Skip to content

chore: bump the github-actions-minor-and-patch group across 1 directory with 6 updates - #112

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-minor-and-patch-4aec409e71
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-minor-and-patch-4aec409e71

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown

Bumps the github-actions-minor-and-patch group with 6 updates in the / directory:

Package From To
actions/create-github-app-token 3.2.0 3.3.0
actions/setup-node 7.0.0 7.1.0
TriPSs/conventional-changelog-action 6.4.0 6.5.0
actions/upload-artifact 7.0.1 7.0.2
shivammathur/setup-php 2.37.2 2.40.0
ruby/setup-ruby 1.321.0 1.331.0

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates TriPSs/conventional-changelog-action from 6.4.0 to 6.5.0

Release notes

Sourced from TriPSs/conventional-changelog-action's releases.

v6.5.0

Features

  • reorganize test files and update actions (3717631)
Changelog

Sourced from TriPSs/conventional-changelog-action's changelog.

6.5.0 (2026-08-31)

Features

  • reorganize test files and update actions (3717631)

6.4.0 (2026-07-08)

Bug Fixes

  • refactor template and header/footer handling for improved version bumping logic (b9d2369)
  • update template and header/footer handling for improved version bumping logic (f3f10ee)
  • update templates and bump version logic for prerelease handling (c8f0be0)

Features

  • add pre-release-smart-bump option for intelligent pre-release version bumping (3af15c8)
  • improve version bumping logic (193d21b)

6.3.1 (2026-04-23)

Bug Fixes

  • pass skipUnstable to file changelog generation (98b99c1)

6.3.0 (2026-03-19)

Features

  • Update Node version from 20 to 24 in action.yml (c6d4281)

6.2.0 (2025-10-22)

Features

  • add no-verify option to pass to git commit (ad190ee)

... (truncated)

Commits
  • 469f0e5 chore(release): v6.5.0 [skip ci]
  • 3563d12 feat: reorganize test files and update actions (#287)
  • a28be45 Merge branch 'releases/v6' into feat-move-tests
  • 5da67da build(deps): bump actions/checkout from 6 to 7 (#297)
  • 6d9ca29 build(deps): bump actions/checkout from 6 to 7
  • 3717631 feat: reorganize test files and update actions
  • See full diff in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates shivammathur/setup-php from 2.37.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

  • Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.
- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'
  • Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

  • Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)

- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684
  • Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

  • Added support for cpx. (#1104)

- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx
  • Added support for Laravel Cloud CLI. (#1106)
- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud
  • Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits
  • eb7c497 Bump version to 2.40.0
  • 7d671ba Resolve PHP formula aliases before invoking Homebrew
  • 57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
  • 421f97f Keep verbose tests in TypeScript
  • dc7811a Bump Node.js dependencies
  • 7932293 Bump the github-actions group with 3 updates (#1130)
  • 87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
  • f458a14 Remove macOS 14 from README runner listings
  • bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
  • bbf0b63 Try Brew extension installs before refreshing Homebrew
  • Additional commits viewable in compare view

Updates ruby/setup-ruby from 1.321.0 to 1.331.0

Commits
  • 824c0e2 Use ruby's Gem::Version instead of npm's semver to parse rubygems version
  • a89e929 Tweak wording in the README, update link and simplify
  • fbbff8d Suggest the latest patch release when a version is unavailable
  • 651ff0d Add ruby-4.1.0-preview1
  • e81a8fa Fix windows msys1 setup
  • 1459426 Update CRuby releases on Windows
  • 762794c Add ruby-3.4.11
  • e8944e8 Add jruby-10.0.7.0,jruby-10.1.2.0
  • a0102e0 Add truffleruby-40.0.0,truffleruby+graalvm-40.0.0
  • 984c0c8 Update CRuby releases on Windows
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested review from a team as code owners October 15, 2026 08:20
@dependabot dependabot Bot added the dependencies Dependency updates label Oct 15, 2026
@dependabot
dependabot Bot requested a review from speakeasybot October 15, 2026 08:20
@dependabot dependabot Bot added github_actions GitHub Actions updates skip changelog Indicates that a PR does not contain public-facing changes skip linear Indicates that a PR is not associated with a Linear issue labels Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-minor-and-patch-4aec409e71 branch from 09acee5 to 6ef391a Compare October 22, 2026 08:20
…ry with 6 updates

Bumps the github-actions-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [TriPSs/conventional-changelog-action](https://github.com/tripss/conventional-changelog-action) | `6.4.0` | `6.5.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [shivammathur/setup-php](https://github.com/shivammathur/setup-php) | `2.37.2` | `2.40.0` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.321.0` | `1.331.0` |



Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `TriPSs/conventional-changelog-action` from 6.4.0 to 6.5.0
- [Release notes](https://github.com/tripss/conventional-changelog-action/releases)
- [Changelog](https://github.com/TriPSs/conventional-changelog-action/blob/releases/v6/CHANGELOG.md)
- [Commits](TriPSs/conventional-changelog-action@ee43def...469f0e5)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `shivammathur/setup-php` from 2.37.2 to 2.40.0
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](shivammathur/setup-php@f3e473d...eb7c497)

Updates `ruby/setup-ruby` from 1.321.0 to 1.331.0
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@95ef2b0...824c0e2)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-and-patch
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-and-patch
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-minor-and-patch
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-and-patch
- dependency-name: shivammathur/setup-php
  dependency-version: 2.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-and-patch
- dependency-name: TriPSs/conventional-changelog-action
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-minor-and-patch-4aec409e71 branch from 6ef391a to 072da61 Compare October 22, 2026 15:52
@dependabot @github

dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 29, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-minor-and-patch-4aec409e71 branch October 29, 2026 08:20
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 29, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Dependency updates github_actions GitHub Actions updates skip changelog Indicates that a PR does not contain public-facing changes skip linear Indicates that a PR is not associated with a Linear issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants