Repository navigation
chore(deps): bump the github-actions-all group with 9 updates - #16
Merged
cohenrobinson merged 1 commit intoOct 10, 2026
Merged
cohenrobinson merged 1 commit into
cohenrobinson merged 1 commit into
Conversation
Bumps the github-actions-all group with 9 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.12.1` | `2.22.0` | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `7.0.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.236` | `1.0.242` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.3.0` | `3.1.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `7.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `7.0.0` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.2.2` | `3.2.0` | | [snok/install-poetry](https://github.com/snok/install-poetry) | `1.4.1` | `1.4.2` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `67d4f4bd7a9b17a0db54d2a7519187c65e339de8` | `2f920dad77d7f4f2ea876b66287b896de40dda79` | Updates `step-security/harden-runner` from 2.12.1 to 2.22.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@002fdce...351661c) Updates `actions/checkout` from 4.2.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.2.2...3d3c42e) Updates `anthropics/claude-code-action` from 1.0.236 to 1.0.242 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@8ce9314...6c69018) Updates `dependabot/fetch-metadata` from 2.3.0 to 3.1.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](dependabot/fetch-metadata@d7267f6...25dd0e3) Updates `actions/setup-node` from 4.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...8207627) Updates `actions/setup-python` from 5.6.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5.6.0...5fda3b9) Updates `actions/create-github-app-token` from 2.2.2 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@fee1f7d...bcd2ba4) Updates `snok/install-poetry` from 1.4.1 to 1.4.2 - [Release notes](https://github.com/snok/install-poetry/releases) - [Commits](snok/install-poetry@76e04a9...a783c32) Updates `actions/dependency-review-action` from 67d4f4bd7a9b17a0db54d2a7519187c65e339de8 to 2f920dad77d7f4f2ea876b66287b896de40dda79 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@67d4f4b...2f920da) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-all - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: anthropics/claude-code-action dependency-version: 1.0.242 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-all - dependency-name: dependabot/fetch-metadata dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: snok/install-poetry dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-all - dependency-name: actions/dependency-review-action dependency-version: 2f920dad77d7f4f2ea876b66287b896de40dda79 dependency-type: direct:production dependency-group: github-actions-all ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
cohenrobinson
deleted the
dependabot/github_actions/main/github-actions-all-387d25a83a
branch
October 10, 2026 15:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions-all group with 9 updates:
2.12.12.22.04.2.27.0.11.0.2361.0.2422.3.03.1.04.4.07.0.05.6.07.0.02.2.23.2.01.4.11.4.267d4f4bd7a9b17a0db54d2a7519187c65e339de82f920dad77d7f4f2ea876b66287b896de40dda79Updates
step-security/harden-runnerfrom 2.12.1 to 2.22.0Release notes
Sourced from step-security/harden-runner's releases.
... (truncated)
Commits
351661cMerge pull request #701 from step-security/rc-441dc7f2eMerge pull request #702 from h0x0er/jatin/ghes-changes-upaf5ca38simplified ghes config creation9a6d710fix274c65eafixceac816resovled comments2439321refactoring for codebuilde28e09bRevert "job summary fixes for ghes"e38f7a0job summary fixes for ghes468d34bfixed insights url for ghes scenarioUpdates
actions/checkoutfrom 4.2.2 to 7.0.1Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
anthropics/claude-code-actionfrom 1.0.236 to 1.0.242Release notes
Sourced from anthropics/claude-code-action's releases.
Commits
6c69018chore: bump Claude Code to 2.1.290 and Agent SDK to 0.3.290cab360fchore: bump Claude Code to 2.1.289 and Agent SDK to 0.3.289ed670b4chore: bump Claude Code to 2.1.288 and Agent SDK to 0.3.28897c5347chore: bump Claude Code to 2.1.287 and Agent SDK to 0.3.28712dd8d7chore: bump Claude Code to 2.1.286 and Agent SDK to 0.3.286a8cb0dbci: security hardening for GitHub Actions workflows that call Claude (#1867)fd1c128chore: bump Claude Code to 2.1.285 and Agent SDK to 0.3.285Updates
dependabot/fetch-metadatafrom 2.3.0 to 3.1.0Release notes
Sourced from dependabot/fetch-metadata's releases.
... (truncated)
Commits
25dd0e3v3.1.0 (#692)e073f50Merge pull request #705 from dependabot/dependabot/npm_and_yarn/hono-4.12.140670e16build(deps-dev): bump hono from 4.12.12 to 4.12.147a7fe10Merge pull request #702 from dependabot/dependabot/npm_and_yarn/dependencies-...5168191Updating dist build23882e1build(deps): bump@actions/githubin the dependencies group1072469Merge pull request #701 from dependabot/dependabot/github_actions/actions/cre...43f8a00build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1b4d904aMerge pull request #703 from dependabot/dependabot/npm_and_yarn/globals-17.5.0c8046bbbuild(deps-dev): bump globals from 17.4.0 to 17.5.0Updates
actions/setup-nodefrom 4.4.0 to 7.0.0Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
8207627Migrate to ESM and upgrade dependencies (#1574)04be95cAdd cache-primary-key and cache-matched-key as outputs (#1577)7c2c68ddocs: Update caching recommendations to mitigate cache poisoning risks (#1567)6a61c03Merge pull request #1569 from jasongin/update-actions-cache-5.1.030eb73bResolve high-severity audit issues4e1a87aUpdate dist360237fStrict equality4f8aac5Bump@actions/cacheto 5.1.0, log cache write deniedf4a67bbOnly usemirrorTokeningetManifestif it's provided (#1548)0355742Remove dummy NODE_AUTH_TOKEN export (#1558)Updates
actions/setup-pythonfrom 5.6.0 to 7.0.0Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
5fda3b9Pin SHA commits and update docs with latest versions (#1338)4ab7e95Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-00f3a009Remove the pip-install input (#1336)f8cf429Migrate to ESM and upgrade dependencies (#1330)54baeeaValidate and retry manifest fetch to prevent silent failures (#1332)c709277Annotation code fix (#1335)6849080remove EOL Python versions and Bumps numpy text fixture (#1333)0903b46Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)ece7cb0Fix pip cache error handling on Windows. (#1040)1d18d7aUpdate advanced-usage.md (#811)Updates
actions/create-github-app-tokenfrom 2.2.2 to 3.2.0Release notes
Sourced from actions/create-github-app-token's releases.
... (truncated)
Changelog
Sourced from actions/create-github-app-token's changelog.
Commits
bcd2ba4chore(main): release 3.2.0 (#370)f24bbd8fix: validate private-key input (#376)363531bdocs: capitalize Git as a proper noun in README (#374)fd28011docs: update procedure to configure Git (#287)85eb8ddfeat: support full repository names inrepositoriesinput (#372)c9aabb8build(deps-dev): bump yaml from 2.8.3 to 2.8.4 in the development-dependencie...e02e816build(deps-dev): bump undici from 7.24.6 to 8.2.0 (#366)8d835bfbuild(deps-dev): bump esbuild from 0.27.4 to 0.28.0 in the development-depend...952a2a7feat: add support for enterprise-level GitHub Apps (#263)43e5c34fix(deps): bump@actions/corefrom 3.0.0 to 3.0.1 in the production-dependenc...Updates
snok/install-poetryfrom 1.4.1 to 1.4.2Release notes
Sourced from snok/install-poetry's releases.
Commits
a783c32chore: Replace pre-commit hooks with maintained versions0229b62chore: Update remaining old Poetry versions46385bedocs: Update poetry config example to use a modern config option3a0296ddocs: Update poetry example version