

08c6903 Prepare v5.0.0 release (#2238)
9f26565 Update actions checkout to use node 24 (#2226)
08eba0b Prepare release v4.3.0 (#2237)
631c7dc Update package dependencies (#2236)
8edcb1b Update CODEOWNERS for actions (#2224)
09d2aca Update README.md (#2194)
85e6279 Adjust positioning of user email note and permissions heading (#2044)
009b9ae Documentation update - add recommended permissions to Readme (#2043)
cbb7224 Update README.md (#1977)
3b9b8c8 docs: update README.md (#1971)
See full diff in compare view

Updates actions/cache from 4.2.3 to 4.3.0

Release notes

Sourced from actions/cache's releases.

v4.3.0

What's Changed

Add note on runner versions by @GhadimiR in actions/cache#1642

Prepare v4.3.0 release by @Link- in actions/cache#1655

New Contributors

@GhadimiR made their first contribution in actions/cache#1642

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

What's Changed

Update README.md by @nebuk89 in actions/cache#1620

Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in actions/cache#1634

Prepare release 4.2.4 by @Link- in actions/cache#1636

New Contributors

@nebuk89 made their first contribution in actions/cache#1620

Full Changelog: actions/cache@v4...v4.2.4

Changelog

Sourced from actions/cache's changelog.

Releases

4.3.0

Bump @actions/cache to v4.1.0

4.2.4

Bump @actions/cache to v4.0.5

4.2.3

Bump @actions/cache to v4.0.3 (obfuscates SAS token in debug logs for cache entries)

4.2.2

Bump @actions/cache to v4.0.2

4.2.1

Bump @actions/cache to v4.0.1

4.2.0

TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

4.1.2

Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474

Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

Restore original behavior of cache-hit output - #1467

4.1.0

Ensure cache-hit output is set when a cache is missed - #1404

Deprecate save-always input - #1452

... (truncated)

Commits

0057852 Merge pull request #1655 from actions/Link-/prepare-4.3.0
4f5ea67 Update licensed cache
9fcad95 Upgrade actions/cache to 4.1.0 and prepare 4.3.0 release
638ed79 Merge pull request #1642 from actions/GhadimiR-patch-1
3862dcc Add note on runner versions
0400d5f Merge pull request #1636 from actions/Link-/release-4.2.4
374a27f Prepare release 4.2.4
358a730 Merge pull request #1634 from actions/Link-/optimise-deps
2ee706e Fix with another approach
94f7b5d Fix bundle exec
Additional commits viewable in compare view

Updates crate-ci/typos from 1.34.0 to 1.38.1

Release notes

Sourced from crate-ci/typos's releases.

v1.38.1

[1.38.1] - 2025年10月07日

Fixes

Ignore common golang identifiers

v1.38.0

[1.38.0] - 2025年10月06日

Features

Update type list

Fixes

Don't correct typ

Consistently error on unused config fields

v1.37.3

[1.37.3] - 2025年10月06日

Fixes

Don't correct PN for bitbake file types

v1.37.2

[1.37.2] - 2025年10月03日

Fixes

Don't suggest diagnostic for diagnotics, preferring diagnostics

v1.37.1

[1.37.1] - 2025年10月01日

Fixes

Don't offer corrections to ""

v1.37.0

[1.37.0] - 2025年09月30日

Features

Updated the dictionary with the September 2025 changes

Pull in other dictionary updates

v1.36.3

[1.36.3] - 2025年09月25日

... (truncated)

Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.38.1] - 2025年10月07日

Fixes

Ignore common golang identifiers

[1.38.0] - 2025年10月06日

Features

Update type list

Fixes

Don't correct typ

Consistently error on unused config fields

[1.37.3] - 2025年10月06日

Fixes

Don't correct PN for bitbake file types

[1.37.2] - 2025年10月03日

Fixes

Don't suggest diagnostic for diagnotics, preferring diagnostics

[1.37.1] - 2025年10月01日

Fixes

Don't offer corrections to ""

[1.37.0] - 2025年09月30日

Features

Updated the dictionary with the September 2025 changes

Pull in other dictionary updates

... (truncated)

Commits

80c8a49 chore: Release
c1008ce docs: Update changelog
62a3b50 Merge pull request #1398 from ccoveille-forks/go-exclusions
e6bedbd fix(config): Add some Go exclusions
90cacd6 docs(ref): Speak to glob ambiguity
b81b12e docs(ref): Clarify directories are not spell checked
eaf25df docs(ref): Speak to locale's behavior
a9735e2 docs(ref): Provide identifier/word config examples
3c14191 docs(ref): Talk about include lists
d0f81dc docs(ref): Re-organize help more like cargo
Additional commits viewable in compare view

Updates azure/setup-helm from 4.3.0 to 4.3.1

Release notes

Sourced from azure/setup-helm's releases.

v4.3.1

Changed

#167 Pinning Action Dependencies for Security and Reliability

#181 Fix types, and update node version.

#191 chore(tests): Mock arch to make tests pass on arm host

#192 chore: remove unnecessary prebuild script

#203 Update helm version retrieval to use JSON output for latest version

#207 ci(workflows): update helm version to v3.18.4 and add matrix for tests

Added

#197 Add pre-commit hook

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[4.3.1] - 2025年08月12日

Changed

#167 Pinning Action Dependencies for Security and Reliability

#181 Fix types, and update node version.

#191 chore(tests): Mock arch to make tests pass on arm host

#192 chore: remove unnecessary prebuild script

#203 Update helm version retrieval to use JSON output for latest version

#207 ci(workflows): update helm version to v3.18.4 and add matrix for tests

Added

#197 Add pre-commit hook

[4.3.0] - 2025年02月15日

#152 feat: log when restoring from cache

#157 Dependencies Update

#137 Add dependabot

[4.2.0] - 2024年04月15日

#124 Fix OS detection and download OS-native archive extension

[4.1.0] - 2024年03月01日

#130 switches to use Helm published file to read latest version instead of using GitHub releases

[4.0.0] - 2024年02月12日

#121 update to node20 as node16 is deprecated

Commits

1a275c3 build
9e7f762 chore(release): v4.3.1 (#208)
c096176 Bump @types/node from 24.1.0 to 24.2.1 in the actions group (#206)
5e72872 ci(workflows): update helm version to v3.18.4 and add matrix for tests (#207)
fb8fa40 Update default helm version to 3.18.3 (#194)
0d09729 chore: remove unnecessary prebuild script (#192)
32bc120 chore(tests): Mock arch to make tests pass on arm host (#191)
51463d6 Bump the actions group with 2 updates (#205)
aff1094 Bump the actions group across 1 directory with 2 updates (#204)
a10a524 Update helm version retrieval to use JSON output for latest version (#203)
Additional commits viewable in compare view

Updates actions/upload-artifact from 4.6.2 to 5.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README.md by @GhadimiR in actions/upload-artifact#681

Update README.md by @nebuk89 in actions/upload-artifact#712

Readme: spell out the first use of GHES by @danwkennedy in actions/upload-artifact#727

Update GHES guidance to include reference to Node 20 version by @patrikpolyak in actions/upload-artifact#725

Bump @actions/artifact to v4.0.0

Prepare v5.0.0 by @danwkennedy in actions/upload-artifact#734

New Contributors

@GhadimiR made their first contribution in actions/upload-artifact#681

@nebuk89 made their first contribution in actions/upload-artifact#712

@danwkennedy made their first contribution in actions/upload-artifact#727

@patrikpolyak made their first contribution in actions/upload-artifact#725

Full Changelog: actions/upload-artifact@v4...v5.0.0

Commits

330a01c Merge pull request #734 from actions/danwkennedy/prepare-5.0.0
03f2824 Update github.dep.yml
905a1ec Prepare v5.0.0
2d9f9cd Merge pull request #725 from patrikpolyak/patch-1
9687587 Merge branch 'main' into patch-1
2848b2c Merge pull request #727 from danwkennedy/patch-1
9b51177 Spell out the first use of GHES
cd231ca Update GHES guidance to include reference to Node 20 version
de65e23 Merge pull request #712 from actions/nebuk89-patch-1
8747d8c Update README.md
Additional commits viewable in compare view

Updates chromaui/action from 13.1.2 to 13.3.2

Commits

bc2d84a v13.3.2
1c807fb v13.3.1
4ffe736 v13.3.0
070fa3e v13.2.1
20c7e42 v13.2.0
8c981a1 v13.1.5
d0795df v13.1.4
58d9ffb v13.1.3
See full diff in compare view

Updates docker/login-action from 3.4.0 to 3.6.0

Release notes

Sourced from docker/login-action's releases.

v3.6.0

Add registry-auth input for raw authentication to registries by @crazy-max in docker/login-action#887

Bump @aws-sdk/client-ecr to 3.890.0 in docker/login-action#882 docker/login-action#890

Bump @aws-sdk/client-ecr-public to 3.890.0 in docker/login-action#882 docker/login-action#890

Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in docker/login-action#883

Bump brace-expansion from 1.1.11 to 1.1.12 in docker/login-action#880

Bump undici from 5.28.4 to 5.29.0 in docker/login-action#879

Bump tmp from 0.2.3 to 0.2.4 in docker/login-action#881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in docker/login-action#874 docker/login-action#876

Bump @aws-sdk/client-ecr to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @aws-sdk/client-ecr-public to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in docker/login-action#870

Bump form-data from 2.5.1 to 2.5.5 in docker/login-action#875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

Commits

5e57cd1 Merge pull request #890 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
97e3143 chore: update generated content
3a0796b build(deps): bump the aws-sdk-dependencies group with 2 updates
5b7b28b Merge pull request #882 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
abc9fb3 chore: update generated content
d468688 build(deps): bump the aws-sdk-dependencies group with 2 updates
a99b2f8 Merge pull request #883 from docker/dependabot/npm_and_yarn/docker/actions-to...
0d7fae8 chore: update generated content
9832253 build(deps): bump @docker/actions-toolkit from 0.62.1 to 0.63.0
09e05bb Merge pull request #881 from docker/dependabot/npm_and_yarn/tmp-0.2.4
Additional commits viewable in compare view

Updates actions/setup-java from 4.7.1 to 5.0.0

Release notes

Sourced from actions/setup-java's releases.

v5.0.0

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in actions/setup-java#888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in actions/setup-java#798

Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in actions/setup-java#730

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-java#833

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-java#887

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-java#896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in actions/setup-java#859

Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in actions/setup-java#848

New Contributors

@gowridurgad made their first contribution in actions/setup-java#848

@salmanmkc made their first contribution in actions/setup-java#888

Full Changelog: actions/setup-java@v4...v5.0.0

Commits

dded088 Bump actions/checkout from 4 to 5 (#896)
0913e9a Upgrade to node 24 (#888)
e9343db Bumps form-data (#887)
ae2b61d Bump undici from 5.28.5 to 5.29.0 (#833)
c190c18 Bump eslint-plugin-jest from 27.9.0 to 29.0.1 (#730)
67aec00 Fix: prevent default installation of JetBrains pre-releases (#859)
ebb356c Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failu...
f4f1212 Update publish-immutable-actions.yml (#798)
See full diff in compare view

Updates google-github-actions/auth from 2.1.10 to 3.0.0

Release notes

Sourced from google-github-actions/auth's releases.

v3.0.0

What's Changed

Bump to Node 24 and remove old parameters by @sethvargo in google-github-actions/auth#508

Remove hacky script by @sethvargo in google-github-actions/auth#509

Release: v3.0.0 by @google-github-actions-bot in google-github-actions/auth#510

Full Changelog: google-github-actions/auth@v2...v3.0.0

v2.1.13

What's Changed

Update deps by @sethvargo in google-github-actions/auth#506

Release: v2.1.13 by @google-github-actions-bot in google-github-actions/auth#507

Full Changelog: google-github-actions/auth@v2.1.12...v2.1.13

v2.1.12

What's Changed

Add retries for getIDToken by @sethvargo in google-github-actions/auth#502

Release: v2.1.12 by @google-github-actions-bot in google-github-actions/auth#503

Full Changelog: google-github-actions/auth@v2.1.11...v2.1.12

v2.1.11

What's Changed

Update troubleshooting docs for Python by @sethvargo in google-github-actions/auth#488

Add linters by @sethvargo in google-github-actions/auth#499

Update deps by @sethvargo in google-github-actions/auth#500

Release: v2.1.11 by @google-github-actions-bot in google-github-actions/auth#501

Full Changelog: google-github-actions/auth@v2.1.10...v2.1.11

Commits

7c6bc77 Release: v3.0.0 (#510)
42e4997 Remove hacky script (#509)
5ea4dc1 Bump to Node 24 and remove old parameters (#508)
c200f36 Release: v2.1.13 (#507)
3a53be7 Update deps (#506)
b7593ed Release: v2.1.12 (#503)
c1ee334 Add retries for getIDToken (#502)
140bb51 Release: v2.1.11 (#501)
ab3132e Update deps (#500)
25b96ba Add linters (#499)
Additional commits viewable in compare view

Updates google-github-actions/setup-gcloud from 2.1.4 to 3.0.1

Release notes

Sourced from google-github-actions/setup-gcloud's releases.

v3.0.1

What's Changed

Release: v3.0.1 by @google-github-actions-bot in google-github-actions/setup-gcloud#729

Full Changelog: google-github-actions/setup-gcloud@v3.0.0...v3.0.1

v3.0.0

What's Changed

!!️ This release requires Node 24+!

!!️ The skip_tool_cache option has been removed! Skipping the tool cache is now the default behavior. To restore the previous behavior of using the tool cache (which is unnecessary on GitHub managed runners, but may provide performance increases on self-hosted runners), set cache: true.

Bump to node24 by @sethvargo in google-github-actions/setup-gcloud#723

Do not use the tool-cache by default by @sethvargo in google-github-actions/setup-gcloud#724

Update to use v3 references by @sethvargo in google-github-actions/setup-gcloud#725

Release: v3.0.0 by @google-github-actions-bot in google-github-actions/setup-gcloud#726

Full Changelog: google-github-actions/setup-gcloud@v2.2.1...v3.0.0

v3

Floating v3 tag

v2.2.1

What's Changed

Update deps by @sethvargo in google-github-actions/setup-gcloud#720

Bump to the latest actions-utils to fix the gen-readme bug by

@dependabot


 ci: bump the github-actions group across 1 directory with 30 updates

fc4346c

Bumps the github-actions group with 30 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.12.2` | `2.13.1` |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` |
| [actions/cache](https://github.com/actions/cache) | `4.2.3` | `4.3.0` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.34.0` | `1.38.1` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | `4.3.0` | `4.3.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` |
| [chromaui/action](https://github.com/chromaui/action) | `13.1.2` | `13.3.2` |
| [docker/login-action](https://github.com/docker/login-action) | `3.4.0` | `3.6.0` |
| [actions/setup-java](https://github.com/actions/setup-java) | `4.7.1` | `5.0.0` |
| [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2.1.10` | `3.0.0` |
| [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) | `2.1.4` | `3.0.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `6.0.0` |
| [actions/attest](https://github.com/actions/attest) | `2.4.0` | `3.0.0` |
| [fluxcd/flux2](https://github.com/fluxcd/flux2) | `2.6.3` | `2.7.2` |
| [google-github-actions/get-gke-credentials](https://github.com/google-github-actions/get-gke-credentials) | `2.3.3` | `3.0.0` |
| [actions/github-script](https://github.com/actions/github-script) | `7.0.1` | `8.0.0` |
| [depot/build-push-action](https://github.com/depot/build-push-action) | `1.15.0` | `1.16.2` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `cf79a64fed8a943fb1073260883d08fe0dfb4e56` | `dbf178ceecb9304128c8e0648591d71208c6e2c9` |
| [nixbuild/nix-quick-install-action](https://github.com/nixbuild/nix-quick-install-action) | `32` | `34` |
| [tj-actions/branch-names](https://github.com/tj-actions/branch-names) | `8.2.1` | `9.0.2` |
| [peter-evans/find-comment](https://github.com/peter-evans/find-comment) | `3.1.0` | `4.0.0` |
| [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `4.0.0` | `5.0.0` |
| [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) | `3.0.0` | `4.0.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.2` | `2.4.3` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.29.2` | `4.31.0` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.32.0` | `0.33.1` |
| [actions/stale](https://github.com/actions/stale) | `9.1.0` | `10.1.0` |
| [Mattraks/delete-workflow-runs](https://github.com/mattraks/delete-workflow-runs) | `2.0.6` | `2.1.0` |
| [coder/start-workspace-action](https://github.com/coder/start-workspace-action) | `35a4608cefc7e8cc56573cae7c3b85304575cb72` | `f97a681b4cc7985c9eef9963750c7cc6ebc93a19` |
| [umbrelladocs/action-linkspector](https://github.com/umbrelladocs/action-linkspector) | `1.3.6` | `1.4.0` |
Updates `step-security/harden-runner` from 2.12.2 to 2.13.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@6c439dc...f4a75cf)
Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...08c6903)
Updates `actions/cache` from 4.2.3 to 4.3.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@5a3ec84...0057852)
Updates `crate-ci/typos` from 1.34.0 to 1.38.1
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@392b78f...80c8a49)
Updates `azure/setup-helm` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@b9e5190...1a275c3)
Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...330a01c)
Updates `chromaui/action` from 13.1.2 to 13.3.2
- [Release notes](https://github.com/chromaui/action/releases)
- [Commits](chromaui/action@4d8ebd1...bc2d84a)
Updates `docker/login-action` from 3.4.0 to 3.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@74a5d14...5e57cd1)
Updates `actions/setup-java` from 4.7.1 to 5.0.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@c5195ef...dded088)
Updates `google-github-actions/auth` from 2.1.10 to 3.0.0
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/auth@ba79af0...7c6bc77)
Updates `google-github-actions/setup-gcloud` from 2.1.4 to 3.0.1
- [Release notes](https://github.com/google-github-actions/setup-gcloud/releases)
- [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/setup-gcloud@77e7a55...aa5489c)
Updates `actions/download-artifact` from 4.3.0 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@d3f86a1...018cc2c)
Updates `actions/attest` from 2.4.0 to 3.0.0
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@ce27ba3...daf44fb)
Updates `fluxcd/flux2` from 2.6.3 to 2.7.2
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](fluxcd/flux2@bda4c81...4a15fa6)
Updates `google-github-actions/get-gke-credentials` from 2.3.3 to 3.0.0
- [Release notes](https://github.com/google-github-actions/get-gke-credentials/releases)
- [Changelog](https://github.com/google-github-actions/get-gke-credentials/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/get-gke-credentials@d0cee45...3da1e46)
Updates `actions/github-script` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@60a0d83...ed59741)
Updates `depot/build-push-action` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/depot/build-push-action/releases)
- [Commits](depot/build-push-action@2583627...9785b13)
Updates `tj-actions/changed-files` from cf79a64fed8a943fb1073260883d08fe0dfb4e56 to dbf178ceecb9304128c8e0648591d71208c6e2c9
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@cf79a64...dbf178c)
Updates `nixbuild/nix-quick-install-action` from 32 to 34
- [Release notes](https://github.com/nixbuild/nix-quick-install-action/releases)
- [Changelog](https://github.com/nixbuild/nix-quick-install-action/blob/master/RELEASE)
- [Commits](nixbuild/nix-quick-install-action@63ca48f...2c9db80)
Updates `tj-actions/branch-names` from 8.2.1 to 9.0.2
- [Release notes](https://github.com/tj-actions/branch-names/releases)
- [Changelog](https://github.com/tj-actions/branch-names/blob/main/HISTORY.md)
- [Commits](tj-actions/branch-names@dde14ac...5250492)
Updates `peter-evans/find-comment` from 3.1.0 to 4.0.0
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@3eae4d3...b30e6a3)
Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@71345be...e8674b0)
Updates `peter-evans/repository-dispatch` from 3.0.0 to 4.0.0
- [Release notes](https://github.com/peter-evans/repository-dispatch/releases)
- [Commits](peter-evans/repository-dispatch@ff45666...5fc4efd)
Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@05b42c6...4eaacf0)
Updates `github/codeql-action` from 3.29.2 to 4.31.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@181d5ee...4e94bd1)
Updates `aquasecurity/trivy-action` from 0.32.0 to 0.33.1
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@dc5a429...b6643a2)
Updates `actions/stale` from 9.1.0 to 10.1.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@5bef64f...5f858e3)
Updates `Mattraks/delete-workflow-runs` from 2.0.6 to 2.1.0
- [Release notes](https://github.com/mattraks/delete-workflow-runs/releases)
- [Commits](Mattraks/delete-workflow-runs@39f0bbe...ab48244)
Updates `coder/start-workspace-action` from 35a4608cefc7e8cc56573cae7c3b85304575cb72 to f97a681b4cc7985c9eef9963750c7cc6ebc93a19
- [Release notes](https://github.com/coder/start-workspace-action/releases)
- [Commits](coder/start-workspace-action@35a4608...f97a681)
Updates `umbrelladocs/action-linkspector` from 1.3.6 to 1.4.0
- [Release notes](https://github.com/umbrelladocs/action-linkspector/releases)
- [Commits](UmbrellaDocs/action-linkspector@3a951c1...652f85b)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
 dependency-version: 2.13.1
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: actions/checkout
 dependency-version: 5.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: actions/cache
 dependency-version: 4.3.0
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: crate-ci/typos
 dependency-version: 1.38.1
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: azure/setup-helm
 dependency-version: 4.3.1
 dependency-type: direct:production
 update-type: version-update:semver-patch
 dependency-group: github-actions
- dependency-name: actions/upload-artifact
 dependency-version: 5.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: chromaui/action
 dependency-version: 13.3.2
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: docker/login-action
 dependency-version: 3.6.0
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: actions/setup-java
 dependency-version: 5.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: google-github-actions/auth
 dependency-version: 3.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: google-github-actions/setup-gcloud
 dependency-version: 3.0.1
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: actions/download-artifact
 dependency-version: 6.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: actions/attest
 dependency-version: 3.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: fluxcd/flux2
 dependency-version: 2.7.2
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: google-github-actions/get-gke-credentials
 dependency-version: 3.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: actions/github-script
 dependency-version: 8.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: depot/build-push-action
 dependency-version: 1.16.2
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: tj-actions/changed-files
 dependency-version: dbf178ceecb9304128c8e0648591d71208c6e2c9
 dependency-type: direct:production
 dependency-group: github-actions
- dependency-name: nixbuild/nix-quick-install-action
 dependency-version: '34'
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: tj-actions/branch-names
 dependency-version: 9.0.2
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: peter-evans/find-comment
 dependency-version: 4.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: peter-evans/create-or-update-comment
 dependency-version: 5.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: peter-evans/repository-dispatch
 dependency-version: 4.0.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: ossf/scorecard-action
 dependency-version: 2.4.3
 dependency-type: direct:production
 update-type: version-update:semver-patch
 dependency-group: github-actions
- dependency-name: github/codeql-action
 dependency-version: 4.31.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
 dependency-version: 0.33.1
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: actions/stale
 dependency-version: 10.1.0
 dependency-type: direct:production
 update-type: version-update:semver-major
 dependency-group: github-actions
- dependency-name: Mattraks/delete-workflow-runs
 dependency-version: 2.1.0
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
- dependency-name: coder/start-workspace-action
 dependency-version: f97a681b4cc7985c9eef9963750c7cc6ebc93a19
 dependency-type: direct:production
 dependency-group: github-actions
- dependency-name: umbrelladocs/action-linkspector
 dependency-version: 1.4.0
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>

@dependabot dependabot bot added dependencies github_actions labels

Oct 27, 2025

@cloudflare-workers-and-pages

Copy link

cloudflare-workers-and-pages bot commented Oct 27, 2025 •

edited

Loading

Deploying with Cloudflare Workers Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	codeserver	`fc4346c`	Oct 27 2025, 06:36 AM

Labels

dependencies github_actions

ci: bump the github-actions group across 1 directory with 30 updates #463

Are you sure you want to change the base?

ci: bump the github-actions group across 1 directory with 30 updates #463

Uh oh!

Conversation

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

v2.13.1

What's Changed

v2.13.0

What's Changed

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.0

What's Changed

New Contributors

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.3.0

What's Changed

New Contributors

v4.2.4

What's Changed

New Contributors

Releases

4.3.0

4.2.4

4.2.3

4.2.2

4.2.1

4.2.0

4.1.2

4.1.1

4.1.0

v1.38.1

[1.38.1] - 2025年10月07日

Fixes

v1.38.0

[1.38.0] - 2025年10月06日

Features

Fixes

v1.37.3

[1.37.3] - 2025年10月06日

Fixes

v1.37.2

[1.37.2] - 2025年10月03日

Fixes

v1.37.1

[1.37.1] - 2025年10月01日

Fixes

v1.37.0

[1.37.0] - 2025年09月30日

Features

v1.36.3

[1.36.3] - 2025年09月25日

Change Log

[Unreleased] - ReleaseDate

[1.38.1] - 2025年10月07日

Fixes

[1.38.0] - 2025年10月06日

Features

Fixes

[1.37.3] - 2025年10月06日

Fixes

[1.37.2] - 2025年10月03日

Fixes

[1.37.1] - 2025年10月01日

Fixes

[1.37.0] - 2025年09月30日

Features

v4.3.1

cloudflare-workers-and-pages bot commented Oct 27, 2025 •

edited

Loading