Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 17, 2025

Bumps the actions group with 8 updates:

Package From To
actions/setup-go 4.1.0 5.5.0
actions/checkout 3df4ab11eba7bda6032a0b82a6bb43b11571feac 09d2acae674a48949e3602304ab46fd20ae0c42f
actions/cache 4.2.0 4.2.3
aws-actions/configure-aws-credentials 4.0.0 4.2.1
google-github-actions/auth 1.1.1 2.1.10
actions/upload-artifact 4.3.3 4.6.2
hashicorp/setup-signore 1 2
goreleaser/goreleaser-action 5.0.0 6.3.0

Updates actions/setup-go from 4.1.0 to 5.5.0

Release notes

Sourced from actions/setup-go's releases.

v5.5.0

What's Changed

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

What's Changed

Dependency updates :

New Contributors

Full Changelog: actions/setup-go@v5...v5.4.0

v5.3.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

What's Changed

  • Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in actions/setup-go#496

New Contributors

... (truncated)

Commits
  • d35c59a chore: update discussions url (#527)
  • 29694d7 Add manifest validation and improve error handling (#586)
  • 78535dd Bump eslint-plugin-jest from 27.9.0 to 28.11.0 (#537)
  • bb65d88 Bump ts-jest from 29.1.2 to 29.3.2 (#582)
  • 7f17e83 Bump @​actions/glob from 0.4.0 to 0.5.0 (#573)
  • dca8468 Update self-hosted environment validation and bump undici version (#556)
  • 691cc35 upgrade actions/cache to 4.0.3 (#574)
  • 0aaccfd Bump undici from 5.28.4 to 5.28.5 (#541)
  • c4c1141 upgrade actions/cache to 4.0.2 (#568)
  • 5a083d0 Bump eslint-config-prettier from 8.10.0 to 10.0.1 (#536)
  • Additional commits viewable in compare view

Updates actions/checkout from 3df4ab11eba7bda6032a0b82a6bb43b11571feac to 09d2acae674a48949e3602304ab46fd20ae0c42f

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates actions/cache from 4.2.0 to 4.2.3

Release notes

Sourced from actions/cache's releases.

v4.2.3

What's Changed

  • Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in actions/cache#1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

What's Changed

[!IMPORTANT] As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Full Changelog: actions/cache@v4.2.1...v4.2.2

v4.2.1

What's Changed

[!IMPORTANT] As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

New Contributors

Full Changelog: actions/cache@v4.2.0...v4.2.1

Changelog

Sourced from actions/cache's changelog.

Releases

4.2.3

  • Bump @actions/cache to v4.0.3 (obfuscates SAS token in debug logs for cache entries)

4.2.2

  • Bump @actions/cache to v4.0.2

4.2.1

  • Bump @actions/cache to v4.0.1

4.2.0

TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

4.1.2

  • Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474
  • Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

  • Restore original behavior of cache-hit output - #1467

4.1.0

  • Ensure cache-hit output is set when a cache is missed - #1404
  • Deprecate save-always input - #1452

4.0.2

  • Fixed restore fail-on-cache-miss not working.

4.0.1

  • Updated isGhes check

... (truncated)

Commits

Updates aws-actions/configure-aws-credentials from 4.0.0 to 4.2.1

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v4.2.1

4.2.1 (2025-05-14)

Bug Fixes

  • ensure explicit inputs take precedence over environment variables (e56e6c4)
  • prioritize explicit inputs over environment variables (df9c8fe)

v4.2.0

4.2.0 (2025-05-06)

Features

  • add Expiration field to Outputs (a4f3267)
  • Document role-duration-seconds range (5a0cf01)
  • support action inputs as environment variables (#1338) (2c168ad)

Bug Fixes

  • make sure action builds, also fix dependabot autoapprove (c401b8a)
  • role chaning on mulitple runs (#1340) (9e38641)

v4.1.0

4.1.0 (2025-02-08)

Features

Bug Fixes

v4.0.3

4.0.3 (2025-01-27)

Features

  • added release-please action config (0f88004)

... (truncated)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.2.1 (2025-05-14)

Bug Fixes

  • ensure explicit inputs take precedence over environment variables (e56e6c4)
  • prioritize explicit inputs over environment variables (df9c8fe)

4.2.0 (2025-05-06)

Features

  • add Expiration field to Outputs (a4f3267)
  • Document role-duration-seconds range (5a0cf01)
  • support action inputs as environment variables (#1338) (2c168ad)

Bug Fixes

  • make sure action builds, also fix dependabot autoapprove (c401b8a)
  • role chaning on mulitple runs (#1340) (9e38641)

4.1.0 (2025-02-08)

Features

Bug Fixes

4.0.3 (2025-01-27)

Features

  • added release-please action config (0f88004)

... (truncated)

Commits
  • b475783 chore(main): release 4.2.1 (#1356)
  • e56e6c4 Merge pull request #1355 from hozzer/main
  • c0573b2 update dist
  • df9c8fe fix: prioritize explicit inputs over environment variables
  • e7aeb52 chore: Update dist
  • 5188626 chore(deps): bump @​aws-sdk/client-sts from 3.803.0 to 3.808.0 (#1353)
  • a7d7b78 chore: Update dist
  • e10de4c chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1352)
  • 85f7c4c chore(deps-dev): bump @​types/node from 22.15.11 to 22.15.17 (#1351)
  • f24d719 Merge pull request #1331 from aws-actions/release-please--branches--main--com...
  • Additional commits viewable in compare view

Updates google-github-actions/auth from 1.1.1 to 2.1.10

Release notes

Sourced from google-github-actions/auth's releases.

v2.1.10

What's Changed

Full Changelog: google-github-actions/auth@v2.1.9...v2.1.10

v2.1.9

What's Changed

Full Changelog: google-github-actions/auth@v2.1.8...v2.1.9

v2.1.8

What's Changed

New Contributors

Full Changelog: google-github-actions/auth@v2...v2.1.8

v2.1.7

What's Changed

Full Changelog: google-github-actions/auth@v2.1.6...v2.1.7

v2.1.6

What's Changed

Full Changelog: google-github-actions/auth@v2.1.5...v2.1.6

v2.1.5

What's Changed

... (truncated)

Commits

Updates actions/upload-artifact from 4.3.3 to 4.6.2

Release notes

Sourced from actions/upload-artifact's releases.

v4.6.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

v4.4.3

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

What's Changed

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

... (truncated)

Commits
  • ea165f8 Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release
  • 0839620 Prepare for new release of actions/upload-artifact with new toolkit cache ver...
  • 4cec3d8 Merge pull request #673 from actions/yacaovsnc/artifact_2.2.2
  • e9fad96 license cache update for artifact
  • b26fd06 Update to use artifact 2.2.2 package
  • 65c4c4a Merge pull request #662 from actions/yacaovsnc/add_variable_for_concurrency_a...
  • 0207619 move files back to satisfy licensed ci
  • 1ecca81 licensed cache updates
  • 9742269 Expose env vars to controll concurrency and timeout
  • 6f51ac0 Merge pull request #656 from bdehamer/bdehamer/artifact-digest
  • Additional commits viewable in compare view

Updates hashicorp/setup-signore from 1 to 2

Release notes

Sourced from hashicorp/setup-signore's releases.

v2

Breaking changes

  • Setting client-id and client-secret is no longer supported

What's Changed

Full Changelog: hashicorp/setup-signore@v1.0.1...v2

Commits
  • 222ce0f Merge pull request #70 from hashicorp/regenerate-dist
  • 1a0ebd6 regenerate dist
  • 1e9b76b Merge pull request #65 from hashicorp/compliance/codeowners
  • 03b3f45 Merge pull request #66 from hashicorp/compliance/metad
  • 22ed2ac Merge pull request #69 from hashicorp/bflad/node16
  • c13192e Update action NodeJS version to 16
  • 0e0073d Merge pull request #59 from hashicorp/node16-update-deps
  • 4be2312 Add META.d file
  • c48de99 Add CODEOWNERS file
  • 01bdeeb update outdated dependencies, pin node16 in ci
  • Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 5.0.0 to 6.3.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v6.3.0

Full Changelog: goreleaser/goreleaser-action@v6.2.1...v6.3.0

v6.2.1

What's Changed

This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the -pro suffix). Older versions should work fine.

[!WARNING] This version is required for GoReleaser Pro v2.7.0+. Read more here.

Full Changelog: goreleaser/goreleaser-action@v6.2.0...v6.2.1

v6.2.0

What's Changed

This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the -pro suffix). Older versions should work fine.

[!WARNING] This version is required for GoReleaser Pro v2.7.0+. Read more here.

Full Changelog: goreleaser/goreleaser-action@v6.1.0...v6.2.0

v6.1.0

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v6.0.0...v6.1.0

v6.0.0

[!WARNING] This is a breaking change!

... (truncated)

Commits
  • 9c156ee ci: update bake-action to v6 (#493)
  • 73c477b chore(deps): bump undici from 5.28.3 to 5.28.5 (#488)
  • 19c00a9 chore(deps): bump codecov/codecov-action from 4 to 5 (#481)
  • 90a3faa chore(deps): bake vendor
  • 0262998 test: fixes
  • 450d3a4 test: fix configs
  • 25b92ab chore(deps): update semver and tool-cache
  • bc0ac76 chore(deps): update actions
  • 842e7cc feat: update for goreleaser v2.7
  • d28c982 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#482)
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

[//]: # (dependabot...

Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 17, 2025
@dependabot dependabot bot requested a review from a team as a code owner June 17, 2025 07:00
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-89482cef07 branch from 0fbb6f2 to 93e21b1 Compare June 29, 2025 05:52
Bumps the actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go) | `4.1.0` | `5.5.0` |
| [actions/checkout](https://github.com/actions/checkout) | `3df4ab11eba7bda6032a0b82a6bb43b11571feac` | `09d2acae674a48949e3602304ab46fd20ae0c42f` |
| [actions/cache](https://github.com/actions/cache) | `4.2.0` | `4.2.3` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.0.0` | `4.2.1` |
| [google-github-actions/auth](https://github.com/google-github-actions/auth) | `1.1.1` | `2.1.10` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.3` | `4.6.2` |
| [hashicorp/setup-signore](https://github.com/hashicorp/setup-signore) | `1` | `2` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `5.0.0` | `6.3.0` |


Updates `actions/setup-go` from 4.1.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@93397be...d35c59a)

Updates `actions/checkout` from 3df4ab11eba7bda6032a0b82a6bb43b11571feac to 09d2acae674a48949e3602304ab46fd20ae0c42f
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@3df4ab1...09d2aca)

Updates `actions/cache` from 4.2.0 to 4.2.3
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@1bd1e32...5a3ec84)

Updates `aws-actions/configure-aws-credentials` from 4.0.0 to 4.2.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@8c3f20d...b475783)

Updates `google-github-actions/auth` from 1.1.1 to 2.1.10
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/auth@35b0e87...ba79af0)

Updates `actions/upload-artifact` from 4.3.3 to 4.6.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@6546280...ea165f8)

Updates `hashicorp/setup-signore` from 1 to 2
- [Release notes](https://github.com/hashicorp/setup-signore/releases)
- [Commits](hashicorp/setup-signore@v1...v2)

Updates `goreleaser/goreleaser-action` from 5.0.0 to 6.3.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@7ec5c2b...9c156ee)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/checkout
  dependency-version: '09d2acae674a48949e3602304ab46fd20ae0c42f'
  dependency-type: direct:production
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: google-github-actions/auth
  dependency-version: 2.1.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: hashicorp/setup-signore
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-89482cef07 branch from 93e21b1 to df0a14f Compare August 10, 2025 05:11
@mohanmanikanta2299 mohanmanikanta2299 merged commit e702211 into main Aug 11, 2025
6 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/actions-89482cef07 branch August 11, 2025 06:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant