Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 27, 2025

Bumps the github-actions group with 3 updates in the / directory: tailscale/github-action, actions/checkout and actions/upload-artifact.

Updates tailscale/github-action from 3 to 4

Release notes

Sourced from tailscale/github-action's releases.

v4.0.0

With this release, the action is now implemented in JavaScript and requires runners that are capable of installing Node.js 24.

Notable changes:

  • New: Now supports a ping parameter to verify connectivity to tailnet devices.
  • New: Now logs out the Tailscale ephemeral node at the end of the CI run, removing it from the tailnet immediately.
  • Changed: Caching of Tailscale binaries is enabled by default.
  • Fixed: DNS resolvers are properly set on macOS. Previously, attempting to reach devices using their full domain of the form my-node.my-tailnet.ts.net would fail due to incorrect DNS settings.

Full Changelog: tailscale/github-action@v3...v4.0.0

v3.2.3

Fix an issue preventing the action from running on Windows based runners that do not have a graphical desktop environment (such as the windows-11-arm label).

What's Changed

Full Changelog: tailscale/github-action@v3.2.2...v3.2.3

v3.2.2

Add a retry mechanism for tailscale up.

What's Changed

New Contributors

Full Changelog: tailscale/github-action@v3.2.1...v3.2.2

v3.2.1

Fixed a regression where temporary files would incorrectly persist after the action completed.

What's Changed

Full Changelog: tailscale/github-action@v3...v3.2.1

v3.2.0

The action now supports running on Windows and macOS runners (generally available)

The action now supports an optional use-cache input which caches Tailscale binaries when set to 'true'

What's Changed

... (truncated)

Commits
  • a392da0 Merge pull request #221 from tailscale/mpminardi/workload-identity
  • ef403f0 action.yml,src: add support for workload identity federation
  • c8de7fa Merge pull request #220 from tailscale/mpminardi/latest-fix
  • bf5cb7c src: check against platform specific versions for latest and unstable
  • bd97ec6 Merge pull request #218 from tailscale/mpminardi/gitattributes
  • c17f550 .gitattributes: mark dist as a generated folder
  • 3a21736 validate that when using an OAuth client, tags are specified
  • 1293ebc .github: add dependabot config
  • 2ddbe90 stop tailscale service after CI workload finishes
  • aa60431 run all commands silently
  • Additional commits viewable in compare view

Updates actions/checkout from 5 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

V6.0.0

V5.0.1

V5.0.0

V4.3.1

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Updates actions/upload-artifact from 4 to 5

Release notes

Sourced from actions/upload-artifact's releases.

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v4.6.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

What's Changed

New Contributors

... (truncated)

Commits
  • 330a01c Merge pull request #734 from actions/danwkennedy/prepare-5.0.0
  • 03f2824 Update github.dep.yml
  • 905a1ec Prepare v5.0.0
  • 2d9f9cd Merge pull request #725 from patrikpolyak/patch-1
  • 9687587 Merge branch 'main' into patch-1
  • 2848b2c Merge pull request #727 from danwkennedy/patch-1
  • 9b51177 Spell out the first use of GHES
  • cd231ca Update GHES guidance to include reference to Node 20 version
  • de65e23 Merge pull request #712 from actions/nebuk89-patch-1
  • 8747d8c Update README.md
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 3 updates in the / directory: [tailscale/github-action](https://github.com/tailscale/github-action), [actions/checkout](https://github.com/actions/checkout) and [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `tailscale/github-action` from 3 to 4
- [Release notes](https://github.com/tailscale/github-action/releases)
- [Commits](tailscale/github-action@v3...v4)

Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

Updates `actions/upload-artifact` from 4 to 5
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: tailscale/github-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added deps PRs that update dependencies not ready Issues that are not ready to be worked on; PRs that should skip CI labels Nov 27, 2025
@dependabot dependabot bot requested a review from AlekSi as a code owner November 27, 2025 01:02
@dependabot dependabot bot added deps PRs that update dependencies not ready Issues that are not ready to be worked on; PRs that should skip CI labels Nov 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps PRs that update dependencies not ready Issues that are not ready to be worked on; PRs that should skip CI

Projects

Status: In progress

Development

Successfully merging this pull request may close these issues.

2 participants