Skip to content

chore(deps): bump the actions-deps group across 1 directory with 23 updates#1698

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-deps-9400bc0409
Closed

chore(deps): bump the actions-deps group across 1 directory with 23 updates#1698
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-deps-9400bc0409

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 12, 2026

Bumps the actions-deps group with 23 updates in the / directory:

Package From To
step-security/harden-runner 2.13.3 2.14.0
actions/github-script 7.1.0 8.0.0
actions/checkout 3.6.0 6.0.1
coursier/cache-action 6.3.3 7.0.0
actions/setup-node 3.9.1 6.1.0
docker/setup-qemu-action 2.2.0 3.7.0
docker/setup-buildx-action 2.10.0 3.12.0
actions/upload-artifact 4.6.1 6.0.0
peter-evans/repository-dispatch 3.0.0 4.0.1
gradle/gradle-build-action 2.8.0 3.5.0
actions/setup-java 3.14.1 5.1.0
EnricoMi/publish-unit-test-result-action 2.21.0 2.22.0
oxsecurity/megalinter 8.8.0 9.3.0
crazy-max/ghaction-import-gpg 6.2.0 6.3.0
peter-evans/create-pull-request 6.1.0 8.0.0
hoverkraft-tech/compose-action 2.0.0 2.4.3
amannn/action-semantic-pull-request 5 6
actions/download-artifact 4.3.0 7.0.0
scalacenter/sbt-dependency-submission 2.3.1 3.2.1
scala-steward-org/scala-steward-action 2.78.0 2.80.0
ossf/scorecard-action 2.4.1 2.4.3
github/codeql-action 3.31.6 4.31.10
stefanzweifel/git-auto-commit-action 5.2.0 7.1.0

Updates step-security/harden-runner from 2.13.3 to 2.14.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.14.0

What's Changed

  • Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
  • Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0

Commits
  • 20cf305 Merge pull request #622 from step-security/feature/custom-property-skip
  • c51e8ee feat: skip agent install and post step on subsequent runs for GitHub-hosted r...
  • e152b90 feat: skip harden-runner based on repository custom property
  • ee1faec feat: replace skip-harden-runner with skip-on-custom-property input
  • 1dc7c17 feat: add skip-harden-runner input to conditionally skip execution
  • See full diff in compare view

Updates actions/github-script from 7.1.0 to 8.0.0

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

Commits

Updates actions/checkout from 3.6.0 to 6.0.1

Release notes

Sourced from actions/checkout's releases.

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates coursier/cache-action from 6.3.3 to 7.0.0

Release notes

Sourced from coursier/cache-action's releases.

v7.0.0

These changes are identical to the 6.4.8 ones. These were reverted on the 6.x branch in 6.4.9, and added back in 7.x here.

What's Changed

Full Changelog: coursier/cache-action@v6.4.9...v7.0.0

v6.4.9

Identical to 6.4.7

This somehow reverts the 6.4.8 changes on the 6.x branch, reverting the node version bump to node 24 in particular.

The 6.4.8 changes are going to be added back in 7.0.0.

v6.4.8

What's Changed

Full Changelog: coursier/cache-action@v6...v6.4.8

v6.4.7

This release upgrades the @​actions/cache from 3.2.4 to 4.0.3. See the deprecation notice for cache v3:

What's Changed

... (truncated)

Commits

Updates actions/setup-node from 3.9.1 to 6.1.0

Release notes

Sourced from actions/setup-node's releases.

v6.1.0

What's Changed

Enhancement:

Dependency updates:

Documentation update:

Full Changelog: actions/setup-node@v6...v6.1.0

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

... (truncated)

Commits

Updates docker/setup-qemu-action from 2.2.0 to 3.7.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.7.0

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

v3.6.0

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

v3.5.0

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

v3.4.0

Full Changelog: docker/setup-qemu-action@v3.3.0...v3.4.0

v3.3.0

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

v3.2.0

Full Changelog: docker/setup-qemu-action@v3.1.0...v3.2.0

v3.1.0

Full Changelog: docker/setup-qemu-action@v3.0.0...v3.1.0

v3.0.0

... (truncated)

Commits
  • c7c5346 Merge pull request #230 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 3a517a1 chore: update generated content
  • a5b45ed build(deps): bump @​docker/actions-toolkit from 0.62.1 to 0.67.0
  • 3a64278 Merge pull request #220 from docker/dependabot/npm_and_yarn/brace-expansion-1...
  • 94906ba chore: update generated content
  • 4027abf build(deps): bump brace-expansion from 1.1.11 to 1.1.12
  • bee0aaa Merge pull request #221 from docker/dependabot/npm_and_yarn/tmp-0.2.4
  • 0d7e257 chore: update generated content
  • b869601 build(deps): bump tmp from 0.2.3 to 0.2.4
  • 3a043ed Merge pull request #219 from docker/dependabot/npm_and_yarn/undici-5.29.0
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 2.10.0 to 3.12.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.12.0

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

v3.11.1

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

v3.7.1

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

... (truncated)

Commits
  • 8d2750c Merge pull request #455 from crazy-max/install-deprecated
  • e81846b deprecate install input
  • 65d18f8 Merge pull request #454 from docker/dependabot/github_actions/actions/checkout-6
  • 000d75d build(deps): bump actions/checkout from 5 to 6
  • 1583c0f Merge pull request #443 from nicolasleger/patch-1
  • ed158e7 doc: bump actions/checkout from 4 to 5
  • 4cc794f Merge pull request #441 from docker/dependabot/github_actions/actions/checkout-5
  • 4dfc3d6 build(deps): bump actions/checkout from 4 to 5
  • af1b253 Merge pull request #440 from crazy-max/k3s-build
  • 3c6ab92 ci: k3s test with latest buildx
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4.6.1 to 6.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v4.6.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

Commits
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • 7d27270 chore: add missing license cache files for @​actions/core, @​actions/io, and mi...
  • 5f643d3 chore: update license files for @​actions/artifact@​5.0.1 dependencies
  • 1df1684 chore: update package-lock.json with @​actions/artifact@​5.0.1
  • b5b1a91 fix: update @​actions/artifact to ^5.0.0 for Node.js 24 punycode fix
  • Additional commits viewable in compare view

Updates peter-evans/repository-dispatch from 3.0.0 to 4.0.1

Release notes

Sourced from peter-evans/repository-dispatch's releases.

v4.0.1

What's Changed

Full Changelog: peter-evans/repository-dispatch@v4.0.0...v4.0.1

Repository Dispatch v4.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 12, 2026
@dependabot dependabot Bot requested a review from a team as a code owner January 12, 2026 16:31
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 12, 2026
@sonarqubecloud
Copy link
Copy Markdown

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jan 12, 2026

Integration Test Results

 24 files  ±0   24 suites  ±0   3s ⏱️ ±0s
 61 tests ±0   61 ✅ ±0  0 💤 ±0  0 ❌ ±0 
113 runs  ±0  113 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 612a10f. ± Comparison against base commit ed66a9f.

♻️ This comment has been updated with latest results.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jan 12, 2026

Unit Test Results

106 files  ±0  106 suites  ±0   21m 36s ⏱️ -11s
899 tests ±0  891 ✅ ±0  8 💤 ±0  0 ❌ ±0 
906 runs  ±0  898 ✅ ±0  8 💤 ±0  0 ❌ ±0 

Results for commit 612a10f. ± Comparison against base commit ed66a9f.

♻️ This comment has been updated with latest results.

…pdates

Bumps the actions-deps group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.3` | `2.14.0` |
| [actions/github-script](https://github.com/actions/github-script) | `7.1.0` | `8.0.0` |
| [actions/checkout](https://github.com/actions/checkout) | `3.6.0` | `6.0.1` |
| [coursier/cache-action](https://github.com/coursier/cache-action) | `6.3.3` | `7.0.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `3.9.1` | `6.1.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `2.2.0` | `3.7.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `2.10.0` | `3.12.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `6.0.0` |
| [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) | `3.0.0` | `4.0.1` |
| [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) | `2.8.0` | `3.5.0` |
| [actions/setup-java](https://github.com/actions/setup-java) | `3.14.1` | `5.1.0` |
| [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.21.0` | `2.22.0` |
| [oxsecurity/megalinter](https://github.com/oxsecurity/megalinter) | `8.8.0` | `9.3.0` |
| [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) | `6.2.0` | `6.3.0` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.1.0` | `8.0.0` |
| [hoverkraft-tech/compose-action](https://github.com/hoverkraft-tech/compose-action) | `2.0.0` | `2.4.3` |
| [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5` | `6` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `7.0.0` |
| [scalacenter/sbt-dependency-submission](https://github.com/scalacenter/sbt-dependency-submission) | `2.3.1` | `3.2.1` |
| [scala-steward-org/scala-steward-action](https://github.com/scala-steward-org/scala-steward-action) | `2.78.0` | `2.80.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.1` | `2.4.3` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.31.6` | `4.31.10` |
| [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) | `5.2.0` | `7.1.0` |



Updates `step-security/harden-runner` from 2.13.3 to 2.14.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@df199fb...20cf305)

Updates `actions/github-script` from 7.1.0 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@f28e40c...ed59741)

Updates `actions/checkout` from 3.6.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3.6.0...8e8c483)

Updates `coursier/cache-action` from 6.3.3 to 7.0.0
- [Release notes](https://github.com/coursier/cache-action/releases)
- [Commits](coursier/cache-action@v6.3.3...bebeeb0)

Updates `actions/setup-node` from 3.9.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v3.9.1...395ad32)

Updates `docker/setup-qemu-action` from 2.2.0 to 3.7.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@2b82ce8...c7c5346)

Updates `docker/setup-buildx-action` from 2.10.0 to 3.12.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@885d146...8d2750c)

Updates `actions/upload-artifact` from 4.6.1 to 6.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.6.1...b7c566a)

Updates `peter-evans/repository-dispatch` from 3.0.0 to 4.0.1
- [Release notes](https://github.com/peter-evans/repository-dispatch/releases)
- [Commits](peter-evans/repository-dispatch@ff45666...28959ce)

Updates `gradle/gradle-build-action` from 2.8.0 to 3.5.0
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](gradle/gradle-build-action@v2.8.0...ac2d340)

Updates `actions/setup-java` from 3.14.1 to 5.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@17f84c3...f2beeb2)

Updates `EnricoMi/publish-unit-test-result-action` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases)
- [Commits](EnricoMi/publish-unit-test-result-action@34d7c95...27d65e1)

Updates `oxsecurity/megalinter` from 8.8.0 to 9.3.0
- [Release notes](https://github.com/oxsecurity/megalinter/releases)
- [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md)
- [Commits](oxsecurity/megalinter@e08c2b0...42bb470)

Updates `crazy-max/ghaction-import-gpg` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases)
- [Commits](crazy-max/ghaction-import-gpg@v6.2.0...e89d409)

Updates `peter-evans/create-pull-request` from 6.1.0 to 8.0.0
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c5a7806...98357b1)

Updates `hoverkraft-tech/compose-action` from 2.0.0 to 2.4.3
- [Release notes](https://github.com/hoverkraft-tech/compose-action/releases)
- [Commits](hoverkraft-tech/compose-action@802a148...05da55b)

Updates `amannn/action-semantic-pull-request` from 5 to 6
- [Release notes](https://github.com/amannn/action-semantic-pull-request/releases)
- [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md)
- [Commits](amannn/action-semantic-pull-request@e32d7e6...48f2562)

Updates `actions/download-artifact` from 4.3.0 to 7.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@d3f86a1...37930b1)

Updates `scalacenter/sbt-dependency-submission` from 2.3.1 to 3.2.1
- [Release notes](https://github.com/scalacenter/sbt-dependency-submission/releases)
- [Commits](scalacenter/sbt-dependency-submission@f3c0455...f432021)

Updates `scala-steward-org/scala-steward-action` from 2.78.0 to 2.80.0
- [Release notes](https://github.com/scala-steward-org/scala-steward-action/releases)
- [Commits](scala-steward-org/scala-steward-action@f60ccd1...5bbb0a3)

Updates `ossf/scorecard-action` from 2.4.1 to 2.4.3
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@f49aabe...4eaacf0)

Updates `github/codeql-action` from 3.31.6 to 4.31.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@497990d...cdefb33)

Updates `stefanzweifel/git-auto-commit-action` from 5.2.0 to 7.1.0
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](stefanzweifel/git-auto-commit-action@b863ae1...04702ed)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: coursier/cache-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: actions/setup-node
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: docker/setup-qemu-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: actions/upload-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: peter-evans/repository-dispatch
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: gradle/gradle-build-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: actions/setup-java
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: EnricoMi/publish-unit-test-result-action
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: oxsecurity/megalinter
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: crazy-max/ghaction-import-gpg
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: hoverkraft-tech/compose-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: amannn/action-semantic-pull-request
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: actions/download-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: scalacenter/sbt-dependency-submission
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: scala-steward-org/scala-steward-action
  dependency-version: 2.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-deps-9400bc0409 branch from 41ad706 to 612a10f Compare January 26, 2026 14:27
@sonarqubecloud
Copy link
Copy Markdown

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Feb 2, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Feb 2, 2026
@dependabot dependabot Bot deleted the dependabot/github_actions/actions-deps-9400bc0409 branch February 2, 2026 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants