Repository navigation
chore(deps): bump the github-actions group with 9 updates - #2804
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the github-actions group with 9 updates: | Package | From | To | | --- | --- | --- | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `45.0.2` | `47.0.6` | | [atlassian/gajira-create](https://github.com/atlassian/gajira-create) | `3.0.0` | `3.0.1` | | [actions/github-script](https://github.com/actions/github-script) | `7.1.0` | `9.0.0` | | [nwtgck/actions-netlify](https://github.com/nwtgck/actions-netlify) | `3.0.0` | `4.0.0` | | [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) | `4.0.0` | `4.1.0` | | [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.8.0` | `2.9.0` | | [calibreapp/image-actions](https://github.com/calibreapp/image-actions) | `03c976c29803442fc4040a9de5509669e7759b81` | `cfe6ba91a2f0e9046d44e2088d002378daeb4a9c` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.11` | `8.1.1` | | [errata-ai/vale-action](https://github.com/errata-ai/vale-action) | `0135b9fe2b3107365569cc3142b9a1c85221ea2f` | `518a9136acc6e6668ce7c00d367051e0941e87ff` | Updates `tj-actions/changed-files` from 45.0.2 to 47.0.6 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@48d8f15...9426d40) Updates `atlassian/gajira-create` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/atlassian/gajira-create/releases) - [Commits](atlassian/gajira-create@1ff0b6b...59e177c) Updates `actions/github-script` from 7.1.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@f28e40c...3a2844b) Updates `nwtgck/actions-netlify` from 3.0.0 to 4.0.0 - [Release notes](https://github.com/nwtgck/actions-netlify/releases) - [Changelog](https://github.com/nwtgck/actions-netlify/blob/develop/CHANGELOG.md) - [Commits](nwtgck/actions-netlify@4cbaf4c...d22a32a) Updates `peaceiris/actions-gh-pages` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/peaceiris/actions-gh-pages/releases) - [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md) - [Commits](peaceiris/actions-gh-pages@4f9cc66...84c30a8) Updates `lycheeverse/lychee-action` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/lycheeverse/lychee-action/releases) - [Commits](lycheeverse/lychee-action@8646ba3...e747777) Updates `calibreapp/image-actions` from 03c976c29803442fc4040a9de5509669e7759b81 to cfe6ba91a2f0e9046d44e2088d002378daeb4a9c - [Release notes](https://github.com/calibreapp/image-actions/releases) - [Commits](calibreapp/image-actions@03c976c...cfe6ba9) Updates `peter-evans/create-pull-request` from 7.0.11 to 8.1.1 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@22a9089...5f6978f) Updates `errata-ai/vale-action` from 0135b9fe2b3107365569cc3142b9a1c85221ea2f to 518a9136acc6e6668ce7c00d367051e0941e87ff - [Release notes](https://github.com/errata-ai/vale-action/releases) - [Commits](vale-cli/vale-action@0135b9f...518a913) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-version: 47.0.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: atlassian/gajira-create dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: nwtgck/actions-netlify dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peaceiris/actions-gh-pages dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: lycheeverse/lychee-action dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: calibreapp/image-actions dependency-version: cfe6ba91a2f0e9046d44e2088d002378daeb4a9c dependency-type: direct:production dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: errata-ai/vale-action dependency-version: 518a9136acc6e6668ce7c00d367051e0941e87ff dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
dependabot
Bot
added
the
github_actions
Contributor
Up to standards ✅🟢 Issues
|
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Pull Request Overview
✅ No blocking issues noticed
No blocking findings were identified. The major action upgrades lack automated workflow validation in this change, leaving compatibility and behavior regressions unverified.
About this PR
- Consider adding actionlint or equivalent workflow validation, plus automated coverage for the affected action paths, before relying on the upgraded actions in production.
Test suggestions
- Validate that each updated workflow remains syntactically valid and can load the upgraded actions.
- Exercise documentation deletion detection and redirect reminder generation with the upgraded changed-files action.
- Exercise Jira issue creation and GitHub issue updates with the upgraded github-script action.
- Exercise branch-preview and production documentation deployment with the upgraded deployment actions.
- Exercise scheduled link checking, image compression, pull-request creation, and Vale validation with the upgraded actions.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Validate that each updated workflow remains syntactically valid and can load the upgraded actions.
2. Exercise documentation deletion detection and redirect reminder generation with the upgraded changed-files action.
3. Exercise Jira issue creation and GitHub issue updates with the upgraded github-script action.
4. Exercise branch-preview and production documentation deployment with the upgraded deployment actions.
5. Exercise scheduled link checking, image compression, pull-request creation, and Vale validation with the upgraded actions.
TIP How was this review? Give us feedback
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 9 updates:
45.0.247.0.63.0.03.0.17.1.09.0.03.0.04.0.04.0.04.1.02.8.02.9.003c976c29803442fc4040a9de5509669e7759b81cfe6ba91a2f0e9046d44e2088d002378daeb4a9c7.0.118.1.10135b9fe2b3107365569cc3142b9a1c85221ea2f518a9136acc6e6668ce7c00d367051e0941e87ffUpdates
tj-actions/changed-filesfrom 45.0.2 to 47.0.6Release notes
Sourced from tj-actions/changed-files's releases.
... (truncated)
Changelog
Sourced from tj-actions/changed-files's changelog.
... (truncated)
Commits
9426d40chore(deps): bump lodash from 4.17.23 to 4.18.1 (#2837)32de080chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#2843)2487d12chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2844)cef85a3chore(deps-dev): bump@types/nodefrom 25.5.0 to 25.6.0 (#2846)7b082dechore(deps-dev): bump prettier from 3.8.1 to 3.8.3 (#2848)07224cachore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#2849)2bb1357chore(deps-dev): bump jest from 30.2.0 to 30.3.0 (#2822)cc98117chore(deps): bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 (#2829)786e421chore(deps): bump yaml from 2.8.2 to 2.8.3 (#2830)726b41bchore(deps-dev): bump eslint-plugin-jest from 29.15.0 to 29.15.1 (#2831)Updates
atlassian/gajira-createfrom 3.0.0 to 3.0.1Commits
59e177cincrementing version numberc5be979adding license (#40)f10e494updating readme (#39)21bb493setting actions versioning (#38)Updates
actions/github-scriptfrom 7.1.0 to 9.0.0Release notes
Sourced from actions/github-script's releases.
Commits
3a2844bMerge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...ca10bbdfix: use@octokit/core/types import for v7 compatibility86e48e2merge: incorporate main branch changesc108472chore: rebuild dist for v9 upgrade and getOctokit factoryafff112Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...ff8117eci: fix user-agent test to handle orchestration ID81c6b78ci: use deployment: false to suppress deployment noise from integration tests3953cafdocs: update README examples from@v8to@v9, add getOctokit docs and v9 brea...c17d55bci: add getOctokit integration test joba047196test: add getOctokit integration tests via callAsyncFunctionUpdates
nwtgck/actions-netlifyfrom 3.0.0 to 4.0.0Release notes
Sourced from nwtgck/actions-netlify's releases.
Changelog
Sourced from nwtgck/actions-netlify's changelog.
... (truncated)
Commits
d22a32aMerge branch 'release/4.0.0'6c4be64bump: 4.0.0ea1587achore: node242f7daf7deps: updatef242d4cBuild(deps): bump undici from 5.28.3 to 5.28.4 (#1156)3bde29cBuild(deps): bump nwtgck/actions-comment-run from 2.0 to 3.0 (#1152)c71a094Merge tag 'v3.0.0' into developUpdates
peaceiris/actions-gh-pagesfrom 4.0.0 to 4.1.0Release notes
Sourced from peaceiris/actions-gh-pages's releases.
Changelog
Sourced from peaceiris/actions-gh-pages's changelog.
... (truncated)
Commits
84c30a8chore(release): 4.1.06fa0f50chore(release): Add build assets3b7506achore(deps): update dependency trim-newlines to v5 (#1158)aa0466cci: harden GitHub Actions workflows (#1156)31835fbchore(deps): update actions/labeler action to v6 (#1153)f4f1bc4chore(deps): update peaceiris/actions-mdbook action to v2 (#1161)a5e4979chore(deps): update dependency ubuntu to v24 (#1159)6cc3bacchore(deps): update github/codeql-action action to v4 (#1160)0d6e9f4chore(deps): update actions/setup-node action to v6 (#1154)d70c101chore(deps): update actions/upload-artifact action to v7 (#1155)Updates
lycheeverse/lychee-actionfrom 2.8.0 to 2.9.0Release notes
Sourced from lycheeverse/lychee-action's releases.
... (truncated)
Commits
e747777Bump actions/cache from 5 to 6 (#340)39066c6Bump actions/checkout from 6 to 7 (#339)6da1d14Install into $RUNNER_TEMP instead of $HOME (#338)a63497cfixes #322 check for null (#336)b40e218[create-pull-request] automated changefaea714bump default to 0.24.1 and auto-detect lychee bin in subfolder (#330)Updates
calibreapp/image-actionsfrom 03c976c29803442fc4040a9de5509669e7759b81 to cfe6ba91a2f0e9046d44e2088d002378daeb4a9cCommits
cfe6ba9Merge pull request #505 from calibreapp/dependabot/npm_and_yarn/multi-eccd33aced2240a4cBump undici83b1297Merge pull request #503 from calibreapp/dependabot/npm_and_yarn/vite-7.3.7a2bbc49Bump vite from 7.3.6 to 7.3.7ff27d81Merge pull request #493 from calibreapp/dependabot/npm_and_yarn/sharp-0.35.589c9c07Merge pull request #500 from calibreapp/dependabot/npm_and_yarn/brace-expansi...d8e6cc0Bump brace-expansion from 5.0.9 to 5.0.12f18fb61Bump sharp from 0.35.4 to 0.35.5c3752f0Merge pull request #490 from calibreapp/dependabot/npm_and_yarn/multi-211fa015e38280cf4Bump undiciUpdates
peter-evans/create-pull-requestfrom 7.0.11 to 8.1.1Release notes
Sourced from peter-evans/create-pull-request's releases.
Commits
5f6978ffix: retry post-creation API calls on 422 eventual consistency errors (#4356)d32e88dbuild(deps-dev): bump the npm group with 3 updates (#4349)8170bccbuild(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#4344)0041819build(deps): bump picomatch (#4339)b993918build(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#4334)36d7c84build(deps-dev): bump undici from 6.23.0 to 6.24.0 (#4328)a45d1fbbuild(deps): bump@tootallnate/onceand jest-environment-jsdom (#4323)3499eb6build(deps): bump the github-actions group with 2 updates (#4316)3f3b473build(deps): bump minimatch (#4311)6699836build(deps-dev): bump the npm group with 2 updates (#4305)Updates
errata-ai/vale-actionfrom 0135b9fe2b3107365569cc3142b9a1c85221ea2f to 518a9136acc6e6668ce7c00d367051e0941e87ffCommits
518a913Point the README at v3dca64deBacktick reviewdog in the README4063152Add a fail_level input1ef5a5fMove the major tag ourselves, whatever the release is called00a15b5Treat an empty file list as nothing to lint40967b1Point wildcard paths at the glob inputd4af982Survive reviewdog closing its input earlyfebea0fFail on errors, not on any findingb1d1c1fGive reviewdog a repository when the event payload omits one6b637c5Note what a fork's read-only token can't doDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions