Skip to content

ci(deps): bump the actions group with 2 updates#12

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-3c247adcbb
Open

ci(deps): bump the actions group with 2 updates#12
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-3c247adcbb

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps the actions group with 2 updates: aws-actions/amazon-ecr-login and goreleaser/goreleaser-action.

Updates aws-actions/amazon-ecr-login from 2.1.2 to 2.1.3

Release notes

Sourced from aws-actions/amazon-ecr-login's releases.

v2.1.3

See the changelog for details about the changes included in this release.

Changelog

Sourced from aws-actions/amazon-ecr-login's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.1.3 (2026-04-15)

2.1.2 (2026-04-01)

2.1.1 (2026-03-24)

Bug Fixes

  • prefer explicit env var credentials over Pod Identity (#953) (ecbbdc7)

2.1.0 (2026-03-19)

Features

2.0.2 (2026-03-13)

Bug Fixes

2.0.1 (2023-10-02)

2.0.0 (2023-10-02)

⚠ BREAKING CHANGES

  • The default value of the 'mask-password' input has been updated from false to true.

  • Treat maskPassword as false only if explicitly set to false

  • Add new-v2-release to README

Features

1.7.0 (2023-08-09)

Features

... (truncated)

Commits
  • 376925c chore(release): 2.1.3
  • b6d79a7 chore: Update dist (#1012)
  • 18230a5 chore: Update dist (#1008)
  • b0bca04 chore(deps): bump actions/github-script from 8 to 9 (#1007)
  • 1432f2c chore(deps-dev): bump globals from 17.4.0 to 17.5.0 (#1004)
  • 9145f16 chore(deps): bump @​aws-sdk/credential-providers (#1002)
  • 51c7534 chore(deps): bump @​aws-sdk/client-ecr from 3.1026.0 to 3.1030.0 (#1001)
  • 9ba5e23 chore: Update dist (#995)
  • 6719be7 chore(deps): bump @​aws-sdk/client-ecr-public from 3.1021.0 to 3.1026.0 (#990)
  • 2e08de5 chore(deps): bump https-proxy-agent from 8.0.0 to 9.0.0 (#991)
  • Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 7.0.0 to 7.1.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v7.1.0

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v7...v7.1.0

Commits
  • e24998b ci: drop pre-cosign-v3 goreleaser versions from tests (#554)
  • be2e8a3 docs: document cosign verification in README (#553)
  • 5e53f8e ci: add release-major-tag workflow (#552)
  • 4068afa build: drop docker-bake in favor of plain npm (#551)
  • 213ec80 docs: add CONTRIBUTING with pre-commit workflow
  • 4b462d3 feat: verify release checksum and cosign signature (#550)
  • 01cbe07 docs: Upgrade import GPG action version (#547)
  • 2a473d7 ci(deps): bump the actions group with 5 updates (#546)
  • fdcf0b9 clean: leftover files from node 22(?)
  • 9881cc5 fix: use new static URL
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 2 updates: [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login) and [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action).


Updates `aws-actions/amazon-ecr-login` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases)
- [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md)
- [Commits](aws-actions/amazon-ecr-login@f2e9fc6...376925c)

Updates `goreleaser/goreleaser-action` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@ec59f47...e24998b)

---
updated-dependencies:
- dependency-name: aws-actions/amazon-ecr-login
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants