Skip to content

⬆ Bump the github-actions group across 1 directory with 9 updates - #20

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-14c03f4d2e
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-14c03f4d2e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 9 updates in the / directory:

Package From To
actions/checkout 6.0.2 7.0.1
tiangolo/issue-manager 0.6.0 0.8.1
actions/labeler 6.1.0 7.0.0
tiangolo/latest-changes 0.5.0 0.7.2
dorny/paths-filter 4.0.1 4.0.3
actions/setup-python 6.2.0 7.0.0
astral-sh/setup-uv 8.1.0 10.0.1
re-actors/alls-green 1.2.2 1.3.0
zizmorcore/zizmor-action 0.5.6 0.6.2

Updates actions/checkout from 6.0.2 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates tiangolo/issue-manager from 0.6.0 to 0.8.1

Release notes

Sourced from tiangolo/issue-manager's releases.

0.8.1

Internal

0.8.0

Refactors

  • ♻️ Refactor main Dockerfile to contain all logic, cache by uv. PR #62 by @​tiangolo.

Internal

0.7.1

Fixes

Internal

0.7.0

Features

  • ✨ Add default labels answered, waiting, invalid, maybe-ai. PR #56 by @​tiangolo.

Docs

Internal

Changelog

Sourced from tiangolo/issue-manager's changelog.

Release Notes

Latest Changes

  • ⬆ Bump python from 3.14.6-slim to 3.15.0b3-slim in the docker-images group. PR #81 by @​dependabot[bot].

Refactors

Internal

0.8.1 (2026-07-03)

Internal

0.8.0 (2026-06-24)

Refactors

  • ♻️ Refactor main Dockerfile to contain all logic, cache by uv. PR #62 by @​tiangolo.

Internal

0.7.1

Fixes

Internal

... (truncated)

Commits
  • dc84617 🔖 Release version 0.8.1 (#73)
  • a716e80 🐛 Run action on its baked-in Python instead of uv run (#71)
  • e5f5d16 📝 Update release notes
  • a337d34 ⬆️ Update latest-changes to 0.6.1 (#72)
  • 48bacd8 🔖 Release version 0.8.0 (#66)
  • 2f4681c 📝 Update release notes
  • 82e5268 ⬆ Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#61)
  • 99e80ec 📝 Update release notes
  • a86623f 👷 Add CI to automate release process (#65)
  • dccb880 📝 Update release notes
  • Additional commits viewable in compare view

Updates actions/labeler from 6.1.0 to 7.0.0

Release notes

Sourced from actions/labeler's releases.

v7.0.0

What's Changed

Enhancements:

Full Changelog: actions/labeler@v6...v7.0.0

v6.2.0

What's Changed

Bug Fix

Dependency Updates

Full Changelog: actions/labeler@v6.1.0...v6.2.0

Commits
  • bf12e9b feat: migrate to ESM and update dependencies (#949)
  • b8dd2d9 Bump @​typescript-eslint/eslint-plugin from 8.59.1 to 8.61.1 (#942)
  • 53affe8 Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override for 0 vul...
  • f612d9a Fix: Improve PR number validation and warning messages in input handling (#939)
  • See full diff in compare view

Updates tiangolo/latest-changes from 0.5.0 to 0.7.2

Release notes

Sourced from tiangolo/latest-changes's releases.

0.7.2

[!WARNING] This GitHub Action is deprecated. Use the Latest Changes GitHub App instead. It is the recommended replacement and does not require a workflow or a personal access token.

Docs

Internal

0.7.1

Fixes

0.7.0

Features

  • ✨ Add automatic release notes file discovery, default to release-notes.md. PR #128 by @​tiangolo.

Docs

Internal

0.6.1

Fixes

Internal

0.6.0

Features

  • ✨ Add support for skip labels, useful for making a PR with the actual release. PR #96 by @​tiangolo.

Refactors

... (truncated)

Changelog

Sourced from tiangolo/latest-changes's changelog.

Release Notes

Latest Changes

Internal

0.7.2 (2026-08-06)

[!WARNING] This GitHub Action is deprecated. Use the Latest Changes GitHub App instead. It is the recommended replacement and does not require a workflow or a personal access token.

Docs

Internal

0.7.1 (2026-07-27)

Fixes

0.7.0 (2026-07-27)

Features

  • ✨ Add automatic release notes file discovery, default to release-notes.md. PR #128 by @​tiangolo.

Docs

Internal

0.6.1 (2026-07-03)

Fixes

... (truncated)

Commits

Updates dorny/paths-filter from 4.0.1 to 4.0.3

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.3

What's Changed

Security

New Contributors

Full Changelog: dorny/paths-filter@v4...v4.0.3

v4.0.2

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v4.0.1...v4.0.2

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.3

v4.0.2

v4.0.1

v4.0.0

v3.0.4

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

... (truncated)

Commits
  • ceb8a2b Update CHANGELOG.md for v4.0.3 and v3.0.4 (#327)
  • ef09b88 Document safe handling of file list outputs in workflows (#326)
  • 44adc5b Merge commit from fork
  • 4711b7a feat: add 'some-with-excludes' predicate quantifier (#322)
  • 93c889f fix: escape multi-line filenames in list-files shell and csv output
  • b41dfa9 docs: add contents permission to PR example (#248)
  • 9af6e5a fix: scope base-ignored warning to API path (#319)
  • cae9006 docs: update outputs in readme to account for the 'every' predicate-quantifie...
  • 7b450ff docs: update changelog for v4.0.2 (#318)
  • 9280377 fix: work around git dubious ownership errors in container jobs (#317)
  • Additional commits viewable in compare view

Updates actions/setup-python from 6.2.0 to 7.0.0

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

Commits

Updates astral-sh/setup-uv from 8.1.0 to 10.0.1

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.0.0 🌈 Disable automatic caching for sensitive events and new QOL features

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in astral-sh/setup-uv#984

version: latest-known

- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions

- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"
</tr></table> 

... (truncated)

Commits

Updates re-actors/alls-green from 1.2.2 to 1.3.0

Release notes

Sourced from re-actors/alls-green's releases.

v1.3.0

🛡️ What's Unmessed

[!caution]

There was a small command injection risk in prior versions. I con...

Description has been truncated

Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` |
| [tiangolo/issue-manager](https://github.com/tiangolo/issue-manager) | `0.6.0` | `0.8.1` |
| [actions/labeler](https://github.com/actions/labeler) | `6.1.0` | `7.0.0` |
| [tiangolo/latest-changes](https://github.com/tiangolo/latest-changes) | `0.5.0` | `0.7.2` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1` | `4.0.3` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `7.0.0` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.1.0` | `10.0.1` |
| [re-actors/alls-green](https://github.com/re-actors/alls-green) | `1.2.2` | `1.3.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.6` | `0.6.2` |



Updates `actions/checkout` from 6.0.2 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...3d3c42e)

Updates `tiangolo/issue-manager` from 0.6.0 to 0.8.1
- [Release notes](https://github.com/tiangolo/issue-manager/releases)
- [Changelog](https://github.com/tiangolo/issue-manager/blob/master/release-notes.md)
- [Commits](tiangolo/issue-manager@2fb3484...dc84617)

Updates `actions/labeler` from 6.1.0 to 7.0.0
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@f27b608...bf12e9b)

Updates `tiangolo/latest-changes` from 0.5.0 to 0.7.2
- [Release notes](https://github.com/tiangolo/latest-changes/releases)
- [Changelog](https://github.com/tiangolo/latest-changes/blob/main/release-notes.md)
- [Commits](tiangolo/latest-changes@eb3f6e7...a8b61c9)

Updates `dorny/paths-filter` from 4.0.1 to 4.0.3
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@fbd0ab8...ceb8a2b)

Updates `actions/setup-python` from 6.2.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a309ff8...5fda3b9)

Updates `astral-sh/setup-uv` from 8.1.0 to 10.0.1
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@0880764...20cfd1b)

Updates `re-actors/alls-green` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/re-actors/alls-green/releases)
- [Commits](re-actors/alls-green@05ac938...b5b5b37)

Updates `zizmorcore/zizmor-action` from 0.5.6 to 0.6.2
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@5f14fd0...3dc1ecc)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: tiangolo/issue-manager
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/labeler
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: tiangolo/latest-changes
  dependency-version: 0.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: re-actors/alls-green
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github_actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file internal labels Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file internal

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants