Skip to content

build(deps): bump the github-actions group with 15 updates#5

Open
dependabot[bot] wants to merge 1 commit intofix-federated-group-shares-when-no-longer-found-in-remote-serverfrom
dependabot/github_actions/github-actions-628adfad10
Open

build(deps): bump the github-actions group with 15 updates#5
dependabot[bot] wants to merge 1 commit intofix-federated-group-shares-when-no-longer-found-in-remote-serverfrom
dependabot/github_actions/github-actions-628adfad10

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 14, 2026

Bumps the github-actions group with 15 updates:

Package From To
actions/checkout 4.1.2 6.0.2
webiny/action-conventional-commits 1.3.0 1.3.1
peter-evans/create-or-update-comment 4.0.0 5.0.0
xt0rted/pull-request-comment-branch 2.0.0 3.0.0
skjnldsv/read-package-engines-version-actions 2.2 3
actions/setup-node 4.0.2 6.2.0
cypress-io/github-action 6.6.1 7.1.2
actions/upload-artifact 4.3.1 6.0.0
codecov/codecov-action 4.1.1 5.5.2
skjnldsv/block-fixup-merge-action 1 2
peter-evans/create-pull-request 6.0.2 8.1.0
actions/github-script 7 8
marcelklehr/get-github-handles-from-website-action 1.0.0 1.0.1
actions/stale 9 10
github/codeql-action 3 4

Updates actions/checkout from 4.1.2 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates webiny/action-conventional-commits from 1.3.0 to 1.3.1

Commits
  • faccb24 chore: prepare release
  • 6026468 feat: refactor commit message validation to use exception list
  • 9ce0777 chore: add reapply as valid commit type
  • 54c7d1f Update action.yml
  • See full diff in compare view

Updates peter-evans/create-or-update-comment from 4.0.0 to 5.0.0

Release notes

Sourced from peter-evans/create-or-update-comment's releases.

Create or Update Comment v5.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

... (truncated)

Commits
  • e8674b0 feat: v5 (#439)
  • fffe59e build(deps-dev): bump @​types/node from 18.19.127 to 18.19.129 (#438)
  • 076d572 build(deps-dev): bump @​types/node from 18.19.126 to 18.19.127 (#437)
  • 86a2645 build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#436)
  • be17e0c build(deps-dev): bump @​types/node from 18.19.124 to 18.19.126 (#435)
  • ef75eae build(deps-dev): bump @​types/node from 18.19.123 to 18.19.124 (#433)
  • 82a7ad0 build(deps): bump actions/setup-node from 4 to 5 (#432)
  • f7c845d build(deps-dev): bump @​types/node from 18.19.122 to 18.19.123 (#430)
  • 5da8e07 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#428)
  • 2de7f66 build(deps-dev): bump @​types/node from 18.19.121 to 18.19.122 (#427)
  • Additional commits viewable in compare view

Updates xt0rted/pull-request-comment-branch from 2.0.0 to 3.0.0

Release notes

Sourced from xt0rted/pull-request-comment-branch's releases.

v3.0.0

  • Updated node runtime from 16 to 20
  • Bumped @actions/core from 1.10.0 to 1.11.1
  • Bumped @actions/github from 5.1.1 to 6.0.0
  • Bumped undici from 5.28.3 to 5.28.4
Changelog

Sourced from xt0rted/pull-request-comment-branch's changelog.

Changelog

Unreleased

3.0.0 - 2024-11-19

  • Updated node runtime from 16 to 20
  • Bumped @actions/core from 1.10.0 to 1.11.1
  • Bumped @actions/github from 5.1.1 to 6.0.0
  • Bumped undici from 5.28.3 to 5.28.4

2.0.0 - 2023-03-29

  • Updated node runtime from 12 to 16
  • Removed deprecated ref and sha outputs. If you're using these then you should switch to head_ref and head_sha respectively.

1.4.0 - 2022-10-23

  • Bumped @actions/core from 1.2.7 to 1.10.0
  • Bumped @actions/github from 4.0.0 to 5.1.1
  • Bumped node-fetch from 2.6.1 to 2.6.7

1.3.0 - 2021-05-09

  • Bumped @actions/core from 1.2.5 to 1.2.7
  • Updated the repo_token input so it defaults to GITHUB_TOKEN. If you're already using this value you can remove this setting from your workflow.

1.2.0 - 2020-09-09

  • Deprecated ref and sha outputs in favor of head_ref and head_sha.
  • Added base_ref and base_sha outputs
  • Bumped @actions/core from 1.2.2 to 1.2.5
  • Bumped @actions/github from 2.1.1 to 4.0.0

1.1.0 - 2020-02-21

  • Bumped @actions/github from 2.1.0 to 2.1.1

1.0.0 - 2020-02-09

  • Initial release
Commits
  • e8b8daa Release v3.0.0
  • bdedca2 v3.0.0
  • 4bff54f Merge pull request #437 from xt0rted/dependabot/npm_and_yarn/undici-5.28.4
  • e0ea3da Update CHANGELOG.md
  • 3096af1 Bump undici from 5.28.3 to 5.28.4
  • b7ffabd Merge pull request #461 from xt0rted/dependabot/npm_and_yarn/actions-e659d6d3f1
  • 6fc3c73 Update CHANGELOG.md
  • 20807fb Bump @​actions/core from 1.10.1 to 1.11.1 in the actions group
  • 8d51fb5 Merge pull request #463 from xt0rted/dependabot/npm_and_yarn/typescript-5.6.3
  • 37c7636 Merge pull request #462 from xt0rted/dependabot/npm_and_yarn/vercel/ncc-0.38.3
  • Additional commits viewable in compare view

Updates skjnldsv/read-package-engines-version-actions from 2.2 to 3

Release notes

Sourced from skjnldsv/read-package-engines-version-actions's releases.

v3

What's Changed

Node 20 is now required

Full Changelog: skjnldsv/read-package-engines-version-actions@v2...v3

Commits
  • 06d6baf Merge pull request #145 from skjnldsv/dependabot/npm_and_yarn/jest-and-types/...
  • 2831648 chore(deps-dev): bump jest and @​types/jest
  • b27dab0 Merge pull request #147 from skjnldsv/dependabot/npm_and_yarn/actions/core-1....
  • 1526446 Merge pull request #146 from skjnldsv/dependabot/npm_and_yarn/vercel/ncc-0.38.1
  • 1cad04e Merge pull request #148 from skjnldsv/dependabot/npm_and_yarn/ts-jest-29.1.2
  • 9fe2fc7 Merge pull request #144 from skjnldsv/dependabot/npm_and_yarn/jest-circus-29.7.0
  • f275459 chore(deps-dev): bump ts-jest from 29.1.0 to 29.1.2
  • 170055c chore(deps): bump @​actions/core from 1.10.0 to 1.10.1
  • 271c6a0 chore(deps-dev): bump @​vercel/ncc from 0.36.1 to 0.38.1
  • 08c9f16 chore(deps-dev): bump jest-circus from 29.5.0 to 29.7.0
  • Additional commits viewable in compare view

Updates actions/setup-node from 4.0.2 to 6.2.0

Release notes

Sourced from actions/setup-node's releases.

v6.2.0

What's Changed

Documentation

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.2.0

v6.1.0

What's Changed

Enhancement:

Dependency updates:

Documentation update:

Full Changelog: actions/setup-node@v6...v6.1.0

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

... (truncated)

Commits

Updates cypress-io/github-action from 6.6.1 to 7.1.2

Release notes

Sourced from cypress-io/github-action's releases.

v7.1.2

7.1.2 (2026-02-04)

Bug Fixes

v7.1.1

7.1.1 (2026-01-28)

Bug Fixes

v7.0.0

7.0.0 (2026-01-21)

Features

  • deps: update action from node20 to node24 (#1639) (dca9861)

BREAKING CHANGES

  • deps: Update action from node20 to node24 cypress-io/github-action@v6, using node20, is deprecated

v6.10.9

6.10.9 (2026-01-20)

Bug Fixes

v6.10.8

6.10.8 (2025-12-15)

Bug Fixes

v6.10.7

6.10.7 (2025-12-15)

... (truncated)

Commits
  • 84d178e test(deps): update examples/custom-command lodash to 4.17.23 (#1650)
  • 6b08b44 test(deps): update next to 16.1.6 (#1649)
  • 9992daa fix(deps): update fast-xml-parser to 5.3.4 (#1648)
  • e0f7da8 docs: update changelog for v7.1.0 package-manager-cache parameter (#1646)
  • 0f330eb fix(deps): update @actions/* (#1645)
  • 8a35f96 feat: add boolean option package-manager-cache (#1641)
  • dca9861 feat(deps): update action from node20 to node24 (#1639)
  • e768e6d chore(deps): update dependency node to v20.20.0 (#1630)
  • f790eee fix(deps): update @actions/* and debug (#1638)
  • b26b3c2 test(deps): update actions/setup-node to v6 (#1633)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4.3.1 to 6.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v4.6.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

What's Changed

... (truncated)

Commits
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • 7d27270 chore: add missing license cache files for @​actions/core, @​actions/io, and mi...
  • 5f643d3 chore: update license files for @​actions/artifact@​5.0.1 dependencies
  • 1df1684 chore: update package-lock.json with @​actions/artifact@​5.0.1
  • b5b1a91 fix: update @​actions/artifact to ^5.0.0 for Node.js 24 punycode fix
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 4.1.1 to 5.5.2

Release notes

Sourced from codecov/codecov-action's releases.

v5.5.2

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.1...v5.5.2

v5.5.1

What's Changed

  • bui...

    Description has been truncated

Bumps the github-actions group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.2` | `6.0.2` |
| [webiny/action-conventional-commits](https://github.com/webiny/action-conventional-commits) | `1.3.0` | `1.3.1` |
| [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `4.0.0` | `5.0.0` |
| [xt0rted/pull-request-comment-branch](https://github.com/xt0rted/pull-request-comment-branch) | `2.0.0` | `3.0.0` |
| [skjnldsv/read-package-engines-version-actions](https://github.com/skjnldsv/read-package-engines-version-actions) | `2.2` | `3` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4.0.2` | `6.2.0` |
| [cypress-io/github-action](https://github.com/cypress-io/github-action) | `6.6.1` | `7.1.2` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.1` | `6.0.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `4.1.1` | `5.5.2` |
| [skjnldsv/block-fixup-merge-action](https://github.com/skjnldsv/block-fixup-merge-action) | `1` | `2` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.0.2` | `8.1.0` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `8` |
| [marcelklehr/get-github-handles-from-website-action](https://github.com/marcelklehr/get-github-handles-from-website-action) | `1.0.0` | `1.0.1` |
| [actions/stale](https://github.com/actions/stale) | `9` | `10` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` |


Updates `actions/checkout` from 4.1.2 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9bb5618...de0fac2)

Updates `webiny/action-conventional-commits` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/webiny/action-conventional-commits/releases)
- [Commits](webiny/action-conventional-commits@8bc41ff...faccb24)

Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@71345be...e8674b0)

Updates `xt0rted/pull-request-comment-branch` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/xt0rted/pull-request-comment-branch/releases)
- [Changelog](https://github.com/xt0rted/pull-request-comment-branch/blob/main/CHANGELOG.md)
- [Commits](xt0rted/pull-request-comment-branch@d97294d...e8b8daa)

Updates `skjnldsv/read-package-engines-version-actions` from 2.2 to 3
- [Release notes](https://github.com/skjnldsv/read-package-engines-version-actions/releases)
- [Commits](skjnldsv/read-package-engines-version-actions@8205673...06d6baf)

Updates `actions/setup-node` from 4.0.2 to 6.2.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@60edb5d...6044e13)

Updates `cypress-io/github-action` from 6.6.1 to 7.1.2
- [Release notes](https://github.com/cypress-io/github-action/releases)
- [Changelog](https://github.com/cypress-io/github-action/blob/master/CHANGELOG.md)
- [Commits](cypress-io/github-action@1b70233...84d178e)

Updates `actions/upload-artifact` from 4.3.1 to 6.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5d5d22a...b7c566a)

Updates `codecov/codecov-action` from 4.1.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Commits](codecov/codecov-action@v4.1.1...v5.5.2)

Updates `skjnldsv/block-fixup-merge-action` from 1 to 2
- [Release notes](https://github.com/skjnldsv/block-fixup-merge-action/releases)
- [Commits](skjnldsv/block-fixup-merge-action@42d26e1...c138ea9)

Updates `peter-evans/create-pull-request` from 6.0.2 to 8.1.0
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@70a41ab...c0f553f)

Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

Updates `marcelklehr/get-github-handles-from-website-action` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/marcelklehr/get-github-handles-from-website-action/releases)
- [Commits](marcelklehr/get-github-handles-from-website-action@a739600...06b2239)

Updates `actions/stale` from 9 to 10
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v9...v10)

Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: webiny/action-conventional-commits
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: xt0rted/pull-request-comment-branch
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: skjnldsv/read-package-engines-version-actions
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: cypress-io/github-action
  dependency-version: 7.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: skjnldsv/block-fixup-merge-action
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: marcelklehr/get-github-handles-from-website-action
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-version: '10'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 14, 2026

Labels

The following labels could not be found: 3. to review, feature: dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants