Skip to content

chore(deps): bump the github-action-dependencies group with 15 updates - #940

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/github-action-dependencies-637a1b08d9
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/github-action-dependencies-637a1b08d9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-action-dependencies group with 15 updates:

Package From To
actions/checkout 4 7
actions/create-github-app-token 3.1.1 3.3.0
kenji-miyake/setup-sd 08c14e27d65a1c215342ef00c81583ae67f4c5ef f4181660873fa5814708e1c0a640d8e9975a4ae5
cycjimmy/semantic-release-action 4.2.0 8.1.2
slackapi/slack-github-action 2.0.0.pre.rc.3 4
yutailang0119/action-android-lint 4.0.0 6.0.0
actions/upload-artifact 4 7
ruby/setup-ruby 1.321.0 1.329.0
maierj/fastlane-action 3.1.0 3.2.0
actions/cache 4 6
peter-evans/find-comment 3.1.0 4.0.0
peter-evans/create-or-update-comment 4.0.0 5.0.0
mikepenz/action-junit-report 5.5.1 6.6.1
codecov/codecov-action 7.0.0 7.1.1
reactivecircus/android-emulator-runner 324029e2f414c084d8b15ba075288885e74aef9c 1dcd0090116d15e7c562f8db72807de5e036a4ed

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/create-github-app-token from 3.1.1 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

v3.2.0

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates kenji-miyake/setup-sd from 08c14e27d65a1c215342ef00c81583ae67f4c5ef to f4181660873fa5814708e1c0a640d8e9975a4ae5

Commits

Updates cycjimmy/semantic-release-action from 4.2.0 to 8.1.2

Release notes

Sourced from cycjimmy/semantic-release-action's releases.

v8.1.2

8.1.2 (2026-10-16)

Bug Fixes

v8.1.1

8.1.1 (2026-10-16)

Bug Fixes

  • split extends configurations on whitespace (6938171)

v8.1.0

8.1.0 (2026-10-14)

Features

  • output last_release_* from Git tags when no release is published (ef475bf)

v8.0.2

8.0.2 (2026-10-14)

Bug Fixes

  • resolve extra plugins with working_directory and relative extends (340bd34), closes #254

v8.0.1

8.0.1 (2026-10-13)

Bug Fixes

  • bypass package manager shims for internal npm calls (45d3d9c), closes #258

v8.0.0

8.0.0 (2026-10-12)

Features

  • require semantic-release v20 or above (1d650fa)

BREAKING CHANGES

... (truncated)

Changelog

Sourced from cycjimmy/semantic-release-action's changelog.

8.1.3 (2026-10-19)

Bug Fixes

  • locate npm-cli.js from PATH on Windows runners (b810ddb), closes #332

8.1.2 (2026-10-16)

Bug Fixes

8.1.1 (2026-10-16)

Bug Fixes

  • split extends configurations on whitespace (6938171)

8.1.0 (2026-10-14)

Features

  • output last_release_* from Git tags when no release is published (ef475bf)

8.0.2 (2026-10-14)

Bug Fixes

  • resolve extra plugins with working_directory and relative extends (340bd34), closes #254

8.0.1 (2026-10-13)

Bug Fixes

  • bypass package manager shims for internal npm calls (45d3d9c), closes #258

8.0.0 (2026-10-12)

Features

  • require semantic-release v20 or above (1d650fa)

... (truncated)

Commits
  • 03595b5 chore(release): 8.1.2 [skip ci]
  • 2479d22 fix(deps): update @​semantic-release/github to 12.0.10
  • f4e0ba2 Merge pull request #331 from dajiaohuang/docs/config-defaults-20261015
  • 010067f chore(ci): add unit test workflow running node --test
  • 163a6cb chore(release): 8.1.1 [skip ci]
  • 8ee3045 Merge pull request #330 from dajiaohuang/fix/extends-whitespace-20261015
  • 079af5e docs: correct semantic-release configuration defaults
  • 6938171 fix: split extends configurations on whitespace
  • a27b431 Merge pull request #329 from cycjimmy/dependabot/github_actions/actions/stale-11
  • a1c129e build(deps): bump actions/stale from 10 to 11
  • Additional commits viewable in compare view

Updates slackapi/slack-github-action from 2.0.0.pre.rc.3 to 4

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack GitHub Action v4.0.0

Major Changes

  • b1974f0: build: parse yaml with more strict multiline indentation rules

    Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

    See the YAML line prefixes spec for the expected indentation rule:

      channel: "C0123"
      text: "first line
    
    second line"
    
    
    second line"

Patch Changes

  • 654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

Slack GitHub Action v3.0.5

Patch Changes

  • 96fddbe: fix: revert multiline yaml parsing indentation change

Slack GitHub Action v3.0.4

Patch Changes

Slack GitHub Action v3.0.3

Patch Changes

  • 66834e4: feat: add instrumentation to address error rates

Slack GitHub Action v3.0.2

Patch Changes

  • 79529d7: fix: resolve url.parse deprecation warning for webhook techniques

Slack GitHub Action v3.0.1

What's Changed

Alongside the breaking changes of @v3.0.0 and a new technique to run Slack CLI commands, we tried the wrong name to publish to the GitHub Marketplace 🐙 This action is now noted as The Slack GitHub Action in listings 🎶 ✨

... (truncated)

Changelog

Sourced from slackapi/slack-github-action's changelog.

slack-github-action

4.0.0

Major Changes

  • b1974f0: build: parse yaml with more strict multiline indentation rules

    Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

    See the YAML line prefixes spec for the expected indentation rule:

      channel: "C0123"
      text: "first line
    
    second line"
    
    
    second line"

Patch Changes

  • 654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

3.0.5

Patch Changes

  • 96fddbe: fix: revert multiline yaml parsing indentation change

3.0.4

Patch Changes

3.0.3

Patch Changes

  • 66834e4: feat: add instrumentation to address error rates

3.0.2

Patch Changes

  • 79529d7: fix: resolve url.parse deprecation warning for webhook techniques
Commits
  • dcb1066 chore: release
  • 53861e0 chore: release (#645)
  • b1974f0 build!: parse yaml with more strict multiline indentation rules (#640)
  • 947ed06 build(deps): bump undici from 7.28.0 to 8.7.0 (#653)
  • 03922a9 chore: track undici-types to the resolved undici version (#652)
  • 31d473e build(deps-dev): bump typescript from 6.0.3 to 7.0.2 (#651)
  • 3ca6997 build(deps-dev): bump sinon and @​types/sinon (#649)
  • 26a5ad3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#647)
  • 5092efb build(deps-dev): bump @​biomejs/biome from 2.5.3 to 2.5.4 (#650)
  • 3548c3e build(deps): bump slackapi/slack-github-action from 3.0.3 to 3.0.5 (#646)
  • Additional commits viewable in compare view

Updates yutailang0119/action-android-lint from 4.0.0 to 6.0.0

Release notes

Sourced from yutailang0119/action-android-lint's releases.

v6.0.0

What's Changed

Other Changes

Dependencies

Full Changelog: yutailang0119/action-android-lint@v5.0.0...v6.0.0

v5.0.0

Internal changes (no public API changes)

What's Changed

Other Changes

... (truncated)

Commits
  • 97c6d37 Merge pull request #1107 from yutailang0119/bump-to-v6.0.0
  • fb921c2 Update usage in README
  • 831a177 Bump to v6.0.0
  • e40bd8e Merge pull request #1106 from yutailang0119/update-licenses
  • 354b8a4 Auto-update license files
  • dcbfbe5 Allow BlueOak-1.0.0 for sax
  • 9547bfb Merge pull request #1098 from yutailang0119/dependabot/github_actions/actions...
  • 16e280b Bump super-linter/super-linter
  • 88d4f8e Merge pull request #1105 from yutailang0119/follow-typescript-action
  • 09f26ee npm run bundle
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • Additional commits viewable in compare view

Updates ruby/setup-ruby from 1.321.0 to 1.329.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.329.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.328.0...v1.329.0

v1.328.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.327.0...v1.328.0

v1.327.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.326.0...v1.327.0

v1.326.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.325.0...v1.326.0

v1.325.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.324.0...v1.325.0

v1.324.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.323.0...v1.324.0

v1.323.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.322.0...v1.323.0

v1.322.0

... (truncated)

Commits

Updates maierj/fastlane-action from 3.1.0 to 3.2.0

Release notes

Sourced from maierj/fastlane-action's releases.

Dependency Update

  • Updated npm packages
  • Updated workflow packages
  • Updated Action runtime to Node 24
Commits
  • 182983d Merge remote-tracking branch 'refs/remotes/origin/development' into development
  • da92782 chore: bump version to 3.2.0 and update ...

    Description has been truncated

Bumps the github-action-dependencies group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.1.1` | `3.3.0` |
| [kenji-miyake/setup-sd](https://github.com/kenji-miyake/setup-sd) | `08c14e27d65a1c215342ef00c81583ae67f4c5ef` | `f4181660873fa5814708e1c0a640d8e9975a4ae5` |
| [cycjimmy/semantic-release-action](https://github.com/cycjimmy/semantic-release-action) | `4.2.0` | `8.1.2` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `2.0.0.pre.rc.3` | `4` |
| [yutailang0119/action-android-lint](https://github.com/yutailang0119/action-android-lint) | `4.0.0` | `6.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.321.0` | `1.329.0` |
| [maierj/fastlane-action](https://github.com/maierj/fastlane-action) | `3.1.0` | `3.2.0` |
| [actions/cache](https://github.com/actions/cache) | `4` | `6` |
| [peter-evans/find-comment](https://github.com/peter-evans/find-comment) | `3.1.0` | `4.0.0` |
| [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `4.0.0` | `5.0.0` |
| [mikepenz/action-junit-report](https://github.com/mikepenz/action-junit-report) | `5.5.1` | `6.6.1` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `7.0.0` | `7.1.1` |
| [reactivecircus/android-emulator-runner](https://github.com/reactivecircus/android-emulator-runner) | `324029e2f414c084d8b15ba075288885e74aef9c` | `1dcd0090116d15e7c562f8db72807de5e036a4ed` |


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

Updates `actions/create-github-app-token` from 3.1.1 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@1b10c78...64ab729)

Updates `kenji-miyake/setup-sd` from 08c14e27d65a1c215342ef00c81583ae67f4c5ef to f4181660873fa5814708e1c0a640d8e9975a4ae5
- [Release notes](https://github.com/kenji-miyake/setup-sd/releases)
- [Commits](kenji-miyake/setup-sd@08c14e2...f418166)

Updates `cycjimmy/semantic-release-action` from 4.2.0 to 8.1.2
- [Release notes](https://github.com/cycjimmy/semantic-release-action/releases)
- [Changelog](https://github.com/cycjimmy/semantic-release-action/blob/main/docs/CHANGELOG.md)
- [Commits](cycjimmy/semantic-release-action@0a51e81...03595b5)

Updates `slackapi/slack-github-action` from 2.0.0.pre.rc.3 to 4
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md)
- [Commits](slackapi/slack-github-action@71c4f79...dcb1066)

Updates `yutailang0119/action-android-lint` from 4.0.0 to 6.0.0
- [Release notes](https://github.com/yutailang0119/action-android-lint/releases)
- [Commits](yutailang0119/action-android-lint@bd0b5a7...97c6d37)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `ruby/setup-ruby` from 1.321.0 to 1.329.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@95ef2b0...651ff0d)

Updates `maierj/fastlane-action` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/maierj/fastlane-action/releases)
- [Commits](maierj/fastlane-action@5a3b971...182983d)

Updates `actions/cache` from 4 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v6)

Updates `peter-evans/find-comment` from 3.1.0 to 4.0.0
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@3eae4d3...b30e6a3)

Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@71345be...e8674b0)

Updates `mikepenz/action-junit-report` from 5.5.1 to 6.6.1
- [Release notes](https://github.com/mikepenz/action-junit-report/releases)
- [Commits](mikepenz/action-junit-report@cf70156...6ef3fdc)

Updates `codecov/codecov-action` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@fb8b358...303a32d)

Updates `reactivecircus/android-emulator-runner` from 324029e2f414c084d8b15ba075288885e74aef9c to 1dcd0090116d15e7c562f8db72807de5e036a4ed
- [Release notes](https://github.com/reactivecircus/android-emulator-runner/releases)
- [Changelog](https://github.com/ReactiveCircus/android-emulator-runner/blob/main/CHANGELOG.md)
- [Commits](ReactiveCircus/android-emulator-runner@324029e...1dcd009)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-action-dependencies
- dependency-name: kenji-miyake/setup-sd
  dependency-version: f4181660873fa5814708e1c0a640d8e9975a4ae5
  dependency-type: direct:production
  dependency-group: github-action-dependencies
- dependency-name: cycjimmy/semantic-release-action
  dependency-version: 8.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: slackapi/slack-github-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: yutailang0119/action-android-lint
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-action-dependencies
- dependency-name: maierj/fastlane-action
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-action-dependencies
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: peter-evans/find-comment
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: mikepenz/action-junit-report
  dependency-version: 6.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-action-dependencies
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-action-dependencies
- dependency-name: reactivecircus/android-emulator-runner
  dependency-version: 1dcd0090116d15e7c562f8db72807de5e036a4ed
  dependency-type: direct:production
  dependency-group: github-action-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 20, 2026 09:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants