Skip to content

build(deps): Bump the ci-cd group across 1 directory with 4 updates#459

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dot-github/scripts/ci-cd-93109eef80
Open

build(deps): Bump the ci-cd group across 1 directory with 4 updates#459
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dot-github/scripts/ci-cd-93109eef80

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps the ci-cd group with 4 updates in the /.github/scripts directory: @actions/core, @actions/github, ini and semver.

Updates @actions/core from 3.0.0 to 3.0.1

Changelog

Sourced from @​actions/core's changelog.

3.0.1

  • Bump undici from 6.23.0 to 6.24.1 #2348
Commits

Updates @actions/github from 9.1.0 to 9.1.1

Changelog

Sourced from @​actions/github's changelog.

9.1.1

  • Bump undici from 6.23.0 to 6.24.0 #2346
Commits

Updates ini from 6.0.0 to 7.0.0

Release notes

Sourced from ini's releases.

v7.0.0

7.0.0 (2026-05-08)

⚠️ BREAKING CHANGES

  • ini now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • template-oss-apply

Features

Chores

Changelog

Sourced from ini's changelog.

7.0.0 (2026-05-08)

⚠️ BREAKING CHANGES

  • ini now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • template-oss-apply

Features

Chores

Commits
  • 847941c chore: release 7.0.0 (#302)
  • f6ed5be chore: template-oss-apply
  • 55b6841 feat!: bump to new node engine range
  • 2b11ba8 feat!: template-oss-apply
  • e8d16cb deps & engine update
  • 3661dce chore: bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#296)
  • 5d67f4b chore: bump @​npmcli/template-oss from 4.27.1 to 4.28.0 (#294)
  • a2c835e chore: bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#293)
  • See full diff in compare view

Updates semver from 7.7.4 to 7.8.0

Release notes

Sourced from semver's releases.

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

Changelog

Sourced from semver's changelog.

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

Commits
  • efa4be6 chore: release 7.8.0 (#847)
  • 9542e09 chore: template-oss-apply
  • 937bc2c chore: template-oss-apply@5.0.0
  • 3905343 fix: Warn when defaulting to --inc=patch in CLI
  • 0d0a0a2 feat: Add truncate function (#855)
  • c368af6 docs: fix typos in documentation (#853)
  • 6946fef chore: bump @​npmcli/template-oss from 4.29.0 to 4.30.0 (#852)
  • 37776c3 docs: fix BNF grammar to distinguish prerelease from build identifiers (#846)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ci-cd group with 4 updates in the /.github/scripts directory: [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core), [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github), [ini](https://github.com/npm/ini) and [semver](https://github.com/npm/node-semver).


Updates `@actions/core` from 3.0.0 to 3.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/github` from 9.1.0 to 9.1.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `ini` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/npm/ini/releases)
- [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md)
- [Commits](npm/ini@v6.0.0...v7.0.0)

Updates `semver` from 7.7.4 to 7.8.0
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.4...v7.8.0)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-cd
- dependency-name: "@actions/github"
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-cd
- dependency-name: ini
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-cd
- dependency-name: semver
  dependency-version: 7.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-cd
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 11, 2026
@github-project-automation github-project-automation Bot moved this to Todo in Roadmap May 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

Status: Todo

Development

Successfully merging this pull request may close these issues.

0 participants