Skip to content

chore(deps): bump the actions group across 1 directory with 7 updates - #759

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-f8ea6de7a7
Open

chore(deps): bump the actions group across 1 directory with 7 updates#759
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-f8ea6de7a7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 7 updates in the / directory:

Package From To
taiki-e/install-action 2.86.7 2.87.4
github/codeql-action 4.37.8 4.37.9
actions/deploy-pages 5.0.0 5.0.1
editorconfig-checker/action-editorconfig-checker 2.2.0 3.0.0
docker/setup-qemu-action 4.2.0 4.3.0
softprops/action-gh-release 3.0.2 3.0.3
trufflesecurity/trufflehog 3.97.1 3.97.4

Updates taiki-e/install-action from 2.86.7 to 2.87.4

Release notes

Sourced from taiki-e/install-action's releases.

2.87.4

  • Update uv@latest to 0.12.8.

  • Update protoc@latest to 3.36.1.

  • Update coreutils@latest to 0.11.0.

2.87.3

  • Update zizmor@latest to 1.30.0.

  • Update ubi@latest to 0.12.0.

  • Update protoc-gen-connect-openapi@latest to 0.25.8.

  • Update mise@latest to 2026.8.16.

  • Update kingfisher@latest to 2.1.0.

  • Update dprint@latest to 0.57.0.

2.87.2

  • Update typos@latest to 1.50.0.

  • Update tombi@latest to 1.5.0.

  • Update shfmt@latest to 3.14.0.

2.87.1

  • Update uv@latest to 0.12.7.

  • Update typos@latest to 1.49.1.

  • Update syft@latest to 1.51.1.

  • Update prek@latest to 0.5.0.

  • Update d2@latest to 0.8.2.

  • Update cargo-zigbuild@latest to 0.23.3.

  • Update cargo-rdme@latest to 2.2.2.

  • Update biome@latest to 2.5.11.

2.87.0

  • Support kache. (#1980, thanks @​ChrisJr404)

  • Update vacuum@latest to 0.30.1.

  • Update uv@latest to 0.12.6.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

[2.87.4] - 2026-09-02

  • Update uv@latest to 0.12.8.

  • Update protoc@latest to 3.36.1.

  • Update coreutils@latest to 0.11.0.

[2.87.3] - 2026-09-01

  • Update zizmor@latest to 1.30.0.

  • Update ubi@latest to 0.12.0.

  • Update protoc-gen-connect-openapi@latest to 0.25.8.

  • Update mise@latest to 2026.8.16.

  • Update kingfisher@latest to 2.1.0.

  • Update dprint@latest to 0.57.0.

[2.87.2] - 2026-08-30

  • Update typos@latest to 1.50.0.

  • Update tombi@latest to 1.5.0.

  • Update shfmt@latest to 3.14.0.

[2.87.1] - 2026-08-29

  • Update uv@latest to 0.12.7.

  • Update typos@latest to 1.49.1.

  • Update syft@latest to 1.51.1.

  • Update prek@latest to 0.5.0.

  • Update d2@latest to 0.8.2.

  • Update cargo-zigbuild@latest to 0.23.3.

  • Update cargo-rdme@latest to 2.2.2.

  • Update biome@latest to 2.5.11.

[2.87.0] - 2026-08-27

... (truncated)

Commits

Updates github/codeql-action from 4.37.8 to 4.37.9

Release notes

Sourced from github/codeql-action's releases.

v4.37.9

  • Update default CodeQL bundle version to 2.26.4. #4106
Changelog

Sourced from github/codeql-action's changelog.

4.37.9 - 26 Aug 2026

  • Update default CodeQL bundle version to 2.26.4. #4106
Commits
  • cdf488f Merge pull request #4107 from github/update-v4.37.9-920ba7cd1
  • 7243f38 Update changelog for v4.37.9
  • 920ba7c Merge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4
  • ecfa6e1 Add changelog note
  • adcdf4a Update default bundle to codeql-bundle-v2.26.4
  • 486fec2 Merge pull request #4099 from github/update-supported-enterprise-server-versions
  • 134624c Merge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...
  • ff43db8 Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde
  • 4605e03 Rebuild
  • 099c869 Update changelog and version after v4.37.8
  • Additional commits viewable in compare view

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • 368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
  • 7e97763 Validate deployment polling intervals
  • 0143e11 Add backoff and jitter to deployment polling
  • 5e98f10 Merge pull request #440 from actions/user/adwitiya
  • 8b0625a Improve deployment request test coverage
  • See full diff in compare view

Updates editorconfig-checker/action-editorconfig-checker from 2.2.0 to 3.0.0

Release notes

Sourced from editorconfig-checker/action-editorconfig-checker's releases.

editorconfig-checker v4

What's Changed

Full Changelog: editorconfig-checker/action-editorconfig-checker@v2.2.0...v3.0.0

Commits
  • 51f6331 Merge pull request #279 from editorconfig-checker/wf
  • c70f28e also run regen-dist workflow, when the workflow itself changes
  • d98bed8 prevent CI from running twice for dependabot PRs
  • f2fa590 Merge pull request #278 from editorconfig-checker/feat/ec-binary-name-rename
  • 19c56ad feat: support renamed editorconfig-checker release assets while keeping legac...
  • See full diff in compare view

Updates docker/setup-qemu-action from 4.2.0 to 4.3.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.3.0

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

Commits
  • 1f40c72 Merge pull request #336 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 932216e [dependabot skip] chore: update generated content
  • a39e895 build(deps): bump @​docker/actions-toolkit from 0.92.0 to 0.96.0
  • a98ae9f Merge pull request #333 from docker/dependabot/npm_and_yarn/undici-6.28.0
  • 8ebc9d1 [dependabot skip] chore: update generated content
  • c41e3fc build(deps): bump undici from 6.27.0 to 6.28.0
  • 5fc60df Merge pull request #332 from docker/dependabot/npm_and_yarn/brace-expansion-1...
  • a26e892 Merge pull request #328 from docker/dependabot/github_actions/actions/checkou...
  • aa6d042 Merge pull request #324 from docker/dependabot/github_actions/actions/setup-n...
  • d381ce5 Merge pull request #317 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
  • Additional commits viewable in compare view

Updates softprops/action-gh-release from 3.0.2 to 3.0.3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates
Commits
  • efb3536 release 3.0.3 (#840)
  • 6441963 chore(deps): bump the npm group with 2 updates (#839)
  • e5ee6bc chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group (#837)
  • d1e6617 chore(deps): bump undici from 6.27.0 to 6.28.0 (#831)
  • 6403751 chore(deps): bump the npm group with 2 updates (#835)
  • 7c7184b chore(deps): bump postcss from 8.5.19 to 8.5.25 (#833)
  • 0f3f0d2 chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 (#832)
  • 77fb938 chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group (#830)
  • 5a6f517 chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 (#828)
  • a3c91c9 chore(deps): bump the github-actions group with 2 updates (#825)
  • Additional commits viewable in compare view

Updates trufflesecurity/trufflehog from 3.97.1 to 3.97.4

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.97.4

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.97.3...v3.97.4

v3.97.3

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.97.2...v3.97.3

v3.97.2

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.97.1...v3.97.2

Commits
  • 363923b added tests for twilio detector fixes (#5271)
  • f537081 Improve the json-enumerator source (#5265)
  • 8a9a4c6 Made retry exaustion indeterminate for Twilio secrets and twilioapikeys (#5267)
  • 8947a7f Revert "De-base64 SourceUnit.UnitData in the GitHub Source (#5248)" (#5269)
  • ea33cd0 fix(s3): cut a child context per object so key/size log values don't pile up ...
  • cc1fe98 Retry git clone on secondary rate limit (bare 403/429) (#5260)
  • 74dcf3f Update link to Truffle Security documentation (#5256)
  • 2b75fd2 Implement Enumerate for the Jenkins source (#5229)
  • 0c952ac De-base64 SourceUnit.UnitData in the GitHub Source (#5248)
  • 1ea7fc1 expand result code in pagerduty detector (#5230)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code major Load-bearing / requirements-level work labels Sep 4, 2026
Bumps the actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.7` | `2.87.4` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` |
| [editorconfig-checker/action-editorconfig-checker](https://github.com/editorconfig-checker/action-editorconfig-checker) | `2.2.0` | `3.0.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.2.0` | `4.3.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.97.1` | `3.97.4` |



Updates `taiki-e/install-action` from 2.86.7 to 2.87.4
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@v2.86.7...v2.87.4)

Updates `github/codeql-action` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.8...v4.37.9)

Updates `actions/deploy-pages` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@v5.0.0...v5.0.1)

Updates `editorconfig-checker/action-editorconfig-checker` from 2.2.0 to 3.0.0
- [Release notes](https://github.com/editorconfig-checker/action-editorconfig-checker/releases)
- [Commits](editorconfig-checker/action-editorconfig-checker@v2.2.0...v3.0.0)

Updates `docker/setup-qemu-action` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@v4.2.0...v4.3.0)

Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v3.0.2...v3.0.3)

Updates `trufflesecurity/trufflehog` from 3.97.1 to 3.97.4
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@v3.97.1...v3.97.4)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: editorconfig-checker/action-editorconfig-checker
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.97.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-f8ea6de7a7 branch from c50b3e3 to 29bbdba Compare September 6, 2026 19:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code major Load-bearing / requirements-level work

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant