Skip to content

ci(deps): bump the github-actions group across 1 directory with 12 updates - #1833

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2e4dfd888a
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2e4dfd888a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 12 updates in the / directory:

Package From To
actions/checkout 7.0.0 7.0.1
benchmark-action/github-action-benchmark 1.22.1 1.22.2
aws-actions/configure-aws-credentials 6.2.0 6.3.0
actions/setup-go 6.5.0 7.0.0
actions/setup-python 6 7
golangci/golangci-lint-action 9.2.1 9.3.0
WyriHaximus/github-action-get-previous-tag 2.0.0 2.1.0
actions/upload-artifact 7.0.1 7.0.2
amannn/action-semantic-pull-request 6.1.1 6.1.2
peter-evans/create-pull-request 8.1.1 8.1.2
actions/download-artifact 8.0.1 8.0.2
softprops/action-gh-release 3.0.1 3.0.4

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Commits

Updates benchmark-action/github-action-benchmark from 1.22.1 to 1.22.2

Release notes

Sourced from benchmark-action/github-action-benchmark's releases.

v1.22.2

Full Changelog: benchmark-action/github-action-benchmark@v1.22.1...v1.22.2

Changelog

Sourced from benchmark-action/github-action-benchmark's changelog.

Unreleased

v1.22.2 - 15 Sep 2026

  • perf shallow-clone the target branch only (#364)

v1.22.1 - 6 May 2026

  • fix scope tsconfig.build.json to src/ for reproducibility (#352)
  • chore bump minimatch from 3.1.2 to 3.1.5 (#347)
  • chore bump uuid and @​actions/core (#350)
  • chore bump flatted from 3.2.4 to 3.4.2 (#346)
  • chore bump js-yaml (#344)
  • chore bump picomatch from 2.3.0 to 2.3.2 (#342)

v1.22.0 - 31 Mar 2026

  • chore bump node to 24 (#339)

v1.21.0 - 02 Mar 2026

  • fix include package name for duplicate bench names (#330)
  • fix avoid duplicate package suffix in Go benchmarks (#337)

v1.20.7 - 06 Sep 2025

  • fix improve parsing for custom benchmarks (#323)

v1.20.5 - 02 Sep 2025

  • feat allow to parse generic cargo bench/criterion units (#280)
  • fix add summary even when failure threshold is surpassed (#285)
  • fix time units are not normalized (#318)

v1.20.4 - 23 Oct 2024

  • feat add typings and validation workflow (#257)

v1.20.3 - 19 May 2024

  • fix Catch2 v.3.5.0 changed output format (#247)

v1.20.2 - 19 May 2024

  • fix Support sub-nanosecond precision on Cargo benchmarks (#246)

v1.20.1 - 02 Apr 2024

  • fix release script

... (truncated)

Commits

Updates aws-actions/configure-aws-credentials from 6.2.0 to 6.3.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.3.0

6.3.0 (2026-09-11)

Features

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

v6.2.3

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)
Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.3.0 (2026-09-11)

Features

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

  • add additional session tags by default (#1775) (e0ba768)
  • add more retry logic and better logging (#1764) (540d0c1)
  • add regex validation to role-session-name (#1765) (e354499)
  • Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
  • expose run id in STS client user-agent (#1774) (29d1be3)

... (truncated)

Commits
  • e125382 chore(main): release 6.3.0 (#1963)
  • 438100a chore: add link to GH security docs (#1962)
  • e92ebcc chore: Update dist
  • 57b8365 feat: add translate-env-variables option (#1961)
  • cc49fa7 chore(docs): README main branch guidance (#1960)
  • 866cb16 chore(deps-dev): bump smol-toml from 1.7.0 to 1.7.2 (#1958)
  • 6782cb1 chore(deps-dev): bump generate-license-file from 4.2.4 to 4.2.5 (#1951)
  • c20509a chore: Update dist
  • 7a41fc6 chore(deps): bump @​aws-sdk/client-sts from 3.1121.0 to 3.1127.0 (#1954)
  • 726b713 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#1957)
  • Additional commits viewable in compare view

Updates actions/setup-go from 6.5.0 to 7.0.0

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

Commits

Updates actions/setup-python from 6 to 7

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits
  • 6d4fd22 Cache upgrade to 6.3.0 (#1370)
  • ec52d0a Bump @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
  • ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
  • 0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
  • 3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
  • 6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
  • e1be392 Bump @​types/semver from 7.7.1 to 7.8.0 (#1359)
  • 06da627 Bump @​vercel/ncc from 0.44.0 to 0.45.0 (#1357)
  • af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
  • 7aeabeb Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
  • Additional commits viewable in compare view

Updates golangci/golangci-lint-action from 9.2.1 to 9.3.0

Release notes

Sourced from golangci/golangci-lint-action's releases.

v9.3.0

What's Changed

Changes

Dependencies

Full Changelog: golangci/golangci-lint-action@v9.2.1...v9.3.0

Commits
  • ba0d7d2 chore: prepare release v9.3.0
  • efd0857 feat: add no-run-logs-group as experimental option (#1403)
  • ed485de build(deps): bump undici from 6.24.0 to 6.27.0
  • 8872e8d build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 (#1400)
  • b163415 build(deps): bump tmp from 0.2.6 to 0.2.7 (#1399)
  • e52a9f8 build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-ac...
  • 8182aa3 build(deps): bump tmp from 0.2.5 to 0.2.6 (#1397)
  • 5403a41 build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-ac...
  • See full diff in compare view

Updates WyriHaximus/github-action-get-previous-tag from 2.0.0 to 2.1.0

Release notes

Sourced from WyriHaximus/github-action-get-previous-tag's releases.

v2.1.0

  • Total issues resolved: 1
  • Total pull requests resolved: 9
  • Total contributors: 3

Bug 🐞

Dependencies 📦

Enhancement ✨

Commits
  • 83f26fe Merge pull request #83 from WyriHaximus/error-out-when-fallingback-to-fallbac...
  • b31e6da Error out when no tag is found and no fallback is provided.
  • 985f69b Merge pull request #92 from WyriHaximus/pin-github-workflows-v1.0.1
  • c2a003c Merge pull request #91 from WyriHaximus/replace-therussiankid92-gat-with-nick...
  • c988f4c Pin WyriHaximus/github-workflows release management to v1.0.1.
  • 57776e3 Replace therussiankid92/gat with nick-fields/assert-action.
  • 6b39768 Merge pull request #89 from WyriHaximus/renovate/update-github-tags-actions-c...
  • d6cbe9e chore(deps): update actions/checkout action to v7.0.1
  • 2df46c7 Merge pull request #84 from WyriHaximus/fix-1.4-tag-test
  • fea0316 Fix 1.4 tag test
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates amannn/action-semantic-pull-request from 6.1.1 to 6.1.2

Release notes

Sourced from amannn/action-semantic-pull-request's releases.

v6.1.2

6.1.2 (2026-11-05)

Bug Fixes

  • Release accumulated dependency updates (closes #321) (fc7da0c)
Changelog

Sourced from amannn/action-semantic-pull-request's changelog.

Changelog

6.1.2 (2026-11-05)

Bug Fixes

  • Release accumulated dependency updates (closes #321) (fc7da0c)

6.1.1 (2025-08-22)

Bug Fixes

  • Parse headerPatternCorrespondence properly (#295) (800da4c)

6.1.0 (2025-08-19)

Features

Bug Fixes

  • Remove trailing whitespace from "unknown release type" error message (#291) (afa4edb)

6.0.1 (2025-08-13)

Bug Fixes

6.0.0 (2025-08-13)

⚠ BREAKING CHANGES

  • Upgrade action to use Node.js 24 and ESM (#287)

Features

  • Upgrade action to use Node.js 24 and ESM (#287) (bc0c9a7)

5.5.3 (2024-06-28)

Bug Fixes

5.5.2 (2024-04-24)

... (truncated)

Commits
  • 2252a14 chore: Release 6.1.2 [skip ci]
  • af97545 ci: pin conventional-changelog-conventionalcommits to v9 (#323)
  • fc7da0c fix: Release accumulated dependency updates (closes #321)
  • 4e8becf ci: bump the npm-packages group with 10 updates (#319)
  • b3fa6ed ci: bump actions/setup-node from 6 to 7 in the github-action-workflows group ...
  • 2c9480c chore: bump the npm-packages group with 12 updates (#315)
  • 58e675f ci: bump the github-action-workflows group with 2 updates (#313)
  • 45b9ed7 chore: bump the npm-packages group with 12 updates (#308)
  • 9d28649 ci: Bump the github-action-workflows group with 2 updates (#309)
  • ac7e3fc docs: Fix snippet (#306)
  • Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 8.1.1 to 8.1.2

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.2

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v8.1.1...v8.1.2

Commits
  • 15733db fix: submodule deletion with sign-commits (#4473)
  • 3afad46 build(deps-dev): bump the npm group with 4 updates (#4509)
  • aee70be build(deps): bump the github-actions group with 3 updates (#4510)
  • 86c87cf build(deps-dev): bump undici from 6.29.0 to 6.29.1 (#4504)
  • bd09a93 build(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4494)
  • 59910dc build(deps): bump brace-expansion (#4486)
  • 753b437 build(deps-dev): bump the npm group with 4 updates (#4483)
  • abadea5 build(deps-dev): bump undici from 6.28.0 to 6.29.0 (#4478)
  • 11e8dc7 build(deps-dev): bump js-yaml from 4.2.0 to 5.4.2 (#4468)
  • c9f8b51 build(deps-dev): bump browserslist from 4.28.4 to 4.28.8 (#4462)
  • Additional commits viewable in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Updates softprops/action-gh-release from 3.0.1 to 3.0.4

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.4

  • maintenance release with updated dependencies

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updatesDescription has been truncated

…dates

Bumps the github-actions group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [benchmark-action/github-action-benchmark](https://github.com/benchmark-action/github-action-benchmark) | `1.22.1` | `1.22.2` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.2.0` | `6.3.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6` | `7` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `9.2.1` | `9.3.0` |
| [WyriHaximus/github-action-get-previous-tag](https://github.com/wyrihaximus/github-action-get-previous-tag) | `2.0.0` | `2.1.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `6.1.1` | `6.1.2` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.1.1` | `8.1.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.1` | `3.0.4` |



Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v7...v7.0.1)

Updates `benchmark-action/github-action-benchmark` from 1.22.1 to 1.22.2
- [Release notes](https://github.com/benchmark-action/github-action-benchmark/releases)
- [Changelog](https://github.com/benchmark-action/github-action-benchmark/blob/master/CHANGELOG.md)
- [Commits](benchmark-action/github-action-benchmark@52576c9...4322e57)

Updates `aws-actions/configure-aws-credentials` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@e7f100c...e125382)

Updates `actions/setup-go` from 6.5.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@924ae3a...b7ad1da)

Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v6...v7)

Updates `golangci/golangci-lint-action` from 9.2.1 to 9.3.0
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@82606bf...ba0d7d2)

Updates `WyriHaximus/github-action-get-previous-tag` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/wyrihaximus/github-action-get-previous-tag/releases)
- [Commits](WyriHaximus/github-action-get-previous-tag@61819f3...83f26fe)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `amannn/action-semantic-pull-request` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/amannn/action-semantic-pull-request/releases)
- [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md)
- [Commits](amannn/action-semantic-pull-request@48f2562...2252a14)

Updates `peter-evans/create-pull-request` from 8.1.1 to 8.1.2
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@5f6978f...15733db)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `softprops/action-gh-release` from 3.0.1 to 3.0.4
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@718ea10...8a0cd65)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: benchmark-action/github-action-benchmark
  dependency-version: 1.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: golangci/golangci-lint-action
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: WyriHaximus/github-action-get-previous-tag
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: amannn/action-semantic-pull-request
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 9, 2026 17:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants