Skip to content

chore(deps): bump the minor group with 5 updates#324

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/minor-0474f18bdb
Open

chore(deps): bump the minor group with 5 updates#324
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/minor-0474f18bdb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 5 updates:

Package From To
Swatinem/rust-cache 2.7.7 2.9.1
EmbarkStudios/cargo-deny-action 2.0.4 2.0.20
devcontainers/ci 0.3.1900000417 0.3.1900000450
helm/chart-testing-action 2.7.0 2.8.0
open-policy-agent/setup-opa 2.2.0 2.4.0

Updates Swatinem/rust-cache from 2.7.7 to 2.9.1

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.1

Fix regression in hash calculation

Full Changelog: Swatinem/rust-cache@v2.9.0...v2.9.1

v2.9.0

What's Changed

New Contributors

Full Changelog: Swatinem/rust-cache@v2.8.2...v2.9.0

v2.8.2

What's Changed

New Contributors

Full Changelog: Swatinem/rust-cache@v2.8.1...v2.8.2

v2.8.1

What's Changed

... (truncated)

Changelog

Sourced from Swatinem/rust-cache's changelog.

2.9.1

  • Fix regression in hash calculation

2.9.0

  • Update to node24
  • Support running from within a nix shell
  • Consider all installed toolchains for cache key
  • Use case-insensitive comparison to determine exact cache hit

2.8.2

  • Don't overwrite env for cargo-metadata call

2.8.1

  • Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
  • Various dependency updates

2.8.0

  • Add support for warpbuild cache provider
  • Add new cache-workspace-crates feature

2.7.8

  • Include CPU arch in the cache key
Commits

Updates EmbarkStudios/cargo-deny-action from 2.0.4 to 2.0.20

Release notes

Sourced from EmbarkStudios/cargo-deny-action's releases.

v2.0.11

[0.18.2] - 2025-03-10

Added

  • PR#753 resolved #752 by adding back the advisories.unmaintained config option. See the docs for how it can be used. The default matches the current behavior, which is to error on any unmaintained advisory, but adding unmaintained = "workspace" to the [advisories] table will mean unmaintained advisories will only error if the crate is a direct dependency of your workspace.

[0.18.1] - 2025-02-27

Fixed

v2.0.10

  • PR#96 resolved #94 by switching to the directory the manifest path is located in and doing rustup toolchain install if rustup show failed due to any reason

v2.0.8

  • PR#93 pins to a hash instead of tag, avoiding future breakage from eg. rustup changes.
Commits

Updates devcontainers/ci from 0.3.1900000417 to 0.3.1900000450

Release notes

Sourced from devcontainers/ci's releases.

Release v0.3.1900000450

What's Changed

... (truncated)

Commits
  • 513af61 release
  • 00115d9 Merge pull request #435 from tgenov/main
  • f2c9645 fix: shorten DevcontainersMerge friendlyName to satisfy tfx-cli 40-char limit
  • 9c435c5 docs: regenerate azdo-task/README.md from docs/azure-devops-task.md
  • 920c406 fix: publish merge/ action in release pipeline so devcontainers/ci/merge@v* r...
  • c7ee768 chore: remove dead createMultiPlatformImage wrappers from main GH action and ...
  • 4831487 test: cover missing-platform-image case in createMultiPlatformImage
  • 539d453 docs: explain matrix fan-out in GitHub Actions native multi-platform example
  • 0edb5b3 fix: align DevcontainersMerge task.json version with package.json (0.0.0)
  • ec57048 Comment out AzDO
  • Additional commits viewable in compare view

Updates helm/chart-testing-action from 2.7.0 to 2.8.0

Release notes

Sourced from helm/chart-testing-action's releases.

v2.8.0

What's Changed

New Contributors

Full Changelog: helm/chart-testing-action@v2...v2.8.0

Commits
  • 6ec842c Bump sigstore/cosign-installer from 3.8.1 to 4.0.0 (#184)
  • 4ea74f6 Use uv instead of python venv (#172)
  • b0c0606 Bump the actions group across 1 directory with 2 updates (#183)
  • 0bfa5c0 Bump actions/setup-python from 5.4.0 to 6.0.0 (#179)
  • e27de75 Bump actions/checkout from 4.2.2 to 5.0.0 (#181)
  • 2fe8321 bump ct and yamale version (#178)
  • 0941a6b Fix the broken link for GitHub Help Documentation (#174)
  • c71c0c7 Bump the actions group across 1 directory with 4 updates (#171)
  • See full diff in compare view

Updates open-policy-agent/setup-opa from 2.2.0 to 2.4.0

Release notes

Sourced from open-policy-agent/setup-opa's releases.

v2.4.0

What's Changed

New Contributors

Full Changelog: open-policy-agent/setup-opa@v2.3.0...v2.4.0

v2.3.0

What's Changed

Minor dep bumps

New Contributors

Full Changelog: open-policy-agent/setup-opa@v2.2.0...v2.3.0

Commits
  • b2b258e Merge pull request #46 from open-policy-agent/upgradetypescript
  • 9953d86 oops
  • dc9ce97 Bump typescript to ^5.8.3
  • c41d925 Merge pull request #45 from open-policy-agent/dependabot/npm_and_yarn/depende...
  • 3d49f04 update dist files
  • 0f32bd1 build(deps): bump the dependencies group with 16 updates
  • 45aa888 Merge pull request #44 from open-policy-agent/dependabotnpm
  • 2655a4c add npm to dependabot
  • 87c8815 Merge pull request #42 from open-policy-agent/dependabot/github_actions/actio...
  • 621c82b build(deps): bump actions/checkout from 5 to 6
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.7.7` | `2.9.1` |
| [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) | `2.0.4` | `2.0.20` |
| [devcontainers/ci](https://github.com/devcontainers/ci) | `0.3.1900000417` | `0.3.1900000450` |
| [helm/chart-testing-action](https://github.com/helm/chart-testing-action) | `2.7.0` | `2.8.0` |
| [open-policy-agent/setup-opa](https://github.com/open-policy-agent/setup-opa) | `2.2.0` | `2.4.0` |


Updates `Swatinem/rust-cache` from 2.7.7 to 2.9.1
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](Swatinem/rust-cache@v2.7.7...v2.9.1)

Updates `EmbarkStudios/cargo-deny-action` from 2.0.4 to 2.0.20
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](EmbarkStudios/cargo-deny-action@v2.0.4...v2.0.20)

Updates `devcontainers/ci` from 0.3.1900000417 to 0.3.1900000450
- [Release notes](https://github.com/devcontainers/ci/releases)
- [Commits](devcontainers/ci@v0.3.1900000417...v0.3.1900000450)

Updates `helm/chart-testing-action` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@v2.7.0...v2.8.0)

Updates `open-policy-agent/setup-opa` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/open-policy-agent/setup-opa/releases)
- [Commits](open-policy-agent/setup-opa@v2.2.0...v2.4.0)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: devcontainers/ci
  dependency-version: 0.3.1900000450
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: helm/chart-testing-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: open-policy-agent/setup-opa
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants