Skip to content

ci(deps): bump the github-actions group across 1 directory with 3 updates - #557

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-0be154681a
Open

ci(deps): bump the github-actions group across 1 directory with 3 updates#557
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-0be154681a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates in the / directory: anchore/sbom-action, bridgecrewio/checkov-action and jdx/mise-action.

Updates anchore/sbom-action from 0.24.0 to 0.24.2

Release notes

Sourced from anchore/sbom-action's releases.

v0.24.2

Added Features

Additional Changes

(Full Changelog)

Commits
  • 3ad7283 ops: update write permissions for release (#723)
  • 31f5287 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#724)
  • aa80c8c chore(deps): update Syft to latest release (#722)
  • 74b54e9 chore(deps): bump lodash from 4.17.23 to 4.18.1 (#623)
  • 6b92ff5 chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 (#721)
  • 4f8983b chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.67.0 (#719)
  • 10f27f4 chore(deps-dev): bump eslint from 10.5.0 to 10.8.1 (#720)
  • 249403a chore(deps-dev): bump @​types/node from 26.1.0 to 26.2.0 (#718)
  • cbf8daa chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (#693)
  • 6afc793 fix: pin syft install.sh to the release tag being installed (#716)
  • Additional commits viewable in compare view

Updates bridgecrewio/checkov-action from 12.3119.0 to 12.3122.0

Commits
  • f967808 Bump checkov container version to 3.3.16
  • 5659dde Bump checkov container version to 3.3.15
  • ec0fde7 Bump checkov container version to 3.3.14
  • See full diff in compare view

Updates jdx/mise-action from 4.2.5 to 4.3.0

Release notes

Sourced from jdx/mise-action's releases.

v4.3.0: Install age-filtered mise releases

A small release that adds an opt-in way to hold back from installing brand-new mise releases.

Added

minimum_release_age input (#604 by @​jdx)

When version is omitted, you can now set minimum_release_age to install the newest stable, non-draft mise release that is older than a given cutoff — a simple way to avoid picking up a mise release the moment it ships (closes #603).

- uses: jdx/mise-action@v4
  with:
    minimum_release_age: 7d

It accepts relative durations (24h, 7d, 6mo, 1y) as well as absolute ISO dates and timestamps. Age-filtered versions are resolved from the GitHub Releases API (the CDN only serves the latest binary) and downloaded by their exact version. If mise is already present on disk, an age-filtered run updates it to the resolved version rather than keeping the existing binary. An explicit version always takes precedence over minimum_release_age, and invalid dates fail fast.

Full Changelog: jdx/mise-action@v4.2.5...v4.3.0

Changelog

Sourced from jdx/mise-action's changelog.

Changelog


4.3.0 - 2026-08-24

🚀 Features


4.2.5 - 2026-08-13

🐛 Bug Fixes


4.2.4 - 2026-08-01

🐛 Bug Fixes

  • locking support detection with force-colored output (#580) by @​scop in #580

4.2.3 - 2026-07-24

🐛 Bug Fixes


4.2.2 - 2026-07-24

🐛 Bug Fixes

📚 Documentation

New Contributors


4.2.1 - 2026-07-16

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

✅ Docker image built successfully

  • CLI image: docker.io/sandstream/kit:test

…ates

Bumps the github-actions group with 3 updates in the / directory: [anchore/sbom-action](https://github.com/anchore/sbom-action), [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) and [jdx/mise-action](https://github.com/jdx/mise-action).


Updates `anchore/sbom-action` from 0.24.0 to 0.24.2
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@e22c389...3ad7283)

Updates `bridgecrewio/checkov-action` from 12.3119.0 to 12.3122.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@59b9d7e...f967808)

Updates `jdx/mise-action` from 4.2.5 to 4.3.0
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@3c2e0cf...c2a8761)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: bridgecrewio/checkov-action
  dependency-version: 12.3121.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jdx/mise-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ci(deps): bump the github-actions group with 3 updates ci(deps): bump the github-actions group across 1 directory with 3 updates Sep 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-0be154681a branch from e58abac to a3fd2a5 Compare September 7, 2026 05:18
@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown

✅ Docker image built successfully

  • CLI image: docker.io/sandstream/kit:test

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants