Skip to content

ci: bump the actions group across 1 directory with 7 updates - #9621

Merged
waleedlatif1 merged 1 commit into
stagingfrom
dependabot/github_actions/staging/actions-783281ddd7
Nov 3, 2026
Merged

waleedlatif1 merged 1 commit into
stagingfrom
dependabot/github_actions/staging/actions-783281ddd7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 7 updates in the / directory:

Package From To
useblacksmith/checkout 1.8.1 1.8.2
actions/setup-java 5.7.0 6.1.0
actions/setup-dotnet 5.4.0 6.0.0
actions/setup-go 6.5.0 7.0.0
tailscale/github-action 4.2.0 4.4.0
oras-project/setup-oras 2.0.2 2.0.3
helm/chart-releaser-action 1.7.0 1.9.0

Updates useblacksmith/checkout from 1.8.1 to 1.8.2

Commits
  • 2b9fe87 Refuse fork PR checkouts in pull_request_target/workflow_run unless allow-uns...
  • cc2d27f Document customer privacy before publication (#64)
  • 4a338d9 Log git mirror hydration contention as info instead of a warning (#60)
  • See full diff in compare view

Updates actions/setup-java from 5.7.0 to 6.1.0

Release notes

Sourced from actions/setup-java's releases.

v6.1.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.1...v6.1.0

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

v6.0.0

What's Changed

... (truncated)

Commits
  • b843ebf Support Maven plugin repositories in generated settings.xml (#1286)
  • 2a69be2 feat: support Maven server credential origins (#1282)
  • d0e6e4d chore(deps): bump the monthly-npm-updates group with 13 updates (#1276)
  • b24925b chore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)
  • 47b3648 Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)
  • 74920aa Prefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)
  • a78ec39 Stop GPG agent before removing signature-verification home (#1273)
  • 97c5a5e Support Temurin on Linux RISC-V (#1269)
  • 1aa87b6 Preserve compound Liberica build versions from .sdkmanrc (#1268)
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • Additional commits viewable in compare view

Updates actions/setup-dotnet from 5.4.0 to 6.0.0

Release notes

Sourced from actions/setup-dotnet's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-dotnet@v5...v6.0.0

Commits

Updates actions/setup-go from 6.5.0 to 7.0.0

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

Commits

Updates tailscale/github-action from 4.2.0 to 4.4.0

Release notes

Sourced from tailscale/github-action's releases.

v4.4.0

What's Changed

New Contributors

Full Changelog: tailscale/github-action@v4.3.0...v4.4.0

v4.3.0

What's Changed

Full Changelog: tailscale/github-action@v4.2.0...v4.3.0

Commits
  • 064b105 Merge pull request #322 from jtaveras-IT/bump-default-1.104.4
  • ac1b954 action: bump the default Tailscale version to 1.104.4
  • 0f87478 Merge pull request #321 from abhiramshaji-cyber/validate-version-input
  • bf87a8a action: validate the version input and accept a leading v
  • 99a8333 Merge pull request #320 from tailscale/alexc/bump-default-version
  • c608fbd action: bump the default Tailscale version to 1.104.2
  • a44fb5f Merge pull request #318 from tailscale/dependabot/github_actions/actions/setu...
  • a66695b Bump actions/setup-node from 7.0.0 to 7.1.0
  • See full diff in compare view

Updates oras-project/setup-oras from 2.0.2 to 2.0.3

Release notes

Sourced from oras-project/setup-oras's releases.

v2.0.3

Highlights

  • Support ORAS CLI version(s): 1.3.5, 1.3.6

What's Changed

New Contributors

Full Changelog: oras-project/setup-oras@v2.0.2...v2.0.3

Commits
  • 5e2f248 chore: update releases.json for 1.3.6,1.3.5 (#222)
  • 1c05fec chore(deps): Bump @​types/node from 26.6.4 to 26.6.5 (#221)
  • 9a53c63 ci: check auto-release workflow names (#220)
  • beb533b ci: pin remaining GitHub Actions to commit SHAs (#219)
  • 7393e8d docs: document immutable releases and floating tag rules (#218)
  • f0748fe docs: update usage examples and document version pinning (#215)
  • a9492b4 chore: pin create-pull-request action to commit SHA (#213)
  • 9bf3b00 docs: remove transient 1.3.4 note from RELEASING.md (#209)
  • 35de7d5 chore(deps): Bump @​types/node from 26.6.2 to 26.6.4 (#208)
  • See full diff in compare view

Updates helm/chart-releaser-action from 1.7.0 to 1.9.0

Release notes

Sourced from helm/chart-releaser-action's releases.

v1.9.0

What's Changed

New Contributors

Full Changelog: helm/chart-releaser-action@v1.8.0...v1.9.0

v1.8.0

What's Changed

New Contributors

Full Changelog: helm/chart-releaser-action@v1.7.0...v1.8.0

Commits
  • 92c6b97 Bump default chart-releaser version to v1.10.0 (#253)
  • d41fa21 Bump azure/setup-helm from 4.3.0 to 5.0.1 (#248)
  • c8e2c95 Bump actions/checkout from 4.2.2 to 7.0.1 (#249)
  • 8528539 Support explicit chart selection without Git change detection (#247)
  • f6dd87a Document generated and chart-specific release notes (#246)
  • 67b3870 Honor custom index paths and document config examples (#245)
  • 89b6e0c Document publishing branch setup and checkout worktree credentials (#244)
  • 7de7e41 fix: chart_version output shows previous version instead of newest (#… (#238)
  • df28710 Bump default chart-releaser version to v1.9.0 (#243)
  • b2a16b6 feat: add a "match_tags" option (#89)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [useblacksmith/checkout](https://github.com/useblacksmith/checkout) | `1.8.1` | `1.8.2` |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.7.0` | `6.1.0` |
| [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `5.4.0` | `6.0.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` |
| [tailscale/github-action](https://github.com/tailscale/github-action) | `4.2.0` | `4.4.0` |
| [oras-project/setup-oras](https://github.com/oras-project/setup-oras) | `2.0.2` | `2.0.3` |
| [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) | `1.7.0` | `1.9.0` |



Updates `useblacksmith/checkout` from 1.8.1 to 1.8.2
- [Changelog](https://github.com/useblacksmith/checkout/blob/main/CHANGELOG.md)
- [Commits](useblacksmith/checkout@25227e6...2b9fe87)

Updates `actions/setup-java` from 5.7.0 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@b6effb0...b843ebf)

Updates `actions/setup-dotnet` from 5.4.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@26b0ec1...a98b568)

Updates `actions/setup-go` from 6.5.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@924ae3a...b7ad1da)

Updates `tailscale/github-action` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/tailscale/github-action/releases)
- [Commits](tailscale/github-action@d1b6cd2...064b105)

Updates `oras-project/setup-oras` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@005458a...5e2f248)

Updates `helm/chart-releaser-action` from 1.7.0 to 1.9.0
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](helm/chart-releaser-action@cae68fe...92c6b97)

---
updated-dependencies:
- dependency-name: useblacksmith/checkout
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-dotnet
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: tailscale/github-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: oras-project/setup-oras
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: helm/chart-releaser-action
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 3, 2026
@vercel

vercel Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs Ready Ready Preview Nov 3, 2026 5:25pm UTC

Request Review

@waleedlatif1
waleedlatif1 merged commit 356c4b6 into staging Nov 3, 2026
71 of 72 checks passed
@waleedlatif1
waleedlatif1 deleted the dependabot/github_actions/staging/actions-783281ddd7 branch November 3, 2026 17:25

This branch was successfully deployed

1 active deployment
Preview — 6d0a55f1 Deployed Nov 3, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant