Skip to content

chore(deps): absorb 2026-04 dependabot GitHub Actions updates#3296

Open
technique-ci wants to merge 11 commits intodevelopfrom
merge-2026-04-dependabot-gha-updates
Open

chore(deps): absorb 2026-04 dependabot GitHub Actions updates#3296
technique-ci wants to merge 11 commits intodevelopfrom
merge-2026-04-dependabot-gha-updates

Conversation

@technique-ci
Copy link
Copy Markdown
Contributor

@technique-ci technique-ci commented Apr 3, 2026 •
edited by aikido-pr-checks bot
Loading

aggregate dependabot pull requests for month 2026-04

Summary by Aikido

Security Issues: 0 Quality Issues: 0 Resolved Issues: 0

⚡ Enhancements

  • Upgraded Docker GH Actions to newer major versions across workflows.
  • Upgraded JFrog, trusted-signing and delete-artifact actions to newer versions.
  • Bumped caching and utility actions (actions/cache, tj-actions, download-artifact).

More info

dependabot bot added 9 commits April 3, 2026 02:13
@dependabot
chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#3292)
370412b 
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.7.0 to 4.0.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@c94ce9f...b45d80f)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#3291)
02c6c6f 
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.3 to 5.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@cdf6c1f...6682284)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump azure/trusted-signing-action from 1.1.0 to 1.2.0 (#…
011eb7d 
…3290)

Bumps [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/azure/trusted-signing-action/releases)
- [Commits](https://github.com/azure/trusted-signing-action/compare/87c2e83e6868da99d3380aa309851b32ed9a8346...b443cf8ea4124818d2ea9f043cba29fc3ec47b16)

---
updated-dependencies:
- dependency-name: azure/trusted-signing-action
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump geekyeggo/delete-artifact from 5.1.0 to 6.0.0 (#3289)
504436c 
Bumps [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact) from 5.1.0 to 6.0.0.
- [Release notes](https://github.com/geekyeggo/delete-artifact/releases)
- [Changelog](https://github.com/GeekyEggo/delete-artifact/blob/main/CHANGELOG.md)
- [Commits](GeekyEggo/delete-artifact@f275313...176a747)

---
updated-dependencies:
- dependency-name: geekyeggo/delete-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5 (#3288)
5a4a2a2 
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 47.0.4 to 47.0.5.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@7dee1b0...22103cc)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 (#3287)
f94cebd 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@70fc10c...3e5f45b)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump jfrog/setup-jfrog-cli from 4.9.1 to 5.0.0 (#3286)
b1e07fa 
Bumps [jfrog/setup-jfrog-cli](https://github.com/jfrog/setup-jfrog-cli) from 4.9.1 to 5.0.0.
- [Release notes](https://github.com/jfrog/setup-jfrog-cli/releases)
- [Commits](jfrog/setup-jfrog-cli@279b1f6...1641575)

---
updated-dependencies:
- dependency-name: jfrog/setup-jfrog-cli
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#3285)
bcfd854 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.19.2 to 7.0.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@10e90e3...d08e5c3)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#3284
f04a043 
)

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@8d2750c...4d04d5d)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@technique-ci technique-ci requested a review from a team as a code owner April 3, 2026 00:14
@technique-ci technique-ci requested review from kduret and tuntoja April 3, 2026 00:14
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Apr 3, 2026 •
edited
Loading

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)
  • coderabbit

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: be1767fb-1172-4ccc-9549-ad41645a36fd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch merge-2026-04-dependabot-gha-updates

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@Tpo76
Copy link
Copy Markdown
Contributor

Tpo76 commented Apr 15, 2026

🤖 This is an automatic comment generated by an internal tool.

Complexity Classification: Standard

Justification: Automatic classification failed; defaulting to standard.

Metric Value
WIP Points 2
SLA Track Standard SLA (2 work days)
First review SLA 1 work day

A maintainer can override this classification at any time.

@Tpo76
Copy link
Copy Markdown
Contributor

Tpo76 commented Apr 15, 2026

🤖 This is an automatic comment generated by an internal tool.

This PR does not appear to be linked to a Jira ticket.

PRs without a linked Jira ticket will not be prioritized for review. To get this PR reviewed, please:

  1. Create or find the corresponding Jira ticket
  2. Add the ticket key (e.g., MON-12345) to the PR title or description

Once linked, this PR will be automatically classified and tracked.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kduret kduret Awaiting requested review from kduret kduret is a code owner automatically assigned from centreon/owners-pipelines

@tuntoja tuntoja Awaiting requested review from tuntoja tuntoja is a code owner automatically assigned from centreon/owners-pipelines

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies gha skip-workflow-collect skip-workflow-docker-gorgone-testing skip-workflow-gorgone skip-workflow-libzmq skip-workflow-monitoring-agent skip-workflow-windows-agent-robot-test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@technique-ci @Tpo76 @tuntoja